This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json) Hash identifier: g7OJmeueeNpUV/pqHkVEXDgNReLid+hB2gYEyU/LHdE= Subject key identifier: C8:8A:27:61:6D:21:AB:D3:85:BA:C3:4E:5C:4A:17:B0:6E:A0:05:6C Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25 Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625 Certificate serial: 019AF50B190A9965076BB0606A7C5752DE40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft Manifest number: 0199 Signing time: Sat 06 Dec 2025 19:02:16 +0000 Manifest this update: Sat 06 Dec 2025 19:02:16 +0000 Manifest next update: Sun 07 Dec 2025 19:02:16 +0000 Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: h13nQAX2W9YBf8fT0GYD7MKy3sDPVJA+PFzFD0mxtk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:19:0a:99:65:07:6b:b0:60:6a:7c:57:52:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625 Validity Not Before: Dec 6 19:02:16 2025 GMT Not After : Dec 7 19:02:16 2025 GMT Subject: CN=c88a27616d21abd385bac34e5c4a17b06ea0056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:fd:e3:7e:ef:d4:cd:f4:58:df:5a:91:8c: 72:82:67:77:f2:1b:49:5b:41:0d:31:0c:7e:74:00: 50:96:3a:e6:48:72:86:53:91:b6:ce:00:5a:2e:c3: 61:da:bc:d7:e1:28:df:71:50:c3:1d:9e:ab:36:1b: 4a:7d:87:f2:46:6c:23:49:b7:7b:c6:4e:6c:4c:61: 5c:f3:7a:14:15:89:b5:87:71:da:87:6a:99:da:92: a1:4e:86:6f:0a:67:27:d0:95:82:05:eb:98:e8:56: 79:ce:c8:a4:1f:a7:11:22:7b:f2:d6:4e:b6:77:af: 46:03:65:57:e8:ee:e0:e9:2d:b3:e0:80:26:f3:40: 69:88:d5:88:15:49:c9:e7:1a:a0:14:39:46:76:3a: 07:ae:f4:b5:89:c1:25:a5:42:bc:c9:29:db:ee:68: de:1c:4d:7d:4d:43:e3:00:f6:8b:94:9f:24:27:c1: 56:e2:e7:2c:e5:35:c7:49:47:3d:16:01:78:4a:39: 5c:b1:a3:2c:42:5e:84:7c:8b:2a:8b:2c:71:5e:d9: f8:f2:2e:a3:be:bd:02:0d:fd:bd:ef:f2:a9:f0:11: a1:c0:e9:e3:37:0a:9b:b9:98:fa:07:ff:eb:6c:b4: ef:c3:c6:6b:1f:50:65:a9:75:f1:b9:d8:47:f3:ab: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:27:61:6D:21:AB:D3:85:BA:C3:4E:5C:4A:17:B0:6E:A0:05:6C X509v3 Authority Key Identifier: keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:74:5d:64:90:75:87:6a:e4:cf:4c:52:cc:48:c4:43:12:f4: ee:58:4c:8a:62:d5:7a:76:a9:d5:c4:74:f9:c5:4f:a8:3c:20: ac:39:5b:01:2f:bf:82:f8:b0:34:3b:28:a8:46:a1:55:f8:b3: 50:ea:bb:30:ad:7e:4d:25:b1:07:fc:b7:eb:a9:03:39:1a:22: b0:5a:16:ba:82:18:a1:29:13:b6:12:09:bc:ac:34:8b:29:88: d9:b7:ec:e8:52:2c:9f:e4:57:34:d1:ab:d2:e6:ba:d3:89:98: 6e:10:d1:cb:4b:c0:5a:af:53:99:8e:9e:94:94:4c:47:7b:47: f2:aa:a0:58:38:6a:b9:84:0e:36:5c:75:a3:39:1f:b0:46:8a: 51:b2:52:9f:56:33:96:40:32:ae:e2:66:43:61:26:6c:89:7e: 48:df:2e:1f:d5:f9:a7:a4:25:81:e0:3a:7f:82:11:a5:e2:18: 40:7b:48:57:4b:11:07:74:14:0a:d6:37:d3:be:34:c8:0c:20: 81:ea:12:fb:1a:c0:f0:00:35:84:7c:52:14:88:5a:60:3d:4e: 93:e9:7d:b3:9f:64:c8:1a:b5:3e:fa:40:ff:cd:80:4b:d1:b3: ab:54:c1:38:5c:18:db:0d:41:b8:e7:bd:f0:49:b9:5a:33:3d: 80:84:89:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxkKmWUHa7BganxXUt5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWM3MTk0NjdjNzVlZjk3MTdiYzYyYjdlZGFlOTAwYmEy ZjQ2MjUwHhcNMjUxMjA2MTkwMjE2WhcNMjUxMjA3MTkwMjE2WjAzMTEwLwYDVQQD EyhjODhhMjc2MTZkMjFhYmQzODViYWMzNGU1YzRhMTdiMDZlYTAwNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rb9437v1M30WN9akYxygmd38htJ W0ENMQx+dABQljrmSHKGU5G2zgBaLsNh2rzX4SjfcVDDHZ6rNhtKfYfyRmwjSbd7 xk5sTGFc83oUFYm1h3Hah2qZ2pKhToZvCmcn0JWCBeuY6FZ5zsikH6cRInvy1k62 d69GA2VX6O7g6S2z4IAm80BpiNWIFUnJ5xqgFDlGdjoHrvS1icElpUK8ySnb7mje HE19TUPjAPaLlJ8kJ8FW4ucs5TXHSUc9FgF4SjlcsaMsQl6EfIsqiyxxXtn48i6j vr0CDf297/Kp8BGhwOnjNwqbuZj6B//rbLTvw8ZrH1BlqXXxudhH86uU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiKJ2FtIavThbrDTlxKF7BuoAVsMB8GA1UdIwQY MBaAFFGccZRnx175cXvGK37a6QC6L0YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEt ZTY3ZTc3NTlmOWEwLzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lZDIwOWQtMzdkNi00NWU0LTllZTEtZTY3ZTc3NTlmOWEw LzEvVVp4eGxHZkhYdmx4ZThZcmZ0cnBBTG92UmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3RdZJB1 h2rkz0xSzEjEQxL07lhMimLVenap1cR0+cVPqDwgrDlbAS+/gviwNDsoqEahVfiz UOq7MK1+TSWxB/y366kDORoisFoWuoIYoSkTthIJvKw0iymI2bfs6FIsn+RXNNGr 0ua604mYbhDRy0vAWq9TmY6elJRMR3tH8qqgWDhquYQONlx1ozkfsEaKUbJSn1Yz lkAyruJmQ2EmbIl+SN8uH9X5p6QlgeA6f4IRpeIYQHtIV0sRB3QUCtY30740yAwg geoS+xrA8AA1hHxSFIhaYD1Ok+l9s59kyBq1PvpA/82AS9Gzq1TBOFwY2w1BuOe9 8Em5WjM9gISJjg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:51 2025 by rpki-client