This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json) Hash identifier: B/254iBTJqGEKnycrlJLP3LpzJQ8wj2PbUAW5Utsj6Y= Subject key identifier: 96:5A:0A:4C:EC:9E:C9:73:00:0C:58:8D:A6:5B:4C:FC:9B:45:A3:61 Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9 Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9 Certificate serial: 019AF31D56130BC707B5653A60B35C9974AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft Manifest number: 170F Signing time: Sat 06 Dec 2025 10:02:57 +0000 Manifest this update: Sat 06 Dec 2025 10:02:57 +0000 Manifest next update: Sun 07 Dec 2025 10:02:57 +0000 Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=) 2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: UsPecF5GcIv7pPHKUJ6k1zrJU7kp1hx27j6HvPQSd5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:56:13:0b:c7:07:b5:65:3a:60:b3:5c:99:74:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9 Validity Not Before: Dec 6 10:02:57 2025 GMT Not After : Dec 7 10:02:57 2025 GMT Subject: CN=965a0a4cec9ec973000c588da65b4cfc9b45a361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:e5:50:be:c3:60:44:87:b1:89:13:db:2f: 85:31:79:d1:4b:a2:19:74:7a:3b:b9:8f:bd:a2:30: a1:8b:e1:47:1d:ec:72:81:fc:12:b4:bb:7b:58:e1: 41:a7:5f:e0:66:c8:4f:77:65:33:38:f0:21:38:7d: e6:38:cc:d7:29:15:c3:70:4b:25:cc:17:56:ef:90: 8c:b1:8a:a1:ae:63:ce:1c:da:1f:27:fe:ad:77:ba: 13:f7:2c:7d:99:3a:73:3c:4a:3b:c3:48:5c:dc:1d: 92:10:12:21:22:fc:7e:89:86:1b:d8:5b:77:b0:6d: a3:1e:32:a4:35:fd:44:e5:f6:e0:50:3f:cf:21:ce: 09:9f:12:a2:a7:2a:e1:cc:5a:0f:b4:ae:ba:a3:5b: ff:d7:5c:bb:10:5c:da:60:32:25:d3:ad:99:b3:00: cf:87:71:4e:38:56:7c:82:26:6c:a7:54:73:41:15: d2:90:17:12:0a:78:90:5d:ea:3e:e2:9b:2e:06:0d: 4b:03:70:c8:d4:ac:b1:b8:e2:04:6c:d4:5b:94:a0: 60:c1:02:27:58:7a:19:05:77:cd:00:a5:44:58:e7: 0e:18:a5:e1:c2:35:f3:0d:dd:ff:a4:8e:ef:d9:40: 5c:10:38:c0:e8:9d:6a:88:e3:4b:42:dc:aa:1e:5c: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5A:0A:4C:EC:9E:C9:73:00:0C:58:8D:A6:5B:4C:FC:9B:45:A3:61 X509v3 Authority Key Identifier: keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:27:71:fd:2c:0e:93:99:35:51:3c:71:12:12:fb:a0:9a:39: 52:b8:bb:c4:bc:a4:9b:79:0a:f2:42:06:ba:f0:61:3a:7c:19: 41:fc:ef:d1:e4:30:9b:ab:b2:3c:76:09:63:ed:ac:da:6f:3e: 16:bb:af:9c:91:e3:ed:9d:bf:34:fc:1c:c9:0c:cd:26:e6:5e: 3c:18:cd:0e:ec:53:94:02:32:06:2d:9f:56:22:90:55:8c:52: dd:db:58:04:3d:6a:5c:6d:12:7f:93:35:e5:34:0b:a7:9e:90: dd:aa:24:53:82:da:67:70:8e:a9:d6:8f:8a:59:0d:7b:ff:d6: 9b:93:9c:28:37:07:60:81:8b:92:65:db:a6:f4:f2:15:0a:62: 72:1d:d2:95:45:37:34:6f:87:2a:50:a8:42:2e:c6:aa:28:66: 64:62:6e:52:4f:1e:2f:ab:fc:1c:9a:50:7e:4b:40:71:b3:22: fc:2c:bb:8e:f2:96:c1:1e:b7:a5:23:3b:f7:8f:64:ec:5f:85: a3:94:4d:68:a9:00:7f:69:c7:b1:c5:b5:d4:a7:ba:78:8a:01: 8a:e3:65:e4:ad:f6:92:0f:8e:ed:20:bc:c9:07:c5:4d:a7:5f: 97:96:6b:6d:6a:d4:73:9a:3f:c7:62:69:8d:3d:b9:38:b6:6d: 39:50:83:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVYTC8cHtWU6YLNcmXSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDUwODU5OTVmM2NiN2M3ZGJkMDVlNDE3NzRkYTYyNGIx YWYyZTkwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD Eyg5NjVhMGE0Y2VjOWVjOTczMDAwYzU4OGRhNjViNGNmYzliNDVhMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDlUL7DYESHsYkT2y+FMXnRS6IZ dHo7uY+9ojChi+FHHexygfwStLt7WOFBp1/gZshPd2UzOPAhOH3mOMzXKRXDcEsl zBdW75CMsYqhrmPOHNofJ/6td7oT9yx9mTpzPEo7w0hc3B2SEBIhIvx+iYYb2Ft3 sG2jHjKkNf1E5fbgUD/PIc4JnxKipyrhzFoPtK66o1v/11y7EFzaYDIl062ZswDP h3FOOFZ8giZsp1RzQRXSkBcSCniQXeo+4psuBg1LA3DI1KyxuOIEbNRblKBgwQIn WHoZBXfNAKVEWOcOGKXhwjXzDd3/pI7v2UBcEDjA6J1qiONLQtyqHlxVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZaCkzsnslzAAxYjaZbTPybRaNhMB8GA1UdIwQY MBaAFLlFCFmV88t8fb0F5Bd02mJLGvLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUt OTE3N2IxNGVlNjMzLzEvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUtOTE3N2IxNGVlNjMz LzEvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCdx/SwO k5k1UTxxEhL7oJo5Uri7xLykm3kK8kIGuvBhOnwZQfzv0eQwm6uyPHYJY+2s2m8+ FruvnJHj7Z2/NPwcyQzNJuZePBjNDuxTlAIyBi2fViKQVYxS3dtYBD1qXG0Sf5M1 5TQLp56Q3aokU4LaZ3COqdaPilkNe//Wm5OcKDcHYIGLkmXbpvTyFQpich3SlUU3 NG+HKlCoQi7GqihmZGJuUk8eL6v8HJpQfktAcbMi/Cy7jvKWwR63pSM7949k7F+F o5RNaKkAf2nHscW11Ke6eIoBiuNl5K32kg+O7SC8yQfFTadfl5ZrbWrUc5o/x2Jp jT25OLZtOVCDNg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:52 2025 by rpki-client