This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json) Hash identifier: dS7LPjSn27Fa3xPDW6SOalSZnHpWej5qja61fcNGC/I= Subject key identifier: 1F:B8:E0:06:57:A7:18:7C:8A:93:12:58:11:86:B6:D6:83:97:B5:55 Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452 Certificate serial: 019AF2AD85DB7B6F35C7776B0D461F0C98D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: RUQaxYKvLWtplW7yHI6TR3XEkQE.roa (hash: XDQ+7CQl5GASmirk7HcC4w80DGZtYXJDshkFg3byREs=) 2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: 1CjxRoM3yGFwcdT/Oe+3Ygu1eiYP4ALx6sHSw6H7NI0=) 3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:85:db:7b:6f:35:c7:77:6b:0d:46:1f:0c:98:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336107179715609dca422bc07a098468c529452 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=1fb8e00657a7187c8a9312581186b6d68397b555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:7b:cc:1a:4d:4a:a8:e9:3c:66:b2:88:18: 12:35:82:e3:ea:40:84:4b:6b:e6:09:9d:00:96:07: 7a:93:f7:66:d3:56:dd:ab:6e:f4:93:c1:30:3c:05: c4:63:ef:1b:7a:b8:64:93:d2:b9:2c:13:d9:e4:e6: 92:4a:f1:8c:99:08:8e:a7:57:c2:8f:0a:dc:51:98: 86:2b:db:24:fa:ad:cf:52:f3:ca:72:34:4c:84:ce: aa:25:fe:04:35:7e:02:6e:b8:2e:f4:61:e1:76:78: 58:67:6d:3e:dd:d8:f9:85:3e:c0:80:96:6e:e3:27: 27:65:e7:b1:c4:7b:3b:7d:11:a5:73:4a:f2:45:49: 2e:77:51:5d:2f:13:2b:85:6d:03:01:36:3b:bf:65: ae:89:dc:5d:05:62:f8:5b:52:70:7b:d4:e0:e9:11: 8e:2e:3d:b5:33:ca:1c:8c:10:3c:f7:94:5d:99:02: e4:38:bc:8c:7c:78:d2:c4:d5:2f:a6:fb:24:ed:3f: 5c:3a:45:cf:7d:44:a9:54:ee:9a:27:0c:96:cf:00: 89:0d:da:5b:74:15:ec:3f:de:e8:a0:43:89:e6:ca: 17:af:4e:ce:c6:b2:ec:f4:95:4a:f9:c2:77:21:21: 87:a6:ad:a6:92:9f:74:23:ca:18:45:10:ad:d9:f0: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:E0:06:57:A7:18:7C:8A:93:12:58:11:86:B6:D6:83:97:B5:55 X509v3 Authority Key Identifier: keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6d:f7:18:dc:4a:a1:7c:84:91:b2:d0:1b:69:54:e8:17:27: a2:e2:74:11:3a:f9:01:72:cb:a1:67:54:c1:ba:28:25:94:8f: 00:22:ad:43:71:ad:c4:86:66:fc:6a:a5:29:a8:9a:31:36:58: 4e:80:46:29:61:5e:e9:94:af:f2:30:85:65:af:a2:ae:79:e0: ef:d7:b1:52:b6:ff:52:cd:02:93:5c:68:05:20:b9:10:95:21: 21:0f:e6:ab:58:21:ea:f1:5c:aa:dc:35:24:16:ed:28:5d:d1: a1:39:99:2f:2a:66:7f:3a:38:cb:f8:52:c0:d9:fc:2d:3c:75: e6:e4:79:16:04:d8:95:6e:8e:62:7d:4e:48:e3:6b:90:41:0f: 91:47:0c:7a:6a:73:ef:4f:fe:d8:24:34:c9:00:2d:ef:0d:5d: 50:2c:1e:7a:af:ee:ab:f2:1c:e0:1d:01:93:71:2c:97:ac:91: 81:52:1e:7c:b7:32:ee:23:7c:d2:70:7c:e0:80:f9:b1:51:85: 19:de:61:2b:42:92:92:74:f5:c4:9a:7a:dd:9c:b1:e9:ac:0a: 0b:7f:4a:93:1b:36:99:03:66:10:4e:e9:5f:07:b9:78:d3:d6: 9f:3b:34:7e:6c:96:f8:c1:11:39:41:f9:5f:c0:7c:13:b6:67: 17:4b:bc:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYXbe281x3drDUYfDJjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1 Mjk0NTIwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EygxZmI4ZTAwNjU3YTcxODdjOGE5MzEyNTgxMTg2YjZkNjgzOTdiNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRN7zBpNSqjpPGayiBgSNYLj6kCE S2vmCZ0Algd6k/dm01bdq270k8EwPAXEY+8berhkk9K5LBPZ5OaSSvGMmQiOp1fC jwrcUZiGK9sk+q3PUvPKcjRMhM6qJf4ENX4Cbrgu9GHhdnhYZ20+3dj5hT7AgJZu 4ycnZeexxHs7fRGlc0ryRUkud1FdLxMrhW0DATY7v2WuidxdBWL4W1Jwe9Tg6RGO Lj21M8ocjBA895RdmQLkOLyMfHjSxNUvpvsk7T9cOkXPfUSpVO6aJwyWzwCJDdpb dBXsP97ooEOJ5soXr07OxrLs9JVK+cJ3ISGHpq2mkp90I8oYRRCt2fCkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+44AZXpxh8ipMSWBGGttaDl7VVMB8GA1UdIwQY MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt ZDE4NjEwMDc1ZWZjLzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZG33GNxK oXyEkbLQG2lU6BcnouJ0ETr5AXLLoWdUwbooJZSPACKtQ3GtxIZm/GqlKaiaMTZY ToBGKWFe6ZSv8jCFZa+irnng79exUrb/Us0Ck1xoBSC5EJUhIQ/mq1gh6vFcqtw1 JBbtKF3RoTmZLypmfzo4y/hSwNn8LTx15uR5FgTYlW6OYn1OSONrkEEPkUcMempz 70/+2CQ0yQAt7w1dUCweeq/uq/Ic4B0Bk3Esl6yRgVIefLcy7iN80nB84ID5sVGF Gd5hK0KSknT1xJp63Zyx6awKC39Kkxs2mQNmEE7pXwe5eNPWnzs0fmyW+MEROUH5 X8B8E7ZnF0u8/A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:03 2025 by rpki-client