This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json) Hash identifier: n3sb0IvtGvGgbjjUy5dOefpyPXpoL8I9O3Qq1c0EvZY= Subject key identifier: 58:5E:E6:B4:F2:FA:9B:A3:BA:91:32:9D:1E:F0:04:24:D9:6A:D2:29 Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6 Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6 Certificate serial: 019AF50AF49329DC0761A945A3683CD9EB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:07 +0000 Manifest this update: Sat 06 Dec 2025 19:02:07 +0000 Manifest next update: Sun 07 Dec 2025 19:02:07 +0000 Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=) 2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: IQUhXf/fk3HJlb6a3B2nk2r+iAaluFGtkgsOEs1/9+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f4:93:29:dc:07:61:a9:45:a3:68:3c:d9:eb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6 Validity Not Before: Dec 6 19:02:07 2025 GMT Not After : Dec 7 19:02:07 2025 GMT Subject: CN=585ee6b4f2fa9ba3ba91329d1ef00424d96ad229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:a8:76:ec:ad:03:8e:e0:a4:9c:ab:8a:77: 9c:94:33:f3:f5:59:51:c7:de:08:42:f4:c0:09:ae: 53:57:55:89:9d:f6:e8:8a:20:10:50:4c:89:20:95: 37:2b:be:4d:70:56:98:cb:1a:88:5b:fe:4f:78:a1: 38:8c:c4:97:5f:42:32:14:66:8b:05:ec:b3:a0:82: 53:6b:5b:d2:53:81:0b:72:61:50:e7:3d:36:f2:e6: c9:48:9c:55:8e:bb:fd:f2:9d:6b:3b:53:f0:71:95: da:a6:0b:37:0e:12:3e:0b:b5:39:34:08:c0:7c:75: b1:90:af:b5:44:12:62:07:50:a5:47:97:8d:f6:d0: fe:8a:13:fe:2c:f5:fc:78:ed:e8:15:37:cd:5e:a7: f6:52:be:a0:37:a8:82:f3:82:88:d7:54:64:35:b8: 91:a9:f3:75:eb:c5:01:c8:a4:55:3e:64:a0:dc:02: d0:ff:94:37:05:df:4a:4e:b8:b3:ec:b1:cf:e9:2f: ae:c6:b1:27:61:d9:00:a2:ac:51:25:5b:82:5c:39: f6:2a:a8:be:de:98:5f:6b:d9:db:c6:e8:3f:ac:72: 4f:f2:46:be:82:03:de:a3:0a:f1:0f:e6:89:e4:07: d5:fa:23:1b:8c:5d:2e:86:69:70:34:a2:c5:9b:2f: e6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:E6:B4:F2:FA:9B:A3:BA:91:32:9D:1E:F0:04:24:D9:6A:D2:29 X509v3 Authority Key Identifier: keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:53:c4:55:d9:94:91:42:95:2c:01:04:39:81:60:1b:f9:2f: 1a:89:8c:51:9c:df:87:29:dd:04:b9:c9:c6:52:b3:3a:72:ba: 21:17:28:b5:de:39:29:47:81:cb:8d:bd:14:c8:ee:e8:00:f3: 45:4c:76:25:98:64:fc:29:20:77:73:da:32:9a:e9:99:c0:fe: f4:ec:87:af:52:4d:54:ac:94:8b:6b:aa:9d:9f:31:41:df:65: 63:a2:ce:aa:8f:56:62:bf:3e:b5:c7:25:f3:e6:65:6a:72:48: 1c:3b:2d:4d:2a:29:9f:34:5f:fc:28:93:16:84:ca:ea:a9:61: df:db:a4:26:d7:c3:56:4c:56:be:69:57:b5:3d:b7:e2:08:18: 63:66:04:e4:66:98:9d:fc:e8:9d:2f:b2:d8:4b:0b:e7:d1:6c: 0f:b3:d1:f2:da:ce:3c:3f:dc:83:34:b4:b1:68:5f:3d:af:e4: 79:56:74:e9:e5:ee:0a:7e:9e:2c:4f:0c:2c:58:44:f8:60:b2: 79:a5:4b:61:9f:ad:9e:ac:0c:85:dd:b0:fa:2b:8b:04:b8:9c: 4a:20:2e:23:d7:d6:d7:6a:1b:b4:b1:89:01:7b:1b:f0:04:c6: 36:90:31:6c:bf:9e:f9:aa:bf:72:09:15:8f:65:07:b9:42:6b: a4:46:ce:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvSTKdwHYalFo2g82et0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTBjODVjZmEwY2VkNTI4MzYzNDk5N2U3YTRhYThjZTc4 MzZkYjYwHhcNMjUxMjA2MTkwMjA3WhcNMjUxMjA3MTkwMjA3WjAzMTEwLwYDVQQD Eyg1ODVlZTZiNGYyZmE5YmEzYmE5MTMyOWQxZWYwMDQyNGQ5NmFkMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bWoduytA47gpJyrineclDPz9VlR x94IQvTACa5TV1WJnfboiiAQUEyJIJU3K75NcFaYyxqIW/5PeKE4jMSXX0IyFGaL BeyzoIJTa1vSU4ELcmFQ5z028ubJSJxVjrv98p1rO1PwcZXapgs3DhI+C7U5NAjA fHWxkK+1RBJiB1ClR5eN9tD+ihP+LPX8eO3oFTfNXqf2Ur6gN6iC84KI11RkNbiR qfN168UByKRVPmSg3ALQ/5Q3Bd9KTriz7LHP6S+uxrEnYdkAoqxRJVuCXDn2Kqi+ 3phfa9nbxug/rHJP8ka+ggPeowrxD+aJ5AfV+iMbjF0uhmlwNKLFmy/mtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhe5rTy+pujupEynR7wBCTZatIpMB8GA1UdIwQY MBaAFLmQyFz6DO1Sg2NJl+ekqozng222MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgt NDczZjE1ZWMwZDUyLzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgtNDczZjE1ZWMwZDUy LzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFPEVdmU kUKVLAEEOYFgG/kvGomMUZzfhyndBLnJxlKzOnK6IRcotd45KUeBy429FMju6ADz RUx2JZhk/Ckgd3PaMprpmcD+9OyHr1JNVKyUi2uqnZ8xQd9lY6LOqo9WYr8+tccl 8+ZlanJIHDstTSopnzRf/CiTFoTK6qlh39ukJtfDVkxWvmlXtT234ggYY2YE5GaY nfzonS+y2EsL59FsD7PR8trOPD/cgzS0sWhfPa/keVZ06eXuCn6eLE8MLFhE+GCy eaVLYZ+tnqwMhd2w+iuLBLicSiAuI9fW12obtLGJAXsb8ATGNpAxbL+e+aq/cgkV j2UHuUJrpEbODg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:47:06 2025 by rpki-client