This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft File: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json) Hash identifier: dIfufaCvP2ryU/UQ8gfvpSaAKkxeXDq+3R9Z4tvl6uI= Subject key identifier: 64:3D:04:4A:E8:CC:AA:13:A4:33:61:F9:84:1F:45:FD:D1:0A:48:B6 Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7 Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7 Certificate serial: 019AF23F6994D4AC1DC1A3CD94A874284E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft Manifest number: 0179 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: 1XoHczPxlIop9Ss4zIhvr1PaNcPlC7AJQMsWekv6t0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:69:94:d4:ac:1d:c1:a3:cd:94:a8:74:28:4e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=643d044ae8ccaa13a43361f9841f45fdd10a48b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:2f:9c:7f:de:01:67:75:19:96:0f:e7:ae: 30:ea:fc:eb:09:a0:df:4d:f2:ed:96:df:c9:f7:16: 43:44:f2:1f:4b:ba:91:a2:86:b9:68:ba:6b:a2:29: 62:70:52:00:89:b8:8f:e8:9a:8e:3f:20:6d:7e:18: 14:7e:be:08:8e:c8:1a:15:be:04:ff:60:f7:96:4e: f5:01:c8:7f:12:2c:b7:32:9d:ed:f1:53:73:36:e8: c2:b9:e7:f1:86:e1:42:3d:3f:1c:a7:a5:d0:80:68: b9:d5:6c:ab:86:28:12:a8:67:32:0b:d3:83:fa:bb: 4e:f5:08:c9:13:14:47:27:16:d6:66:64:e9:e3:59: 53:12:fc:0d:df:39:ab:dd:36:32:5f:8c:26:5a:67: 75:cd:04:60:a8:06:9f:94:1e:58:5f:80:d1:5b:49: d3:92:6b:6d:98:17:a7:94:74:a0:de:c8:5e:4a:b3: 69:48:9e:ef:22:c5:68:a9:64:0c:3f:86:d5:5a:79: 1e:0d:10:aa:34:3b:93:55:da:37:d1:c6:94:0e:eb: c0:46:dd:6d:1e:54:73:c3:16:84:4f:9a:f3:8d:3b: 95:c9:f4:be:8e:25:24:82:41:bf:2e:71:0c:48:8b: f3:ab:b3:09:73:a6:98:95:c4:4a:60:66:a9:1e:33: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3D:04:4A:E8:CC:AA:13:A4:33:61:F9:84:1F:45:FD:D1:0A:48:B6 X509v3 Authority Key Identifier: keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bd:09:1e:ca:c5:86:87:bb:4f:1d:03:95:32:bf:91:4a:8a: 84:e0:72:96:20:8f:8b:bd:00:dc:df:32:56:94:3c:bf:93:3e: 37:4d:78:0a:31:45:d8:c9:b1:27:51:e3:30:b9:e8:e2:97:84: 3a:8c:a7:33:22:8e:cd:18:47:17:85:91:7b:e3:00:1a:40:88: dd:58:3c:55:13:df:39:bf:28:30:7b:8e:01:d3:42:5a:4b:d5: 28:95:f1:1b:dc:8d:f3:20:1d:be:b7:4a:c3:56:19:5f:0b:ed: 44:43:64:2d:21:ba:be:46:55:3a:a9:ae:f9:e3:4d:0d:a9:dc: aa:0f:a2:b6:a9:20:8a:bd:ac:a1:68:88:ba:55:b8:d8:53:ee: e9:5f:0e:b9:90:b3:ba:ea:07:77:66:45:96:67:90:c5:ce:36: cd:cd:b5:4f:fc:d8:ac:d8:5c:f0:04:24:29:25:da:79:61:7d: 19:9b:70:1e:be:23:c3:c4:2f:d0:c2:b1:45:e7:75:32:3b:ec: 6b:58:7a:ae:56:1a:52:c1:d7:20:69:a8:df:24:34:ac:d1:c9: 25:e0:c5:0a:0a:0f:d8:41:68:1a:93:7c:73:63:d5:72:b6:e8: 4a:ae:16:c3:19:6a:cc:68:14:bc:e4:8d:7b:b9:02:07:7f:78: 98:ed:e5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2mU1KwdwaPNlKh0KE6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ4NGQwZGUwMzlmNjY1ZTFmOTJjYWIzMTFjZmViYzU5 MmI3YTcwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg2NDNkMDQ0YWU4Y2NhYTEzYTQzMzYxZjk4NDFmNDVmZGQxMGE0OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JkvnH/eAWd1GZYP564w6vzrCaDf TfLtlt/J9xZDRPIfS7qRooa5aLproilicFIAibiP6JqOPyBtfhgUfr4IjsgaFb4E /2D3lk71Ach/Eiy3Mp3t8VNzNujCuefxhuFCPT8cp6XQgGi51WyrhigSqGcyC9OD +rtO9QjJExRHJxbWZmTp41lTEvwN3zmr3TYyX4wmWmd1zQRgqAaflB5YX4DRW0nT kmttmBenlHSg3sheSrNpSJ7vIsVoqWQMP4bVWnkeDRCqNDuTVdo30caUDuvARt1t HlRzwxaET5rzjTuVyfS+jiUkgkG/LnEMSIvzq7MJc6aYlcRKYGapHjMqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ9BErozKoTpDNh+YQfRf3RCki2MB8GA1UdIwQY MBaAFFMUhNDeA59mXh+SyrMRz+vFkrenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGIt OTNhZjI1NzMwMjJhLzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGItOTNhZjI1NzMwMjJh LzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO70JHsrF hoe7Tx0DlTK/kUqKhOByliCPi70A3N8yVpQ8v5M+N014CjFF2MmxJ1HjMLno4peE OoynMyKOzRhHF4WRe+MAGkCI3Vg8VRPfOb8oMHuOAdNCWkvVKJXxG9yN8yAdvrdK w1YZXwvtRENkLSG6vkZVOqmu+eNNDancqg+itqkgir2soWiIulW42FPu6V8OuZCz uuoHd2ZFlmeQxc42zc21T/zYrNhc8AQkKSXaeWF9GZtwHr4jw8Qv0MKxRed1Mjvs a1h6rlYaUsHXIGmo3yQ0rNHJJeDFCgoP2EFoGpN8c2PVcrboSq4WwxlqzGgUvOSN e7kCB394mO3l5A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:01 2025 by rpki-client