This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json) Hash identifier: eJSzNW8Db5/KYFXkbOLPo5+KuKieiW2tSd12S/spa4w= Subject key identifier: 61:76:4E:A9:51:97:B9:9A:AA:F4:F3:45:4D:03:E4:B2:DD:1B:1E:D5 Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c Certificate serial: 019AF31CD01A388F692229960BDCD72CE38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: lDSLxg7+DJDjDT8S0+D5FSeESeMVTohUtOdrcgDrQAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d0:1a:38:8f:69:22:29:96:0b:dc:d7:2c:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=61764ea95197b99aaaf4f3454d03e4b2dd1b1ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:fc:1a:b2:f4:a2:98:88:35:a6:ab:0b:eb: 2d:b9:2a:e7:eb:24:63:e2:c6:ff:97:07:b2:ea:f7: fa:8f:ff:d4:2f:0a:36:ee:bc:dd:73:4a:3d:b1:60: 7c:27:e5:33:5f:85:00:71:49:ea:b3:4d:80:16:14: 24:c3:a4:b4:25:ee:98:2c:e5:a5:47:92:09:70:7a: 1c:7c:d7:45:8f:90:85:17:26:81:7b:21:c6:7e:5d: 22:2c:90:5c:09:3e:79:f5:68:af:67:82:63:1e:fc: 16:54:a2:a4:89:a4:66:92:24:3f:13:de:fd:d6:97: 9a:df:9e:7f:ec:46:0f:e5:eb:77:cb:9e:d3:77:a4: 6c:67:93:6a:52:8e:99:d7:b9:83:4c:7a:59:7f:0d: cf:40:8f:c4:dd:be:cb:35:9d:7c:88:92:9f:a3:43: c7:cd:1a:83:b1:0a:d1:bf:c4:a4:bf:e7:7b:4d:27: dc:e7:d4:c0:be:7d:b5:0d:2b:bf:b5:84:58:68:41: a2:74:f6:ca:ea:9c:75:8e:00:dd:fa:d7:52:6f:dc: 0a:ee:3e:c2:be:fa:41:a5:86:31:1d:bf:2f:89:71: ee:86:76:d3:39:76:71:15:d4:61:ee:10:6c:c0:dc: 94:1e:e1:21:06:e0:12:9e:c4:3c:63:eb:8a:49:6f: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:76:4E:A9:51:97:B9:9A:AA:F4:F3:45:4D:03:E4:B2:DD:1B:1E:D5 X509v3 Authority Key Identifier: keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9e:5e:91:4e:15:9c:c8:4e:02:dc:36:e0:69:b6:98:8d:7a: 5e:64:04:2e:94:f8:dd:66:b1:d4:29:83:eb:b1:ae:2e:3d:cf: 1c:24:a0:1b:0f:f3:8d:0b:96:16:f2:4b:28:2c:6d:f6:ca:9e: bd:0b:36:a2:25:c7:ae:15:08:17:6b:23:81:b9:29:86:92:07: cd:be:9e:a7:70:c0:a6:32:99:a1:e5:e5:a5:49:51:81:ca:6f: d8:36:31:01:c5:41:5b:2e:35:1f:7e:59:f7:e3:cc:57:b7:56: b4:75:00:9c:be:ae:ab:bb:c8:1b:44:e4:a5:88:bf:18:81:15: 24:46:99:e2:8e:a1:2b:68:86:21:31:29:e3:e2:06:db:f3:c7: 09:e0:55:0f:48:eb:0c:95:17:d5:bc:69:ec:df:bb:89:f8:11: 1d:3a:89:2a:87:c5:5e:12:ef:39:3a:20:77:40:93:8b:39:d6: 76:59:08:fc:01:27:40:b4:33:f4:d7:b7:af:ed:6d:03:01:3a: 13:ca:89:fa:82:48:1b:09:03:3d:71:47:49:14:86:26:fe:cc: db:91:c0:95:b7:a9:80:51:57:66:4f:9a:53:85:1f:fd:47:1d: 0d:a4:14:30:9b:dc:8e:34:32:e2:9d:f3:9f:e0:04:82:d7:1e: 0b:b5:7c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNAaOI9pIimWC9zXLOOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMmUyMWM5ZGY2ZDUyZmRhYzRhZTNiMGM4NzM5NjhlZjA5 ZWIyN2MwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD Eyg2MTc2NGVhOTUxOTdiOTlhYWFmNGYzNDU0ZDAzZTRiMmRkMWIxZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kD8GrL0opiINaarC+stuSrn6yRj 4sb/lwey6vf6j//ULwo27rzdc0o9sWB8J+UzX4UAcUnqs02AFhQkw6S0Je6YLOWl R5IJcHocfNdFj5CFFyaBeyHGfl0iLJBcCT559WivZ4JjHvwWVKKkiaRmkiQ/E979 1pea355/7EYP5et3y57Td6RsZ5NqUo6Z17mDTHpZfw3PQI/E3b7LNZ18iJKfo0PH zRqDsQrRv8Skv+d7TSfc59TAvn21DSu/tYRYaEGidPbK6px1jgDd+tdSb9wK7j7C vvpBpYYxHb8viXHuhnbTOXZxFdRh7hBswNyUHuEhBuASnsQ8Y+uKSW9vTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF2TqlRl7maqvTzRU0D5LLdGx7VMB8GA1UdIwQY MBaAFFMuIcnfbVL9rErjsMhzlo7wnrJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2It MDY0ZTBiMGVhYzNhLzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2ItMDY0ZTBiMGVhYzNh LzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU55ekU4V nMhOAtw24Gm2mI16XmQELpT43Wax1CmD67GuLj3PHCSgGw/zjQuWFvJLKCxt9sqe vQs2oiXHrhUIF2sjgbkphpIHzb6ep3DApjKZoeXlpUlRgcpv2DYxAcVBWy41H35Z 9+PMV7dWtHUAnL6uq7vIG0TkpYi/GIEVJEaZ4o6hK2iGITEp4+IG2/PHCeBVD0jr DJUX1bxp7N+7ifgRHTqJKofFXhLvOTogd0CTiznWdlkI/AEnQLQz9Ne3r+1tAwE6 E8qJ+oJIGwkDPXFHSRSGJv7M25HAlbepgFFXZk+aU4Uf/UcdDaQUMJvcjjQy4p3z n+AEgtceC7V8yg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:26 2025 by rpki-client