This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft File: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft (raw, json) Hash identifier: 9kXzzi35+lmTsrFPv3wtqzu8zSKbWhKz6Em147cO0cU= Subject key identifier: CB:45:F8:D2:FD:2E:12:EF:F6:9B:6E:75:9A:1E:10:72:9B:6E:03:66 Authority key identifier: 53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C Certificate issuer: /CN=5337ddfa6530fcc67f76937debe3d8208cb9902c Certificate serial: 019AF1D26D7F4AE9F1DAAAFBC252C3EB6547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft Manifest number: 0904 Signing time: Sat 06 Dec 2025 04:01:30 +0000 Manifest this update: Sat 06 Dec 2025 04:01:30 +0000 Manifest next update: Sun 07 Dec 2025 04:01:30 +0000 Files and hashes: 1: Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl (hash: 9dwgrtJ8KVQQT9qY6WJawjXN6GYtbN7M1UO7r6n7S/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:6d:7f:4a:e9:f1:da:aa:fb:c2:52:c3:eb:65:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5337ddfa6530fcc67f76937debe3d8208cb9902c Validity Not Before: Dec 6 04:01:30 2025 GMT Not After : Dec 7 04:01:30 2025 GMT Subject: CN=cb45f8d2fd2e12eff69b6e759a1e10729b6e0366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:1c:f9:47:9a:ea:c4:c3:fa:54:8d:5e:59: 5a:57:d7:0b:60:03:98:dd:6e:fc:2c:1a:60:1e:8e: 57:8a:a5:fe:c3:f0:b5:e1:a6:d1:22:96:eb:ee:a4: a8:a6:52:d0:29:fc:57:1a:83:77:12:e3:26:7a:e6: a8:c9:05:ea:bd:00:4a:55:d1:96:eb:11:32:1b:c7: e8:fe:db:c4:ec:5e:0a:0f:f7:4e:5c:f1:11:a4:00: 6d:e9:2b:f3:e8:20:f3:5f:ed:1d:6e:98:ff:29:f6: c6:fc:47:6a:34:cc:ae:e2:17:08:e2:c6:e7:1f:b3: c6:c7:74:6a:38:1a:21:a1:1b:a4:4e:ac:54:a1:24: ed:6f:02:47:f6:57:d5:9d:68:b4:f7:54:2d:82:a7: cc:40:b8:12:22:b2:10:6f:a3:bc:cb:94:54:6b:c4: d7:33:06:54:b9:ac:d6:6a:55:51:9c:2d:5c:c0:bc: a8:d9:f6:3c:c6:f6:57:dc:b3:75:33:13:17:2f:86: 8d:d1:6c:10:0f:b0:84:aa:6d:ff:13:d2:64:8b:a0: 9e:91:7a:3b:b3:3b:82:0a:95:8a:e0:97:10:0d:1a: 6a:34:97:8a:cf:76:6a:df:fc:50:6b:e6:d7:ea:b7: e6:bb:c3:63:95:41:46:53:4d:3d:29:9d:87:22:82: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:45:F8:D2:FD:2E:12:EF:F6:9B:6E:75:9A:1E:10:72:9B:6E:03:66 X509v3 Authority Key Identifier: keyid:53:37:DD:FA:65:30:FC:C6:7F:76:93:7D:EB:E3:D8:20:8C:B9:90:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/Uzfd-mUw_MZ_dpN96-PYIIy5kCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f6:d3:c6:95:ea:83:5a:21:92:ff:18:4a:72:dc:30:ab:fd: 65:01:38:d8:85:c2:67:f7:98:01:ba:5c:f8:82:37:eb:7b:30: 86:f4:9a:82:b0:90:fc:69:57:7c:45:62:7d:e5:c0:49:d0:30: f7:8d:e2:93:cc:10:ea:57:05:24:56:48:a9:42:be:ed:45:06: 2e:a6:2a:54:0c:7a:c9:bd:c5:c5:d6:e5:9a:03:0c:87:97:ff: 4e:0f:78:51:72:b7:ef:ae:34:ba:b9:e6:37:4b:f1:4c:14:15: bd:97:ab:04:b1:9a:b8:d7:9f:7f:bd:b1:34:e3:cc:b6:78:f5: c7:c8:b9:12:ce:20:25:14:c2:b3:2b:f3:44:6e:fd:7c:9c:40: a9:c2:9f:46:a0:90:df:29:23:e5:e3:db:55:1d:48:af:52:56: 4f:fb:74:c5:13:b4:d9:b7:ed:f7:90:38:2d:fd:40:04:02:08: cb:80:5e:be:db:95:84:58:2d:82:aa:6d:83:02:bb:69:7e:e2: 9d:14:83:d5:0e:27:ed:8b:19:37:95:f6:2d:f6:b1:29:56:af: 17:1e:9d:d4:6b:1d:e2:fb:30:6d:b8:2f:d5:ad:a1:88:9b:f3: 20:45:f2:1f:6a:0a:ce:75:c3:91:d2:60:42:d7:d7:f6:2b:4a: e8:81:b7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0m1/Sunx2qr7wlLD62VHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzdkZGZhNjUzMGZjYzY3Zjc2OTM3ZGViZTNkODIwOGNi OTkwMmMwHhcNMjUxMjA2MDQwMTMwWhcNMjUxMjA3MDQwMTMwWjAzMTEwLwYDVQQD EyhjYjQ1ZjhkMmZkMmUxMmVmZjY5YjZlNzU5YTFlMTA3MjliNmUwMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyEc+Uea6sTD+lSNXllaV9cLYAOY 3W78LBpgHo5XiqX+w/C14abRIpbr7qSoplLQKfxXGoN3EuMmeuaoyQXqvQBKVdGW 6xEyG8fo/tvE7F4KD/dOXPERpABt6Svz6CDzX+0dbpj/KfbG/EdqNMyu4hcI4sbn H7PGx3RqOBohoRukTqxUoSTtbwJH9lfVnWi091QtgqfMQLgSIrIQb6O8y5RUa8TX MwZUuazWalVRnC1cwLyo2fY8xvZX3LN1MxMXL4aN0WwQD7CEqm3/E9Jki6CekXo7 szuCCpWK4JcQDRpqNJeKz3Zq3/xQa+bX6rfmu8NjlUFGU009KZ2HIoJMWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtF+NL9LhLv9ptudZoeEHKbbgNmMB8GA1UdIwQY MBaAFFM33fplMPzGf3aTfevj2CCMuZAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYt ZGRlMzY1NzRiMTc4LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYtZGRlMzY1NzRiMTc4 LzEvVXpmZC1tVXdfTVpfZHBOOTYtUFlJSXk1a0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/bTxpXq g1ohkv8YSnLcMKv9ZQE42IXCZ/eYAbpc+II363swhvSagrCQ/GlXfEVifeXASdAw 943ik8wQ6lcFJFZIqUK+7UUGLqYqVAx6yb3FxdblmgMMh5f/Tg94UXK37640urnm N0vxTBQVvZerBLGauNeff72xNOPMtnj1x8i5Es4gJRTCsyvzRG79fJxAqcKfRqCQ 3ykj5ePbVR1Ir1JWT/t0xRO02bft95A4Lf1ABAIIy4BevtuVhFgtgqptgwK7aX7i nRSD1Q4n7YsZN5X2LfaxKVavFx6d1Gsd4vswbbgv1a2hiJvzIEXyH2oKznXDkdJg QtfX9itK6IG3SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:22 2025 by rpki-client