This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft File: uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft (raw, json) Hash identifier: 9OBL7RhU6t9dVY8gKewNfFr57E1FMpIZCZmXSeCxhAM= Subject key identifier: D1:7E:05:DE:F9:AD:36:AB:07:23:48:BF:AC:87:57:4B:4F:04:AC:F6 Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5 Certificate serial: 019B3AFDE99EAAE9685704E3B241C09DC04E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft Manifest number: 13E3 Signing time: Sat 20 Dec 2025 09:01:17 +0000 Manifest this update: Sat 20 Dec 2025 09:01:17 +0000 Manifest next update: Sun 21 Dec 2025 09:01:17 +0000 Files and hashes: 1: Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa (hash: OmRDjkPQ+18qn+UxGR2uk7w6di8Xz9C4g7ccgSrHYC8=) 2: SkIGUbx66En06tevBwQSnmLFdPI.roa (hash: Y/8AcvS6wU26oWrDcQdSOIH1YpF2LRYLunKo1ajCVD0=) 3: TUL77rDv9QOYpMzaK40ng1dWWec.roa (hash: vV9cJYHVG3dQHh7/hDNwlYIjogisDYi545JIS+gpMfI=) 4: uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl (hash: 5IQk90HTxXkD+6iFWPrEJ+z5o5BkiHpgefaqB/ejiXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:e9:9e:aa:e9:68:57:04:e3:b2:41:c0:9d:c0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5 Validity Not Before: Dec 20 09:01:17 2025 GMT Not After : Dec 21 09:01:17 2025 GMT Subject: CN=d17e05def9ad36ab072348bfac87574b4f04acf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:57:de:5e:e4:59:89:d3:63:d6:bd:97:19: 67:c1:3e:dd:7c:ae:57:73:55:08:93:af:c5:7f:3b: 40:97:ce:61:1a:d1:20:be:bd:ca:e2:0b:ac:a1:7b: fe:ad:9c:ea:fb:d3:55:ed:4f:97:a9:22:e5:c6:db: fc:16:13:70:86:64:a9:aa:54:4d:e1:1d:ff:34:1d: 3f:e3:d0:1e:40:85:73:65:8a:7b:07:36:19:f9:4d: 6a:8e:16:91:53:41:f1:e2:32:5c:c9:54:c9:1c:cb: ea:69:92:a3:54:eb:20:9f:d9:d4:dc:36:e7:bc:93: 7c:b0:74:9b:ca:ab:1c:8a:1b:d6:7e:13:f7:e2:cd: f8:f4:f6:aa:59:d2:e6:e5:01:8c:6b:db:d1:8b:87: 8f:ef:23:c5:01:01:37:68:97:ee:4d:44:cf:e1:c7: 01:11:36:d4:96:b4:9b:63:10:9a:83:92:63:54:fb: d7:52:54:35:94:74:3b:a2:57:bf:f3:ff:0b:d3:81: 30:4e:8d:0e:bf:4d:d7:af:9f:b8:66:1f:58:84:8d: bf:12:c0:f1:af:3a:62:78:b4:57:12:75:54:6a:01: 77:64:a6:ef:58:cb:38:b6:5f:ca:67:bd:5e:f7:b9: e0:1d:5b:ae:1f:04:08:99:36:1b:b3:e4:7c:8d:37: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:05:DE:F9:AD:36:AB:07:23:48:BF:AC:87:57:4B:4F:04:AC:F6 X509v3 Authority Key Identifier: keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:dd:8e:38:72:ac:5f:ee:21:b1:d9:35:c5:0f:32:cf:2d:27: e3:1f:ab:c9:35:d5:c8:47:cb:5a:71:b8:07:f2:02:77:69:84: 23:6b:b8:90:54:13:bb:c0:9c:d7:40:c0:25:0b:2b:8e:6c:93: e3:35:9b:67:6e:b1:44:34:58:fd:b6:17:83:8f:74:63:62:7a: dc:f9:49:c5:35:6d:9d:a5:57:1a:9a:27:ef:c8:0a:7a:91:20: bd:24:14:d8:20:3f:e6:cc:e2:2b:fa:50:44:66:87:a1:af:9e: 1f:0d:1f:e3:cc:c0:a3:2b:a9:a7:6b:7e:52:45:1e:b3:0f:43: a0:bb:94:ee:3d:86:6e:02:f6:a2:24:a2:30:1d:b2:8f:54:5f: 1c:1a:ce:b4:2d:67:79:97:94:93:b6:d1:da:ff:10:85:48:a7: 26:8c:9a:1c:08:9f:79:8f:74:64:82:5e:1f:bf:23:f9:6a:42: bb:c8:8b:eb:3f:4d:d9:2f:22:d0:85:19:74:b3:05:83:ea:d1: 30:5a:08:48:87:9f:81:1b:41:8a:79:fe:d5:39:fe:df:85:36: 5b:49:aa:12:f7:f5:2f:0e:b6:f8:54:f1:83:26:34:de:14:e0: 29:4f:dc:fe:c9:17:e3:de:8c:ff:66:df:af:f8:a5:60:9f:1b: 05:5e:98:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/emequloVwTjskHAncBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll NjQwZDUwHhcNMjUxMjIwMDkwMTE3WhcNMjUxMjIxMDkwMTE3WjAzMTEwLwYDVQQD EyhkMTdlMDVkZWY5YWQzNmFiMDcyMzQ4YmZhYzg3NTc0YjRmMDRhY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VFX3l7kWYnTY9a9lxlnwT7dfK5X c1UIk6/FfztAl85hGtEgvr3K4gusoXv+rZzq+9NV7U+XqSLlxtv8FhNwhmSpqlRN 4R3/NB0/49AeQIVzZYp7BzYZ+U1qjhaRU0Hx4jJcyVTJHMvqaZKjVOsgn9nU3Dbn vJN8sHSbyqscihvWfhP34s349PaqWdLm5QGMa9vRi4eP7yPFAQE3aJfuTUTP4ccB ETbUlrSbYxCag5JjVPvXUlQ1lHQ7ole/8/8L04EwTo0Ov03Xr5+4Zh9YhI2/EsDx rzpieLRXEnVUagF3ZKbvWMs4tl/KZ71e97ngHVuuHwQImTYbs+R8jTeJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF+Bd75rTarByNIv6yHV0tPBKz2MB8GA1UdIwQY MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt NzBhNTU2YmE4YTExLzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt2OOHKs X+4hsdk1xQ8yzy0n4x+ryTXVyEfLWnG4B/ICd2mEI2u4kFQTu8Cc10DAJQsrjmyT 4zWbZ26xRDRY/bYXg490Y2J63PlJxTVtnaVXGpon78gKepEgvSQU2CA/5sziK/pQ RGaHoa+eHw0f48zAoyupp2t+UkUesw9DoLuU7j2GbgL2oiSiMB2yj1RfHBrOtC1n eZeUk7bR2v8QhUinJoyaHAifeY90ZIJeH78j+WpCu8iL6z9N2S8i0IUZdLMFg+rR MFoISIefgRtBinn+1Tn+34U2W0mqEvf1Lw62+FTxgyY03hTgKU/c/skX496M/2bf r/ilYJ8bBV6YVw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:01:32 2025 by rpki-client