This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft File: UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json) Hash identifier: j1kgoch6O+5QuqprTCJ16sXo5JLqorvUDBQH8Dk6Uzc= Subject key identifier: 7E:BB:E6:C9:7B:B9:77:DF:1A:A6:5C:6A:6C:A9:29:07:B8:4F:D5:4D Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F Certificate issuer: /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f Certificate serial: 019B2C2F3BB77B816239F37FF1C4461E292D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft Manifest number: 11CC Signing time: Wed 17 Dec 2025 12:00:51 +0000 Manifest this update: Wed 17 Dec 2025 12:00:51 +0000 Manifest next update: Thu 18 Dec 2025 12:00:51 +0000 Files and hashes: 1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: TqoklFb7YCRQwVTr9Ubo0og8OlD3JGgKpo+vWftI6/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:3b:b7:7b:81:62:39:f3:7f:f1:c4:46:1e:29:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f Validity Not Before: Dec 17 12:00:51 2025 GMT Not After : Dec 18 12:00:51 2025 GMT Subject: CN=7ebbe6c97bb977df1aa65c6a6ca92907b84fd54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:56:a2:b5:d5:40:0b:2a:8a:0a:6f:0f:e6:45: 32:6e:14:4d:e5:97:bc:3d:2a:22:e5:09:23:86:03: a5:15:e5:04:04:56:e9:37:48:a5:bc:46:f0:4d:33: af:38:0f:df:e7:19:7a:ee:73:14:8a:68:a8:83:e4: 64:fa:83:25:6b:14:34:04:2f:dd:43:42:fd:f0:f3: c6:04:c3:c1:7a:25:a8:f1:6b:3a:f0:62:f9:20:ef: 93:97:c7:13:34:22:57:b8:37:e6:46:4f:32:6a:37: 5f:11:59:9f:59:af:48:f8:df:94:3e:0d:cc:6b:69: bb:4e:a8:7d:32:db:44:a8:94:59:ec:2c:9b:95:e2: 4e:57:d1:53:1d:b1:3b:7a:9c:60:97:ee:cf:4c:1f: 8a:9b:1a:3d:86:89:dc:28:ad:bb:06:ab:04:3a:86: 5d:fb:83:e6:16:b7:a9:82:0b:a8:92:e4:47:3a:70: 7a:e4:41:9d:99:66:18:08:87:37:f7:69:65:b8:ad: 8c:ae:56:f6:46:fa:b4:78:ab:a0:01:01:30:b5:31: b2:e5:c3:96:9a:8c:b9:95:bd:fe:14:52:08:24:e6: 73:23:90:80:e2:f7:3a:f9:25:fa:2d:c5:0b:84:6d: 33:e2:2c:81:a3:07:af:d4:57:33:c9:f9:95:6e:cd: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:E6:C9:7B:B9:77:DF:1A:A6:5C:6A:6C:A9:29:07:B8:4F:D5:4D X509v3 Authority Key Identifier: keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5b:5c:d1:ab:dc:4b:7c:0d:a5:7e:9a:ca:d4:1b:bb:1a:6c: 1d:9a:4c:7c:27:0a:d7:6a:72:cc:1d:ef:02:32:47:fd:2c:07: 3e:7f:23:39:3b:a4:88:85:b0:4c:4c:b3:33:ea:ec:66:4a:8c: b0:b9:08:1e:bd:10:65:8a:f0:9a:a2:39:f2:3d:05:4a:2d:52: 5a:17:88:0f:19:ee:7c:7b:60:fd:c0:6c:30:c9:d3:60:b1:32: e4:13:b1:13:92:bc:39:3d:33:c0:0a:92:6e:b7:81:df:da:46: d8:71:5b:04:d7:4a:12:ce:3b:a9:fe:04:f4:9e:4b:49:d3:d6: 74:cc:b8:2e:88:21:f8:15:d5:ca:ec:0e:3d:9c:02:83:71:67: 9e:2f:c9:6e:1f:81:78:f9:99:c9:7b:d2:8d:a8:9a:3a:42:91: 9a:75:50:0b:9d:e9:ce:ff:43:51:5b:66:d4:fd:a6:aa:2f:1f: 4e:86:28:28:ef:2a:0d:32:ad:4e:24:df:81:6e:0d:f9:7f:6f: 8d:bb:06:28:d2:49:7e:29:68:3d:34:0a:f9:cd:19:7d:e6:ca: 1a:61:1f:f3:e0:d9:38:4b:3a:cc:24:02:07:a4:42:91:6b:4d: 9b:4b:77:35:09:da:4a:56:9a:8f:29:8b:75:80:88:81:1a:b5: 8b:6a:6d:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLzu3e4FiOfN/8cRGHiktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjZjMTEwMzE1MzI0NDg1MmJjYjNlMjNiNmRlMmExNmJh YTdhN2YwHhcNMjUxMjE3MTIwMDUxWhcNMjUxMjE4MTIwMDUxWjAzMTEwLwYDVQQD Eyg3ZWJiZTZjOTdiYjk3N2RmMWFhNjVjNmE2Y2E5MjkwN2I4NGZkNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61aitdVACyqKCm8P5kUybhRN5Ze8 PSoi5QkjhgOlFeUEBFbpN0ilvEbwTTOvOA/f5xl67nMUimiog+Rk+oMlaxQ0BC/d Q0L98PPGBMPBeiWo8Ws68GL5IO+Tl8cTNCJXuDfmRk8yajdfEVmfWa9I+N+UPg3M a2m7Tqh9MttEqJRZ7CybleJOV9FTHbE7epxgl+7PTB+Kmxo9honcKK27BqsEOoZd +4PmFrepgguokuRHOnB65EGdmWYYCIc392lluK2Mrlb2Rvq0eKugAQEwtTGy5cOW moy5lb3+FFIIJOZzI5CA4vc6+SX6LcULhG0z4iyBowev1FczyfmVbs1fawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH675sl7uXffGqZcamypKQe4T9VNMB8GA1UdIwQY MBaAFFL2wRAxUyRIUryz4jtt4qFrqnp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEt MGRiY2ZlYWM5OGE1LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEtMGRiY2ZlYWM5OGE1 LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALltc0avc S3wNpX6aytQbuxpsHZpMfCcK12pyzB3vAjJH/SwHPn8jOTukiIWwTEyzM+rsZkqM sLkIHr0QZYrwmqI58j0FSi1SWheIDxnufHtg/cBsMMnTYLEy5BOxE5K8OT0zwAqS breB39pG2HFbBNdKEs47qf4E9J5LSdPWdMy4Logh+BXVyuwOPZwCg3Fnni/Jbh+B ePmZyXvSjaiaOkKRmnVQC53pzv9DUVtm1P2mqi8fToYoKO8qDTKtTiTfgW4N+X9v jbsGKNJJfiloPTQK+c0ZfebKGmEf8+DZOEs6zCQCB6RCkWtNm0t3NQnaSlaajymL dYCIgRq1i2ptyw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:07 2025 by rpki-client