This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft File: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json) Hash identifier: ubPz/ZKq2W+bEadfhR/3VKSe+7mj1g0RiUibK3gVZU0= Subject key identifier: 01:A1:93:26:63:16:FB:CC:9C:2F:7A:67:E2:3F:0E:3E:2F:F2:8D:5A Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26 Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326 Certificate serial: 019AF61CD1F042F6DEC9A770DF1063030D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft Manifest number: 168B Signing time: Sun 07 Dec 2025 00:01:15 +0000 Manifest this update: Sun 07 Dec 2025 00:01:15 +0000 Manifest next update: Mon 08 Dec 2025 00:01:15 +0000 Files and hashes: 1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: l4KWNqThVvgoJvciOW3lE9q8TnkAEeFdNLHixkCL/eg=) 2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:d1:f0:42:f6:de:c9:a7:70:df:10:63:03:0d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326 Validity Not Before: Dec 7 00:01:15 2025 GMT Not After : Dec 8 00:01:15 2025 GMT Subject: CN=01a193266316fbcc9c2f7a67e23f0e3e2ff28d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:b3:d2:f6:8a:26:83:48:39:50:70:91:93: 14:92:a6:c2:3e:78:d7:eb:aa:dc:b7:04:ad:58:ce: 3c:f5:18:c9:66:86:6e:f8:7a:f9:37:c0:2a:03:ec: b2:f6:f0:e7:6b:39:a3:2c:38:ab:62:7e:a9:1f:ae: 8c:87:79:35:20:c8:2c:6f:78:29:c9:c5:7a:99:69: 70:5c:41:1d:50:aa:6a:d7:f2:2d:00:32:ee:f2:1a: fc:cd:27:9e:37:0c:72:08:78:51:bb:f4:2d:58:88: 6c:46:4b:f3:78:ea:af:41:23:5c:67:15:f7:68:de: 24:b7:e8:7e:e2:04:68:64:7a:ed:48:01:cb:6b:7f: 87:fb:a5:73:54:df:68:b9:02:f9:06:2b:35:57:d9: ad:c7:36:46:31:2d:78:d0:cd:3b:77:d5:83:8e:4a: 52:0f:cb:1f:04:95:d4:25:60:16:71:fa:b4:6d:51: 87:9a:9d:b7:76:65:0c:fb:f7:6d:39:b5:87:42:93: c7:0a:39:c2:d2:03:d3:7d:3b:c7:df:14:35:75:a6: 44:3e:96:e3:4a:d9:d0:08:a9:77:89:36:75:71:ca: b2:3a:10:6d:48:50:ff:ca:e9:4a:e7:42:44:21:39: 38:d0:b0:86:eb:00:5f:95:86:65:2a:00:93:e1:76: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:93:26:63:16:FB:CC:9C:2F:7A:67:E2:3F:0E:3E:2F:F2:8D:5A X509v3 Authority Key Identifier: keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:09:5a:27:8f:01:6e:d9:01:6c:e1:ea:a5:66:eb:fc:a1: f6:b2:dc:17:07:e1:9b:84:7f:37:66:fb:c4:3b:95:3f:ef:83: 5f:f2:ce:60:1d:4d:84:b2:f3:eb:3e:b3:69:70:03:4b:99:16: 1b:44:01:73:d1:71:a1:43:6c:9c:bb:a5:9e:35:12:00:11:0b: fc:7c:d5:2d:d9:e8:8e:dc:4d:b5:4e:d3:42:cb:71:eb:9e:57: 71:75:a7:11:e9:8a:22:b2:fb:db:8a:d2:ca:31:59:62:b5:2e: ec:7f:91:b1:a1:76:ef:66:fc:19:2b:21:2e:1c:3b:00:0f:f4: 68:e1:33:46:65:0c:ad:e1:82:fa:d3:7c:a9:f3:3a:0b:56:b7: 42:fb:1d:c9:00:b8:93:cb:67:30:70:ce:0b:44:8f:91:9f:84: c5:2a:40:03:d2:12:e5:f4:50:52:13:e3:c0:c0:3f:c0:3b:23: e2:88:ea:ef:b9:04:94:a2:7c:9d:43:0e:ed:55:0c:d6:65:82: ea:66:a2:be:e3:9e:3e:f4:97:25:f3:c5:b8:de:75:74:74:7d: d6:2d:02:2c:36:52:66:fe:a3:a9:80:ed:89:00:3b:0e:74:41: 12:3c:d7:7c:6c:64:54:1f:09:27:da:83:e3:19:0e:b8:10:5d: 29:4f:2e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HNHwQvbeyadw3xBjAw14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMmNmMWVkMTA1YzVjMWRjNTI3YmNkMGYxNDlmZTk0NDll YmQzMjYwHhcNMjUxMjA3MDAwMTE1WhcNMjUxMjA4MDAwMTE1WjAzMTEwLwYDVQQD EygwMWExOTMyNjYzMTZmYmNjOWMyZjdhNjdlMjNmMGUzZTJmZjI4ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfOz0vaKJoNIOVBwkZMUkqbCPnjX 66rctwStWM489RjJZoZu+Hr5N8AqA+yy9vDnazmjLDirYn6pH66Mh3k1IMgsb3gp ycV6mWlwXEEdUKpq1/ItADLu8hr8zSeeNwxyCHhRu/QtWIhsRkvzeOqvQSNcZxX3 aN4kt+h+4gRoZHrtSAHLa3+H+6VzVN9ouQL5Bis1V9mtxzZGMS140M07d9WDjkpS D8sfBJXUJWAWcfq0bVGHmp23dmUM+/dtObWHQpPHCjnC0gPTfTvH3xQ1daZEPpbj StnQCKl3iTZ1ccqyOhBtSFD/yulK50JEITk40LCG6wBflYZlKgCT4XZtXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGhkyZjFvvMnC96Z+I/Dj4v8o1aMB8GA1UdIwQY MBaAFLss8e0QXFwdxSe80PFJ/pRJ69MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMt NzUxYzc0ZTY3ZDM4LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMtNzUxYzc0ZTY3ZDM4 LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdUJWieP AW7ZAWzh6qVm6/yh9rLcFwfhm4R/N2b7xDuVP++DX/LOYB1NhLLz6z6zaXADS5kW G0QBc9FxoUNsnLulnjUSABEL/HzVLdnojtxNtU7TQstx655XcXWnEemKIrL724rS yjFZYrUu7H+RsaF272b8GSshLhw7AA/0aOEzRmUMreGC+tN8qfM6C1a3QvsdyQC4 k8tnMHDOC0SPkZ+ExSpAA9IS5fRQUhPjwMA/wDsj4ojq77kElKJ8nUMO7VUM1mWC 6maivuOePvSXJfPFuN51dHR91i0CLDZSZv6jqYDtiQA7DnRBEjzXfGxkVB8JJ9qD 4xkOuBBdKU8uNQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:09 2025 by rpki-client