This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft File: uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json) Hash identifier: QQy25TeDgiyMGu4mQ5ffdtCPw1hqwljTZoEOCEPTfqk= Subject key identifier: 68:A2:4F:BC:AB:43:C3:91:9F:94:DF:77:7C:71:BD:C2:8F:62:DE:32 Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F Certificate issuer: /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f Certificate serial: 019AF2E447E79985AD7D419D4CD235667656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft Manifest number: 0613 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: dLBHklFr9yFvNQVuriLFFS3IIZa+yiO/LNfmiYMNBUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:47:e7:99:85:ad:7d:41:9d:4c:d2:35:66:76:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=68a24fbcab43c3919f94df777c71bdc28f62de32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:84:85:fd:5a:1a:73:44:10:f2:86:8e:ca: 8c:e4:27:da:6a:c3:85:44:ff:dd:58:19:70:01:76: 22:01:bb:ea:35:91:1e:97:bd:55:6d:d9:cc:ee:80: a2:9b:c7:3a:ad:2b:02:8b:6e:a3:87:ce:8c:bd:cf: e1:7f:dc:94:f3:e3:37:22:36:aa:60:18:28:54:14: 89:f4:74:de:4e:b6:0c:eb:7f:6c:63:ed:84:c8:98: c9:03:d8:3d:9f:72:51:9b:78:36:0e:37:34:5e:5f: 16:90:55:b6:c5:b7:3d:00:ba:ba:7a:28:75:4b:4e: df:e4:19:69:9d:6b:e3:5d:2a:78:45:e4:41:54:c3: 65:92:dd:d1:bc:a4:e5:f3:98:12:9e:9c:3e:5c:d2: a2:ce:87:57:25:b6:a2:97:ef:8b:8a:a4:30:62:c5: e7:5c:ea:c0:43:7c:b7:1e:ed:7f:12:b9:46:5a:e0: 48:61:2e:f5:e9:b1:a9:2b:d6:05:ba:b6:c4:dd:72: 1c:7f:69:cd:80:bc:3f:bb:c9:ba:0b:97:02:a7:4b: 8d:d3:1f:3f:75:0a:15:57:36:68:6c:b1:3d:25:20: e5:8c:b1:18:f4:b6:b4:e0:5e:d3:d0:80:f3:5c:0a: 18:d1:23:ca:3a:c4:0d:61:d3:1d:92:d7:4c:d4:7d: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:4F:BC:AB:43:C3:91:9F:94:DF:77:7C:71:BD:C2:8F:62:DE:32 X509v3 Authority Key Identifier: keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:19:53:bf:9f:36:1a:38:fa:a5:cc:a2:ce:2a:8d:da:ff:07: ff:fa:35:ed:09:72:1c:8d:84:39:2a:36:94:40:10:7c:00:87: 98:68:2e:f4:62:8d:52:91:42:bf:60:59:ca:ad:64:96:f4:1c: 72:25:89:35:e9:e0:0e:e0:15:ea:75:42:49:dd:a4:97:c2:85: eb:8a:e7:7b:7c:95:9d:b2:da:36:6f:86:e4:f8:b2:90:46:4e: 6b:5b:df:40:aa:a4:d1:85:fd:b8:cf:54:95:11:0a:50:dd:be: 26:2f:68:f2:e2:e9:8a:6e:1c:f0:5d:9c:ce:4d:0f:e7:a2:32: ee:d5:66:11:43:f6:64:91:ed:05:02:60:72:57:07:52:95:24: 12:a1:b2:a2:a9:d5:b5:fc:76:87:62:bb:22:1e:d0:85:42:84: 2c:ec:45:71:87:d4:c2:c3:0d:4b:4a:a6:7f:64:69:12:43:3b: 04:1d:3e:36:14:70:85:49:71:22:db:e6:be:af:17:f5:0a:62: 4b:65:84:61:41:a8:20:ab:46:c4:21:60:ef:01:3d:2e:0f:de: 07:44:fc:01:de:8f:28:6a:56:a3:1d:43:96:9f:e9:82:ec:b0: 50:29:61:99:0b:62:2c:93:d8:19:2a:dd:bb:6c:6f:aa:90:c6: 90:04:3a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EfnmYWtfUGdTNI1ZnZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTYzZDgyZTI3ODViN2RiMDA1MjhkYzU1YTcwNjlkYzUx MGE0MmYwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD Eyg2OGEyNGZiY2FiNDNjMzkxOWY5NGRmNzc3YzcxYmRjMjhmNjJkZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTCEhf1aGnNEEPKGjsqM5CfaasOF RP/dWBlwAXYiAbvqNZEel71VbdnM7oCim8c6rSsCi26jh86Mvc/hf9yU8+M3Ijaq YBgoVBSJ9HTeTrYM639sY+2EyJjJA9g9n3JRm3g2Djc0Xl8WkFW2xbc9ALq6eih1 S07f5BlpnWvjXSp4ReRBVMNlkt3RvKTl85gSnpw+XNKizodXJbail++LiqQwYsXn XOrAQ3y3Hu1/ErlGWuBIYS716bGpK9YFurbE3XIcf2nNgLw/u8m6C5cCp0uN0x8/ dQoVVzZobLE9JSDljLEY9La04F7T0IDzXAoY0SPKOsQNYdMdktdM1H2rYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiiT7yrQ8ORn5Tfd3xxvcKPYt4yMB8GA1UdIwQY MBaAFLmmPYLieFt9sAUo3FWnBp3FEKQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84YTA2ZjQtOTg2ZS00NjY5LWJkZjkt OGVlMmY5ZGNiMWVkLzEvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84YTA2ZjQtOTg2ZS00NjY5LWJkZjktOGVlMmY5ZGNiMWVk LzEvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7RlTv582 Gjj6pcyiziqN2v8H//o17QlyHI2EOSo2lEAQfACHmGgu9GKNUpFCv2BZyq1klvQc ciWJNengDuAV6nVCSd2kl8KF64rne3yVnbLaNm+G5PiykEZOa1vfQKqk0YX9uM9U lREKUN2+Ji9o8uLpim4c8F2czk0P56Iy7tVmEUP2ZJHtBQJgclcHUpUkEqGyoqnV tfx2h2K7Ih7QhUKELOxFcYfUwsMNS0qmf2RpEkM7BB0+NhRwhUlxItvmvq8X9Qpi S2WEYUGoIKtGxCFg7wE9Lg/eB0T8Ad6PKGpWox1Dlp/pguywUClhmQtiLJPYGSrd u2xvqpDGkAQ6AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:49:05 2025 by rpki-client