This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft File: uVZnsVy6fKp0FSdIRHOE--A7iTo.mft (raw, json) Hash identifier: p43PpxFqnBJKJOlyEvuNzPXef9JD90+b0JFmovDXW8s= Subject key identifier: 7E:85:38:7E:14:B7:16:D6:7F:F1:00:8E:BC:32:35:8C:FB:6D:92:8F Authority key identifier: B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A Certificate issuer: /CN=b95667b15cba7caa74152748447384fbe03b893a Certificate serial: 019AF31CC2E63855EA6D99B96C126455C17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft Manifest number: 0A13 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: uVZnsVy6fKp0FSdIRHOE--A7iTo.crl (hash: MzsJ0YuokfDDR+X0rZVazoYKY826EzWE4BLwH94zt8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c2:e6:38:55:ea:6d:99:b9:6c:12:64:55:c1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b95667b15cba7caa74152748447384fbe03b893a Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=7e85387e14b716d67ff1008ebc32358cfb6d928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:3e:7c:a3:0e:78:2a:7f:1a:e6:9c:b7:2f: 19:3f:4f:3b:b8:57:1d:fd:fc:f3:53:13:79:4d:e2: 34:b6:89:08:22:ba:f9:35:1e:63:5b:6d:bf:82:15: 6d:ff:ba:3c:81:82:eb:90:72:f4:ad:16:f7:30:f3: 74:71:29:72:26:96:b6:91:59:c6:37:29:7c:3f:26: d1:98:78:6d:16:93:02:4b:d8:ba:d3:fb:0e:ac:15: f5:ad:f8:c9:7e:95:1d:08:d3:60:56:0a:a2:38:10: d5:66:7e:c4:41:67:0b:a1:1d:cf:7e:8a:5d:5a:22: b2:54:62:f4:13:ff:c3:90:d8:f0:30:ba:f2:86:28: 38:b2:b8:a4:6f:ac:19:1e:25:3a:62:6f:8f:8d:14: c1:bd:26:3e:db:79:9c:d6:ce:96:bc:c2:96:64:df: 1f:93:5c:52:a8:52:fb:c9:70:9f:c9:50:f2:b1:ea: ae:f7:bd:00:cf:74:0b:ce:83:66:77:6b:a9:8e:d3: 15:9c:7a:54:9e:f0:0e:17:ab:69:85:b7:2f:b1:7a: d3:60:d8:a3:6d:40:e0:ad:61:ee:55:b3:6d:86:f0: 45:33:32:ab:1d:81:76:48:f0:b9:8f:ff:be:9e:7e: a8:e1:80:3c:25:ae:78:ee:6e:61:60:72:56:b6:dd: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:85:38:7E:14:B7:16:D6:7F:F1:00:8E:BC:32:35:8C:FB:6D:92:8F X509v3 Authority Key Identifier: keyid:B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1a:75:ff:3c:19:60:28:3c:30:9c:21:ae:df:9b:99:79:8b: f1:c0:3a:5d:12:f3:f5:37:80:84:13:00:83:5a:1e:8e:fe:e7: d9:6d:0f:bc:7b:6e:66:84:40:b6:62:7d:92:96:cb:53:2f:da: b4:3e:ed:6c:c6:fe:b7:ed:a3:af:cc:64:20:77:2b:f4:0c:b4: 93:b6:65:08:9b:8a:e1:98:c8:f9:71:d7:9d:e0:97:29:f4:cd: d9:65:33:17:ed:36:4d:8c:48:c5:50:cd:48:75:58:43:df:9e: 83:78:82:bc:32:42:31:95:3b:8a:82:dd:2b:a1:0b:52:8c:d1: 55:d7:48:3e:56:f6:e1:67:08:bc:18:a3:07:2a:ab:a4:a1:bb: 73:dc:96:f9:cc:46:a5:1a:77:f0:98:90:be:81:9e:70:3d:9d: da:84:12:9a:46:1c:b8:0e:ed:4f:24:c2:a4:37:65:d2:c1:2e: b1:31:5e:b8:c7:d9:7a:0f:31:7c:15:76:a5:02:03:e6:f2:ea: a3:40:ef:a3:a3:3b:69:7a:ea:80:62:90:4a:bf:af:b5:21:34: 10:f7:7d:42:ab:4b:6a:54:cb:d8:8c:47:1a:17:4a:ee:57:1d: 11:c4:7a:32:3c:fd:40:08:fc:28:29:f4:3c:95:09:fa:51:ff: a5:c8:f6:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMLmOFXqbZm5bBJkVcF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NTY2N2IxNWNiYTdjYWE3NDE1Mjc0ODQ0NzM4NGZiZTAz Yjg5M2EwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD Eyg3ZTg1Mzg3ZTE0YjcxNmQ2N2ZmMTAwOGViYzMyMzU4Y2ZiNmQ5MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuA+fKMOeCp/Guacty8ZP087uFcd /fzzUxN5TeI0tokIIrr5NR5jW22/ghVt/7o8gYLrkHL0rRb3MPN0cSlyJpa2kVnG Nyl8PybRmHhtFpMCS9i60/sOrBX1rfjJfpUdCNNgVgqiOBDVZn7EQWcLoR3Pfopd WiKyVGL0E//DkNjwMLryhig4srikb6wZHiU6Ym+PjRTBvSY+23mc1s6WvMKWZN8f k1xSqFL7yXCfyVDysequ970Az3QLzoNmd2upjtMVnHpUnvAOF6tphbcvsXrTYNij bUDgrWHuVbNthvBFMzKrHYF2SPC5j/++nn6o4YA8Ja547m5hYHJWtt2GFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6FOH4UtxbWf/EAjrwyNYz7bZKPMB8GA1UdIwQY MBaAFLlWZ7FcunyqdBUnSERzhPvgO4k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NDBjMDMtYmE4My00OTcxLTg5ODEt NzQ0ZGNkMDE0ZmE0LzEvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NDBjMDMtYmE4My00OTcxLTg5ODEtNzQ0ZGNkMDE0ZmE0 LzEvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxp1/zwZ YCg8MJwhrt+bmXmL8cA6XRLz9TeAhBMAg1oejv7n2W0PvHtuZoRAtmJ9kpbLUy/a tD7tbMb+t+2jr8xkIHcr9Ay0k7ZlCJuK4ZjI+XHXneCXKfTN2WUzF+02TYxIxVDN SHVYQ9+eg3iCvDJCMZU7ioLdK6ELUozRVddIPlb24WcIvBijByqrpKG7c9yW+cxG pRp38JiQvoGecD2d2oQSmkYcuA7tTyTCpDdl0sEusTFeuMfZeg8xfBV2pQID5vLq o0Dvo6M7aXrqgGKQSr+vtSE0EPd9QqtLalTL2IxHGhdK7lcdEcR6Mjz9QAj8KCn0 PJUJ+lH/pcj2yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:04 2025 by rpki-client