This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json) Hash identifier: xIio3Q4W3x9TTOBVHX24PxZ4SsqdA+Y1mNjGECCr1nI= Subject key identifier: C3:DD:7A:21:70:BC:92:6A:AB:17:2D:4A:34:B8:6F:FB:0B:DC:E5:A6 Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a Certificate serial: 019AF509CA174D8E851FF033263CA12001B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft Manifest number: 098B Signing time: Sat 06 Dec 2025 19:00:50 +0000 Manifest this update: Sat 06 Dec 2025 19:00:50 +0000 Manifest next update: Sun 07 Dec 2025 19:00:50 +0000 Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: B8CEPZ1OWUikYnoEWgJKQc/QSJrhNlgsB3SL5TR9jyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ca:17:4d:8e:85:1f:f0:33:26:3c:a1:20:01:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a Validity Not Before: Dec 6 19:00:50 2025 GMT Not After : Dec 7 19:00:50 2025 GMT Subject: CN=c3dd7a2170bc926aab172d4a34b86ffb0bdce5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:0b:63:06:b1:40:94:ff:26:40:99:e7:65: e1:50:7a:b6:0b:b5:ce:01:23:c9:ff:e3:fc:34:31: b3:f9:4a:eb:46:71:33:9d:17:73:d6:ea:1f:43:7c: c1:d3:65:63:53:e2:9b:1e:66:77:80:b9:cc:e8:09: b9:4c:9e:b7:78:c9:2e:ef:ee:96:e1:bf:00:53:1f: 64:09:b9:23:cf:9f:ca:49:81:2c:67:3e:13:4a:45: 1a:e8:64:8b:c9:07:11:a0:23:86:bb:18:37:8c:31: 98:4d:35:59:c3:fc:4f:47:ac:f7:fe:54:ff:fc:c5: 76:9c:e3:f2:42:e7:a3:79:a5:cd:80:87:b2:b7:e7: 25:e9:25:87:42:40:6b:d1:c5:6f:4f:65:70:f6:4a: 74:89:6d:8d:21:55:0e:5b:f2:47:79:3d:27:45:b8: 29:dd:9a:8c:34:5f:78:cd:75:7f:5c:50:60:c8:b1: 8f:68:6e:f1:f7:4a:8d:7b:0e:33:90:63:67:63:da: cc:b2:f3:08:77:61:a7:d5:fb:aa:de:63:b2:0d:54: 83:9c:4d:22:da:92:bb:82:de:dc:74:75:74:31:1d: 08:2e:3d:48:b0:b7:80:da:a6:ab:04:d3:9c:59:d5: c1:8d:ac:8a:c6:c5:83:09:fa:e7:e5:82:68:e7:30: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:7A:21:70:BC:92:6A:AB:17:2D:4A:34:B8:6F:FB:0B:DC:E5:A6 X509v3 Authority Key Identifier: keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:af:a8:4b:09:05:d8:56:3c:14:80:9c:48:0e:ea:37:d5:57: d0:74:12:ad:59:b6:c1:8a:b8:7a:6a:bd:f2:b5:6e:ed:c8:07: 07:b1:65:84:0f:0d:44:9e:f5:1b:7b:4b:4d:70:05:bb:9c:bf: 03:33:98:c1:68:b7:af:05:55:37:92:76:ef:0e:67:ae:e6:2f: cd:3a:32:7a:75:b5:d4:de:58:de:bf:ca:39:2d:02:d5:eb:cd: c8:5f:2d:9b:ec:d3:b1:4c:2a:16:30:03:92:e3:dc:4b:18:4c: 99:2e:28:e8:a9:88:6e:75:76:f7:bd:94:ca:0b:67:33:bf:02: 7c:1a:86:cd:02:8a:25:0f:dd:b1:d6:72:1f:ef:85:ef:50:57: 02:fa:70:1f:4a:54:85:94:59:64:bb:2e:73:a4:3e:b2:83:ad: bd:86:0d:f6:e9:6b:e6:75:be:6b:44:0a:b0:25:38:36:e6:c2: 15:2f:52:8a:2d:e2:40:36:92:c4:3d:82:0c:ca:67:10:0d:db: 68:e3:78:ae:a4:5a:f4:6e:f9:fe:a0:5b:a8:40:bc:51:59:5f: ba:8d:94:a1:a9:b4:fd:9e:a1:40:f5:4e:0b:d3:a9:f1:4c:70: 00:ac:35:b5:89:cf:ce:8b:58:e0:de:98:cd:d7:19:6c:cc:b9: 2c:cd:75:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcoXTY6FH/AzJjyhIAG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWEyOTc3OGJlYjI4MDAxODI5NGUyMzk1Y2JmYTAwNDJj OGY3OGEwHhcNMjUxMjA2MTkwMDUwWhcNMjUxMjA3MTkwMDUwWjAzMTEwLwYDVQQD EyhjM2RkN2EyMTcwYmM5MjZhYWIxNzJkNGEzNGI4NmZmYjBiZGNlNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrcLYwaxQJT/JkCZ52XhUHq2C7XO ASPJ/+P8NDGz+UrrRnEznRdz1uofQ3zB02VjU+KbHmZ3gLnM6Am5TJ63eMku7+6W 4b8AUx9kCbkjz5/KSYEsZz4TSkUa6GSLyQcRoCOGuxg3jDGYTTVZw/xPR6z3/lT/ /MV2nOPyQuejeaXNgIeyt+cl6SWHQkBr0cVvT2Vw9kp0iW2NIVUOW/JHeT0nRbgp 3ZqMNF94zXV/XFBgyLGPaG7x90qNew4zkGNnY9rMsvMId2Gn1fuq3mOyDVSDnE0i 2pK7gt7cdHV0MR0ILj1IsLeA2qarBNOcWdXBjayKxsWDCfrn5YJo5zDzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPdeiFwvJJqqxctSjS4b/sL3OWmMB8GA1UdIwQY MBaAFFLqKXeL6ygAGClOI5XL+gBCyPeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUt OWY5OTYxZGMzODUxLzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUtOWY5OTYxZGMzODUx LzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq+oSwkF 2FY8FICcSA7qN9VX0HQSrVm2wYq4emq98rVu7cgHB7FlhA8NRJ71G3tLTXAFu5y/ AzOYwWi3rwVVN5J27w5nruYvzToyenW11N5Y3r/KOS0C1evNyF8tm+zTsUwqFjAD kuPcSxhMmS4o6KmIbnV2972UygtnM78CfBqGzQKKJQ/dsdZyH++F71BXAvpwH0pU hZRZZLsuc6Q+soOtvYYN9ulr5nW+a0QKsCU4NubCFS9Sii3iQDaSxD2CDMpnEA3b aON4rqRa9G75/qBbqEC8UVlfuo2Uoam0/Z6hQPVOC9Op8UxwAKw1tYnPzotY4N6Y zdcZbMy5LM113Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:06 2025 by rpki-client