This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json) Hash identifier: tTWEWX5xyW/jNxiMGGPHxXecYPm/1QteYl3+5kywzps= Subject key identifier: FC:D9:12:33:22:7C:A2:30:32:C6:C1:47:DC:D3:C2:F8:BC:67:64:71 Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b Certificate serial: 019AF19AAEB525B54B26AEFAB3E96CE22D10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft Manifest number: 131C Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: +eMdFwDNSVAgF9Su4L+7lH9MPuFR/hpS9T9WlnEruSI=) 2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:b5:25:b5:4b:26:ae:fa:b3:e9:6c:e2:2d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=fcd91233227ca23032c6c147dcd3c2f8bc676471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:4d:70:f0:8e:3c:98:d0:d9:13:2e:ba:f0: ae:58:ed:57:ba:a1:84:de:d8:6d:83:e6:cf:5c:5d: 5c:90:06:42:fd:8c:a5:be:57:50:78:2c:f8:1d:bc: ea:53:e1:c4:9f:b2:14:94:9e:9f:eb:74:32:37:f9: 25:ed:0e:ea:12:94:85:52:a5:46:d8:2a:95:bd:cc: 72:71:39:a6:e5:49:fd:6f:74:bb:09:5f:e9:eb:69: 77:dc:ce:37:9e:53:a9:0d:78:8b:8f:c9:d8:69:9c: bd:a7:49:08:e7:05:20:a6:c3:75:41:71:9f:5a:d3: 16:ff:76:1e:d7:85:25:ac:84:a8:93:ff:d1:d1:68: 80:51:75:7a:59:04:d2:9f:f8:c5:a4:d1:ec:0c:a2: 82:c1:f6:7e:6c:9c:42:36:f4:47:01:39:9b:cf:ca: 06:3b:98:fe:27:aa:63:a9:8e:2c:11:b9:d2:5b:16: 03:63:3f:10:7d:2e:9e:f5:75:a2:f4:b1:3e:b0:66: e4:b1:45:43:91:bd:61:87:fb:b9:2f:c2:b8:82:80: 40:b0:9d:0c:42:29:a9:bc:d4:67:a6:dd:92:35:5c: a3:7d:19:a9:1b:2d:d1:55:42:bd:3c:51:e7:75:db: ca:2a:9f:5b:ae:c0:9d:d6:cc:59:6f:64:ac:5d:09: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D9:12:33:22:7C:A2:30:32:C6:C1:47:DC:D3:C2:F8:BC:67:64:71 X509v3 Authority Key Identifier: keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:70:6d:76:d6:2c:35:72:89:e4:35:41:77:6f:82:8f:67:03: 02:5f:83:02:fc:2d:fa:8b:e0:b3:65:0c:35:95:34:12:44:06: 5b:54:37:5e:25:b9:4f:3b:e4:2e:b7:c8:af:19:fa:97:a9:e1: 47:41:d7:d2:dd:b4:20:f1:85:69:5c:3d:24:b0:2c:7a:cf:aa: f0:d3:17:4b:16:b8:c2:39:a2:fe:7d:71:b0:c3:b8:97:57:da: 5a:ab:ce:cc:93:0d:c3:43:c5:81:13:32:c3:ca:4c:bb:3d:68: 6b:81:02:d5:d5:8b:0f:11:b1:8c:fe:29:81:8a:0b:3b:d4:ca: f1:0c:ba:ab:a8:d0:26:23:a7:e6:b2:3b:2e:68:2d:27:0d:c9: ca:7c:49:9a:38:43:1b:4b:64:5c:4f:ce:a1:02:c7:c9:d8:8e: 01:04:27:3d:e7:a7:5c:9f:d8:68:26:8a:a4:07:83:b4:b3:f3: 98:20:a8:ee:b1:22:6d:8a:22:da:30:aa:c9:6c:b2:16:56:e4: 5b:b3:64:12:c0:cf:b7:c9:f7:a2:bf:86:10:8c:c0:c2:0e:6e: 96:e1:33:d8:0d:df:b8:e2:86:f9:a4:cd:34:11:1f:19:1c:99: 65:4d:52:79:65:96:ea:ab:5a:24:5d:80:a2:10:22:17:94:e2: 6b:d6:3a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq61JbVLJq76s+ls4i0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj NGRkNGIwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhmY2Q5MTIzMzIyN2NhMjMwMzJjNmMxNDdkY2QzYzJmOGJjNjc2NDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRhNcPCOPJjQ2RMuuvCuWO1XuqGE 3thtg+bPXF1ckAZC/YylvldQeCz4HbzqU+HEn7IUlJ6f63QyN/kl7Q7qEpSFUqVG 2CqVvcxycTmm5Un9b3S7CV/p62l33M43nlOpDXiLj8nYaZy9p0kI5wUgpsN1QXGf WtMW/3Ye14UlrISok//R0WiAUXV6WQTSn/jFpNHsDKKCwfZ+bJxCNvRHATmbz8oG O5j+J6pjqY4sEbnSWxYDYz8QfS6e9XWi9LE+sGbksUVDkb1hh/u5L8K4goBAsJ0M QimpvNRnpt2SNVyjfRmpGy3RVUK9PFHnddvKKp9brsCd1sxZb2SsXQnFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzZEjMifKIwMsbBR9zTwvi8Z2RxMB8GA1UdIwQY MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt ZWVkMWQwOTY3MDc4LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4 LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanBtdtYs NXKJ5DVBd2+Cj2cDAl+DAvwt+ovgs2UMNZU0EkQGW1Q3XiW5TzvkLrfIrxn6l6nh R0HX0t20IPGFaVw9JLAses+q8NMXSxa4wjmi/n1xsMO4l1faWqvOzJMNw0PFgRMy w8pMuz1oa4EC1dWLDxGxjP4pgYoLO9TK8Qy6q6jQJiOn5rI7LmgtJw3JynxJmjhD G0tkXE/OoQLHydiOAQQnPeenXJ/YaCaKpAeDtLPzmCCo7rEibYoi2jCqyWyyFlbk W7NkEsDPt8n3or+GEIzAwg5uluEz2A3fuOKG+aTNNBEfGRyZZU1SeWWW6qtaJF2A ohAiF5Tia9Y6bg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:17 2025 by rpki-client