This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json) Hash identifier: LbC/x2d4NCiNxcDgGE+NhijrYwlh7+PnyYNjQB+LKR4= Subject key identifier: EC:34:51:12:7C:71:BB:A1:0B:35:29:2D:6A:1A:77:52:33:23:26:C6 Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Certificate serial: 019B3DC7828712A0148B63A84CCB330B0035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft Manifest number: 1670 Signing time: Sat 20 Dec 2025 22:00:43 +0000 Manifest this update: Sat 20 Dec 2025 22:00:43 +0000 Manifest next update: Sun 21 Dec 2025 22:00:43 +0000 Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: KODsri2/ZNKRtWSuKZXDBqv9OKe7q0DqWOBV5pecNP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:82:87:12:a0:14:8b:63:a8:4c:cb:33:0b:00:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Validity Not Before: Dec 20 22:00:43 2025 GMT Not After : Dec 21 22:00:43 2025 GMT Subject: CN=ec3451127c71bba10b35292d6a1a7752332326c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:f4:3d:69:58:ad:5c:69:73:cb:c4:9b:d7: 89:96:8d:40:0d:8f:b0:70:17:b3:a4:1c:58:8c:3d: 3c:e9:17:fd:89:6d:e7:e5:8c:05:84:fc:ce:91:b8: 2e:51:ad:61:76:f5:e9:eb:8f:99:a1:8e:01:72:88: c7:78:79:98:0d:26:8b:49:42:da:90:90:46:db:4c: ab:61:05:0d:be:89:0c:46:d7:7e:5f:ff:a8:70:0a: 7a:78:2b:2b:37:aa:01:f6:d9:d9:53:f9:ea:0a:fe: c1:08:c5:4d:44:e6:37:2f:5e:84:05:3e:70:f7:59: c3:db:fd:03:09:d5:08:c6:d4:4c:69:17:b5:36:bb: 3c:5e:ca:63:28:86:35:e7:00:2a:e0:58:3e:ff:63: 3a:4d:fb:13:45:05:49:d3:84:8e:1d:08:61:64:36: f9:bb:5e:20:2c:d1:a6:94:c7:e0:96:69:1d:23:94: 60:fa:46:d2:d2:eb:c9:53:d1:fc:69:2b:f0:aa:d9: 52:ee:90:ed:46:e3:61:f8:41:57:7b:d2:5e:95:7e: ad:2d:d9:c9:1d:f7:09:a9:ef:c3:2c:cb:a6:45:5d: 37:d8:a8:57:bb:86:04:c1:18:07:65:ea:d4:dd:ae: 6a:19:1c:bb:19:4f:c5:6b:79:17:5b:44:a3:0c:6d: d7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:51:12:7C:71:BB:A1:0B:35:29:2D:6A:1A:77:52:33:23:26:C6 X509v3 Authority Key Identifier: keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b4:d8:14:98:11:13:20:54:cf:21:2d:1e:33:4d:a0:22:ce: b6:cc:bc:67:58:f5:be:00:44:75:15:96:26:3b:aa:fb:b1:ca: 78:e3:08:c4:e0:b1:9e:9a:53:36:f5:4c:81:10:45:c7:da:cd: d3:d7:82:c8:b2:2e:46:a1:1f:49:95:4f:ff:67:a3:9d:4b:a7: e2:a3:fe:c0:e5:9f:d1:74:aa:f6:ec:4f:b1:0d:ea:d4:7b:01: 32:35:8d:67:1e:27:49:21:d7:8b:e7:7c:1f:e4:16:53:2b:07: 3f:8d:bc:7d:0e:fb:a0:6d:44:92:82:99:84:ed:78:56:8a:23: 55:17:6a:21:fb:ac:89:49:d0:f9:86:c8:f3:12:ec:dc:72:6b: b5:77:99:3f:3e:a1:11:cc:12:b4:37:61:5f:13:16:f2:b4:b1: b4:34:f2:a3:7e:22:c1:76:ce:d1:d2:3f:06:2c:4f:8f:ef:92: 8c:78:32:78:84:d1:98:7f:13:21:90:de:20:e5:c0:f9:22:5b: ae:b9:67:fc:b4:99:94:dc:31:c7:ce:f4:b4:d3:17:02:55:9d: 48:cb:1e:98:92:48:1f:15:3f:c7:c0:d0:a5:6b:fa:b5:f1:50: 95:e5:7f:a0:7c:6b:e9:e0:45:dd:6b:10:4b:2e:90:44:9a:05: ce:c7:94:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4KHEqAUi2OoTMszCwA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGIyMmQyMjgwYTE3ZDBkNTRjNjg2YzliNDMzZjBiNWI1 ODAyNGYwHhcNMjUxMjIwMjIwMDQzWhcNMjUxMjIxMjIwMDQzWjAzMTEwLwYDVQQD EyhlYzM0NTExMjdjNzFiYmExMGIzNTI5MmQ2YTFhNzc1MjMzMjMyNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sj0PWlYrVxpc8vEm9eJlo1ADY+w cBezpBxYjD086Rf9iW3n5YwFhPzOkbguUa1hdvXp64+ZoY4BcojHeHmYDSaLSULa kJBG20yrYQUNvokMRtd+X/+ocAp6eCsrN6oB9tnZU/nqCv7BCMVNROY3L16EBT5w 91nD2/0DCdUIxtRMaRe1Nrs8XspjKIY15wAq4Fg+/2M6TfsTRQVJ04SOHQhhZDb5 u14gLNGmlMfglmkdI5Rg+kbS0uvJU9H8aSvwqtlS7pDtRuNh+EFXe9JelX6tLdnJ HfcJqe/DLMumRV032KhXu4YEwRgHZerU3a5qGRy7GU/Fa3kXW0SjDG3X0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw0URJ8cbuhCzUpLWoad1IzIybGMB8GA1UdIwQY MBaAFLpLItIoChfQ1UxobJtDPwtbWAJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2Ut MWU4ZDJmMzBjZjBkLzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2UtMWU4ZDJmMzBjZjBk LzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7TYFJgR EyBUzyEtHjNNoCLOtsy8Z1j1vgBEdRWWJjuq+7HKeOMIxOCxnppTNvVMgRBFx9rN 09eCyLIuRqEfSZVP/2ejnUun4qP+wOWf0XSq9uxPsQ3q1HsBMjWNZx4nSSHXi+d8 H+QWUysHP428fQ77oG1EkoKZhO14VoojVRdqIfusiUnQ+YbI8xLs3HJrtXeZPz6h EcwStDdhXxMW8rSxtDTyo34iwXbO0dI/BixPj++SjHgyeITRmH8TIZDeIOXA+SJb rrln/LSZlNwxx870tNMXAlWdSMsemJJIHxU/x8DQpWv6tfFQleV/oHxr6eBF3WsQ Sy6QRJoFzseUVg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:21:42 2025 by rpki-client