This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json) Hash identifier: r7AS9WmCezIhJVI3695Ek5PymdNKx4UooOmjBnK32ro= Subject key identifier: E4:71:C2:55:D6:C1:50:47:99:6A:A8:AD:EF:A2:E0:64:D1:D2:A7:F0 Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Certificate serial: 019AF27710E9562A9C30BD0019AEF2308D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft Manifest number: 1649 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: T3sUE65SIZfo+xmulubAg9BF3v0lyI1aRWaeXQqXD6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:e9:56:2a:9c:30:bd:00:19:ae:f2:30:8d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=e471c255d6c15047996aa8adefa2e064d1d2a7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:a1:c3:0c:44:56:c1:91:9e:ae:7e:13:28: 8a:8f:8d:91:cb:9c:32:37:87:11:03:3e:40:1f:10: 2a:3e:02:fa:a2:50:e8:39:ab:bd:19:f7:30:be:c7: bf:8d:09:17:57:79:73:47:ab:79:71:61:85:af:40: ba:e1:3b:46:46:5b:4a:85:5e:24:eb:92:38:d7:63: ad:8f:15:31:ff:84:db:79:f8:22:af:ab:49:32:47: ea:4b:5c:1e:83:9d:68:5a:26:eb:dd:66:c3:6e:ad: 37:2c:4d:1a:9c:3f:4c:f5:e4:16:17:6e:c2:f6:12: 5f:cf:1a:61:91:fb:ff:3b:38:ab:ea:15:7e:ae:21: dc:e6:f9:96:17:cf:90:54:84:36:58:7e:dc:57:77: 18:bc:cd:02:5e:1e:42:55:4f:19:37:5e:e7:e2:b3: 42:08:0a:af:f5:10:24:82:45:d2:45:f4:ba:1c:69: 9b:1f:73:9e:90:62:18:9a:d1:25:0a:dd:2c:96:72: a4:c0:63:95:a1:df:f8:c1:0b:c5:ed:d3:af:06:88: 6b:e1:b0:76:58:c7:fa:7a:8a:a9:29:9e:f5:f1:52: 7f:a6:be:71:6c:9a:a9:5b:62:48:79:dd:4e:92:6c: 17:60:6f:69:15:04:c7:98:f5:e0:38:3e:57:fa:7d: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:C2:55:D6:C1:50:47:99:6A:A8:AD:EF:A2:E0:64:D1:D2:A7:F0 X509v3 Authority Key Identifier: keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:43:62:7b:b6:31:2a:eb:8d:ce:30:fb:e0:0e:31:f0:b9: a6:7b:16:bf:0b:85:9b:99:62:80:e4:ed:07:54:b0:9b:ba:a4: 20:ee:1f:bb:00:15:1b:58:ee:69:77:df:7c:29:42:09:a4:93: 3a:9a:0e:c6:0c:78:64:8a:bd:95:32:ef:fe:48:1a:35:21:fd: 1f:c8:a9:ca:18:54:3d:2a:c3:8a:a2:04:18:5d:22:3f:f9:23: f3:13:78:82:bd:b7:c7:5b:1d:ea:e8:e0:2f:36:fd:91:44:ed: 75:83:15:69:fc:c6:4d:44:d1:a6:e7:65:c0:51:41:8b:73:40: dc:fb:13:b7:3e:6d:a7:35:8b:f8:f6:6b:5d:af:04:cc:62:0b: c3:2b:5d:2b:2f:52:d3:24:9a:ce:9a:91:bb:89:94:09:ef:e2: 56:f6:08:63:13:c5:e6:9f:7e:70:d1:73:48:04:cd:d3:0e:8c: 50:28:6a:03:cf:bb:9c:7c:1d:7a:9a:03:6b:1c:69:ac:32:8d: e9:8b:4b:6a:36:ba:0f:ee:4f:7a:cd:09:c4:1b:72:7c:cf:dd: 76:5f:62:0c:c2:00:a8:e3:66:ae:bb:ee:21:71:6c:6d:f2:85: 3b:94:74:d8:f5:e3:bb:6f:40:19:14:7c:ed:50:02:cb:49:05: 1e:41:9f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxDpViqcML0AGa7yMI1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGIyMmQyMjgwYTE3ZDBkNTRjNjg2YzliNDMzZjBiNWI1 ODAyNGYwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhlNDcxYzI1NWQ2YzE1MDQ3OTk2YWE4YWRlZmEyZTA2NGQxZDJhN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRihwwxEVsGRnq5+EyiKj42Ry5wy N4cRAz5AHxAqPgL6olDoOau9Gfcwvse/jQkXV3lzR6t5cWGFr0C64TtGRltKhV4k 65I412OtjxUx/4Tbefgir6tJMkfqS1weg51oWibr3WbDbq03LE0anD9M9eQWF27C 9hJfzxphkfv/Ozir6hV+riHc5vmWF8+QVIQ2WH7cV3cYvM0CXh5CVU8ZN17n4rNC CAqv9RAkgkXSRfS6HGmbH3OekGIYmtElCt0slnKkwGOVod/4wQvF7dOvBohr4bB2 WMf6eoqpKZ718VJ/pr5xbJqpW2JIed1OkmwXYG9pFQTHmPXgOD5X+n2FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORxwlXWwVBHmWqore+i4GTR0qfwMB8GA1UdIwQY MBaAFLpLItIoChfQ1UxobJtDPwtbWAJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2Ut MWU4ZDJmMzBjZjBkLzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2UtMWU4ZDJmMzBjZjBk LzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOdDYnu2 MSrrjc4w++AOMfC5pnsWvwuFm5ligOTtB1Swm7qkIO4fuwAVG1juaXfffClCCaST OpoOxgx4ZIq9lTLv/kgaNSH9H8ipyhhUPSrDiqIEGF0iP/kj8xN4gr23x1sd6ujg Lzb9kUTtdYMVafzGTUTRpudlwFFBi3NA3PsTtz5tpzWL+PZrXa8EzGILwytdKy9S 0ySazpqRu4mUCe/iVvYIYxPF5p9+cNFzSATN0w6MUChqA8+7nHwdepoDaxxprDKN 6YtLaja6D+5Pes0JxBtyfM/ddl9iDMIAqONmrrvuIXFsbfKFO5R02PXju29AGRR8 7VACy0kFHkGfnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:17 2025 by rpki-client