This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft File: uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json) Hash identifier: zNu7UftcJSSEMcGv6Z/UxISzWli6MKCoIkdUlq8a6E0= Subject key identifier: 0F:C0:DE:94:0E:3F:58:9F:4C:3B:B5:1C:89:B9:21:4E:E2:62:E5:78 Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50 Certificate issuer: /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50 Certificate serial: 019B28899E92F77B071BBF9FF0AE640C1E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft Manifest number: 0E64 Signing time: Tue 16 Dec 2025 19:01:06 +0000 Manifest this update: Tue 16 Dec 2025 19:01:06 +0000 Manifest next update: Wed 17 Dec 2025 19:01:06 +0000 Files and hashes: 1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=) 2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: 5nn3uES29CPfj/e3B0QHqeYqrMOb7/a8P/sh8H5o5dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:9e:92:f7:7b:07:1b:bf:9f:f0:ae:64:0c:1e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50 Validity Not Before: Dec 16 19:01:06 2025 GMT Not After : Dec 17 19:01:06 2025 GMT Subject: CN=0fc0de940e3f589f4c3bb51c89b9214ee262e578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:82:38:5d:e5:42:48:37:06:48:5c:fe:ef: 08:ea:e5:00:05:63:b4:ee:4e:9e:fb:67:be:29:ac: ec:62:13:f1:a7:ff:fc:64:9b:38:7d:f6:57:0b:20: 28:f8:cf:e3:5a:ff:89:1f:a9:9d:38:fd:1f:1a:6e: b5:47:fd:e9:7d:78:7f:17:e7:ed:32:8f:21:ae:dd: 6e:a5:1b:c8:7f:b4:07:67:37:9b:a6:31:3c:4e:90: 90:f5:2a:5b:3b:e5:45:4e:5c:b1:ad:65:08:e1:c5: 1e:42:8d:62:d3:a4:84:7a:cc:18:b1:74:d3:6d:9f: 77:84:92:b1:66:0b:88:31:e8:30:f4:43:42:4d:76: 11:34:1c:4e:8b:b6:c5:49:b5:07:75:f5:43:01:3e: 1b:a1:43:60:1e:94:15:51:d2:c7:28:6e:78:3a:4f: c5:05:52:b3:57:b8:5d:64:3d:a5:a7:52:67:44:4f: 4a:1f:ad:ab:29:9f:3d:d8:3d:01:af:f7:7b:1f:14: 28:8a:28:00:15:26:d3:61:18:10:c9:5b:13:95:84: 3d:0f:4a:25:a8:d9:87:95:e9:4b:44:72:b9:76:3f: 3f:63:4e:ba:08:eb:58:6a:56:86:cb:e2:c0:0d:3c: 3a:ac:50:59:ea:fc:dd:5e:a6:3d:ac:c2:ce:cb:4c: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:DE:94:0E:3F:58:9F:4C:3B:B5:1C:89:B9:21:4E:E2:62:E5:78 X509v3 Authority Key Identifier: keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:44:84:d2:dd:3a:70:c3:71:04:a5:d3:e1:0f:dd:a5:c4:39: a7:b8:61:83:59:02:17:5b:a7:1d:28:68:f8:50:3e:16:98:0b: db:5a:84:cd:85:a9:bb:78:75:6a:23:63:48:3c:7c:c1:db:3b: 3e:d2:e5:b7:83:a8:22:ee:27:c6:a5:fa:63:d7:d5:01:62:4c: ce:da:06:88:9f:ff:34:22:2e:cb:1a:b3:c2:b7:e8:ac:67:9c: 67:c2:77:6f:71:74:2c:e3:70:bf:48:79:6f:4b:7d:8e:b9:5e: c3:df:c1:07:57:a4:1c:6f:c3:c8:20:3b:c2:ba:06:e5:43:44: da:8a:b7:d8:02:30:96:fb:54:5d:33:f9:11:75:41:83:01:33: 1d:3b:3d:91:d8:54:45:62:0c:4c:36:d4:0d:c6:03:73:75:53: 2f:a8:67:a9:c4:72:b5:17:92:bc:51:5a:c5:3d:8d:fd:9d:7e: 81:67:76:41:26:90:3a:4d:e7:c3:2d:09:b5:3d:68:1a:a5:8d: ee:39:8d:54:d1:37:09:c0:06:bb:b4:37:58:ae:99:07:6d:b2: 71:ba:f5:e3:43:ab:ff:4b:30:7a:69:a5:bb:38:b4:d7:3d:ad: 78:c2:12:e8:00:26:46:f5:07:be:ee:d2:fb:6a:25:a2:c7:21: fc:65:1e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiZ6S93sHG7+f8K5kDB4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm YTdkNTAwHhcNMjUxMjE2MTkwMTA2WhcNMjUxMjE3MTkwMTA2WjAzMTEwLwYDVQQD EygwZmMwZGU5NDBlM2Y1ODlmNGMzYmI1MWM4OWI5MjE0ZWUyNjJlNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwCCOF3lQkg3Bkhc/u8I6uUABWO0 7k6e+2e+KazsYhPxp//8ZJs4ffZXCyAo+M/jWv+JH6mdOP0fGm61R/3pfXh/F+ft Mo8hrt1upRvIf7QHZzebpjE8TpCQ9SpbO+VFTlyxrWUI4cUeQo1i06SEeswYsXTT bZ93hJKxZguIMegw9ENCTXYRNBxOi7bFSbUHdfVDAT4boUNgHpQVUdLHKG54Ok/F BVKzV7hdZD2lp1JnRE9KH62rKZ892D0Br/d7HxQoiigAFSbTYRgQyVsTlYQ9D0ol qNmHlelLRHK5dj8/Y066COtYalaGy+LADTw6rFBZ6vzdXqY9rMLOy0wqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/A3pQOP1ifTDu1HIm5IU7iYuV4MB8GA1UdIwQY MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt OWJjM2U1NmY3YWY3LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3 LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkSE0t06 cMNxBKXT4Q/dpcQ5p7hhg1kCF1unHSho+FA+FpgL21qEzYWpu3h1aiNjSDx8wds7 PtLlt4OoIu4nxqX6Y9fVAWJMztoGiJ//NCIuyxqzwrforGecZ8J3b3F0LONwv0h5 b0t9jrlew9/BB1ekHG/DyCA7wroG5UNE2oq32AIwlvtUXTP5EXVBgwEzHTs9kdhU RWIMTDbUDcYDc3VTL6hnqcRytReSvFFaxT2N/Z1+gWd2QSaQOk3nwy0JtT1oGqWN 7jmNVNE3CcAGu7Q3WK6ZB22ycbr140Or/0swemmluzi01z2teMIS6AAmRvUHvu7S +2olosch/GUekg== -----END CERTIFICATE-----Generated at Wed Dec 17 04:14:43 2025 by rpki-client