This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json) Hash identifier: L5bzz3eBGPeXN67WZHNB1NqtcZham5Q2DaZ1/1iYFrs= Subject key identifier: E6:7F:05:9E:78:90:8D:CD:1A:7A:54:66:90:02:A8:85:27:9D:59:1A Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Certificate serial: 019AF31CCB221F1F81D46AE3B44D933164EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft Manifest number: 0C6E Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: LDE3K11wAKlpqcEJ8z+pDRw9W6umM/haxlGC2Dsa8PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cb:22:1f:1f:81:d4:6a:e3:b4:4d:93:31:64:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=e67f059e78908dcd1a7a54669002a885279d591a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:f5:4d:98:13:a8:d4:08:0b:a6:3f:f2:6e: 4c:f9:20:2b:bb:de:16:c4:4b:a1:b1:fb:38:f8:3f: 75:e1:8a:6b:f4:3d:84:f8:58:00:e2:d0:ea:75:79: c4:df:28:70:0d:29:93:94:7d:b9:e6:70:5f:ab:c3: 7d:49:ed:c3:f7:c1:b8:9f:83:a7:31:b5:bd:5c:41: 22:bb:47:91:62:a0:3e:db:2e:49:35:96:dd:2a:13: c1:f3:73:a3:7e:14:4a:a4:8c:38:3d:e3:87:2a:5b: c4:bd:3a:41:3d:d2:a7:f1:ea:89:b3:a0:a9:56:d7: 3c:11:b0:54:7e:bb:22:68:c9:a9:da:31:9e:3d:c0: 47:1e:d5:05:40:05:61:7d:55:2c:97:9e:27:74:17: f0:4f:a1:d4:d7:bd:da:18:fc:c3:8d:58:e1:db:b5: e0:0b:58:98:33:81:e6:81:09:a4:25:f5:4c:f6:35: 3d:67:44:7f:51:19:38:86:af:12:49:c0:35:1e:41: 82:2a:d5:48:a8:b1:a4:a7:15:37:ee:58:13:fe:f6: 73:af:29:32:c8:11:da:de:fb:1c:f7:e4:da:73:42: d5:6e:56:d9:8f:78:84:d5:40:81:f6:77:0a:f8:18: 76:13:ed:f2:d9:63:b8:a2:c9:3f:b4:57:a9:44:46: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7F:05:9E:78:90:8D:CD:1A:7A:54:66:90:02:A8:85:27:9D:59:1A X509v3 Authority Key Identifier: keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3a:c9:e0:77:12:26:77:56:b6:61:9f:1c:18:15:57:1b:fd: 14:17:65:e7:8f:8d:1b:62:c0:fc:03:40:9c:1e:ba:b2:c4:d0: 3d:37:87:a5:dc:7a:9d:c9:2b:45:a6:82:a4:54:04:82:e3:e2: db:af:e9:77:72:1f:b0:9e:61:ab:f1:b8:1c:93:1e:03:aa:63: 8a:d0:91:33:52:1e:5f:7c:a1:a2:e9:41:81:aa:6a:67:97:1f: aa:80:a4:fe:18:2a:1f:31:bd:a3:a5:4d:74:1d:95:33:49:0c: 81:29:9f:83:85:c7:ac:19:c6:1b:4f:72:ce:ef:ca:1d:2f:e1: 0b:02:17:a8:2b:c5:67:26:76:6e:43:38:78:d4:00:b4:d4:fe: 42:8a:0f:6a:48:df:25:95:3d:f1:47:9b:66:71:41:5e:bd:5c: cf:d3:a8:60:d7:cb:60:28:7f:be:5c:45:01:2d:42:47:c9:6c: 81:49:66:6c:fa:46:d4:af:5d:19:58:58:74:93:27:19:4c:df: 02:04:15:21:37:f0:a9:f3:bf:29:cf:27:8c:c8:5d:eb:0e:81: 0c:68:f9:c2:19:6b:cf:58:27:38:c6:83:2f:ad:69:50:f0:c4: 43:56:42:ba:fb:04:56:cc:ce:dd:e5:74:33:16:b2:40:33:19: f3:7c:e3:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMsiHx+B1GrjtE2TMWTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk OTZiZjkwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EyhlNjdmMDU5ZTc4OTA4ZGNkMWE3YTU0NjY5MDAyYTg4NTI3OWQ1OTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulD1TZgTqNQIC6Y/8m5M+SAru94W xEuhsfs4+D914Ypr9D2E+FgA4tDqdXnE3yhwDSmTlH255nBfq8N9Se3D98G4n4On MbW9XEEiu0eRYqA+2y5JNZbdKhPB83OjfhRKpIw4PeOHKlvEvTpBPdKn8eqJs6Cp Vtc8EbBUfrsiaMmp2jGePcBHHtUFQAVhfVUsl54ndBfwT6HU173aGPzDjVjh27Xg C1iYM4HmgQmkJfVM9jU9Z0R/URk4hq8SScA1HkGCKtVIqLGkpxU37lgT/vZzryky yBHa3vsc9+Tac0LVblbZj3iE1UCB9ncK+Bh2E+3y2WO4osk/tFepREZgUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ/BZ54kI3NGnpUZpACqIUnnVkaMB8GA1UdIwQY MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzrJ4HcS JndWtmGfHBgVVxv9FBdl54+NG2LA/ANAnB66ssTQPTeHpdx6nckrRaaCpFQEguPi 26/pd3IfsJ5hq/G4HJMeA6pjitCRM1IeX3yhoulBgapqZ5cfqoCk/hgqHzG9o6VN dB2VM0kMgSmfg4XHrBnGG09yzu/KHS/hCwIXqCvFZyZ2bkM4eNQAtNT+QooPakjf JZU98UebZnFBXr1cz9OoYNfLYCh/vlxFAS1CR8lsgUlmbPpG1K9dGVhYdJMnGUzf AgQVITfwqfO/Kc8njMhd6w6BDGj5whlrz1gnOMaDL61pUPDEQ1ZCuvsEVszO3eV0 MxayQDMZ83zjKA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:15 2025 by rpki-client