This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json) Hash identifier: ndk/plMA4U/IUdjp6HsfUeChNU0bUiBcY0QyFctksB0= Subject key identifier: FE:9A:F3:16:73:D8:DE:AF:E5:3C:3F:89:E4:56:5F:A4:19:AC:40:57 Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Certificate serial: 019AFB4386E26CF0421D267B83C9A9A11A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft Manifest number: 1763 Signing time: Mon 08 Dec 2025 00:01:37 +0000 Manifest this update: Mon 08 Dec 2025 00:01:37 +0000 Manifest next update: Tue 09 Dec 2025 00:01:37 +0000 Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: H24BsH88X3S/UOYNFlfI6wMQPsd08WxzDBYLvcvpkVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:86:e2:6c:f0:42:1d:26:7b:83:c9:a9:a1:1a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Validity Not Before: Dec 8 00:01:37 2025 GMT Not After : Dec 9 00:01:37 2025 GMT Subject: CN=fe9af31673d8deafe53c3f89e4565fa419ac4057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:9c:93:d6:5a:66:36:2e:fd:b0:0d:ad:6f: 63:43:cc:83:e9:35:dd:f7:86:8c:42:5b:ce:77:42: a1:ac:88:21:35:55:5b:d2:5c:ef:2e:97:f6:59:4b: b4:79:3a:60:e2:20:84:a4:f5:12:5c:20:ec:e5:a4: 56:b6:2e:49:70:2b:d4:35:18:19:a9:02:89:e2:20: 15:51:5d:7f:b1:f2:c1:ad:da:0c:9e:8f:ed:ee:d5: e0:91:5b:69:a2:b3:80:64:84:0a:46:6a:82:71:ab: eb:a6:1a:a2:78:3d:9a:5d:76:d8:7d:42:31:2a:fe: 40:aa:47:f3:30:85:63:1c:54:75:3a:3b:38:53:4f: 5c:73:c7:79:cc:36:8e:ce:0a:6d:f4:03:dd:22:87: 3c:57:fd:a4:ab:9f:38:50:e8:97:29:85:b8:16:09: c9:83:18:88:1a:0e:46:1d:aa:93:1f:9c:c6:07:06: 29:7e:2e:c5:0f:ad:23:5d:88:a3:44:04:d1:6d:85: 61:49:ba:50:33:f2:d7:93:85:c1:da:a3:db:25:0f: 33:13:e0:6e:8f:82:1c:53:80:40:e5:df:12:2f:c6: fb:99:65:56:d9:fb:b0:e4:47:0b:1f:3c:ae:72:75: 7a:83:7f:bd:b4:0b:6f:8c:3b:ce:7b:33:7b:4b:51: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:F3:16:73:D8:DE:AF:E5:3C:3F:89:E4:56:5F:A4:19:AC:40:57 X509v3 Authority Key Identifier: keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:62:54:aa:6f:5d:96:54:c0:0e:09:9c:24:f8:e1:b3:1b:27: 39:08:0d:04:ac:d9:57:61:e4:c9:84:9d:c6:ab:70:f1:8f:55: 82:bf:29:93:fd:14:3c:22:6c:8c:ba:14:f6:29:2f:fc:81:c2: b1:c6:0f:b9:41:7a:01:b5:4f:b5:66:63:dd:1c:09:de:b0:5f: f2:ac:7a:ab:9e:2c:8c:81:88:50:43:14:59:c8:b9:b9:86:46: 36:11:13:f7:bb:51:f0:f5:eb:53:b9:63:01:3b:6d:15:e1:2f: 09:af:5a:d8:25:e6:8a:1a:1d:8d:5e:bd:ce:e3:7f:10:67:08: 25:de:fe:c4:53:d7:d8:89:85:26:4e:76:1f:c9:51:7c:9c:10: e5:92:9b:de:be:b4:99:c8:13:e4:28:bc:38:16:11:78:97:e0: 90:85:f0:6f:80:4e:a2:17:aa:72:3f:42:ce:bd:9a:43:d8:88: e1:f8:ed:09:ee:86:42:9d:af:f6:b0:20:8e:21:46:78:34:a2: e2:11:0a:0b:29:2f:54:43:e8:55:33:c6:17:d2:75:43:42:6f: 6d:16:c8:d4:5c:a5:b4:07:5d:c0:f4:f6:93:5e:47:d1:93:a7: 68:39:02:82:dd:54:1e:19:10:33:84:dc:e0:59:5e:1b:a3:d9: 9f:de:7d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Q4bibPBCHSZ7g8mpoRpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh NGJkOTcwHhcNMjUxMjA4MDAwMTM3WhcNMjUxMjA5MDAwMTM3WjAzMTEwLwYDVQQD EyhmZTlhZjMxNjczZDhkZWFmZTUzYzNmODllNDU2NWZhNDE5YWM0MDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vqck9ZaZjYu/bANrW9jQ8yD6TXd 94aMQlvOd0KhrIghNVVb0lzvLpf2WUu0eTpg4iCEpPUSXCDs5aRWti5JcCvUNRgZ qQKJ4iAVUV1/sfLBrdoMno/t7tXgkVtporOAZIQKRmqCcavrphqieD2aXXbYfUIx Kv5AqkfzMIVjHFR1Ojs4U09cc8d5zDaOzgpt9APdIoc8V/2kq584UOiXKYW4FgnJ gxiIGg5GHaqTH5zGBwYpfi7FD60jXYijRATRbYVhSbpQM/LXk4XB2qPbJQ8zE+Bu j4IcU4BA5d8SL8b7mWVW2fuw5EcLHzyucnV6g3+9tAtvjDvOezN7S1FhnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6a8xZz2N6v5Tw/ieRWX6QZrEBXMB8GA1UdIwQY MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2 LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGJUqm9d llTADgmcJPjhsxsnOQgNBKzZV2HkyYSdxqtw8Y9Vgr8pk/0UPCJsjLoU9ikv/IHC scYPuUF6AbVPtWZj3RwJ3rBf8qx6q54sjIGIUEMUWci5uYZGNhET97tR8PXrU7lj ATttFeEvCa9a2CXmihodjV69zuN/EGcIJd7+xFPX2ImFJk52H8lRfJwQ5ZKb3r60 mcgT5Ci8OBYReJfgkIXwb4BOoheqcj9Czr2aQ9iI4fjtCe6GQp2v9rAgjiFGeDSi 4hEKCykvVEPoVTPGF9J1Q0JvbRbI1FyltAddwPT2k15H0ZOnaDkCgt1UHhkQM4Tc 4FleG6PZn9599g== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:21 2025 by rpki-client