This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json) Hash identifier: wsYmR2bg+xM47XKkRH3uLFlZryicTQyvL4WgYHht+nY= Subject key identifier: FD:29:5C:E4:83:19:70:9D:48:43:77:41:68:FB:F5:EF:A7:9A:D7:0B Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Certificate serial: 019B31561E36EDFF52375BFB1288CF679DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 12:01:25 +0000 Manifest this update: Thu 18 Dec 2025 12:01:25 +0000 Manifest next update: Fri 19 Dec 2025 12:01:25 +0000 Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: QtvUOQaQzjqnri7nUjwOQrmwXDn1/uEpO97+0cvRKw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:1e:36:ed:ff:52:37:5b:fb:12:88:cf:67:9d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Validity Not Before: Dec 18 12:01:25 2025 GMT Not After : Dec 19 12:01:25 2025 GMT Subject: CN=fd295ce48319709d4843774168fbf5efa79ad70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:72:e7:e7:0c:28:de:85:46:e9:8b:99:67: 2d:bd:85:6b:89:29:a9:12:57:90:63:2b:d4:7a:00: c9:1d:2d:95:a1:0b:58:ca:8a:5b:b0:a9:b9:c7:b1: 72:20:89:15:58:63:15:39:7a:3f:f9:d2:9b:57:1d: df:03:57:d2:b2:d6:56:11:d9:11:bf:59:35:b2:72: f6:72:a3:68:2c:75:da:7d:87:c6:89:e5:92:09:0f: af:f3:7b:f7:a6:94:a8:11:be:22:fc:31:19:bc:aa: c6:64:c3:8d:57:78:27:ca:3d:1a:af:0f:73:f2:11: 99:60:a1:41:de:49:38:99:de:8f:2d:af:95:c9:b9: c2:83:85:22:75:9b:44:f1:e1:76:09:5c:92:a3:10: ff:02:43:6a:de:5d:55:31:5b:8b:29:4f:ec:75:6b: 47:00:2d:d0:bf:80:cb:c0:fc:4c:eb:af:7d:c3:ca: 32:c0:ba:16:a2:7d:b2:52:86:07:b1:e7:6c:42:cd: 1e:32:06:19:4e:7e:a6:82:42:12:ac:1a:2d:1c:61: 6c:02:3c:6d:dc:3b:63:2c:9d:ff:5d:33:c0:55:22: 87:9b:ba:59:ce:6a:74:0c:05:45:44:de:3a:7f:59: e8:93:61:95:7a:f1:41:d4:6a:67:96:d3:cb:7f:42: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:5C:E4:83:19:70:9D:48:43:77:41:68:FB:F5:EF:A7:9A:D7:0B X509v3 Authority Key Identifier: keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:41:79:a2:03:b3:8e:dc:3d:f9:09:4c:76:69:d8:7f:00:6f: f5:d7:e3:6d:aa:9f:5e:81:46:39:e6:6c:31:7e:77:3e:67:55: 5e:af:06:96:1e:8d:15:f4:98:89:46:bb:18:9e:cb:82:4d:1f: 3c:e6:74:43:ef:b9:e5:64:c5:57:8c:74:f0:01:96:f4:4f:e3: 59:62:9a:15:d1:83:94:3c:87:0c:26:8e:6b:66:bf:60:ad:04: 8e:1c:18:af:c5:cf:d4:a2:4c:29:0e:dc:07:7c:cd:c9:f5:42: 9d:95:ad:3b:4e:e8:32:0b:d1:b8:69:38:58:53:c1:c7:d8:be: 4a:df:83:49:a0:5a:c2:31:5f:5d:1d:64:1f:12:c0:17:2d:8e: cb:bc:bd:7f:4d:52:45:03:7c:ef:1c:0c:56:27:79:f7:3c:a1: 79:02:38:93:81:5f:af:9a:1b:a6:1a:21:16:c8:d5:67:28:cb: a2:7f:5f:46:49:4e:0f:2a:b5:23:31:49:bd:90:b9:e1:c7:6e: 31:c0:f6:b3:2e:56:80:ef:e7:71:95:98:50:0e:f9:3b:62:cc: 1b:ad:d5:67:4a:1c:07:9c:c2:dd:39:c4:28:f8:d4:0e:4c:0b: 32:9d:11:b4:1f:a6:a3:99:04:5f:df:92:69:cb:12:4b:bd:36: e1:3b:76:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVh427f9SN1v7EojPZ530MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh NGJkOTcwHhcNMjUxMjE4MTIwMTI1WhcNMjUxMjE5MTIwMTI1WjAzMTEwLwYDVQQD EyhmZDI5NWNlNDgzMTk3MDlkNDg0Mzc3NDE2OGZiZjVlZmE3OWFkNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeRy5+cMKN6FRumLmWctvYVriSmp EleQYyvUegDJHS2VoQtYyopbsKm5x7FyIIkVWGMVOXo/+dKbVx3fA1fSstZWEdkR v1k1snL2cqNoLHXafYfGieWSCQ+v83v3ppSoEb4i/DEZvKrGZMONV3gnyj0arw9z 8hGZYKFB3kk4md6PLa+VybnCg4UidZtE8eF2CVySoxD/AkNq3l1VMVuLKU/sdWtH AC3Qv4DLwPxM6699w8oywLoWon2yUoYHsedsQs0eMgYZTn6mgkISrBotHGFsAjxt 3DtjLJ3/XTPAVSKHm7pZzmp0DAVFRN46f1nok2GVevFB1GpnltPLf0IwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0pXOSDGXCdSEN3QWj79e+nmtcLMB8GA1UdIwQY MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2 LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUF5ogOz jtw9+QlMdmnYfwBv9dfjbaqfXoFGOeZsMX53PmdVXq8Glh6NFfSYiUa7GJ7Lgk0f POZ0Q++55WTFV4x08AGW9E/jWWKaFdGDlDyHDCaOa2a/YK0EjhwYr8XP1KJMKQ7c B3zNyfVCnZWtO07oMgvRuGk4WFPBx9i+St+DSaBawjFfXR1kHxLAFy2Oy7y9f01S RQN87xwMVid59zyheQI4k4Ffr5obphohFsjVZyjLon9fRklODyq1IzFJvZC54cdu McD2sy5WgO/ncZWYUA75O2LMG63VZ0ocB5zC3TnEKPjUDkwLMp0RtB+mo5kEX9+S acsSS7024Tt2KQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:09:44 2025 by rpki-client