This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json) Hash identifier: SLyrJ+5N1X8YT7IUM1i1nf7lXMwHQQBgdEYKyP2juFo= Subject key identifier: C9:C9:93:F8:12:92:8D:D6:90:5E:24:AA:3B:A9:0C:CD:EE:18:70:13 Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47 Certificate serial: 019B2B8B353716ED55905F5BF3DE451EA29A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft Manifest number: 1481 Signing time: Wed 17 Dec 2025 09:01:41 +0000 Manifest this update: Wed 17 Dec 2025 09:01:41 +0000 Manifest next update: Thu 18 Dec 2025 09:01:41 +0000 Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: MwCP94qx20E116UXSdQd3RC964KpeWvhqUCMGkm8uOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:35:37:16:ed:55:90:5f:5b:f3:de:45:1e:a2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47 Validity Not Before: Dec 17 09:01:41 2025 GMT Not After : Dec 18 09:01:41 2025 GMT Subject: CN=c9c993f812928dd6905e24aa3ba90ccdee187013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f4:77:2f:a4:07:bd:7e:8e:02:29:f0:af:b5: d5:b4:d0:bc:4e:99:69:94:af:ae:50:c8:f0:17:fe: 9b:a2:dd:d5:60:fe:e8:93:ab:a3:fe:d7:18:7f:d0: 80:42:3f:ef:38:78:a6:bf:3e:34:f8:7c:df:ac:c5: 0b:7e:60:5b:02:f8:38:09:4d:12:60:11:5a:64:3f: 99:46:fc:a6:41:5d:64:90:d2:7d:7c:f7:c0:4a:01: db:2c:d1:a9:b1:62:9f:12:fc:34:e7:6b:43:d6:43: cc:2a:1e:59:76:89:ad:47:5a:c8:05:fa:66:63:e5: 52:96:02:20:d2:93:e8:44:65:0d:3f:ac:a7:01:2e: 72:37:18:6f:a2:56:e6:39:15:21:33:89:28:8d:59: d2:2e:26:ed:f9:19:1d:8e:23:6b:5d:c5:2c:e8:80: b8:b7:ee:5d:a1:85:cf:57:95:e4:29:01:fa:4b:a9: c6:bf:86:49:b6:5e:ef:7a:da:9a:02:de:19:f6:b7: 44:06:8f:fe:cd:f7:dd:91:90:3f:a0:6a:5f:a3:68: c2:f1:2c:67:cd:36:c5:3c:71:15:ff:d3:08:f2:90: 10:34:9a:3f:58:55:67:9d:40:5f:7b:93:a6:fe:9f: f9:4f:0e:6c:2a:7e:e9:5d:0a:60:27:f2:f0:d9:09: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:93:F8:12:92:8D:D6:90:5E:24:AA:3B:A9:0C:CD:EE:18:70:13 X509v3 Authority Key Identifier: keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ba:bc:d9:2b:af:49:2f:bb:87:74:ea:00:78:e0:7c:57:6e: 08:fe:ef:6a:30:dc:fb:60:37:a0:8d:54:dd:91:ce:ce:f1:f4: 2b:fc:bb:68:1c:b8:38:77:6d:69:a6:0d:ab:95:f3:43:45:cd: 7d:80:cb:ee:b5:0a:57:b6:3f:f1:b5:4a:ac:73:3b:da:76:8a: ca:7d:0a:33:fc:65:18:8d:b3:d9:e5:d1:5c:a7:b9:0b:35:29: 3e:dd:cb:19:7a:c4:a2:7e:02:9a:d3:79:32:1e:27:a7:8f:d6: 56:0d:04:70:bc:88:3d:17:4a:41:11:5d:12:03:25:d6:12:e9: 23:76:84:6e:3c:32:a4:ca:10:fd:7c:1f:e4:d3:ac:14:d7:cf: 51:83:58:81:60:46:d4:02:4d:84:fe:ab:b4:a5:39:53:ef:0c: 04:d3:be:bb:cc:07:96:ae:41:31:a0:55:ce:18:f7:6f:08:87: dd:f5:b8:86:50:52:67:29:c3:2c:cc:a9:1e:4c:10:9a:41:9d: 05:16:67:1d:c7:56:41:4a:76:6e:90:93:e9:fe:56:fb:1f:7f: cf:08:8b:ad:58:32:81:4f:6c:f4:c3:45:e3:d0:4a:9e:73:52: f6:04:8c:96:34:97:52:f3:ce:9e:20:99:d0:15:87:01:f3:65: b3:aa:f8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrizU3Fu1VkF9b895FHqKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDkwN2NlZTRmYWM1MGYzNzUzNjIyYWQyMWE5ODlhZTc3 NDFjNDcwHhcNMjUxMjE3MDkwMTQxWhcNMjUxMjE4MDkwMTQxWjAzMTEwLwYDVQQD EyhjOWM5OTNmODEyOTI4ZGQ2OTA1ZTI0YWEzYmE5MGNjZGVlMTg3MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vR3L6QHvX6OAinwr7XVtNC8Tplp lK+uUMjwF/6bot3VYP7ok6uj/tcYf9CAQj/vOHimvz40+HzfrMULfmBbAvg4CU0S YBFaZD+ZRvymQV1kkNJ9fPfASgHbLNGpsWKfEvw052tD1kPMKh5ZdomtR1rIBfpm Y+VSlgIg0pPoRGUNP6ynAS5yNxhvolbmORUhM4kojVnSLibt+RkdjiNrXcUs6IC4 t+5doYXPV5XkKQH6S6nGv4ZJtl7vetqaAt4Z9rdEBo/+zffdkZA/oGpfo2jC8Sxn zTbFPHEV/9MI8pAQNJo/WFVnnUBfe5Om/p/5Tw5sKn7pXQpgJ/Lw2QmZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnJk/gSko3WkF4kqjupDM3uGHATMB8GA1UdIwQY MBaAFLkJB87k+sUPN1NiKtIamJrndBxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQt NTk5NmNhZTlkMTE1LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQtNTk5NmNhZTlkMTE1 LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7q82Suv SS+7h3TqAHjgfFduCP7vajDc+2A3oI1U3ZHOzvH0K/y7aBy4OHdtaaYNq5XzQ0XN fYDL7rUKV7Y/8bVKrHM72naKyn0KM/xlGI2z2eXRXKe5CzUpPt3LGXrEon4CmtN5 Mh4np4/WVg0EcLyIPRdKQRFdEgMl1hLpI3aEbjwypMoQ/Xwf5NOsFNfPUYNYgWBG 1AJNhP6rtKU5U+8MBNO+u8wHlq5BMaBVzhj3bwiH3fW4hlBSZynDLMypHkwQmkGd BRZnHcdWQUp2bpCT6f5W+x9/zwiLrVgygU9s9MNF49BKnnNS9gSMljSXUvPOniCZ 0BWHAfNls6r4OQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:26:50 2025 by rpki-client