This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json) Hash identifier: PTL+Zl5fUuLtocFpwV9blPqTMQpAQS7vhAELOmn84kU= Subject key identifier: 0B:E0:AE:52:CF:21:C8:70:BD:EC:02:C3:5D:13:4E:82:3F:6C:F3:2A Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC Certificate issuer: /CN=b84b63058658a59ecbbf44395bf16f780dc929cc Certificate serial: 019AF389FACAC8F35446B36DB03D61625568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:37 +0000 Manifest this update: Sat 06 Dec 2025 12:01:37 +0000 Manifest next update: Sun 07 Dec 2025 12:01:37 +0000 Files and hashes: 1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: jDerY74EeFJusBUvueQcOOglTY16EtbEqXRbltu8LsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fa:ca:c8:f3:54:46:b3:6d:b0:3d:61:62:55:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc Validity Not Before: Dec 6 12:01:37 2025 GMT Not After : Dec 7 12:01:37 2025 GMT Subject: CN=0be0ae52cf21c870bdec02c35d134e823f6cf32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:3a:ca:f9:bc:9f:43:7e:b8:da:6b:7f:78: a5:75:45:79:14:e3:3a:55:b7:43:2e:5a:f8:83:60: 67:6c:b1:9a:57:f4:f7:25:2b:40:f9:f1:e4:d9:41: 13:d3:73:32:26:a1:5c:50:b2:d6:69:02:6b:d7:d9: 30:5b:50:4b:24:29:97:49:e2:76:ea:66:a7:a1:9a: 94:ec:e5:e8:70:36:85:a0:aa:a8:e2:2e:72:f7:90: a1:c9:6f:67:33:7b:bd:9d:2f:35:ef:2e:ce:a0:54: 2b:88:87:28:9b:d9:60:a7:0c:e0:5a:9a:54:6b:56: 51:f5:1e:2b:40:22:4c:7a:fe:4f:9c:72:c9:d5:a2: ff:35:93:ec:cd:c4:af:44:e2:93:f4:ed:51:c1:17: 0a:20:d1:00:67:a4:c7:50:74:06:e7:c6:28:06:6b: ad:b4:5a:2b:cd:2e:d7:14:00:cb:0a:2e:55:fb:87: 49:de:7c:b8:8a:32:81:72:90:1a:85:ff:96:4c:88: 3c:80:36:50:49:42:f2:bc:e5:84:1a:81:2b:15:3a: 34:6c:f9:75:9e:f5:44:85:38:8e:cc:ab:a9:9c:4f: da:b9:24:c7:e3:52:55:99:bc:57:34:42:a7:e7:c1: 22:98:7f:d5:b1:26:3e:22:34:c9:e5:d2:8b:eb:96: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E0:AE:52:CF:21:C8:70:BD:EC:02:C3:5D:13:4E:82:3F:6C:F3:2A X509v3 Authority Key Identifier: keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c8:58:27:17:89:88:34:c5:45:ad:8f:a2:44:7c:c7:80:38: 14:c9:ac:72:40:4f:3c:13:c3:a9:35:30:91:32:58:89:c3:7b: 82:6a:b7:5d:51:ec:98:dd:00:4e:7e:1d:90:4b:d2:29:93:e5: 9b:02:43:6a:6d:1a:22:35:f6:71:ad:a3:eb:e3:ad:7d:88:45: 69:01:3d:9c:0a:10:fc:58:1f:ce:2e:6a:96:50:a6:3d:90:41: 0d:4a:08:c1:f2:53:fb:61:ec:f5:d8:74:ac:20:42:cb:18:54: 6f:89:ff:b6:15:19:36:3b:1e:36:e0:72:30:66:23:75:9c:47: af:7c:8c:93:92:50:57:9a:2a:10:1e:70:98:e6:68:a9:9e:93: d0:cc:b9:b7:eb:ec:0c:e7:b5:d9:66:2d:9a:be:e6:7e:9e:de: fb:ab:ca:f3:3a:c8:1a:6f:6e:f9:a7:d7:fa:2a:57:4f:40:70: b9:0b:e3:83:50:c2:27:cb:18:34:53:73:9f:c3:69:07:26:f5: 49:ab:04:02:51:03:01:70:af:a0:9f:24:c7:8c:53:d1:90:2d: d8:d8:bd:fd:21:1e:3a:37:01:f8:a7:5c:d8:bd:2d:fe:ad:2d: 6c:b7:76:24:30:5f:d8:ee:68:be:d7:ad:66:7b:78:43:d2:93: fe:7f:f5:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifrKyPNURrNtsD1hYlVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NGI2MzA1ODY1OGE1OWVjYmJmNDQzOTViZjE2Zjc4MGRj OTI5Y2MwHhcNMjUxMjA2MTIwMTM3WhcNMjUxMjA3MTIwMTM3WjAzMTEwLwYDVQQD EygwYmUwYWU1MmNmMjFjODcwYmRlYzAyYzM1ZDEzNGU4MjNmNmNmMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMY6yvm8n0N+uNprf3ildUV5FOM6 VbdDLlr4g2BnbLGaV/T3JStA+fHk2UET03MyJqFcULLWaQJr19kwW1BLJCmXSeJ2 6manoZqU7OXocDaFoKqo4i5y95ChyW9nM3u9nS817y7OoFQriIcom9lgpwzgWppU a1ZR9R4rQCJMev5PnHLJ1aL/NZPszcSvROKT9O1RwRcKINEAZ6THUHQG58YoBmut tForzS7XFADLCi5V+4dJ3ny4ijKBcpAahf+WTIg8gDZQSULyvOWEGoErFTo0bPl1 nvVEhTiOzKupnE/auSTH41JVmbxXNEKn58EimH/VsSY+IjTJ5dKL65YJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvgrlLPIchwvewCw10TToI/bPMqMB8GA1UdIwQY MBaAFLhLYwWGWKWey79EOVvxb3gNySnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQt YTEzNWNiNTU5NzU4LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQtYTEzNWNiNTU5NzU4 LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIshYJxeJ iDTFRa2PokR8x4A4FMmsckBPPBPDqTUwkTJYicN7gmq3XVHsmN0ATn4dkEvSKZPl mwJDam0aIjX2ca2j6+OtfYhFaQE9nAoQ/Fgfzi5qllCmPZBBDUoIwfJT+2Hs9dh0 rCBCyxhUb4n/thUZNjseNuByMGYjdZxHr3yMk5JQV5oqEB5wmOZoqZ6T0My5t+vs DOe12WYtmr7mfp7e+6vK8zrIGm9u+afX+ipXT0BwuQvjg1DCJ8sYNFNzn8NpByb1 SasEAlEDAXCvoJ8kx4xT0ZAt2Ni9/SEeOjcB+Kdc2L0t/q0tbLd2JDBf2O5ovtet Znt4Q9KT/n/11w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:22 2025 by rpki-client