This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft File: uQs3yxdghhgU8CzzVJfuVlMwZEw.mft (raw, json) Hash identifier: Fw7/J1VnY3p4yQBvvFIrunqkAEx/Gzovx9F9BSQ+yPE= Subject key identifier: 89:D2:23:9D:AA:5B:61:04:14:82:43:EB:19:E7:FE:27:6D:4A:EE:36 Authority key identifier: B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C Certificate issuer: /CN=b90b37cb1760861814f02cf35497ee565330644c Certificate serial: 019AF0F5D7A02D473A10137F3B5B6A4CB4CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft Manifest number: 35 Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: uQs3yxdghhgU8CzzVJfuVlMwZEw.crl (hash: Q1NtrD4M8dARFpWKalHRd247Ei2fEryT5F8BF3EXtfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d7:a0:2d:47:3a:10:13:7f:3b:5b:6a:4c:b4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90b37cb1760861814f02cf35497ee565330644c Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=89d2239daa5b6104148243eb19e7fe276d4aee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:ac:75:fb:bf:f4:75:6d:20:bf:ec:1f:03: 55:04:cb:df:c8:0f:8a:f4:94:bd:5a:28:d0:2c:0c: 5a:02:0b:01:12:aa:e8:27:67:62:a2:b7:76:5a:bd: dc:e9:ca:d8:b1:d3:d1:5b:c3:dd:0c:ef:fe:7e:dd: 6f:b4:42:74:11:01:be:51:e2:17:31:dc:e1:0d:c6: 69:f0:f6:c8:af:a2:8d:03:93:68:fe:ed:7d:45:81: f9:5d:8f:85:d0:3e:bf:ae:b9:1d:f6:e2:5b:e5:0a: be:b3:04:e7:e1:01:91:ff:46:7f:45:33:b3:e9:34: 0a:58:c1:4d:ba:c1:59:46:e2:47:ca:fb:9a:dc:ba: f0:47:1d:6d:cc:07:61:e3:73:65:d9:4d:96:1f:8b: 1a:cc:56:37:a8:01:43:16:55:aa:e2:4f:2f:e4:77: 6f:78:f5:58:28:cf:9c:e0:a2:f9:ed:6b:c9:6f:be: 72:00:9f:30:8a:e5:2d:4e:48:a2:ee:d7:68:67:ab: 8d:5b:d8:55:bc:50:81:9f:50:86:d5:fe:51:47:8c: ff:88:9c:f1:80:c6:c2:9c:00:8f:6a:36:85:e0:e1: 4c:0c:12:6e:d1:0b:f8:4d:97:72:d0:f3:09:fb:cf: fb:c8:55:13:ef:b2:a6:5f:eb:3e:cc:20:22:be:6f: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:23:9D:AA:5B:61:04:14:82:43:EB:19:E7:FE:27:6D:4A:EE:36 X509v3 Authority Key Identifier: keyid:B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:78:13:b0:53:43:38:15:32:d3:4a:fc:5d:40:1f:cd:4c:d2: 56:d4:eb:e0:df:15:7e:f2:96:10:67:38:01:4a:92:85:3a:58: e2:59:ed:9a:bc:d2:c4:2d:c4:f5:f5:d5:af:d5:99:42:8e:a1: d3:fd:c7:91:c7:25:5e:c8:07:e7:bb:6c:14:bf:49:62:48:9b: 1b:90:32:dc:ab:c6:e1:28:df:41:6d:26:b4:c0:a5:4c:88:40: 1f:e7:69:99:a4:79:37:9f:b2:27:4e:45:0a:f8:9b:34:6a:c9: cf:82:f7:10:75:f8:7a:8b:77:aa:f7:18:e2:9b:8a:79:45:62: 9c:7a:8f:06:5c:65:94:81:83:4c:61:c3:ca:ad:c9:6f:e9:eb: 45:ed:ed:81:6d:86:fa:f7:0d:56:bd:73:53:49:9a:99:a9:3e: e7:c6:04:b3:7a:f1:15:e1:e2:b4:d5:3f:18:ea:f2:b9:4a:d1: cc:8b:2b:15:3f:09:d0:d4:9f:a0:18:6b:76:46:0b:49:dc:9c: 55:e5:3a:cb:52:96:07:e5:a6:ad:83:47:90:7c:e8:3b:51:08: 67:fd:37:46:70:c8:71:ba:a7:e5:94:9c:8e:d8:7d:bb:53:bc: d3:ee:eb:de:54:54:8e:45:fc:96:b0:c1:3a:cd:bb:7a:c2:92: 31:37:ad:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9degLUc6EBN/O1tqTLTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGIzN2NiMTc2MDg2MTgxNGYwMmNmMzU0OTdlZTU2NTMz MDY0NGMwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD Eyg4OWQyMjM5ZGFhNWI2MTA0MTQ4MjQzZWIxOWU3ZmUyNzZkNGFlZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJWsdfu/9HVtIL/sHwNVBMvfyA+K 9JS9WijQLAxaAgsBEqroJ2diord2Wr3c6crYsdPRW8PdDO/+ft1vtEJ0EQG+UeIX MdzhDcZp8PbIr6KNA5No/u19RYH5XY+F0D6/rrkd9uJb5Qq+swTn4QGR/0Z/RTOz 6TQKWMFNusFZRuJHyvua3LrwRx1tzAdh43Nl2U2WH4sazFY3qAFDFlWq4k8v5Hdv ePVYKM+c4KL57WvJb75yAJ8wiuUtTkii7tdoZ6uNW9hVvFCBn1CG1f5RR4z/iJzx gMbCnACPajaF4OFMDBJu0Qv4TZdy0PMJ+8/7yFUT77KmX+s+zCAivm9y7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInSI52qW2EEFIJD6xnn/idtSu42MB8GA1UdIwQY MBaAFLkLN8sXYIYYFPAs81SX7lZTMGRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDhhZmMtZmExOC00MDM4LWIwNzIt MGIxY2RiMzViZjkwLzEvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDhhZmMtZmExOC00MDM4LWIwNzItMGIxY2RiMzViZjkw LzEvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHgTsFND OBUy00r8XUAfzUzSVtTr4N8VfvKWEGc4AUqShTpY4lntmrzSxC3E9fXVr9WZQo6h 0/3HkcclXsgH57tsFL9JYkibG5Ay3KvG4SjfQW0mtMClTIhAH+dpmaR5N5+yJ05F CvibNGrJz4L3EHX4eot3qvcY4puKeUVinHqPBlxllIGDTGHDyq3Jb+nrRe3tgW2G +vcNVr1zU0mamak+58YEs3rxFeHitNU/GOryuUrRzIsrFT8J0NSfoBhrdkYLSdyc VeU6y1KWB+WmrYNHkHzoO1EIZ/03RnDIcbqn5ZScjth9u1O80+7r3lRUjkX8lrDB Os27esKSMTetRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:31 2025 by rpki-client