This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft File: uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft (raw, json) Hash identifier: Xw70nXQAZM02VvxO4dEEGHpXYdWlVS5FrhJfDR5iIhI= Subject key identifier: 2A:E2:6F:8A:AE:12:D7:82:0D:31:63:35:8F:F1:F4:76:BA:5E:0F:5C Authority key identifier: BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B Certificate issuer: /CN=ba268a6f131f23d67af831126523930bfee80f1b Certificate serial: 019AF19A94226F4851F4C0CB14477F2E9752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft Manifest number: 9E Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl (hash: b2AUiGvstaFTdxcRX0mDcXXPZQ4+qeYUsHiESeKaxJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:22:6f:48:51:f4:c0:cb:14:47:7f:2e:97:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba268a6f131f23d67af831126523930bfee80f1b Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=2ae26f8aae12d7820d3163358ff1f476ba5e0f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:25:da:d6:95:97:50:f2:56:54:56:c3:2b: 1e:10:2d:03:83:85:68:a3:25:12:f3:b5:9d:46:9e: ee:b7:83:86:19:f4:95:1c:d3:c7:fa:0a:f2:80:01: ee:d0:27:16:ac:f9:49:81:dd:63:9a:fd:37:c6:84: 22:84:2a:b8:4c:a4:03:7d:f7:30:1c:95:d4:c6:10: 22:e1:d8:c6:14:d1:7a:95:04:f4:db:27:02:ed:16: 6e:cf:a2:45:37:80:11:7c:38:df:03:98:d2:65:f9: 24:44:7b:9a:7e:66:28:70:b8:cc:76:82:5a:73:68: 32:a4:4b:00:68:3b:96:fb:9f:bc:8b:00:ef:6a:0a: d3:7c:d0:55:5c:de:1d:42:6a:de:ea:44:eb:c2:5e: dd:99:7b:e8:f8:10:87:c9:8e:2c:97:2d:22:34:e0: 18:56:ec:73:79:be:7f:59:e9:47:9f:be:3b:4a:9b: 8e:e2:79:97:8f:10:af:1c:e0:b6:00:a9:f4:19:88: 35:19:d7:c0:74:7d:83:3a:82:8f:5d:0c:2c:ff:a9: 5e:c6:e2:c2:5b:70:fe:55:52:33:c8:07:2d:67:ff: 3c:44:8b:b6:c5:b3:cb:13:65:20:b1:b5:a1:9c:8a: 35:b2:c9:f0:08:52:30:94:ea:3f:fe:74:d7:2b:db: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:6F:8A:AE:12:D7:82:0D:31:63:35:8F:F1:F4:76:BA:5E:0F:5C X509v3 Authority Key Identifier: keyid:BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fb:f7:6b:4b:08:04:f6:c0:e6:d0:b0:f8:f7:de:fa:5d:37: 13:95:cd:93:7e:b8:7c:1d:d4:d3:1f:71:b9:fa:9c:6d:99:f6: 68:ee:7b:87:eb:af:62:3a:3a:bf:60:9f:c1:c3:e7:30:e5:25: 7e:b4:3b:bd:b7:75:ac:ae:b4:5e:e1:0b:c2:61:d5:0a:86:12: c8:8e:e7:2d:f9:25:32:28:e2:0f:7f:18:e6:c7:a3:54:06:37: 5e:35:a9:55:6c:3d:2f:19:9d:9b:35:fd:08:31:9e:be:f1:cd: 3b:c1:24:00:70:6b:0c:72:3c:2a:31:d8:50:f0:61:f2:7f:32: 24:58:31:a5:90:1b:4f:a3:a2:d3:22:d9:d2:24:8b:ce:7a:9b: 85:ba:36:5c:55:71:9b:2f:80:f0:92:c1:ff:63:72:f0:e6:dd: 59:50:da:f3:3e:0d:54:52:fb:45:39:ff:e3:cf:cc:3d:26:6e: 42:54:e7:c8:18:bd:ba:40:da:44:f9:5a:c4:14:ce:b9:85:69: 5d:26:b8:33:fa:eb:02:4c:9e:8f:86:be:35:10:49:d5:4f:e8: 66:ff:45:2b:0d:7d:3e:a2:c7:96:d3:22:4d:b7:af:ae:3e:9a: b2:54:20:da:79:04:6e:ca:42:4c:b2:3b:fb:bd:a2:fe:66:95: 66:08:36:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpQib0hR9MDLFEd/LpdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjY4YTZmMTMxZjIzZDY3YWY4MzExMjY1MjM5MzBiZmVl ODBmMWIwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EygyYWUyNmY4YWFlMTJkNzgyMGQzMTYzMzU4ZmYxZjQ3NmJhNWUwZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Ml2taVl1DyVlRWwyseEC0Dg4Vo oyUS87WdRp7ut4OGGfSVHNPH+grygAHu0CcWrPlJgd1jmv03xoQihCq4TKQDffcw HJXUxhAi4djGFNF6lQT02ycC7RZuz6JFN4ARfDjfA5jSZfkkRHuafmYocLjMdoJa c2gypEsAaDuW+5+8iwDvagrTfNBVXN4dQmre6kTrwl7dmXvo+BCHyY4sly0iNOAY Vuxzeb5/WelHn747SpuO4nmXjxCvHOC2AKn0GYg1GdfAdH2DOoKPXQws/6lexuLC W3D+VVIzyActZ/88RIu2xbPLE2UgsbWhnIo1ssnwCFIwlOo//nTXK9veDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrib4quEteCDTFjNY/x9Ha6Xg9cMB8GA1UdIwQY MBaAFLomim8THyPWevgxEmUjkwv+6A8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hYzBlNzEtMmIxOS00ODUzLWFlNmMt MTU5Y2VhZDc3Mjc1LzEvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9hYzBlNzEtMmIxOS00ODUzLWFlNmMtMTU5Y2VhZDc3Mjc1 LzEvdWlhS2J4TWZJOVo2LURFU1pTT1RDXzdvRHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfv3a0sI BPbA5tCw+Pfe+l03E5XNk364fB3U0x9xufqcbZn2aO57h+uvYjo6v2CfwcPnMOUl frQ7vbd1rK60XuELwmHVCoYSyI7nLfklMijiD38Y5sejVAY3XjWpVWw9LxmdmzX9 CDGevvHNO8EkAHBrDHI8KjHYUPBh8n8yJFgxpZAbT6Oi0yLZ0iSLznqbhbo2XFVx my+A8JLB/2Ny8ObdWVDa8z4NVFL7RTn/48/MPSZuQlTnyBi9ukDaRPlaxBTOuYVp XSa4M/rrAkyej4a+NRBJ1U/oZv9FKw19PqLHltMiTbevrj6aslQg2nkEbspCTLI7 +72i/maVZgg2tw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:14 2025 by rpki-client