This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json) Hash identifier: OcLkTnYY8al5KEBzV/LMxN6aYwOzarmqHO0/29oj75s= Subject key identifier: 2C:5B:DB:67:91:F5:BC:88:61:A1:27:83:30:D6:46:06:16:01:B4:12 Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8 Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8 Certificate serial: 019AF0BF892C8E5333846DCB04D153E3D62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft Manifest number: 2F Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: klgxt0s0hQLKGRvazZzRlNkZwJ5GSf5gOPD9pGMc7VE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:89:2c:8e:53:33:84:6d:cb:04:d1:53:e3:d6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8 Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=2c5bdb6791f5bc8861a1278330d646061601b412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:c7:fa:4b:2f:9e:d7:09:17:83:1f:76:a6: 7a:35:cd:73:c4:f9:c3:54:f2:2b:1f:c0:a9:c3:71: 3e:0d:a0:8a:57:45:b2:5e:0e:0d:6f:06:09:ba:fa: 77:02:46:e5:75:8c:25:63:d4:68:a3:e4:57:c5:9c: f6:ef:a5:ca:c4:7a:37:ba:cb:be:a6:d1:0d:b5:da: 9d:40:ec:d0:cf:94:31:00:6b:53:a1:9b:6e:3a:3e: e3:ab:a5:da:4d:93:59:01:54:b5:25:02:20:8b:e2: 71:a7:33:59:2a:83:33:32:47:10:b8:20:6e:11:18: e3:7c:c8:a3:05:98:cd:c8:19:2a:53:8f:49:a5:50: 8c:bd:f9:ed:41:cc:6d:a6:75:95:fd:5f:98:4a:55: 72:05:f4:20:6e:7c:37:eb:0c:8c:de:87:1d:c7:5e: 7f:22:19:5f:53:c1:c4:3f:2c:c5:b7:05:99:f1:b7: 1f:52:2e:97:49:96:d6:6c:9a:88:46:48:ae:66:e5: 5d:d7:5a:4e:18:a6:af:ff:db:8e:37:42:ba:b1:f2: a7:9e:75:91:37:0e:04:09:99:b0:ec:57:44:5f:fd: c0:de:f1:a9:f4:87:16:26:c0:94:90:46:bc:8b:50: 0b:c6:95:ca:3c:be:3b:f1:cb:fe:41:99:00:37:7a: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5B:DB:67:91:F5:BC:88:61:A1:27:83:30:D6:46:06:16:01:B4:12 X509v3 Authority Key Identifier: keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:36:fc:8e:3e:51:89:4a:bf:7c:a8:d4:2e:b3:41:bc:c9:06: c8:44:ef:3e:74:d3:c7:7f:e2:cb:98:80:d1:5c:49:3a:c0:2d: 5f:69:28:64:19:f2:46:f6:fa:ae:1e:1b:bd:fa:ad:cc:0f:be: da:73:31:14:1b:4d:e2:2c:af:91:b8:7b:23:f9:1c:41:28:dc: 8d:6d:ac:c3:6b:b6:2c:b4:1a:92:38:96:4d:1a:54:4d:f5:c9: 6e:24:25:24:f0:c7:5c:6b:22:b4:3d:69:8c:73:6e:67:43:bd: f7:43:13:d6:47:9e:49:ae:8d:fe:2f:4b:80:60:3e:5f:69:49: 9a:ef:c0:01:ae:14:61:e5:50:be:05:73:54:d8:ba:4f:10:ee: b2:c5:c4:a4:64:eb:a8:92:f9:ae:87:34:3c:6d:4a:7f:29:99: fc:f0:33:aa:37:55:28:f9:76:f6:42:14:ec:74:66:e2:fb:54: 27:6a:8e:0b:76:2d:58:ce:a0:45:ec:12:8a:71:08:6a:13:ec: bd:80:46:84:db:14:63:db:bf:24:3c:06:70:00:7c:c1:ec:06: 73:7e:65:17:26:9e:c5:cd:11:71:1d:62:32:b9:b2:9a:8b:1e: 14:f2:7c:2e:af:1f:93:cd:d0:5b:21:dc:33:3f:c4:38:b3:b1: 0c:b6:6c:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4ksjlMzhG3LBNFT49YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTkwYTg1NTIyYWE2MzlkNTc4ODJmZmQ5N2RiMWE0ZGQ4 MTEwYjgwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EygyYzViZGI2NzkxZjViYzg4NjFhMTI3ODMzMGQ2NDYwNjE2MDFiNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N3H+ksvntcJF4MfdqZ6Nc1zxPnD VPIrH8Cpw3E+DaCKV0WyXg4NbwYJuvp3AkbldYwlY9Roo+RXxZz276XKxHo3usu+ ptENtdqdQOzQz5QxAGtToZtuOj7jq6XaTZNZAVS1JQIgi+JxpzNZKoMzMkcQuCBu ERjjfMijBZjNyBkqU49JpVCMvfntQcxtpnWV/V+YSlVyBfQgbnw36wyM3ocdx15/ IhlfU8HEPyzFtwWZ8bcfUi6XSZbWbJqIRkiuZuVd11pOGKav/9uON0K6sfKnnnWR Nw4ECZmw7FdEX/3A3vGp9IcWJsCUkEa8i1ALxpXKPL478cv+QZkAN3pc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxb22eR9byIYaEngzDWRgYWAbQSMB8GA1UdIwQY MBaAFLmpCoVSKqY51XiC/9l9saTdgRC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jYjc2MDQtNjVjMC00OTk4LWE4OWMt NTllZmMyYTNiMDRmLzEvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jYjc2MDQtNjVjMC00OTk4LWE4OWMtNTllZmMyYTNiMDRm LzEvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTb8jj5R iUq/fKjULrNBvMkGyETvPnTTx3/iy5iA0VxJOsAtX2koZBnyRvb6rh4bvfqtzA++ 2nMxFBtN4iyvkbh7I/kcQSjcjW2sw2u2LLQakjiWTRpUTfXJbiQlJPDHXGsitD1p jHNuZ0O990MT1keeSa6N/i9LgGA+X2lJmu/AAa4UYeVQvgVzVNi6TxDussXEpGTr qJL5roc0PG1KfymZ/PAzqjdVKPl29kIU7HRm4vtUJ2qOC3YtWM6gRewSinEIahPs vYBGhNsUY9u/JDwGcAB8wewGc35lFyaexc0RcR1iMrmymoseFPJ8Lq8fk83QWyHc Mz/EOLOxDLZsWA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:50 2025 by rpki-client