This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json) Hash identifier: q18Fr2sn0/I027epCnXOdMLtpGLRo69pu0cE9Ih1i6I= Subject key identifier: 56:70:57:A3:9C:32:6C:43:2B:ED:29:7E:73:03:5C:C9:7C:09:D9:C4 Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Certificate serial: 019AF276C3AD05437997DEC364C31BC73F5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft Manifest number: 1323 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: p9To/OHrcPo4DgzteCDALQe+i7Ro1v+2ytdMFexGyyk=) 2: xBgAFkKx8Hk3olxaNjWis5mQn98.roa (hash: P1KCvzISYpUAfpvA/Q/kzEUy3tIPC4wJ6UjU3FGpTJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c3:ad:05:43:79:97:de:c3:64:c3:1b:c7:3f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=567057a39c326c432bed297e73035cc97c09d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:a4:33:bd:db:5d:f3:2b:c1:81:44:4b:53: e4:71:7f:c2:7d:9a:84:08:57:c6:00:23:ae:9f:60: 2c:05:3d:4c:11:4a:1e:b1:eb:a9:d4:ec:6c:b8:89: 76:36:51:88:cf:0f:ee:72:53:26:1b:3d:a4:21:2c: 83:2b:96:d9:0e:54:52:d3:31:0d:e2:0e:aa:d2:55: 6c:b5:40:cc:65:86:c7:ae:dc:70:f2:90:fc:51:1a: c2:96:0b:94:09:0f:d3:d3:a5:e1:74:9d:38:ce:91: 94:d9:ed:a4:7e:56:f8:16:6a:03:57:ec:b3:5e:2d: 29:aa:9d:f7:4f:d3:2e:c6:32:b5:96:05:6c:7b:d0: 80:2e:97:f3:07:cb:54:87:2e:82:33:e1:30:72:a8: bb:8b:3d:65:65:19:21:12:cf:eb:5e:ef:eb:d3:5a: 71:b7:4e:7f:92:ff:7d:3c:cc:ba:11:80:3a:e4:44: a9:23:83:3f:a4:8a:45:e7:8d:28:83:f0:09:10:5d: 5f:6c:97:14:05:83:81:31:67:28:f7:a1:66:fd:cd: ea:5e:1f:9b:19:5c:c5:83:0e:33:61:16:45:4a:0c: f2:9c:48:a1:f8:ac:bb:dd:9e:f2:c4:90:b2:c9:76: cf:e3:94:19:cd:c6:9f:92:63:3d:79:9c:91:e8:4c: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:57:A3:9C:32:6C:43:2B:ED:29:7E:73:03:5C:C9:7C:09:D9:C4 X509v3 Authority Key Identifier: keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d9:8f:fc:1a:95:1e:53:55:c8:fe:3c:94:f0:9d:f2:f7:ec: 63:0c:65:3b:3a:b6:1e:13:52:14:88:13:7f:af:c3:d9:7b:c8: 03:e6:12:a2:17:60:a1:7d:ab:10:74:b2:ab:fb:70:76:fa:6e: 6f:c9:e1:fc:1f:d3:09:68:f6:f5:71:4f:a5:e2:ca:ae:7c:8a: 19:ef:8d:8c:c9:29:f5:4a:64:01:60:5f:b8:5d:43:52:94:b0: 10:d1:dc:65:fc:e0:16:50:88:be:49:08:90:66:d7:f4:8c:eb: 38:b8:25:6a:d0:2f:46:0a:44:e9:51:32:4d:40:ad:74:e0:32: 6e:78:22:85:6e:6d:95:97:7c:6f:d7:ee:af:0b:a0:ff:06:23: 6d:80:80:22:a0:28:f4:84:24:7b:98:40:e0:d0:cc:3c:f0:1a: 33:4d:f5:e6:c4:bd:af:16:7c:e7:ca:cc:e4:f2:48:7b:c7:c9: ed:17:7a:30:52:f9:f0:a8:dd:53:2d:9a:14:47:e1:30:5a:13: 4d:5d:c9:81:5a:76:1b:a2:33:e9:5e:7d:7c:54:4a:c6:bb:10: d9:3d:fb:70:dc:5b:70:56:96:7b:3d:d9:03:a2:88:c5:e7:be: 42:eb:82:09:3b:0e:17:10:aa:b2:32:a3:e5:e1:20:5d:f9:2d: c0:d0:0a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsOtBUN5l97DZMMbxz9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5 NzFiZmIwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD Eyg1NjcwNTdhMzljMzI2YzQzMmJlZDI5N2U3MzAzNWNjOTdjMDlkOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIakM73bXfMrwYFES1PkcX/CfZqE CFfGACOun2AsBT1MEUoeseup1OxsuIl2NlGIzw/uclMmGz2kISyDK5bZDlRS0zEN 4g6q0lVstUDMZYbHrtxw8pD8URrClguUCQ/T06XhdJ04zpGU2e2kflb4FmoDV+yz Xi0pqp33T9MuxjK1lgVse9CALpfzB8tUhy6CM+Ewcqi7iz1lZRkhEs/rXu/r01px t05/kv99PMy6EYA65ESpI4M/pIpF540og/AJEF1fbJcUBYOBMWco96Fm/c3qXh+b GVzFgw4zYRZFSgzynEih+Ky73Z7yxJCyyXbP45QZzcafkmM9eZyR6EwnoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZwV6OcMmxDK+0pfnMDXMl8CdnEMB8GA1UdIwQY MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldmP/BqV HlNVyP48lPCd8vfsYwxlOzq2HhNSFIgTf6/D2XvIA+YSohdgoX2rEHSyq/twdvpu b8nh/B/TCWj29XFPpeLKrnyKGe+NjMkp9UpkAWBfuF1DUpSwENHcZfzgFlCIvkkI kGbX9IzrOLglatAvRgpE6VEyTUCtdOAybngihW5tlZd8b9furwug/wYjbYCAIqAo 9IQke5hA4NDMPPAaM0315sS9rxZ858rM5PJIe8fJ7Rd6MFL58KjdUy2aFEfhMFoT TV3JgVp2G6Iz6V59fFRKxrsQ2T37cNxbcFaWez3ZA6KIxee+QuuCCTsOFxCqsjKj 5eEgXfktwNAK7w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:04 2025 by rpki-client