This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json) Hash identifier: 0ZsT5n1PHOAftqt9bFHgyxYwmoZ/t8vBx/kbSKRH1/I= Subject key identifier: 28:A7:39:E5:0E:A0:36:62:81:F4:75:8C:7D:EF:48:84:71:89:28:EF Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Certificate serial: 019AF1D25CC1B53A31A8F75FA34ED84FC6E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft Manifest number: 1174 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=) 2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: AF+ykfdP9Y065hgEOldLCKxkZY9xwrtrEcekjTqdtgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5c:c1:b5:3a:31:a8:f7:5f:a3:4e:d8:4f:c6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=28a739e50ea0366281f4758c7def4884718928ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:86:37:b5:f9:1f:97:b3:c4:95:a4:bb:b0: 5b:b3:78:38:84:5a:ed:1a:35:31:3b:a4:d3:f9:d8: 99:c8:19:32:07:bb:e6:c8:e5:a1:91:af:57:e5:85: 46:fc:32:d1:dd:b1:55:17:13:e6:c1:82:41:2d:37: fc:ad:e7:10:3f:8b:dc:ba:72:a7:00:a6:b6:78:aa: 14:d8:03:df:15:18:2a:17:28:88:68:ef:3c:ca:49: e1:5d:55:cb:0d:8f:25:45:f8:bc:ca:fd:38:71:f9: 5b:ee:a9:12:1e:a6:9f:76:4d:b7:e0:ee:55:43:8e: 02:f8:d5:6d:a6:c0:b7:ce:f3:f1:9f:fc:9a:e9:27: 0e:f5:b4:67:68:f6:47:e4:9f:80:22:0b:d1:bd:36: f3:71:6f:4f:3c:2e:aa:34:41:d1:c8:72:aa:15:42: d1:2b:c8:55:f1:1b:4b:6e:47:e0:a1:39:7f:ab:6b: c5:8e:f1:65:21:61:5d:5c:a2:bd:67:dc:5c:62:43: d8:ec:a8:08:4c:fa:9c:96:47:c0:8e:f6:0c:2c:e4: da:cb:4b:19:75:da:6d:47:8c:bf:ad:9d:49:98:94: 70:c4:f6:95:ab:ae:bb:68:d8:2c:76:3f:04:b7:4e: 42:41:b1:bf:76:78:fa:50:6e:8b:7c:7c:58:e2:ce: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A7:39:E5:0E:A0:36:62:81:F4:75:8C:7D:EF:48:84:71:89:28:EF X509v3 Authority Key Identifier: keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8b:71:45:aa:9a:87:5a:19:1b:4c:0c:d7:cf:db:ae:89:13: 9a:07:86:46:fe:96:d2:79:9d:45:b2:c9:09:4f:f0:44:5b:e0: 6a:37:e5:16:80:4b:76:c1:56:59:16:29:c9:1a:60:c9:d8:a2: 12:63:b8:ea:25:73:a2:e9:26:6b:0d:b8:ef:bb:b1:ba:c0:4c: 38:a3:4c:95:18:b8:0d:f4:43:6d:59:31:72:c4:59:43:00:69: d5:81:d4:5f:63:75:f0:7a:0b:06:0a:c3:4b:4d:78:71:91:ea: c4:0c:0f:66:96:2d:fe:ce:6d:65:84:c7:27:34:1e:c4:e8:90: b8:d3:da:98:b4:8c:d3:95:94:3e:17:e8:4e:dc:8d:51:ef:be: 91:b7:7c:bc:60:76:ac:6e:2a:97:ef:52:4f:99:cd:94:00:03: 09:3b:2f:1f:6c:af:ce:84:4c:d7:3d:f5:32:31:2b:15:4c:49: ac:c6:f3:8c:84:ff:8b:45:91:bd:c9:79:2f:e7:dd:53:ef:70: 49:59:bf:af:20:d7:e4:72:43:90:26:fe:f4:cf:5e:b8:b2:16: 46:48:c9:fe:9e:fc:66:21:17:ef:5a:a0:e1:cb:e7:44:39:ad: 90:2e:46:80:e6:55:93:bb:c0:ad:be:34:8c:dd:03:e3:08:ad: db:f3:6c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lzBtToxqPdfo07YT8bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk MDBjZWUwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EygyOGE3MzllNTBlYTAzNjYyODFmNDc1OGM3ZGVmNDg4NDcxODkyOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRyGN7X5H5ezxJWku7Bbs3g4hFrt GjUxO6TT+diZyBkyB7vmyOWhka9X5YVG/DLR3bFVFxPmwYJBLTf8recQP4vcunKn AKa2eKoU2APfFRgqFyiIaO88yknhXVXLDY8lRfi8yv04cflb7qkSHqafdk234O5V Q44C+NVtpsC3zvPxn/ya6ScO9bRnaPZH5J+AIgvRvTbzcW9PPC6qNEHRyHKqFULR K8hV8RtLbkfgoTl/q2vFjvFlIWFdXKK9Z9xcYkPY7KgITPqclkfAjvYMLOTay0sZ ddptR4y/rZ1JmJRwxPaVq667aNgsdj8Et05CQbG/dnj6UG6LfHxY4s4hXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCinOeUOoDZigfR1jH3vSIRxiSjvMB8GA1UdIwQY MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt ZTkwN2FmMDdmZjExLzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4txRaqa h1oZG0wM18/brokTmgeGRv6W0nmdRbLJCU/wRFvgajflFoBLdsFWWRYpyRpgydii EmO46iVzoukmaw2477uxusBMOKNMlRi4DfRDbVkxcsRZQwBp1YHUX2N18HoLBgrD S014cZHqxAwPZpYt/s5tZYTHJzQexOiQuNPamLSM05WUPhfoTtyNUe++kbd8vGB2 rG4ql+9ST5nNlAADCTsvH2yvzoRM1z31MjErFUxJrMbzjIT/i0WRvcl5L+fdU+9w SVm/ryDX5HJDkCb+9M9euLIWRkjJ/p78ZiEX71qg4cvnRDmtkC5GgOZVk7vArb40 jN0D4wit2/Ns/g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:43 2025 by rpki-client