This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json) Hash identifier: zz5+8W+0bbi/LS8UaST/FerDgce+XzM7DfJFFT6M2TI= Subject key identifier: 9E:AA:5A:CA:9A:ED:34:69:AF:7D:6F:D0:53:54:9D:80:E6:8F:AA:51 Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Certificate serial: 019B5BD1D2A43AA194B82D5D1BB24A4E1775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 18:00:36 +0000 Manifest this update: Fri 26 Dec 2025 18:00:36 +0000 Manifest next update: Sat 27 Dec 2025 18:00:36 +0000 Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: g7Ei8hI+uspILgwvudumBmF2/kFguwpcGW7vMMus5s8=) 2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:d2:a4:3a:a1:94:b8:2d:5d:1b:b2:4a:4e:17:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Validity Not Before: Dec 26 18:00:36 2025 GMT Not After : Dec 27 18:00:36 2025 GMT Subject: CN=9eaa5aca9aed3469af7d6fd053549d80e68faa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:2b:de:24:ff:cf:05:c9:f0:61:0c:ba:7d: 41:7a:00:3b:14:6b:58:a8:6f:cb:90:75:4f:25:2a: f5:9c:7f:14:11:73:b8:27:d9:54:d4:83:79:f7:a7: 15:09:ce:3e:18:8e:8b:6e:f2:e3:86:75:ed:e7:e5: 8f:5f:c1:94:ce:96:d2:96:2b:44:7d:e0:98:b8:f7: 94:30:09:2f:65:88:f0:e9:db:5d:c7:9a:01:e7:30: 15:4c:e9:bc:39:93:d6:13:09:66:1d:54:c3:00:ac: 59:ca:97:b5:1a:e8:0a:28:66:0d:d0:21:f5:e9:91: 9b:bc:c2:26:54:7c:76:64:50:1f:7d:d4:cd:4b:bb: aa:f2:74:d8:1e:95:50:1b:c2:91:24:03:03:e1:c7: 30:6e:05:07:a5:a3:93:2c:85:6b:8a:f8:fa:8c:38: 7a:77:46:1a:ad:dc:27:ef:9e:17:44:d2:a8:5a:b6: fa:6c:5d:2d:e4:75:a3:73:ee:93:90:c7:43:6a:b8: 53:99:63:a2:01:59:62:d3:a4:37:2b:55:91:53:79: 36:18:5b:19:55:fe:08:86:76:12:b0:24:33:6d:08: dc:a8:0e:20:de:2a:eb:07:31:22:ca:65:92:cb:ee: 08:90:04:55:df:b2:aa:30:19:0b:04:58:1f:df:4e: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:5A:CA:9A:ED:34:69:AF:7D:6F:D0:53:54:9D:80:E6:8F:AA:51 X509v3 Authority Key Identifier: keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ae:43:f7:88:87:1d:5a:84:26:3a:44:b8:b4:8c:ea:1a:94: 7e:63:f0:51:b1:d1:91:1b:80:34:ce:95:1b:c8:33:e0:5d:9b: 52:4f:3c:52:9c:6e:7f:79:40:d7:bf:c3:34:63:53:df:05:17: 2e:e0:3d:d2:53:f4:37:6b:56:8c:b2:2d:30:45:63:38:5f:fd: 00:5c:19:6b:a0:a3:55:1d:0e:75:b3:b3:e3:06:05:21:a5:3f: de:ba:28:c5:36:5f:48:8f:61:44:4a:b4:23:bb:0a:e1:3f:01: bd:3b:fe:3e:74:09:4d:23:f8:d3:32:61:c7:ab:a0:f5:ad:7b: 5a:40:cd:9b:41:9e:d7:77:57:17:71:d3:23:eb:e9:3d:b4:02: 03:c0:ff:a8:75:91:7f:e4:5d:45:a7:76:89:28:3b:e3:3c:39: 3b:4e:36:60:1c:b3:b0:cb:8b:65:25:a0:91:ad:cc:de:6c:7e: 09:0d:de:51:bd:79:ef:0b:1d:3a:83:45:21:aa:0d:c0:8b:71: 5b:f8:e5:8e:26:85:19:fe:da:e2:3c:38:fa:2b:b5:d0:b0:ae: 8c:f3:03:a5:95:ab:b8:b5:db:b7:23:79:5b:32:2e:e5:4b:f8: 4a:2f:77:73:6e:7f:00:d1:cd:db:f6:74:d7:f1:b6:92:b7:07: c2:ee:b9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0dKkOqGUuC1dG7JKThd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0 OGU3OGUwHhcNMjUxMjI2MTgwMDM2WhcNMjUxMjI3MTgwMDM2WjAzMTEwLwYDVQQD Eyg5ZWFhNWFjYTlhZWQzNDY5YWY3ZDZmZDA1MzU0OWQ4MGU2OGZhYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQr3iT/zwXJ8GEMun1BegA7FGtY qG/LkHVPJSr1nH8UEXO4J9lU1IN596cVCc4+GI6LbvLjhnXt5+WPX8GUzpbSlitE feCYuPeUMAkvZYjw6dtdx5oB5zAVTOm8OZPWEwlmHVTDAKxZype1GugKKGYN0CH1 6ZGbvMImVHx2ZFAffdTNS7uq8nTYHpVQG8KRJAMD4ccwbgUHpaOTLIVrivj6jDh6 d0Yardwn754XRNKoWrb6bF0t5HWjc+6TkMdDarhTmWOiAVli06Q3K1WRU3k2GFsZ Vf4IhnYSsCQzbQjcqA4g3irrBzEiymWSy+4IkARV37KqMBkLBFgf307FuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6qWsqa7TRpr31v0FNUnYDmj6pRMB8GA1UdIwQY MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK5D94iH HVqEJjpEuLSM6hqUfmPwUbHRkRuANM6VG8gz4F2bUk88Upxuf3lA17/DNGNT3wUX LuA90lP0N2tWjLItMEVjOF/9AFwZa6CjVR0OdbOz4wYFIaU/3rooxTZfSI9hREq0 I7sK4T8BvTv+PnQJTSP40zJhx6ug9a17WkDNm0Ge13dXF3HTI+vpPbQCA8D/qHWR f+RdRad2iSg74zw5O042YByzsMuLZSWgka3M3mx+CQ3eUb157wsdOoNFIaoNwItx W/jljiaFGf7a4jw4+iu10LCujPMDpZWruLXbtyN5WzIu5Uv4Si93c25/ANHN2/Z0 1/G2krcHwu65SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:09:22 2025 by rpki-client