This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft File: uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json) Hash identifier: BYAM3bozP39Ww42wLjtA1124GRbHlOoIoeYLTvpjw8U= Subject key identifier: DA:1E:B2:7F:B2:AB:45:A7:AA:B0:1C:28:26:22:F0:3D:37:AE:88:A6 Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94 Certificate issuer: /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594 Certificate serial: 019B3AFD4D74477C2FE1D4DA25AB45E01F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft Manifest number: 0E4F Signing time: Sat 20 Dec 2025 09:00:37 +0000 Manifest this update: Sat 20 Dec 2025 09:00:37 +0000 Manifest next update: Sun 21 Dec 2025 09:00:37 +0000 Files and hashes: 1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: jDkOT5QIXVwORNdWiAH/W2W2IMahXEAF8YnjrzeSXA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:4d:74:47:7c:2f:e1:d4:da:25:ab:45:e0:1f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594 Validity Not Before: Dec 20 09:00:37 2025 GMT Not After : Dec 21 09:00:37 2025 GMT Subject: CN=da1eb27fb2ab45a7aab01c282622f03d37ae88a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:e6:f6:4a:8e:5c:18:b8:7b:4e:fa:1a:e0: be:d3:b9:db:f4:2a:50:6b:8d:23:fe:f7:56:97:de: 96:86:46:0a:45:b6:7d:ec:b1:42:a1:bd:c6:6d:0f: e0:e2:d4:ae:aa:7f:a3:d1:67:81:69:d4:bc:a1:11: 5d:46:0c:7a:ba:23:f8:17:32:68:22:6f:73:8b:86: 80:5b:e7:6b:56:fe:3c:05:19:30:82:1f:30:1c:cd: 0e:4c:cd:a3:7c:fd:f3:4d:ea:9a:81:c1:64:3d:e0: f7:7f:8d:1f:f4:68:1b:e0:b8:eb:71:e1:6c:3d:72: a7:a0:3f:d4:97:b4:90:b8:da:c3:e1:e3:d9:84:71: 80:56:a7:3f:3b:cc:ec:04:91:f0:1e:bb:62:a2:e9: b2:3d:05:8b:58:95:7c:64:e6:ea:20:4d:6f:52:47: 1e:6a:9f:3a:38:7e:93:18:8f:88:34:11:23:7b:68: e8:9c:ae:62:60:18:c6:23:84:49:de:58:1a:c5:b5: 31:58:2d:5c:1a:88:f4:7e:93:3d:e9:a5:e0:6b:ed: e3:79:43:34:31:3b:2c:93:e7:dc:b9:c9:70:04:c8: 0d:69:84:69:e4:78:63:f9:59:8e:31:28:93:95:b0: e8:1a:57:3f:ea:2f:e0:64:32:2c:22:d4:76:ae:e5: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1E:B2:7F:B2:AB:45:A7:AA:B0:1C:28:26:22:F0:3D:37:AE:88:A6 X509v3 Authority Key Identifier: keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:96:23:6e:90:af:b3:98:0b:af:3e:54:c6:ff:e0:22:dc:96: cc:2b:f2:d0:b7:c2:0c:ee:dc:e6:1e:e6:3e:49:2d:30:3f:2d: 32:fa:1f:d3:1e:c8:db:d9:71:8e:09:d5:e4:3b:6e:d2:e5:05: 67:35:ab:0a:55:ac:6b:65:bd:06:45:e0:85:56:25:df:2e:96: 86:e8:d7:75:08:9e:14:b5:7a:7d:b7:74:0e:48:ee:17:36:19: a4:84:30:58:35:46:ad:74:51:f3:76:52:8a:72:79:e3:5b:97: 9c:01:d5:54:ee:2a:32:11:95:85:05:cd:12:92:c3:da:7e:0e: 25:71:f5:81:d3:a6:95:4d:8f:45:68:e7:a9:89:2b:9a:46:9f: ea:d4:64:8a:6f:28:5f:c6:df:05:67:28:f6:46:a6:66:95:e4: 0d:f2:59:45:cb:42:0f:7e:97:60:1a:79:99:f7:f4:c7:ae:2c: 29:f8:4e:ff:fc:99:11:d5:e0:a9:ff:75:59:35:30:9b:dd:2b: 60:c7:38:5a:e3:42:82:54:96:2c:25:b5:9b:fd:3f:98:5d:16: f3:12:b8:6a:98:1a:34:25:55:8f:42:cc:13:8d:e5:03:3f:bf: 33:a3:31:00:d2:b4:cc:bd:6f:22:fc:e1:ec:d4:85:73:77:34: 98:ed:2c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/U10R3wv4dTaJatF4B98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmFlZDQyNmZiMWEwNjMyNWEyNjM3OTIxYTRiNWFiOThh MWE1OTQwHhcNMjUxMjIwMDkwMDM3WhcNMjUxMjIxMDkwMDM3WjAzMTEwLwYDVQQD EyhkYTFlYjI3ZmIyYWI0NWE3YWFiMDFjMjgyNjIyZjAzZDM3YWU4OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLm9kqOXBi4e076GuC+07nb9CpQ a40j/vdWl96WhkYKRbZ97LFCob3GbQ/g4tSuqn+j0WeBadS8oRFdRgx6uiP4FzJo Im9zi4aAW+drVv48BRkwgh8wHM0OTM2jfP3zTeqagcFkPeD3f40f9Ggb4LjrceFs PXKnoD/Ul7SQuNrD4ePZhHGAVqc/O8zsBJHwHrtioumyPQWLWJV8ZObqIE1vUkce ap86OH6TGI+INBEje2jonK5iYBjGI4RJ3lgaxbUxWC1cGoj0fpM96aXga+3jeUM0 MTssk+fcuclwBMgNaYRp5Hhj+VmOMSiTlbDoGlc/6i/gZDIsItR2ruV3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoesn+yq0WnqrAcKCYi8D03roimMB8GA1UdIwQY MBaAFLlq7UJvsaBjJaJjeSGktauYoaWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgt NzkyOTZkM2U2MzI4LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgtNzkyOTZkM2U2MzI4 LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpYjbpCv s5gLrz5Uxv/gItyWzCvy0LfCDO7c5h7mPkktMD8tMvof0x7I29lxjgnV5Dtu0uUF ZzWrClWsa2W9BkXghVYl3y6WhujXdQieFLV6fbd0DkjuFzYZpIQwWDVGrXRR83ZS inJ541uXnAHVVO4qMhGVhQXNEpLD2n4OJXH1gdOmlU2PRWjnqYkrmkaf6tRkim8o X8bfBWco9kamZpXkDfJZRctCD36XYBp5mff0x64sKfhO//yZEdXgqf91WTUwm90r YMc4WuNCglSWLCW1m/0/mF0W8xK4apgaNCVVj0LME43lAz+/M6MxANK0zL1vIvzh 7NSFc3c0mO0s7g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:08:49 2025 by rpki-client