This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json) Hash identifier: 1qR2k6ia3WsR+dTqvtUXIPA2vXvn+rY+nkD3DjyakMg= Subject key identifier: 64:61:17:4D:29:9A:8E:75:53:AF:9D:DB:03:BF:98:0A:E8:39:DE:18 Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af Certificate serial: 019B40917106447F03A8E472D81DFD9ED284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 11:00:31 +0000 Manifest this update: Sun 21 Dec 2025 11:00:31 +0000 Manifest next update: Mon 22 Dec 2025 11:00:31 +0000 Files and hashes: 1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=) 2: MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa (hash: JNpBzF/bGBycltANPUKMe/k4nJGYJgbUSLWLk2GhApA=) 3: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=) 4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: dsn54hU7Gl6fSS7to+NxqIaVZ5gqfhXbumqMXHCktdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:71:06:44:7f:03:a8:e4:72:d8:1d:fd:9e:d2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb190d102ac9603b405b36374d429868604937af Validity Not Before: Dec 21 11:00:31 2025 GMT Not After : Dec 22 11:00:31 2025 GMT Subject: CN=6461174d299a8e7553af9ddb03bf980ae839de18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:1b:af:4a:a0:07:ee:92:a7:28:c2:9c:6e: 31:01:d9:95:0d:5c:07:9f:b6:d9:c5:38:34:e2:38: 5c:27:aa:e0:60:c9:9b:2a:c6:75:91:5a:43:63:05: 3e:4b:87:d9:fb:bb:13:93:f9:4a:e2:19:fc:d5:91: 08:b7:80:20:8b:fd:66:3c:8d:35:46:bf:42:83:10: 0e:fb:6e:ed:17:7d:82:a6:e8:86:cf:76:16:9b:cb: bc:39:fc:ce:7d:7b:80:4c:ac:f3:8e:6b:bf:db:e1: 5d:f8:18:17:34:ce:71:bb:c8:9b:19:62:f2:68:aa: 1c:6e:44:bf:df:31:c7:bc:42:16:e0:fe:91:14:7e: 05:ff:8a:f1:3a:ab:5a:2f:e7:da:09:87:18:34:34: 8b:77:bd:96:bd:6e:5b:e9:96:4b:c5:33:5c:e0:8a: 78:9a:74:f6:b1:02:bf:ce:e0:79:09:96:03:79:de: 1d:0c:2d:e8:f7:9b:e4:0a:22:98:05:52:17:18:8b: 06:d9:e5:bd:91:56:21:87:69:af:ab:64:83:34:e9: c3:e8:aa:84:64:57:fa:2f:fa:01:4d:4a:be:64:3d: 57:25:02:a1:ad:7b:09:40:f3:a1:b9:a7:bb:ff:32: 8e:98:bf:fe:5c:0b:38:b5:6f:1f:b0:46:79:d2:72: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:61:17:4D:29:9A:8E:75:53:AF:9D:DB:03:BF:98:0A:E8:39:DE:18 X509v3 Authority Key Identifier: keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:06:d5:46:e3:7f:f7:be:76:97:c1:ca:b3:14:2a:81:c1:63: d9:9e:30:a9:46:c0:4f:3e:3f:77:ec:9e:2c:71:d7:dc:2e:81: 50:c3:0d:73:99:8e:1f:c3:4d:07:7b:fc:6c:08:2f:55:e5:69: e4:55:ee:24:aa:e1:a7:45:20:e2:a6:1a:99:a8:26:c5:1d:96: dd:b0:31:90:19:85:66:d7:aa:83:f0:f1:06:5c:73:dd:22:ea: 4c:76:7d:3b:8a:bf:04:2b:41:8a:a5:e9:2c:9b:a8:c9:fd:ab: 50:bd:99:98:c0:c0:89:85:a4:a5:c6:93:a6:39:de:71:19:d5: 0b:52:1c:bb:1e:d0:19:bb:5a:10:15:3a:ac:5f:04:49:67:36: d9:b4:b2:71:2c:5c:d9:db:9b:18:00:51:18:5e:51:2b:52:72: 05:83:57:68:ae:3b:cb:68:ba:9f:d4:9f:53:d5:c2:da:85:35: 8e:92:5c:19:fd:b0:a7:ce:18:b0:3e:e1:ea:3d:d9:09:91:6c: 11:4f:59:98:71:c9:0c:97:ee:35:fa:17:0a:bb:bd:fe:58:bc: d6:37:b1:1f:fc:0a:c1:50:74:e7:1b:c2:9c:ef:96:6f:2d:b6: 32:d8:e1:22:af:2b:8a:d6:b1:7a:b5:36:a5:52:cb:2a:12:dd: e7:a2:63:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkXEGRH8DqORy2B39ntKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0 OTM3YWYwHhcNMjUxMjIxMTEwMDMxWhcNMjUxMjIyMTEwMDMxWjAzMTEwLwYDVQQD Eyg2NDYxMTc0ZDI5OWE4ZTc1NTNhZjlkZGIwM2JmOTgwYWU4MzlkZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGsbr0qgB+6SpyjCnG4xAdmVDVwH n7bZxTg04jhcJ6rgYMmbKsZ1kVpDYwU+S4fZ+7sTk/lK4hn81ZEIt4Agi/1mPI01 Rr9CgxAO+27tF32CpuiGz3YWm8u8OfzOfXuATKzzjmu/2+Fd+BgXNM5xu8ibGWLy aKocbkS/3zHHvEIW4P6RFH4F/4rxOqtaL+faCYcYNDSLd72WvW5b6ZZLxTNc4Ip4 mnT2sQK/zuB5CZYDed4dDC3o95vkCiKYBVIXGIsG2eW9kVYhh2mvq2SDNOnD6KqE ZFf6L/oBTUq+ZD1XJQKhrXsJQPOhuae7/zKOmL/+XAs4tW8fsEZ50nIFwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRhF00pmo51U6+d2wO/mAroOd4YMB8GA1UdIwQY MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5 LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQbVRuN/ 9752l8HKsxQqgcFj2Z4wqUbATz4/d+yeLHHX3C6BUMMNc5mOH8NNB3v8bAgvVeVp 5FXuJKrhp0Ug4qYamagmxR2W3bAxkBmFZteqg/DxBlxz3SLqTHZ9O4q/BCtBiqXp LJuoyf2rUL2ZmMDAiYWkpcaTpjnecRnVC1Icux7QGbtaEBU6rF8ESWc22bSycSxc 2dubGABRGF5RK1JyBYNXaK47y2i6n9SfU9XC2oU1jpJcGf2wp84YsD7h6j3ZCZFs EU9ZmHHJDJfuNfoXCru9/li81jexH/wKwVB05xvCnO+Wby22MtjhIq8ritaxerU2 pVLLKhLd56Jj3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:14 2025 by rpki-client