This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json) Hash identifier: eNnNNdyPN4P23+QunFUrMsiUjpG2IX5x2KmerdnAyDU= Subject key identifier: 69:9B:AE:2A:14:57:A1:51:B3:01:73:B1:D3:5C:8D:44:75:6C:E9:EF Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Certificate serial: 019B416D87B13095035A01BDA64A4F0545F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft Manifest number: 02DA Signing time: Sun 21 Dec 2025 15:00:55 +0000 Manifest this update: Sun 21 Dec 2025 15:00:55 +0000 Manifest next update: Mon 22 Dec 2025 15:00:55 +0000 Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: PuJwEc127o5dTDAAJLF9KCWGTp4c71vvF96hHVkt44U=) 2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:87:b1:30:95:03:5a:01:bd:a6:4a:4f:05:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Validity Not Before: Dec 21 15:00:55 2025 GMT Not After : Dec 22 15:00:55 2025 GMT Subject: CN=699bae2a1457a151b30173b1d35c8d44756ce9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:b3:d3:e1:06:85:ca:d7:af:5d:c0:0e:72: 88:73:e3:ea:72:06:52:30:ce:03:ed:fe:4c:39:fb: b8:f1:d7:cf:3d:f2:ed:8b:60:82:a6:44:85:2a:a5: 00:be:1b:5a:71:3b:1b:44:ab:c0:d4:ab:15:d7:00: 92:eb:a7:cb:dd:ad:89:21:3e:c8:f1:ce:db:46:c1: 84:ee:cc:59:36:91:a5:4e:b5:4a:0a:de:c4:11:6d: e0:2a:ca:b2:12:b7:15:43:33:3e:f3:26:65:05:71: 28:1c:96:74:64:3e:f2:33:8c:9e:13:05:3f:c9:3a: 67:8e:f5:3e:6c:8d:ee:c2:61:70:6c:ab:17:81:0b: 5d:fe:90:a8:d1:a7:79:6e:dd:09:11:d5:c6:4d:71: 9c:3a:d6:d4:e4:28:b1:13:f7:c2:2a:0b:d1:73:83: fd:15:f6:d9:c6:15:6d:86:d5:a1:fa:01:8e:1b:ae: 0a:51:18:77:88:9e:c2:cd:43:35:2a:a1:11:61:5c: da:79:02:0f:e1:0f:7d:d9:6e:14:60:c1:61:94:3f: db:f4:c7:4d:d1:84:76:ba:1b:59:5b:57:de:01:ad: 9b:ed:81:3c:fe:46:31:7a:e6:f7:b7:82:cc:7f:c0: d4:f5:f4:ac:aa:33:56:79:9b:ef:83:36:83:e6:39: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9B:AE:2A:14:57:A1:51:B3:01:73:B1:D3:5C:8D:44:75:6C:E9:EF X509v3 Authority Key Identifier: keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:7e:22:7c:6f:42:7e:b0:b9:69:79:96:85:fe:8b:59:bb: b4:07:3b:3c:7d:1b:0e:f6:9c:9e:5a:73:0c:6d:65:23:4e:bd: a7:fc:e9:30:c7:cc:ad:8f:98:7a:4a:25:b3:6a:5e:b6:a3:a7: ba:3f:cd:f5:f9:51:4d:1f:74:ec:82:be:c2:89:69:f1:cc:de: e9:39:9a:57:ab:ce:a6:2d:1a:51:a4:b1:17:bc:ce:cb:f2:8f: f5:2f:c2:9b:bc:00:01:c3:a7:1a:54:ef:6c:0c:9f:30:00:29: 2e:d3:9b:0e:e9:82:8f:de:9d:00:df:c0:62:ad:84:ac:e9:11: dc:19:c6:91:4c:79:16:57:a3:69:e4:d3:fd:49:eb:dd:57:55: 45:c9:88:89:b8:6c:8c:d4:c9:9b:81:34:22:6a:54:df:7d:e8: 73:36:08:4a:92:63:f4:04:a2:fb:2b:5f:28:01:a5:74:3c:03: 5f:11:af:68:bd:e3:0b:24:2f:54:82:83:05:b0:16:21:0d:d6: 1c:a8:5e:43:93:63:53:51:b1:91:21:88:85:07:6d:64:71:30: 72:ac:cd:63:f8:10:b2:82:03:9e:38:a1:ff:3a:14:06:dc:83: 6f:e8:a2:ed:1d:19:1e:82:b2:c0:a2:6c:e9:6f:7e:7c:69:2e: 39:dd:31:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYexMJUDWgG9pkpPBUX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx YzJhZWIwHhcNMjUxMjIxMTUwMDU1WhcNMjUxMjIyMTUwMDU1WjAzMTEwLwYDVQQD Eyg2OTliYWUyYTE0NTdhMTUxYjMwMTczYjFkMzVjOGQ0NDc1NmNlOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPGz0+EGhcrXr13ADnKIc+PqcgZS MM4D7f5MOfu48dfPPfLti2CCpkSFKqUAvhtacTsbRKvA1KsV1wCS66fL3a2JIT7I 8c7bRsGE7sxZNpGlTrVKCt7EEW3gKsqyErcVQzM+8yZlBXEoHJZ0ZD7yM4yeEwU/ yTpnjvU+bI3uwmFwbKsXgQtd/pCo0ad5bt0JEdXGTXGcOtbU5CixE/fCKgvRc4P9 FfbZxhVthtWh+gGOG64KURh3iJ7CzUM1KqERYVzaeQIP4Q992W4UYMFhlD/b9MdN 0YR2uhtZW1feAa2b7YE8/kYxeub3t4LMf8DU9fSsqjNWeZvvgzaD5jlQCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmbrioUV6FRswFzsdNcjUR1bOnvMB8GA1UdIwQY MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0 LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2p+Inxv Qn6wuWl5loX+i1m7tAc7PH0bDvacnlpzDG1lI069p/zpMMfMrY+Yekols2petqOn uj/N9flRTR907IK+wolp8cze6TmaV6vOpi0aUaSxF7zOy/KP9S/Cm7wAAcOnGlTv bAyfMAApLtObDumCj96dAN/AYq2ErOkR3BnGkUx5FlejaeTT/Unr3VdVRcmIibhs jNTJm4E0ImpU333oczYISpJj9ASi+ytfKAGldDwDXxGvaL3jCyQvVIKDBbAWIQ3W HKheQ5NjU1GxkSGIhQdtZHEwcqzNY/gQsoIDnjih/zoUBtyDb+ii7R0ZHoKywKJs 6W9+fGkuOd0xCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:09:42 2025 by rpki-client