This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json) Hash identifier: aFfcGQ8buTXRcUme2yNJPpNloongXZ874rHEBFQFhro= Subject key identifier: 95:47:22:BD:E3:9A:A2:74:24:AB:CD:92:CD:40:B2:AE:84:ED:04:9C Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Certificate serial: 019B5A1AD59EBEAC5716A55CA80719866F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft Manifest number: 0371 Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: BmHsYlKpZO+ENc5wXfPAsSqg5zIWfYV1DC3bDoM6yGo=) 2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d5:9e:be:ac:57:16:a5:5c:a8:07:19:86:6f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=954722bde39aa27424abcd92cd40b2ae84ed049c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:ee:6e:6c:99:f3:4a:90:35:3f:71:35:fd: fb:f2:72:6e:b1:03:d7:35:c3:d8:98:4d:a6:d7:93: 2d:af:93:1b:e6:13:a6:08:09:bc:5d:10:80:64:86: c7:b6:ae:be:6d:9b:79:1e:d9:1b:51:0c:82:f1:92: f2:68:dd:52:b5:52:4c:19:95:73:2c:12:c7:e1:70: a8:84:fe:98:72:ca:6d:81:93:52:1d:0a:be:77:83: 81:e4:0d:25:6f:c7:f2:bc:44:3d:c6:c8:cb:30:30: 7a:58:7e:2f:19:a3:fd:7e:54:51:91:87:9a:0a:df: 3a:ac:61:dc:74:91:8b:47:de:da:4a:ea:1c:05:7e: 2c:80:7d:c7:57:99:3f:2e:ea:f4:db:db:2f:18:12: 5b:d6:49:22:87:37:18:de:58:ef:ef:8e:92:ce:f4: 95:ab:fe:71:03:6e:18:cf:69:7e:06:2e:ed:5e:78: 3b:91:7d:58:be:22:0f:26:1f:ee:ac:9c:e1:7e:ea: df:a8:64:57:5f:95:86:3f:d0:1c:62:b0:2d:89:0f: 68:00:3c:98:d5:48:0d:75:46:e2:03:59:2e:ca:da: 0b:ad:4f:e3:1e:d6:48:06:53:8a:14:7d:be:75:bd: 22:30:26:4b:ff:29:fc:6a:d7:aa:be:a1:59:be:0b: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:22:BD:E3:9A:A2:74:24:AB:CD:92:CD:40:B2:AE:84:ED:04:9C X509v3 Authority Key Identifier: keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2a:a6:8f:2a:5c:8a:a3:08:ad:b0:59:42:8a:8b:70:bd:b9: e1:b5:7c:f7:a0:85:a8:c2:4d:96:0d:2f:cb:ff:f4:d3:0b:f0: a0:b0:6f:b3:7e:6b:cf:86:4d:cf:12:6f:57:34:8c:2a:6f:03: 00:52:eb:da:be:ef:ea:74:a9:08:43:a4:c4:95:6e:6d:ce:20: 5a:a2:bf:20:39:16:bd:57:52:e2:f7:04:ae:9f:8e:36:73:ec: 4a:6c:d9:2b:99:31:5f:54:2c:85:e1:11:48:2a:5d:b0:17:19: 9c:25:87:b9:1f:d3:05:c4:2c:58:a6:71:31:fb:83:d6:4b:f8: f1:a6:86:29:04:a0:98:db:ee:a3:e8:09:78:e1:ea:b3:9e:4b: 23:dc:2c:05:c3:8a:68:b6:81:4d:0d:e4:28:9c:cd:d0:24:63: 9a:89:7d:0a:14:1d:ca:db:a0:12:72:d4:e3:6c:01:45:77:7c: 73:d5:95:85:83:28:f6:4c:41:75:f7:ee:ee:ce:9a:c5:25:3f: 14:6a:fc:26:0f:24:bf:ff:6d:51:fe:27:a5:88:ce:e1:7e:23: 4a:76:87:75:05:ed:0a:cc:b8:c1:ed:23:51:d5:6e:32:df:44: 94:d5:c1:76:2f:b5:0b:b2:31:12:ed:a3:82:9a:32:72:a3:11: a5:cf:93:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtWevqxXFqVcqAcZhm8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4 YWFlYjIwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD Eyg5NTQ3MjJiZGUzOWFhMjc0MjRhYmNkOTJjZDQwYjJhZTg0ZWQwNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PjubmyZ80qQNT9xNf378nJusQPX NcPYmE2m15Mtr5Mb5hOmCAm8XRCAZIbHtq6+bZt5HtkbUQyC8ZLyaN1StVJMGZVz LBLH4XCohP6YcsptgZNSHQq+d4OB5A0lb8fyvEQ9xsjLMDB6WH4vGaP9flRRkYea Ct86rGHcdJGLR97aSuocBX4sgH3HV5k/Lur029svGBJb1kkihzcY3ljv746SzvSV q/5xA24Yz2l+Bi7tXng7kX1YviIPJh/urJzhfurfqGRXX5WGP9AcYrAtiQ9oADyY 1UgNdUbiA1kuytoLrU/jHtZIBlOKFH2+db0iMCZL/yn8ateqvqFZvguWAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVHIr3jmqJ0JKvNks1Asq6E7QScMB8GA1UdIwQY MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5 LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyqmjypc iqMIrbBZQoqLcL254bV896CFqMJNlg0vy//00wvwoLBvs35rz4ZNzxJvVzSMKm8D AFLr2r7v6nSpCEOkxJVubc4gWqK/IDkWvVdS4vcErp+ONnPsSmzZK5kxX1QsheER SCpdsBcZnCWHuR/TBcQsWKZxMfuD1kv48aaGKQSgmNvuo+gJeOHqs55LI9wsBcOK aLaBTQ3kKJzN0CRjmol9ChQdytugEnLU42wBRXd8c9WVhYMo9kxBdffu7s6axSU/ FGr8Jg8kv/9tUf4npYjO4X4jSnaHdQXtCsy4we0jUdVuMt9ElNXBdi+1C7IxEu2j gpoycqMRpc+TSw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client