This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json) Hash identifier: w2NVLQFxycCcWXh67Y/6w+Qk8IdKeKMehbAvvRxkjVM= Subject key identifier: C6:70:89:75:63:0E:2E:6B:4C:EA:E2:67:C9:B9:7D:40:92:4A:B7:40 Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37 Certificate serial: 019B13F056A1431CA7298A331722494B9B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft Manifest number: 0440 Signing time: Fri 12 Dec 2025 19:01:16 +0000 Manifest this update: Fri 12 Dec 2025 19:01:16 +0000 Manifest next update: Sat 13 Dec 2025 19:01:16 +0000 Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=) 2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: C1YaUAEbXWrNp09ssZcvKy2SQA1ss60IWNqJH5WhHEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f0:56:a1:43:1c:a7:29:8a:33:17:22:49:4b:9b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37 Validity Not Before: Dec 12 19:01:16 2025 GMT Not After : Dec 13 19:01:16 2025 GMT Subject: CN=c6708975630e2e6b4ceae267c9b97d40924ab740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:7b:f4:54:88:72:e7:bc:11:e3:c6:35:2d: 8e:a6:28:d4:3d:f7:a1:76:4a:ce:20:c7:0d:fa:24: 8a:f5:93:6c:15:72:c2:18:99:d9:8b:73:9f:e4:1f: 99:59:95:76:2a:39:83:be:16:bb:fd:ff:c4:3f:4f: 98:1c:de:ad:cb:06:98:d4:f8:be:4f:68:e1:32:2e: 7a:2a:7f:0d:65:89:ff:43:91:a0:7f:c4:1f:0b:a4: 6d:d6:f1:72:73:29:8e:47:f8:0f:63:c1:5b:d1:1e: b7:c4:8f:7c:6d:05:98:c1:e8:47:6c:47:1b:88:dd: d8:9e:dc:2d:d5:0c:f5:ed:ef:cc:75:ae:e8:d8:8a: f7:8b:17:b9:bd:50:1b:e0:77:04:f2:a0:cb:b5:34: e8:c0:8b:d3:95:a4:d6:1f:4c:be:c3:66:02:c0:ed: 9b:03:7d:e6:a6:b5:b5:eb:7a:53:38:c7:2b:59:20: 20:3d:f9:73:24:d1:e4:63:18:57:82:d4:8a:b0:e6: e8:d7:31:a2:29:d2:fc:6a:dd:5b:6d:6a:7f:49:bf: fd:9b:5f:97:31:6f:86:eb:a3:63:8f:17:d1:d2:5a: 30:66:b4:53:a7:99:da:18:44:05:e5:44:0e:1e:21: e9:de:3c:b9:a2:e9:da:01:a6:63:b4:23:f7:47:75: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:70:89:75:63:0E:2E:6B:4C:EA:E2:67:C9:B9:7D:40:92:4A:B7:40 X509v3 Authority Key Identifier: keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a3:7d:d9:41:c2:a4:e5:a2:70:32:ee:29:2f:06:8f:3b:22: 5b:06:a8:35:23:ab:b0:bd:d5:6d:f0:77:e6:b2:ee:db:72:73: b4:ef:78:6f:9b:f1:f0:fc:0e:af:80:38:99:61:9b:44:5c:50: ad:18:e1:b7:a4:ed:fc:c5:12:4c:f5:13:45:aa:f0:15:58:ba: 8e:3d:20:bf:f8:58:6a:05:e4:3a:95:f7:72:a1:8e:99:a2:50: ee:84:97:dd:af:6c:af:31:fa:33:b9:81:f5:c5:6b:52:52:a8: 2d:03:ff:ca:25:b0:19:55:ed:ac:db:53:3a:d8:15:9e:e8:5e: 87:26:1b:45:89:1f:dc:87:6a:3b:aa:4a:60:18:39:42:2a:ac: 49:b6:20:ce:6e:2e:7a:f1:97:bd:16:40:3a:ed:54:43:68:90: 54:5b:3d:ee:e6:07:af:03:0a:26:bb:d7:a2:7b:98:4d:bc:d2: ff:d3:cb:91:d5:e1:f4:f2:23:6a:fb:03:14:23:fa:ee:68:54: 2c:47:77:f0:24:36:8d:d8:6d:01:fe:9d:79:22:04:7b:e0:00: 54:36:ff:eb:3e:a7:89:bd:bb:84:3a:b6:fb:f4:76:83:fc:4a: 58:14:4a:34:87:2c:70:7d:5b:75:57:02:7a:50:4f:bc:fe:c8: 98:6f:59:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8FahQxynKYozFyJJS5uJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1 NTFkMzcwHhcNMjUxMjEyMTkwMTE2WhcNMjUxMjEzMTkwMTE2WjAzMTEwLwYDVQQD EyhjNjcwODk3NTYzMGUyZTZiNGNlYWUyNjdjOWI5N2Q0MDkyNGFiNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5B79FSIcue8EePGNS2OpijUPfeh dkrOIMcN+iSK9ZNsFXLCGJnZi3Of5B+ZWZV2KjmDvha7/f/EP0+YHN6tywaY1Pi+ T2jhMi56Kn8NZYn/Q5Ggf8QfC6Rt1vFycymOR/gPY8Fb0R63xI98bQWYwehHbEcb iN3Yntwt1Qz17e/Mda7o2Ir3ixe5vVAb4HcE8qDLtTTowIvTlaTWH0y+w2YCwO2b A33mprW163pTOMcrWSAgPflzJNHkYxhXgtSKsObo1zGiKdL8at1bbWp/Sb/9m1+X MW+G66NjjxfR0lowZrRTp5naGEQF5UQOHiHp3jy5ounaAaZjtCP3R3XaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZwiXVjDi5rTOriZ8m5fUCSSrdAMB8GA1UdIwQY MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6N92UHC pOWicDLuKS8GjzsiWwaoNSOrsL3VbfB35rLu23JztO94b5vx8PwOr4A4mWGbRFxQ rRjht6Tt/MUSTPUTRarwFVi6jj0gv/hYagXkOpX3cqGOmaJQ7oSX3a9srzH6M7mB 9cVrUlKoLQP/yiWwGVXtrNtTOtgVnuhehyYbRYkf3IdqO6pKYBg5QiqsSbYgzm4u evGXvRZAOu1UQ2iQVFs97uYHrwMKJrvXonuYTbzS/9PLkdXh9PIjavsDFCP67mhU LEd38CQ2jdhtAf6deSIEe+AAVDb/6z6nib27hDq2+/R2g/xKWBRKNIcscH1bdVcC elBPvP7ImG9ZlQ== -----END CERTIFICATE-----Generated at Sat Dec 13 04:55:27 2025 by rpki-client