This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json) Hash identifier: bHWTrkeetCTvsAykGta3PP1FiGX9EFslO5BSW9GWmwM= Subject key identifier: D2:65:A7:5B:F1:B5:C9:AE:7F:46:11:01:53:AE:2F:EE:7F:89:F1:49 Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Certificate serial: 019B33B22F9DE645E3A1CDE20D68C2B2C82E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft Manifest number: 0A34 Signing time: Thu 18 Dec 2025 23:01:14 +0000 Manifest this update: Thu 18 Dec 2025 23:01:14 +0000 Manifest next update: Fri 19 Dec 2025 23:01:14 +0000 Files and hashes: 1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=) 2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: +ElZClrMjFI0mtoGJu46EBrmDGQPTjJ2OMvPYMqBPts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:2f:9d:e6:45:e3:a1:cd:e2:0d:68:c2:b2:c8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Validity Not Before: Dec 18 23:01:14 2025 GMT Not After : Dec 19 23:01:14 2025 GMT Subject: CN=d265a75bf1b5c9ae7f46110153ae2fee7f89f149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:8c:36:38:45:8f:82:6e:5f:8e:cf:3e:b7: fd:27:7c:a4:62:4a:44:1a:a2:47:ca:99:75:0c:26: 1d:7b:8d:c8:0d:1f:bd:f5:f9:2c:2c:ba:a5:90:6b: 17:1d:42:58:77:d5:32:54:59:10:65:1b:1f:a3:13: 0b:b7:8d:90:cb:2f:58:0b:84:5d:95:a8:e2:e2:94: db:80:bf:e3:43:2a:da:d1:5a:c9:b9:13:80:31:35: 0b:dd:c3:29:f9:35:2e:d3:15:a1:d3:96:8d:4e:f3: 62:69:73:e3:21:0a:f7:1f:93:d6:7c:91:6b:0a:f1: b2:93:68:82:9c:56:2a:df:bb:90:64:8d:1f:28:27: 00:e9:0f:0c:32:9c:2c:a1:98:59:e4:27:f9:7e:62: c0:10:81:c0:b5:e8:4e:71:6f:d9:e5:7d:c7:c4:d6: 2b:1c:b0:7f:90:39:d9:93:e5:cb:b9:a1:24:b4:d3: 2c:7f:dc:7e:f3:f7:aa:1a:74:2c:40:36:75:1c:86: ac:4a:0b:03:0c:f3:ec:82:1c:4e:6f:4e:3e:bd:03: 35:ff:5b:a1:f3:08:e4:b8:87:f3:e4:71:c0:06:bc: ad:52:8f:af:03:68:70:bf:b5:36:dd:8b:02:6d:ca: e8:8b:91:14:c7:6d:d4:52:95:1a:1a:80:e5:ac:49: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:A7:5B:F1:B5:C9:AE:7F:46:11:01:53:AE:2F:EE:7F:89:F1:49 X509v3 Authority Key Identifier: keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c0:d7:1c:c4:97:13:b0:64:07:fd:0b:d9:c0:0f:68:b0:1f: 72:60:f8:11:8e:20:95:92:60:07:e2:a0:61:ce:a6:56:5c:ee: 07:08:f9:5c:ad:b6:61:e4:0b:e1:8a:37:e1:81:0f:8b:c3:75: 5f:9c:6f:85:1f:11:4c:4f:e3:4d:ff:c5:1e:18:d1:27:79:6d: 60:6c:e3:93:c3:df:4a:42:41:f5:45:28:85:33:56:91:ef:7e: 23:31:39:bf:d1:45:2d:67:fb:54:6a:32:ca:a4:de:ba:cc:1f: 51:a2:d5:e8:f3:67:0b:d7:cd:1d:ca:b5:c0:04:d5:ba:2e:6a: 5f:38:a2:5a:95:fb:06:97:bc:e1:70:18:3c:2d:75:af:7d:db: 08:74:ec:15:07:b0:b6:84:74:9b:f7:2a:81:2c:30:bc:34:cb: bd:09:fa:13:a8:7a:1b:9e:ab:c9:79:49:ba:11:fe:db:34:32: 18:a4:a3:19:af:01:0e:13:e8:be:f8:bc:67:b7:7b:51:35:eb: ad:50:fd:ef:24:50:a0:9a:80:af:62:7d:51:c5:e7:cd:8d:4b: 11:84:d6:6e:53:89:f9:36:db:c4:09:7b:6c:72:90:97:d8:19: fa:29:de:b3:08:49:a0:d9:08:99:6c:fa:e9:06:66:3f:a9:83: a0:62:53:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsi+d5kXjoc3iDWjCssguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi NGU3NDMwHhcNMjUxMjE4MjMwMTE0WhcNMjUxMjE5MjMwMTE0WjAzMTEwLwYDVQQD EyhkMjY1YTc1YmYxYjVjOWFlN2Y0NjExMDE1M2FlMmZlZTdmODlmMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKMNjhFj4JuX47PPrf9J3ykYkpE GqJHypl1DCYde43IDR+99fksLLqlkGsXHUJYd9UyVFkQZRsfoxMLt42Qyy9YC4Rd laji4pTbgL/jQyra0VrJuROAMTUL3cMp+TUu0xWh05aNTvNiaXPjIQr3H5PWfJFr CvGyk2iCnFYq37uQZI0fKCcA6Q8MMpwsoZhZ5Cf5fmLAEIHAtehOcW/Z5X3HxNYr HLB/kDnZk+XLuaEktNMsf9x+8/eqGnQsQDZ1HIasSgsDDPPsghxOb04+vQM1/1uh 8wjkuIfz5HHABrytUo+vA2hwv7U23YsCbcroi5EUx23UUpUaGoDlrEnNuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJlp1vxtcmuf0YRAVOuL+5/ifFJMB8GA1UdIwQY MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcDXHMSX E7BkB/0L2cAPaLAfcmD4EY4glZJgB+KgYc6mVlzuBwj5XK22YeQL4Yo34YEPi8N1 X5xvhR8RTE/jTf/FHhjRJ3ltYGzjk8PfSkJB9UUohTNWke9+IzE5v9FFLWf7VGoy yqTeuswfUaLV6PNnC9fNHcq1wATVui5qXziiWpX7Bpe84XAYPC11r33bCHTsFQew toR0m/cqgSwwvDTLvQn6E6h6G56ryXlJuhH+2zQyGKSjGa8BDhPovvi8Z7d7UTXr rVD97yRQoJqAr2J9UcXnzY1LEYTWblOJ+TbbxAl7bHKQl9gZ+ineswhJoNkImWz6 6QZmP6mDoGJT6A== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:31 2025 by rpki-client