This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json) Hash identifier: bzXK5+QR8RvdhWTscQ2toQq+Vf5eD97XHhhH02NedOY= Subject key identifier: 30:32:83:39:C6:90:26:0D:5B:A5:86:F0:74:10:5F:09:14:A7:02:58 Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Certificate serial: 019B59778B4C889BAC643070A68DA5C93515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft Manifest number: 1476 Signing time: Fri 26 Dec 2025 07:02:45 +0000 Manifest this update: Fri 26 Dec 2025 07:02:45 +0000 Manifest next update: Sat 27 Dec 2025 07:02:45 +0000 Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: SkLoKTo2twNING/9jdxKxJqBNeCcd2DRwemq5i/81Ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:8b:4c:88:9b:ac:64:30:70:a6:8d:a5:c9:35:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Validity Not Before: Dec 26 07:02:45 2025 GMT Not After : Dec 27 07:02:45 2025 GMT Subject: CN=30328339c690260d5ba586f074105f0914a70258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:60:6c:51:47:6b:d8:c6:54:37:bf:0c:20: 14:d5:ff:35:18:13:f0:33:0d:df:10:da:ee:a6:67: be:68:d9:b6:21:19:bf:70:0f:b2:72:47:0d:45:5a: 0d:54:47:ae:36:73:bf:ef:b9:df:a8:37:b8:e7:16: 13:ab:5b:c0:d5:76:a4:e4:d9:66:60:48:7e:2b:63: 0a:a4:df:9b:a8:6c:3a:69:b5:25:6f:01:da:cd:2f: d9:1a:28:4c:6a:1f:43:45:9d:b2:61:0c:9f:db:83: a8:c3:b3:a8:87:59:c6:74:a4:8f:df:1b:f1:8f:a3: cf:02:48:9e:04:77:81:b7:2a:da:94:b2:ff:7f:e9: 80:30:d7:c4:4d:27:cc:0f:2c:1b:15:f5:99:c4:c3: 8d:9a:cd:fb:74:b3:7a:88:bd:f5:a7:ed:a1:fb:fa: aa:6e:9b:9a:21:b2:af:88:5c:bd:06:fc:69:4f:72: ce:32:c0:25:86:f6:4f:e7:e4:0a:77:a6:71:1d:92: 4b:88:64:84:29:2a:f1:2b:ad:94:0b:5d:ad:b6:92: 4c:2f:64:e0:89:d6:3d:5c:9c:37:ca:ca:36:d8:b6: bd:ae:52:78:2e:9e:59:ee:1f:77:57:a5:15:01:a4: 84:53:96:47:7d:cd:cc:a8:36:c3:3f:c8:7f:8e:8e: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:32:83:39:C6:90:26:0D:5B:A5:86:F0:74:10:5F:09:14:A7:02:58 X509v3 Authority Key Identifier: keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3f:b0:52:d6:df:88:74:96:03:1d:46:2f:b3:05:f9:fa:95: fe:d1:9e:80:4e:2e:ce:a1:59:d6:1d:4b:f0:08:b7:1e:92:5e: 23:58:4b:91:45:5c:5e:f3:82:07:0b:25:1e:9b:a8:81:57:0d: 26:ba:b1:49:6b:e1:f9:6d:30:4f:2c:8a:b4:f2:26:90:cf:8f: a8:06:b8:bb:53:61:44:15:f3:e8:41:c1:e4:70:54:93:e3:69: 0e:a4:31:06:03:17:e0:c4:51:d4:bc:42:12:40:8b:a9:3a:b4: 9e:e2:45:d3:37:0d:ad:6c:43:4d:75:e8:7d:5e:69:b5:bd:7b: 0e:cc:50:8d:8b:eb:92:d5:68:4b:fd:2b:80:25:a1:44:b1:df: 23:a6:1e:73:93:9b:a3:f5:e8:7d:07:d9:10:83:69:8b:2d:6b: 8a:fd:dc:da:59:90:c0:1c:e9:9f:99:a5:cc:cb:88:cf:0a:1d: 1c:9c:59:d3:1f:08:59:9f:2d:e2:01:2a:cf:97:a5:83:ea:ed: c9:2f:94:83:83:05:1c:8a:1d:27:74:55:98:34:59:a7:48:2e: e6:cd:d1:a5:0e:da:71:cd:ae:79:a4:c8:35:d1:8d:95:ec:ae: b4:cd:b8:b9:f6:80:b4:5f:cf:c8:c0:e6:49:a6:dd:90:f6:c7: f5:69:d6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4tMiJusZDBwpo2lyTUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy Y2I3ZmIwHhcNMjUxMjI2MDcwMjQ1WhcNMjUxMjI3MDcwMjQ1WjAzMTEwLwYDVQQD EygzMDMyODMzOWM2OTAyNjBkNWJhNTg2ZjA3NDEwNWYwOTE0YTcwMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd5gbFFHa9jGVDe/DCAU1f81GBPw Mw3fENrupme+aNm2IRm/cA+yckcNRVoNVEeuNnO/77nfqDe45xYTq1vA1Xak5Nlm YEh+K2MKpN+bqGw6abUlbwHazS/ZGihMah9DRZ2yYQyf24Oow7Ooh1nGdKSP3xvx j6PPAkieBHeBtyralLL/f+mAMNfETSfMDywbFfWZxMONms37dLN6iL31p+2h+/qq bpuaIbKviFy9BvxpT3LOMsAlhvZP5+QKd6ZxHZJLiGSEKSrxK62UC12ttpJML2Tg idY9XJw3yso22La9rlJ4Lp5Z7h93V6UVAaSEU5ZHfc3MqDbDP8h/jo4v2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAygznGkCYNW6WG8HQQXwkUpwJYMB8GA1UdIwQY MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz+wUtbf iHSWAx1GL7MF+fqV/tGegE4uzqFZ1h1L8Ai3HpJeI1hLkUVcXvOCBwslHpuogVcN JrqxSWvh+W0wTyyKtPImkM+PqAa4u1NhRBXz6EHB5HBUk+NpDqQxBgMX4MRR1LxC EkCLqTq0nuJF0zcNrWxDTXXofV5ptb17DsxQjYvrktVoS/0rgCWhRLHfI6Yec5Ob o/XofQfZEINpiy1riv3c2lmQwBzpn5mlzMuIzwodHJxZ0x8IWZ8t4gEqz5elg+rt yS+Ug4MFHIodJ3RVmDRZp0gu5s3RpQ7acc2ueaTINdGNleyutM24ufaAtF/PyMDm SabdkPbH9WnWhw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:25 2025 by rpki-client