This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json) Hash identifier: ZHX1s7Gop2R3/LjAejs4+1yG8QyKBKXrqehAhjEA0Tg= Subject key identifier: AF:82:7B:E2:2F:95:C4:4B:79:5F:0E:9A:42:3F:16:9E:11:03:95:05 Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03 Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503 Certificate serial: 019B3C108CF3BED3E33E5C3C3C9479454B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft Manifest number: 0641 Signing time: Sat 20 Dec 2025 14:01:16 +0000 Manifest this update: Sat 20 Dec 2025 14:01:16 +0000 Manifest next update: Sun 21 Dec 2025 14:01:16 +0000 Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=) 2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: II2VBVE4XjWqUy2t2x56IlVrCwFzGWA37GCfqRPqvMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:8c:f3:be:d3:e3:3e:5c:3c:3c:94:79:45:4b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503 Validity Not Before: Dec 20 14:01:16 2025 GMT Not After : Dec 21 14:01:16 2025 GMT Subject: CN=af827be22f95c44b795f0e9a423f169e11039505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:48:ee:b6:80:8f:1d:d4:29:04:5c:25:72: 7e:06:b0:17:fd:35:b0:79:21:3f:f5:87:c2:76:99: f6:ad:cb:d3:05:1f:57:89:3f:de:9f:36:7f:c7:d0: 7a:1b:a9:22:db:7b:12:ca:5f:91:71:a2:8e:5c:c5: a0:6f:bf:2b:c2:38:c4:ac:d9:80:f6:d0:f5:ca:51: 7a:a4:c2:7a:9a:c6:28:6e:bd:e9:35:4d:79:3c:f0: 80:3e:00:0e:ae:06:e0:76:8f:9a:f5:de:8c:8e:a5: a2:d7:89:2f:ed:91:7a:5b:f6:58:c5:1b:87:a8:43: b0:8c:7d:dc:4a:27:29:16:0d:23:5a:b4:7d:04:2f: 6f:63:31:47:b8:ff:88:c9:0c:5b:12:3b:75:a0:a5: 60:95:ef:d1:36:76:bc:41:ef:1f:9c:14:c8:04:46: f6:a2:61:37:1a:c8:e4:c9:6f:70:67:ed:eb:08:31: 0b:69:f4:72:d8:74:40:3a:5a:8d:31:5d:ec:4a:64: 1c:02:eb:04:1d:07:a4:91:51:c4:00:e7:98:85:ce: 28:a1:8e:0a:eb:60:52:0e:86:48:03:8e:d5:d3:16: dd:0c:7a:f0:d1:2c:0e:fb:40:bc:57:c7:0f:8f:6a: 33:e5:b6:2f:11:2a:33:09:e2:50:19:75:2d:f0:e6: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:7B:E2:2F:95:C4:4B:79:5F:0E:9A:42:3F:16:9E:11:03:95:05 X509v3 Authority Key Identifier: keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:b3:11:97:fd:96:91:e9:07:10:73:36:ed:e7:37:8e:65: f0:c4:e1:67:f5:d6:22:49:aa:1e:df:04:97:88:dd:f6:91:b0: 3a:e7:ce:6e:f1:03:39:fd:47:59:17:ca:d0:aa:7a:af:83:87: 6d:9c:34:d8:37:f4:8b:59:89:35:b2:00:f2:d5:2b:79:7e:b8: 8a:c0:92:15:99:a9:1f:4d:cc:fb:25:53:fb:ad:67:b2:46:8e: c5:86:c1:08:ab:44:2e:fb:24:3f:75:8f:e8:14:d1:ca:ca:8e: fc:9c:09:86:8c:31:d5:8d:4a:59:7e:af:b4:39:dc:98:3a:4c: ca:02:e0:31:a5:ef:05:3d:e7:92:22:8e:0c:47:76:db:39:69: b4:5f:54:19:ee:4c:74:e7:2a:7f:21:55:c9:b2:f0:f6:23:a6: 45:ab:f6:14:9b:d6:7a:e9:c0:24:41:84:5c:5b:c1:d0:c4:c4: 11:e9:c4:48:fc:e0:b0:93:94:4e:cd:00:8d:77:f2:25:12:b7: 3e:12:db:53:4c:f2:f4:2e:4e:a5:e2:d0:2a:9e:3d:83:29:8d: 02:51:26:4f:75:8a:c5:b7:f8:8e:7f:a4:7f:6e:b6:7a:62:0c: b1:0f:ca:42:9a:38:ff:34:39:2b:41:53:7a:23:3c:ad:bf:78: 5d:86:e9:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIzzvtPjPlw8PJR5RUuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzE2NmUzZjcwOWZiM2JhY2E5YWU3OWFjYmVjNmNhMWQw ZmM1MDMwHhcNMjUxMjIwMTQwMTE2WhcNMjUxMjIxMTQwMTE2WjAzMTEwLwYDVQQD EyhhZjgyN2JlMjJmOTVjNDRiNzk1ZjBlOWE0MjNmMTY5ZTExMDM5NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZI7raAjx3UKQRcJXJ+BrAX/TWw eSE/9YfCdpn2rcvTBR9XiT/enzZ/x9B6G6ki23sSyl+RcaKOXMWgb78rwjjErNmA 9tD1ylF6pMJ6msYobr3pNU15PPCAPgAOrgbgdo+a9d6MjqWi14kv7ZF6W/ZYxRuH qEOwjH3cSicpFg0jWrR9BC9vYzFHuP+IyQxbEjt1oKVgle/RNna8Qe8fnBTIBEb2 omE3GsjkyW9wZ+3rCDELafRy2HRAOlqNMV3sSmQcAusEHQekkVHEAOeYhc4ooY4K 62BSDoZIA47V0xbdDHrw0SwO+0C8V8cPj2oz5bYvESozCeJQGXUt8ObzXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+Ce+IvlcRLeV8OmkI/Fp4RA5UFMB8GA1UdIwQY MBaAFFMxZuP3Cfs7rKmueay+xsodD8UDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQt ZTRiYmY0YzBkYjU5LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wOTE5MTEtMDZkOC00NWM4LWIwNWQtZTRiYmY0YzBkYjU5 LzEvVXpGbTRfY0otenVzcWE1NXJMN0d5aDBQeFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjWzEZf9 lpHpBxBzNu3nN45l8MThZ/XWIkmqHt8El4jd9pGwOufObvEDOf1HWRfK0Kp6r4OH bZw02Df0i1mJNbIA8tUreX64isCSFZmpH03M+yVT+61nskaOxYbBCKtELvskP3WP 6BTRysqO/JwJhowx1Y1KWX6vtDncmDpMygLgMaXvBT3nkiKODEd22zlptF9UGe5M dOcqfyFVybLw9iOmRav2FJvWeunAJEGEXFvB0MTEEenESPzgsJOUTs0AjXfyJRK3 PhLbU0zy9C5OpeLQKp49gymNAlEmT3WKxbf4jn+kf262emIMsQ/KQpo4/zQ5K0FT eiM8rb94XYbpVw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:35 2025 by rpki-client