This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json) Hash identifier: 5ocqfwoYeBWxVPu4TxRBO6duAHjPsXdp5pIPiue6JLA= Subject key identifier: CD:C6:F0:90:CC:17:02:30:FC:8B:09:2B:0F:D4:5D:4B:1D:E4:45:4E Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Certificate serial: 019B4A04819FDDB1FD2DA714D95AB084A508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft Manifest number: 12D5 Signing time: Tue 23 Dec 2025 07:02:47 +0000 Manifest this update: Tue 23 Dec 2025 07:02:47 +0000 Manifest next update: Wed 24 Dec 2025 07:02:47 +0000 Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=) 2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: kkOl09+FkMnh0qjT07XVFYYptJtdXws5CbyqeeWN8jM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:81:9f:dd:b1:fd:2d:a7:14:d9:5a:b0:84:a5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Validity Not Before: Dec 23 07:02:47 2025 GMT Not After : Dec 24 07:02:47 2025 GMT Subject: CN=cdc6f090cc170230fc8b092b0fd45d4b1de4454e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:2f:65:01:07:0b:18:83:22:d9:f2:c4:ab: 00:fa:fe:82:80:45:bb:34:e6:18:14:d2:10:63:17: ee:39:ca:46:30:8d:63:5c:fe:0d:30:99:92:c5:d6: 73:ea:fa:5f:70:38:d9:0e:53:f5:74:9c:3e:61:82: 1e:6e:9c:5b:c2:83:66:d2:06:33:59:94:be:6d:25: 6f:e2:65:7f:e7:fd:23:2e:68:62:a0:05:a1:3f:d8: 6e:a9:f2:e4:5a:77:7f:46:a3:e4:18:86:bb:7c:4a: aa:ab:3c:1d:00:22:5e:5b:c8:d5:eb:86:84:8a:61: f7:11:0e:0d:38:c6:9a:99:c5:e9:3b:38:32:10:8f: 2c:4d:27:aa:3a:26:54:02:76:4f:f7:34:a3:32:09: fa:c5:17:d5:18:05:e5:c3:04:8f:39:29:f9:cf:bb: bd:d2:6b:23:a8:b5:bf:2b:01:97:6f:89:9b:39:41: 5f:f0:d0:55:a6:69:b6:74:31:60:86:77:17:f3:e8: 97:60:30:96:f1:55:f3:40:91:4e:f8:bc:1d:7a:61: 45:c1:5d:63:bf:98:ca:18:e4:bb:6e:b3:be:12:e5: 53:4a:ba:69:42:9e:46:72:fe:e9:d5:6b:8d:72:f3: 69:ca:17:e1:a9:e6:e5:f8:71:33:54:d0:10:20:d2: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C6:F0:90:CC:17:02:30:FC:8B:09:2B:0F:D4:5D:4B:1D:E4:45:4E X509v3 Authority Key Identifier: keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e3:85:98:8e:13:15:1b:ea:88:12:72:76:59:0b:a1:16:b6: 11:d4:b6:11:1a:a7:70:b5:d8:cc:2c:ea:dc:8b:78:92:61:95: 7d:91:39:57:a9:5d:ff:eb:68:f7:f2:b5:67:6f:ca:15:26:6d: fb:09:04:d1:82:c0:80:13:31:32:90:5e:6c:ce:f0:cc:97:75: 86:a9:93:29:18:b9:f4:36:aa:a2:69:63:01:cc:7e:9e:4b:2a: e7:bb:db:0e:18:2c:0c:53:02:bb:e5:89:46:bb:30:fb:db:1d: f1:a9:04:6c:32:5c:92:83:07:98:32:a2:8d:eb:88:48:9a:01: 47:dc:88:8a:f7:98:57:61:c9:cc:81:a9:a2:15:95:cc:bc:4b: 65:22:b3:46:be:b2:2a:2c:14:60:d4:ce:35:68:02:2b:e5:20: 79:f8:94:da:e0:d6:aa:10:b7:5e:a5:53:dc:08:d3:13:ee:30: 30:1d:59:f0:4f:05:7d:e1:fe:49:2e:3d:e9:01:32:f4:a0:80: c9:ee:f9:7d:2b:29:30:f2:cb:52:86:37:67:be:6a:61:51:6a: 5d:1c:ce:6c:6f:96:d5:42:ac:20:3c:9e:6e:03:69:39:e7:eb: 05:c0:ea:b1:13:2d:1c:ec:78:4d:bc:b7:2e:4d:e1:ef:7d:6e: 34:0f:a9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBIGf3bH9LacU2VqwhKUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2RmZDZjYzE0MGM2OGEzZDNiYmE4NmJhNTdjZjNiOGJh NmE5YjcwHhcNMjUxMjIzMDcwMjQ3WhcNMjUxMjI0MDcwMjQ3WjAzMTEwLwYDVQQD EyhjZGM2ZjA5MGNjMTcwMjMwZmM4YjA5MmIwZmQ0NWQ0YjFkZTQ0NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7QvZQEHCxiDItnyxKsA+v6CgEW7 NOYYFNIQYxfuOcpGMI1jXP4NMJmSxdZz6vpfcDjZDlP1dJw+YYIebpxbwoNm0gYz WZS+bSVv4mV/5/0jLmhioAWhP9huqfLkWnd/RqPkGIa7fEqqqzwdACJeW8jV64aE imH3EQ4NOMaamcXpOzgyEI8sTSeqOiZUAnZP9zSjMgn6xRfVGAXlwwSPOSn5z7u9 0msjqLW/KwGXb4mbOUFf8NBVpmm2dDFghncX8+iXYDCW8VXzQJFO+LwdemFFwV1j v5jKGOS7brO+EuVTSrppQp5Gcv7p1WuNcvNpyhfhqebl+HEzVNAQINKS1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3G8JDMFwIw/IsJKw/UXUsd5EVOMB8GA1UdIwQY MBaAFFM9/WzBQMaKPTu6hrpXzzuLpqm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2Qt MmRiNDRjOTFhZTYwLzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2QtMmRiNDRjOTFhZTYw LzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROOFmI4T FRvqiBJydlkLoRa2EdS2ERqncLXYzCzq3It4kmGVfZE5V6ld/+to9/K1Z2/KFSZt +wkE0YLAgBMxMpBebM7wzJd1hqmTKRi59DaqomljAcx+nksq57vbDhgsDFMCu+WJ Rrsw+9sd8akEbDJckoMHmDKijeuISJoBR9yIiveYV2HJzIGpohWVzLxLZSKzRr6y KiwUYNTONWgCK+UgefiU2uDWqhC3XqVT3AjTE+4wMB1Z8E8FfeH+SS496QEy9KCA ye75fSspMPLLUoY3Z75qYVFqXRzObG+W1UKsIDyebgNpOefrBcDqsRMtHOx4Tby3 Lk3h731uNA+pqA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:43:04 2025 by rpki-client