This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json) Hash identifier: 9EZm1wgnM+gsxFgagtyKEJCNlNrK0vVyDfsAl+uN1r4= Subject key identifier: 1B:D1:0E:FF:81:6B:B6:4E:F6:EF:68:A2:63:6C:99:07:8C:A1:C5:65 Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Certificate serial: 019B4627EA6835E8D8FDD39AB3A6BCCDE2D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft Manifest number: 12D3 Signing time: Mon 22 Dec 2025 13:02:59 +0000 Manifest this update: Mon 22 Dec 2025 13:02:59 +0000 Manifest next update: Tue 23 Dec 2025 13:02:59 +0000 Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=) 2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: nU8CPWQOJ8T7uydJ0eiowuZrzFivD4tLPZd88veKGqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:ea:68:35:e8:d8:fd:d3:9a:b3:a6:bc:cd:e2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7 Validity Not Before: Dec 22 13:02:59 2025 GMT Not After : Dec 23 13:02:59 2025 GMT Subject: CN=1bd10eff816bb64ef6ef68a2636c99078ca1c565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:d5:11:5d:a3:ba:34:55:21:3e:b2:41:0b: c1:6e:fa:65:f9:68:f1:74:a4:0c:d8:5b:f8:f0:a3: 1c:72:40:b6:42:72:fd:a2:7a:a7:8e:8c:e9:c1:29: 72:56:fa:70:2f:a4:5c:90:42:2a:a0:d5:d4:be:df: c8:f6:f5:62:f8:49:2c:04:df:e0:70:51:35:14:69: 83:dd:c8:0d:0d:30:38:2e:6f:ec:f6:06:97:f6:e9: a4:e9:53:db:14:b3:6e:ac:c3:11:35:fe:92:67:69: 09:71:3f:b9:e4:b8:35:48:9e:1b:74:d2:10:df:69: 93:4f:22:1c:e8:91:f2:25:de:90:04:86:77:61:df: 16:ce:7e:22:90:00:e2:eb:d4:a3:78:fc:e3:b9:c6: 07:c0:4b:65:b6:8d:8c:4e:60:db:d3:29:24:07:35: a2:83:26:7c:17:52:7f:a5:d4:53:db:76:9c:b8:ac: b4:b3:d0:e9:80:81:b9:43:49:2d:31:bd:1e:61:51: ff:d5:71:9a:dd:b7:34:77:6b:ad:e6:24:04:38:d6: 52:ba:9f:93:9c:f4:d0:9e:f3:46:7c:49:a4:91:c7: 02:3e:1b:69:a2:7d:75:4d:cd:3b:45:1b:05:01:0d: 56:82:d6:ee:f5:07:1d:31:75:a5:0e:6c:51:c6:b8: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D1:0E:FF:81:6B:B6:4E:F6:EF:68:A2:63:6C:99:07:8C:A1:C5:65 X509v3 Authority Key Identifier: keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8a:08:86:84:fd:36:f6:d9:72:a4:4f:76:9d:f3:ac:b2:92: f1:32:2c:ab:0f:26:19:d8:89:a0:ab:3b:a9:b7:0e:75:d9:08: d9:47:b5:07:fd:dc:64:67:33:75:bf:a1:69:5d:1c:5f:95:d5: 90:ac:37:fd:74:de:ed:4f:e6:4c:1b:e6:a2:cf:48:29:bf:c5: 21:45:02:d6:47:c2:18:e4:4f:b8:14:0e:dc:f4:2d:af:c4:34: 36:9a:40:fe:52:48:3a:84:55:3c:42:d6:a8:11:97:4c:0c:d0: 4c:ae:58:e6:ef:2a:8a:21:8b:1c:c7:00:46:90:97:ec:fc:f8: dd:65:b4:1d:de:10:79:93:84:87:2c:31:08:44:5d:36:8f:d4: 24:26:d8:db:df:c8:ed:4b:cf:0e:ba:e6:97:87:00:f7:5a:3c: ea:41:ec:6a:18:93:6c:de:83:83:90:78:af:9d:2b:6d:53:dd: 75:c0:1a:40:2f:63:5e:46:58:dd:86:c9:6f:64:8d:0d:5a:69: 03:d1:64:5d:95:df:4a:84:2c:d0:bf:94:a7:dd:e1:53:3c:55: 11:63:69:7f:9c:4e:2f:cd:23:70:fb:69:6c:2e:1b:cc:a6:31: 7b:4f:96:58:0f:0c:7b:63:00:df:9c:8b:c4:0e:4c:3d:e3:9e: fd:45:7b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ+poNejY/dOas6a8zeLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzM2RmZDZjYzE0MGM2OGEzZDNiYmE4NmJhNTdjZjNiOGJh NmE5YjcwHhcNMjUxMjIyMTMwMjU5WhcNMjUxMjIzMTMwMjU5WjAzMTEwLwYDVQQD EygxYmQxMGVmZjgxNmJiNjRlZjZlZjY4YTI2MzZjOTkwNzhjYTFjNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbVEV2jujRVIT6yQQvBbvpl+Wjx dKQM2Fv48KMcckC2QnL9onqnjozpwSlyVvpwL6RckEIqoNXUvt/I9vVi+EksBN/g cFE1FGmD3cgNDTA4Lm/s9gaX9umk6VPbFLNurMMRNf6SZ2kJcT+55Lg1SJ4bdNIQ 32mTTyIc6JHyJd6QBIZ3Yd8Wzn4ikADi69SjePzjucYHwEtlto2MTmDb0ykkBzWi gyZ8F1J/pdRT23acuKy0s9DpgIG5Q0ktMb0eYVH/1XGa3bc0d2ut5iQEONZSup+T nPTQnvNGfEmkkccCPhtpon11Tc07RRsFAQ1Wgtbu9QcdMXWlDmxRxrhRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvRDv+Ba7ZO9u9oomNsmQeMocVlMB8GA1UdIwQY MBaAFFM9/WzBQMaKPTu6hrpXzzuLpqm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2Qt MmRiNDRjOTFhZTYwLzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2QtMmRiNDRjOTFhZTYw LzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIoIhoT9 NvbZcqRPdp3zrLKS8TIsqw8mGdiJoKs7qbcOddkI2Ue1B/3cZGczdb+haV0cX5XV kKw3/XTe7U/mTBvmos9IKb/FIUUC1kfCGORPuBQO3PQtr8Q0NppA/lJIOoRVPELW qBGXTAzQTK5Y5u8qiiGLHMcARpCX7Pz43WW0Hd4QeZOEhywxCERdNo/UJCbY29/I 7UvPDrrml4cA91o86kHsahiTbN6Dg5B4r50rbVPddcAaQC9jXkZY3YbJb2SNDVpp A9FkXZXfSoQs0L+Up93hUzxVEWNpf5xOL80jcPtpbC4bzKYxe0+WWA8Me2MA35yL xA5MPeOe/UV7Xw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:28:00 2025 by rpki-client