This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json) Hash identifier: 7qGg/udQVE/s1S5kAZhQSkcKmCsxy8JDVY6sbvnZuv0= Subject key identifier: FD:9A:08:3B:5E:50:4F:F7:D1:9E:E9:86:5B:93:19:B1:7E:41:4F:91 Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c Certificate serial: 019B5976DFCF464DB710972EF938C39C640A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:02:01 +0000 Manifest this update: Fri 26 Dec 2025 07:02:01 +0000 Manifest next update: Sat 27 Dec 2025 07:02:01 +0000 Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: d4UjCAuIpUO+xVfY+ZE52EnFCBHnUB/x0XHGnDKED0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:df:cf:46:4d:b7:10:97:2e:f9:38:c3:9c:64:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c Validity Not Before: Dec 26 07:02:01 2025 GMT Not After : Dec 27 07:02:01 2025 GMT Subject: CN=fd9a083b5e504ff7d19ee9865b9319b17e414f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:16:7d:bf:01:ad:bf:b6:01:16:32:77:a5: 38:71:7c:e9:ac:c3:31:1a:9e:77:ee:34:fd:2f:bf: ed:6a:c6:17:40:86:54:39:d0:8a:57:58:bd:fc:00: 71:e4:e6:c0:b0:0a:7d:bc:44:ed:49:04:45:36:49: 3e:14:fd:71:99:d0:f6:6f:10:6e:ef:fc:2a:7f:f6: 52:f3:a2:86:c7:74:14:67:78:af:e8:d5:a8:15:80: 31:3e:c1:96:49:12:83:26:4a:c6:83:30:26:23:4e: 66:cb:95:6c:93:fe:ef:b5:2f:47:c3:03:cb:51:b3: b4:0a:c8:4b:87:73:40:6a:3f:59:a6:79:27:d1:e2: 94:4e:1b:c9:02:49:e5:ef:30:eb:60:c8:63:ff:c2: c5:6f:eb:1e:9c:a3:71:0b:cd:ee:27:3a:7a:74:a6: dc:af:6a:3a:f2:be:bd:2d:d6:e5:98:36:f1:74:f0: 9f:1a:0c:0a:62:ef:aa:60:4e:16:ce:6e:62:44:1b: e8:19:83:49:67:e7:91:f4:0f:48:07:60:2b:de:9c: f7:6b:ce:50:91:4b:63:b8:e1:47:f3:09:7b:19:e5: 47:b6:e9:61:16:d4:15:77:97:89:ce:63:24:ab:c5: 5b:fa:87:77:e5:15:12:b2:f1:51:72:8a:f8:6b:aa: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9A:08:3B:5E:50:4F:F7:D1:9E:E9:86:5B:93:19:B1:7E:41:4F:91 X509v3 Authority Key Identifier: keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b2:91:08:23:e8:3d:e4:6d:c0:eb:ae:1f:4f:e4:ea:56:fd: 6c:76:8a:5f:c9:2e:24:94:14:f8:7a:c0:21:26:3a:6c:17:27: f0:c3:71:f1:12:75:17:a4:79:48:de:ee:81:89:74:48:83:d3: 28:2c:df:7d:0f:9c:ea:d9:0c:b6:ba:b3:c3:da:5a:3b:98:08: f5:96:25:70:08:73:e3:2d:2c:2f:5c:5a:1c:dc:ee:18:e4:57: 05:31:46:1a:19:24:75:a1:a9:7f:6a:62:b7:dc:01:0b:73:1b: cf:e9:f7:2d:8e:77:91:71:b8:a2:a1:98:69:23:2e:28:d0:5a: eb:d4:7f:91:3f:d8:68:6b:a2:24:01:c1:7a:0a:b7:c7:12:e3: 56:a7:ea:b8:7c:7f:15:db:40:a4:e7:f7:0b:44:82:ac:39:53: d9:a0:e8:63:5b:22:bc:1b:64:1a:2f:82:11:a2:85:89:4f:46: 69:d7:52:2b:56:bc:dd:af:d7:6a:b9:c6:d7:76:b3:b8:36:fc: 18:37:88:9a:1d:71:11:bf:24:47:fa:a7:76:cf:b7:f0:0a:11: 03:a7:d9:ae:3f:c1:ba:d4:ef:9f:75:06:62:73:8e:f9:26:da: 7e:ce:c2:1d:d9:f8:93:31:4f:1d:e2:97:6d:d8:bb:15:ec:53: 51:8a:57:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdt/PRk23EJcu+TjDnGQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMmUyMWM5ZGY2ZDUyZmRhYzRhZTNiMGM4NzM5NjhlZjA5 ZWIyN2MwHhcNMjUxMjI2MDcwMjAxWhcNMjUxMjI3MDcwMjAxWjAzMTEwLwYDVQQD EyhmZDlhMDgzYjVlNTA0ZmY3ZDE5ZWU5ODY1YjkzMTliMTdlNDE0ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYWfb8Brb+2ARYyd6U4cXzprMMx Gp537jT9L7/tasYXQIZUOdCKV1i9/ABx5ObAsAp9vETtSQRFNkk+FP1xmdD2bxBu 7/wqf/ZS86KGx3QUZ3iv6NWoFYAxPsGWSRKDJkrGgzAmI05my5Vsk/7vtS9HwwPL UbO0CshLh3NAaj9Zpnkn0eKUThvJAknl7zDrYMhj/8LFb+senKNxC83uJzp6dKbc r2o68r69LdblmDbxdPCfGgwKYu+qYE4Wzm5iRBvoGYNJZ+eR9A9IB2Ar3pz3a85Q kUtjuOFH8wl7GeVHtulhFtQVd5eJzmMkq8Vb+od35RUSsvFRcor4a6rNOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2aCDteUE/30Z7phluTGbF+QU+RMB8GA1UdIwQY MBaAFFMuIcnfbVL9rErjsMhzlo7wnrJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2It MDY0ZTBiMGVhYzNhLzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2ItMDY0ZTBiMGVhYzNh LzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrKRCCPo PeRtwOuuH0/k6lb9bHaKX8kuJJQU+HrAISY6bBcn8MNx8RJ1F6R5SN7ugYl0SIPT KCzffQ+c6tkMtrqzw9paO5gI9ZYlcAhz4y0sL1xaHNzuGORXBTFGGhkkdaGpf2pi t9wBC3Mbz+n3LY53kXG4oqGYaSMuKNBa69R/kT/YaGuiJAHBegq3xxLjVqfquHx/ FdtApOf3C0SCrDlT2aDoY1sivBtkGi+CEaKFiU9GaddSK1a83a/XarnG13azuDb8 GDeImh1xEb8kR/qnds+38AoRA6fZrj/ButTvn3UGYnOO+Sbafs7CHdn4kzFPHeKX bdi7FexTUYpXag== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client