This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft File: UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json) Hash identifier: h/4Y8yJsvIK9khyuYxn1SwpJSLfinqvu0UZEGM+o4hI= Subject key identifier: CF:3A:42:62:D7:8C:87:A2:70:23:7F:B0:05:7F:6D:D3:6E:F4:1C:0C Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Certificate serial: 019B409185ACC2EEA35FA47B01857B860B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft Manifest number: 10DA Signing time: Sun 21 Dec 2025 11:00:37 +0000 Manifest this update: Sun 21 Dec 2025 11:00:37 +0000 Manifest next update: Mon 22 Dec 2025 11:00:37 +0000 Files and hashes: 1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: KUDgqNTgJwCoH/dZktNGcyhbY4yEEhcVYgJW7y5Ai44=) 2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:85:ac:c2:ee:a3:5f:a4:7b:01:85:7b:86:0b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Validity Not Before: Dec 21 11:00:37 2025 GMT Not After : Dec 22 11:00:37 2025 GMT Subject: CN=cf3a4262d78c87a270237fb0057f6dd36ef41c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:fc:0a:89:36:71:93:33:3b:76:ea:d3:d6: aa:bc:15:84:6e:da:41:2b:14:c1:41:0b:fe:f3:8b: a1:3c:67:f2:34:14:81:08:30:22:36:0b:28:b9:ad: 06:c8:99:68:0b:33:48:13:30:14:ea:d1:25:3f:2d: 87:8a:5d:9a:62:be:76:8f:f8:32:76:6d:a6:18:0b: 3d:17:16:f0:d3:6b:fd:22:54:c0:48:99:46:c5:11: ef:a7:24:32:08:66:9b:39:60:03:2f:91:b5:e7:6f: 35:81:cb:d6:71:fb:50:d7:a8:74:06:84:45:6d:4d: d1:89:2f:48:54:f6:4e:5b:e1:4c:b9:9b:4d:23:3d: 07:e4:32:3d:60:85:94:ad:ad:05:05:91:d3:b2:79: f8:3b:7b:9e:15:dd:9f:f0:30:eb:be:9b:d5:92:fa: b1:05:bc:c5:71:c3:61:36:7d:cd:fc:7d:79:8a:de: a5:11:c3:58:f3:68:37:39:1c:c0:22:dc:ea:b8:a4: 48:3c:cc:23:c1:19:65:63:a7:90:24:57:2c:77:c8: 3d:8b:c5:8e:2d:db:e0:3f:ec:c8:c9:51:93:c1:a3: cb:b1:2c:4a:2e:b5:0a:07:15:09:be:b3:f1:ac:4e: f5:cc:cf:5c:33:4e:df:d9:71:8a:6b:2b:3d:ac:3c: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:42:62:D7:8C:87:A2:70:23:7F:B0:05:7F:6D:D3:6E:F4:1C:0C X509v3 Authority Key Identifier: keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:95:fc:f0:11:16:a7:13:01:a2:da:03:6f:d7:57:8f:a7:dc: 4a:b1:78:b7:a7:1d:5b:2f:29:59:f9:e5:9f:05:a1:52:d2:96: b3:36:dd:da:6f:a6:e0:9d:1c:a4:e2:cb:97:b3:69:34:80:29: 50:d6:8d:2f:ea:fa:10:cc:bf:21:a9:64:e1:83:ea:5a:aa:e4: 67:d8:f9:98:6b:c9:52:ec:0f:8c:25:2b:f2:63:89:b5:f2:1e: f4:3c:b9:be:af:77:80:90:05:52:c5:95:fd:9b:9c:df:b1:21: 19:b4:30:d6:aa:63:ad:3a:fa:99:3a:46:6a:97:18:e3:4e:2b: 02:80:56:3e:78:50:98:f6:4d:c2:78:82:59:8d:66:8f:7f:ce: 41:21:0a:52:46:a8:90:46:0c:0b:58:11:7a:56:44:ac:14:1f: 03:bf:df:89:11:01:1a:84:63:ae:a7:1f:f4:77:f6:a8:95:c5: 70:fe:68:84:d7:2c:f6:fb:04:3b:02:16:62:c4:f8:9b:b4:9a: 44:c9:2c:1c:03:93:be:e1:64:3e:d7:a7:bb:ce:a8:8d:5f:51: 6a:48:60:42:7a:a9:fb:39:48:55:bf:af:79:bb:ac:8f:2d:12: 5f:54:90:0d:83:4b:86:c4:3f:b4:bd:47:3c:14:e1:ee:87:95: 75:02:00:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYWswu6jX6R7AYV7hgsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMjQxNDQ5MmJiMmNmYTQwOGZmNTczYWEwNjhmY2Y5YTVl Nzc4ZWUwHhcNMjUxMjIxMTEwMDM3WhcNMjUxMjIyMTEwMDM3WjAzMTEwLwYDVQQD EyhjZjNhNDI2MmQ3OGM4N2EyNzAyMzdmYjAwNTdmNmRkMzZlZjQxYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn78Cok2cZMzO3bq09aqvBWEbtpB KxTBQQv+84uhPGfyNBSBCDAiNgsoua0GyJloCzNIEzAU6tElPy2Hil2aYr52j/gy dm2mGAs9Fxbw02v9IlTASJlGxRHvpyQyCGabOWADL5G15281gcvWcftQ16h0BoRF bU3RiS9IVPZOW+FMuZtNIz0H5DI9YIWUra0FBZHTsnn4O3ueFd2f8DDrvpvVkvqx BbzFccNhNn3N/H15it6lEcNY82g3ORzAItzquKRIPMwjwRllY6eQJFcsd8g9i8WO LdvgP+zIyVGTwaPLsSxKLrUKBxUJvrPxrE71zM9cM07f2XGKays9rDzp7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM86QmLXjIeicCN/sAV/bdNu9BwMMB8GA1UdIwQY MBaAFFMkFEkrss+kCP9XOqBo/Pml53juMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYt Y2Q2NzY2YzM2OWExLzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYtY2Q2NzY2YzM2OWEx LzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJX88BEW pxMBotoDb9dXj6fcSrF4t6cdWy8pWfnlnwWhUtKWszbd2m+m4J0cpOLLl7NpNIAp UNaNL+r6EMy/Ialk4YPqWqrkZ9j5mGvJUuwPjCUr8mOJtfIe9Dy5vq93gJAFUsWV /Zuc37EhGbQw1qpjrTr6mTpGapcY404rAoBWPnhQmPZNwniCWY1mj3/OQSEKUkao kEYMC1gRelZErBQfA7/fiREBGoRjrqcf9Hf2qJXFcP5ohNcs9vsEOwIWYsT4m7Sa RMksHAOTvuFkPtenu86ojV9RakhgQnqp+zlIVb+vebusjy0SX1SQDYNLhsQ/tL1H PBTh7oeVdQIAHw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:24 2025 by rpki-client