This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json) Hash identifier: X5XWyvxYPfz912GAzvHhT5SKpli1QMIrCI9MrjXizRA= Subject key identifier: 7B:7A:10:E5:6C:97:ED:17:FD:7A:89:66:A9:B6:B6:60:6A:66:04:8E Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Certificate serial: 019B39EB46008888671632EB1AFD90F93824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft Manifest number: 166E Signing time: Sat 20 Dec 2025 04:01:18 +0000 Manifest this update: Sat 20 Dec 2025 04:01:18 +0000 Manifest next update: Sun 21 Dec 2025 04:01:18 +0000 Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: HuuWyAWNSybMTulAV8Qu8E2SlRStSeeaSq4b/HU/Qw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:46:00:88:88:67:16:32:eb:1a:fd:90:f9:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Validity Not Before: Dec 20 04:01:18 2025 GMT Not After : Dec 21 04:01:18 2025 GMT Subject: CN=7b7a10e56c97ed17fd7a8966a9b6b6606a66048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:8a:d9:de:36:c8:90:75:c8:fd:24:a5:23: 63:50:1f:ba:2b:92:22:37:37:6a:60:b9:3d:37:0f: ef:05:a7:97:57:ed:0e:11:16:44:aa:fb:a6:cf:f9: 06:c1:b4:a5:8d:09:28:df:cd:1a:28:5f:d8:f5:04: 6e:7a:2c:2f:15:db:27:ff:0a:85:5f:90:d7:18:92: 49:50:f0:c7:a8:e6:93:70:ee:cf:3e:c2:86:81:c5: 00:f7:f1:5e:8c:a0:a5:e8:80:3e:88:fe:24:2c:cd: 28:12:15:8c:0b:69:58:3f:c3:19:19:d0:8a:34:eb: 04:ad:a6:77:71:1c:fe:c5:09:06:41:f2:df:36:64: b9:15:77:e2:ff:75:ad:2e:ab:07:f2:3f:37:41:6b: b9:eb:f8:6a:8d:4c:b3:ef:e6:04:56:dd:ba:b7:3c: 06:47:f2:a8:4e:7b:96:a1:6d:9a:10:2c:da:79:49: 66:03:97:9a:bd:f2:5a:24:1f:e4:8c:2d:9d:b7:54: 55:57:06:40:15:be:9a:b5:e8:eb:3e:78:61:b0:f3: c3:90:9a:e8:d3:1c:4e:77:2e:45:0c:08:2c:0c:27: 9e:0f:d7:a1:5f:d2:58:40:89:3c:f5:0b:65:7b:29: de:94:5b:0b:6a:e5:a5:fb:e8:63:3c:d3:b8:61:ff: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:10:E5:6C:97:ED:17:FD:7A:89:66:A9:B6:B6:60:6A:66:04:8E X509v3 Authority Key Identifier: keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:2c:01:df:fc:51:b6:b9:7d:00:4c:9f:f7:e1:7c:ff:dd: 35:92:a2:75:97:e7:a7:07:21:84:5a:d7:61:d9:28:a7:37:c9: 28:fd:e5:6c:5d:5f:b4:f3:2e:73:b1:9d:d9:d2:81:ea:f3:fe: 6f:3e:93:88:5e:b8:cc:5b:ec:56:5d:ed:fc:bc:23:c5:66:91: 0a:12:a4:3d:c9:9a:6e:33:7b:56:3f:28:8a:ea:8c:4e:d7:81: 46:6d:0c:74:e3:8d:90:d3:94:12:c9:8d:57:3c:a1:05:1a:4f: 71:cf:a7:67:9a:30:68:35:97:6f:5a:68:3b:e1:80:82:6e:89: 90:32:5c:88:f1:e0:83:03:44:a4:58:a0:a6:17:23:00:4a:d7: b6:eb:ae:90:43:37:37:66:d2:83:8b:76:17:c4:06:47:10:af: cd:e2:e6:09:cd:ca:f1:55:9a:bf:ec:6c:d1:e0:33:f4:b7:6d: 9b:30:0c:5e:c4:a0:5e:fc:5c:e8:3a:43:11:93:dd:0a:74:dd: 40:ab:50:84:b7:46:ac:e2:7d:2f:b6:49:7a:52:d7:9b:ef:76: d7:a6:57:ea:1b:78:78:11:a1:bb:29:57:1a:a3:c2:b8:d5:cf: b5:bc:63:41:a3:31:26:68:fe:86:17:f9:85:72:a1:0d:a2:57: c1:64:7f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560YAiIhnFjLrGv2Q+TgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGIyMmQyMjgwYTE3ZDBkNTRjNjg2YzliNDMzZjBiNWI1 ODAyNGYwHhcNMjUxMjIwMDQwMTE4WhcNMjUxMjIxMDQwMTE4WjAzMTEwLwYDVQQD Eyg3YjdhMTBlNTZjOTdlZDE3ZmQ3YTg5NjZhOWI2YjY2MDZhNjYwNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OGK2d42yJB1yP0kpSNjUB+6K5Ii NzdqYLk9Nw/vBaeXV+0OERZEqvumz/kGwbSljQko380aKF/Y9QRueiwvFdsn/wqF X5DXGJJJUPDHqOaTcO7PPsKGgcUA9/FejKCl6IA+iP4kLM0oEhWMC2lYP8MZGdCK NOsEraZ3cRz+xQkGQfLfNmS5FXfi/3WtLqsH8j83QWu56/hqjUyz7+YEVt26tzwG R/KoTnuWoW2aECzaeUlmA5eavfJaJB/kjC2dt1RVVwZAFb6atejrPnhhsPPDkJro 0xxOdy5FDAgsDCeeD9ehX9JYQIk89QtleynelFsLauWl++hjPNO4Yf85SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt6EOVsl+0X/XqJZqm2tmBqZgSOMB8GA1UdIwQY MBaAFLpLItIoChfQ1UxobJtDPwtbWAJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2Ut MWU4ZDJmMzBjZjBkLzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2UtMWU4ZDJmMzBjZjBk LzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNUsAd/8 Uba5fQBMn/fhfP/dNZKidZfnpwchhFrXYdkopzfJKP3lbF1ftPMuc7Gd2dKB6vP+ bz6TiF64zFvsVl3t/LwjxWaRChKkPcmabjN7Vj8oiuqMTteBRm0MdOONkNOUEsmN VzyhBRpPcc+nZ5owaDWXb1poO+GAgm6JkDJciPHggwNEpFigphcjAErXtuuukEM3 N2bSg4t2F8QGRxCvzeLmCc3K8VWav+xs0eAz9LdtmzAMXsSgXvxc6DpDEZPdCnTd QKtQhLdGrOJ9L7ZJelLXm+9216ZX6ht4eBGhuylXGqPCuNXPtbxjQaMxJmj+hhf5 hXKhDaJXwWR/Ug== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:56 2025 by rpki-client