This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json) Hash identifier: kwRXtB5+TtkEoZOw9fyUiOqgwbCDI1BQZKBvy5fmaQI= Subject key identifier: 2C:A6:C7:AB:1F:E9:93:CF:DA:43:7B:9B:C7:A4:AC:E6:0F:30:26:88 Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa Certificate serial: 019B40C8A88FE44017420CC566031F04A4DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 12:00:50 +0000 Manifest this update: Sun 21 Dec 2025 12:00:50 +0000 Manifest next update: Mon 22 Dec 2025 12:00:50 +0000 Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: ALWfUTnLZDpw1GB1dNjPHTFvc+rclGlUO7BDNBgDPN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:a8:8f:e4:40:17:42:0c:c5:66:03:1f:04:a4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa Validity Not Before: Dec 21 12:00:50 2025 GMT Not After : Dec 22 12:00:50 2025 GMT Subject: CN=2ca6c7ab1fe993cfda437b9bc7a4ace60f302688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:43:3f:f9:dc:78:8e:0d:e9:7c:36:6b:35: 05:c2:67:65:a2:4a:bc:01:a2:62:c3:8c:79:ee:94: 5a:22:0a:6a:2e:19:de:b7:5c:a8:6e:fd:cd:d8:57: 56:28:3c:55:c4:fe:53:41:ec:14:6f:28:0c:8a:0f: 42:64:3b:be:5b:c2:56:23:cb:b5:74:b7:45:74:e1: 1d:72:9b:19:00:48:20:a0:fb:d0:63:d4:76:5e:4e: 61:ee:14:6a:ff:43:ed:af:6f:eb:99:fc:76:85:5d: e2:ff:c9:09:69:5d:bc:45:b1:94:11:13:14:68:2f: 87:b9:bb:0f:cf:5f:b2:c6:7d:9a:8a:b3:36:2f:26: 5d:2f:28:78:1d:28:06:42:a4:95:81:2a:72:92:6c: dc:32:a4:b3:22:4e:60:da:29:68:ac:c5:c0:70:f1: 53:5c:d1:c5:30:91:1f:78:89:85:1b:b1:c1:b0:62: dc:62:34:4b:63:e1:28:77:8d:7a:c8:19:4d:3b:0c: 8e:7f:31:9a:f2:9b:fc:3a:46:db:f2:63:80:7e:88: 47:e5:47:76:85:46:73:c4:e6:be:9c:22:fe:b5:dc: cf:c4:37:84:1c:b9:64:23:8f:eb:e6:36:1c:99:cd: 61:cc:77:cb:41:d6:1d:0a:d7:5a:81:f2:22:79:6f: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A6:C7:AB:1F:E9:93:CF:DA:43:7B:9B:C7:A4:AC:E6:0F:30:26:88 X509v3 Authority Key Identifier: keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d6:63:83:ff:18:9b:18:5b:0e:d9:8b:00:ba:74:23:cd:89: c7:e7:12:10:b3:82:4c:04:5c:e4:33:e6:d3:37:55:be:19:b4: 00:dc:25:c1:ac:a0:04:df:88:f2:e1:7d:3f:bb:c1:95:76:07: 7f:f1:d0:67:b1:32:10:79:1c:13:c6:70:a8:9f:03:a5:8a:29: ad:82:5f:af:8d:2e:c4:26:93:a7:fa:3a:4f:32:3c:f8:d3:8a: 02:2e:55:33:84:0f:92:48:3e:71:86:34:64:90:63:b4:e7:a3: ca:0d:b0:ea:23:fc:e7:48:59:ec:54:22:20:91:b6:8f:ba:52: f8:fa:ca:7f:18:43:8c:7b:75:fd:aa:49:b7:84:64:d7:14:ad: 70:75:f2:f8:10:e2:fb:9f:9e:b4:91:fd:be:05:d4:fc:89:3b: dc:c1:4d:82:43:09:fd:ac:28:f7:5c:00:fc:f6:da:fe:13:af: ca:c4:a2:80:a8:d3:3f:4c:e9:dc:e7:cf:7e:39:c6:47:8a:80: db:76:dc:ec:55:e7:c1:9f:72:ff:6b:cc:38:f4:47:c8:12:2e: e4:d3:8f:6e:5c:9d:0e:61:62:fb:44:ef:4a:aa:68:5e:e3:ed: fc:6d:bd:a7:7c:c7:90:eb:3a:bc:27:57:62:8a:6c:83:cc:28: 99:b6:8b:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKiP5EAXQgzFZgMfBKTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0 ZTdkYWEwHhcNMjUxMjIxMTIwMDUwWhcNMjUxMjIyMTIwMDUwWjAzMTEwLwYDVQQD EygyY2E2YzdhYjFmZTk5M2NmZGE0MzdiOWJjN2E0YWNlNjBmMzAyNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kFDP/nceI4N6Xw2azUFwmdlokq8 AaJiw4x57pRaIgpqLhnet1yobv3N2FdWKDxVxP5TQewUbygMig9CZDu+W8JWI8u1 dLdFdOEdcpsZAEggoPvQY9R2Xk5h7hRq/0Ptr2/rmfx2hV3i/8kJaV28RbGUERMU aC+HubsPz1+yxn2airM2LyZdLyh4HSgGQqSVgSpykmzcMqSzIk5g2ilorMXAcPFT XNHFMJEfeImFG7HBsGLcYjRLY+Eod416yBlNOwyOfzGa8pv8Okbb8mOAfohH5Ud2 hUZzxOa+nCL+tdzPxDeEHLlkI4/r5jYcmc1hzHfLQdYdCtdagfIieW9KuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCymx6sf6ZPP2kN7m8ekrOYPMCaIMB8GA1UdIwQY MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNZjg/8Y mxhbDtmLALp0I82Jx+cSELOCTARc5DPm0zdVvhm0ANwlwaygBN+I8uF9P7vBlXYH f/HQZ7EyEHkcE8ZwqJ8DpYoprYJfr40uxCaTp/o6TzI8+NOKAi5VM4QPkkg+cYY0 ZJBjtOejyg2w6iP850hZ7FQiIJG2j7pS+PrKfxhDjHt1/apJt4Rk1xStcHXy+BDi +5+etJH9vgXU/Ik73MFNgkMJ/awo91wA/Pba/hOvysSigKjTP0zp3OfPfjnGR4qA 23bc7FXnwZ9y/2vMOPRHyBIu5NOPblydDmFi+0TvSqpoXuPt/G29p3zHkOs6vCdX Yopsg8wombaLRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:01 2025 by rpki-client