This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft File: uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json) Hash identifier: ThxM0v9vQ7NdpppFc7hkl3fz8K6rehjckTtSfGHyEiI= Subject key identifier: FD:6C:DA:48:E7:FB:95:ED:BA:CC:8E:44:B0:0E:2E:2C:68:19:BD:EE Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50 Certificate issuer: /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50 Certificate serial: 019B5ABF9A6978EF0FF4E3E74573AA3C22AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft Manifest number: 0E7E Signing time: Fri 26 Dec 2025 13:01:04 +0000 Manifest this update: Fri 26 Dec 2025 13:01:04 +0000 Manifest next update: Sat 27 Dec 2025 13:01:04 +0000 Files and hashes: 1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=) 2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: pjd6zkwq0yiRUAPX4zzCQsxBByX4YW6CBQiYyemDzbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9a:69:78:ef:0f:f4:e3:e7:45:73:aa:3c:22:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50 Validity Not Before: Dec 26 13:01:04 2025 GMT Not After : Dec 27 13:01:04 2025 GMT Subject: CN=fd6cda48e7fb95edbacc8e44b00e2e2c6819bdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:74:e3:4e:33:ad:ae:71:72:e5:74:5c:01: cb:19:42:b6:32:ba:33:88:f1:60:d8:0a:59:6c:7f: cd:61:00:3b:8f:83:50:11:dd:21:d6:3a:72:d5:79: 5a:44:f3:77:0e:6f:9f:28:43:c5:a0:7c:85:07:be: e8:3b:c9:50:5e:e5:11:ef:8a:8d:22:b8:ad:f7:df: c8:f3:c8:11:b0:79:d9:4a:5e:17:46:16:f0:d3:62: cb:af:d2:08:bb:b8:da:5e:16:8c:7c:b4:10:a3:6a: 5d:f2:22:52:95:2c:03:01:3d:45:b1:9c:c2:79:01: c0:03:e3:89:82:08:46:d4:43:0d:c5:19:14:b7:3e: fd:b0:a4:dd:b1:4d:49:45:54:68:44:2c:6c:64:2f: 1b:72:b7:29:f5:b8:77:dd:f1:df:bc:d5:90:d9:ad: 97:da:ef:8b:5f:85:4c:a6:b2:29:29:c5:44:2b:4c: 96:4c:00:dd:ae:ae:95:e3:ae:50:8b:a3:32:89:2f: 22:ca:92:90:9f:1c:14:00:d9:f5:b7:fa:54:ef:8f: ed:aa:6d:6e:5e:6e:9c:ce:3f:0a:20:d3:3e:e2:f7: d7:85:2b:d0:55:30:33:b0:b7:35:86:1f:f6:37:22: 0b:b3:87:4d:c6:b5:ac:a4:46:fb:4a:80:31:18:28: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:DA:48:E7:FB:95:ED:BA:CC:8E:44:B0:0E:2E:2C:68:19:BD:EE X509v3 Authority Key Identifier: keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:68:6c:42:2d:54:06:ab:09:a6:a5:dd:15:40:06:d9:76:ed: 0e:e5:3e:0f:49:ca:59:0e:a3:ec:5c:96:0d:d0:de:77:25:01: 4c:95:a3:ef:4a:5c:3c:4b:8f:e0:9c:6e:8f:69:87:1d:b2:36: 91:7e:a1:0b:d3:70:90:82:44:eb:4c:97:99:0e:f2:34:b4:f0: f1:5f:46:c4:b5:a4:c5:8f:ef:0f:b8:17:76:b5:3f:fc:59:2d: 31:a2:94:d1:25:1f:dc:37:4b:d6:f2:f9:2f:56:fb:59:d3:0a: c8:c9:cb:93:c5:e7:5d:93:af:fb:9f:5c:80:8a:64:96:e2:f2: 32:f8:eb:6a:95:7a:a4:4c:4f:e5:34:fa:08:eb:68:f1:89:44: 0b:7e:aa:17:5d:de:ae:f7:ee:a6:b5:9d:af:1c:51:f5:97:7e: 5b:1c:de:2e:8a:8a:24:ec:34:5a:60:47:d3:0f:fa:d8:1f:ce: 3f:e7:56:a1:25:37:71:8b:9f:1a:50:22:e0:26:dd:93:cb:d2: 1e:4c:34:0d:3b:33:5c:fe:f5:64:76:35:bf:99:2f:a4:65:ba: 0a:1f:7d:61:1a:39:d4:e4:67:5f:3f:40:50:a2:a3:bf:ed:fe: 74:03:f9:13:67:b5:b4:f5:c7:5b:ec:e4:44:72:17:a5:79:b9: 1b:15:9c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5ppeO8P9OPnRXOqPCKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTJmMzhiNTViZmMxMzdiYjllZDAyNmZhMDAzM2VlZjhm YTdkNTAwHhcNMjUxMjI2MTMwMTA0WhcNMjUxMjI3MTMwMTA0WjAzMTEwLwYDVQQD EyhmZDZjZGE0OGU3ZmI5NWVkYmFjYzhlNDRiMDBlMmUyYzY4MTliZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hd0404zra5xcuV0XAHLGUK2Mroz iPFg2ApZbH/NYQA7j4NQEd0h1jpy1XlaRPN3Dm+fKEPFoHyFB77oO8lQXuUR74qN Irit99/I88gRsHnZSl4XRhbw02LLr9IIu7jaXhaMfLQQo2pd8iJSlSwDAT1FsZzC eQHAA+OJgghG1EMNxRkUtz79sKTdsU1JRVRoRCxsZC8bcrcp9bh33fHfvNWQ2a2X 2u+LX4VMprIpKcVEK0yWTADdrq6V465Qi6MyiS8iypKQnxwUANn1t/pU74/tqm1u Xm6czj8KINM+4vfXhSvQVTAzsLc1hh/2NyILs4dNxrWspEb7SoAxGCiTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1s2kjn+5XtusyORLAOLixoGb3uMB8GA1UdIwQY MBaAFLmS84tVv8E3u57QJvoAM+74+n1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQt OWJjM2U1NmY3YWY3LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iYjQ4NTQtMWM1MS00YmM3LThiMjQtOWJjM2U1NmY3YWY3 LzEvdVpMemkxV193VGU3bnRBbS1nQXo3dmo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWhsQi1U BqsJpqXdFUAG2XbtDuU+D0nKWQ6j7FyWDdDedyUBTJWj70pcPEuP4Jxuj2mHHbI2 kX6hC9NwkIJE60yXmQ7yNLTw8V9GxLWkxY/vD7gXdrU//FktMaKU0SUf3DdL1vL5 L1b7WdMKyMnLk8XnXZOv+59cgIpkluLyMvjrapV6pExP5TT6COto8YlEC36qF13e rvfuprWdrxxR9Zd+WxzeLoqKJOw0WmBH0w/62B/OP+dWoSU3cYufGlAi4Cbdk8vS Hkw0DTszXP71ZHY1v5kvpGW6Ch99YRo51ORnXz9AUKKjv+3+dAP5E2e1tPXHW+zk RHIXpXm5GxWcEg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:02 2025 by rpki-client