This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json) Hash identifier: n6XXZChxWxIW7rOZzVus6Go5XmopM4uJ2c70ltAq9ZU= Subject key identifier: 39:AA:C2:BF:B2:60:8E:0E:48:39:5A:C1:52:BF:39:8E:1F:3B:27:97 Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead Certificate serial: 019B5976BA1E8C355975F8B72A3E786550A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:51 +0000 Manifest this update: Fri 26 Dec 2025 07:01:51 +0000 Manifest next update: Sat 27 Dec 2025 07:01:51 +0000 Files and hashes: 1: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: ABfb1F6gAdGPjpD7Y1AwmkOS0WdJjo+pWXK2xGywK3o=) 2: xDqVZVtr_9EDZVCNYlX0mCSaras.roa (hash: caUW0pjP9cTTEhVK0Pma740AnxF0QCHN6wxQ3vthDWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ba:1e:8c:35:59:75:f8:b7:2a:3e:78:65:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead Validity Not Before: Dec 26 07:01:51 2025 GMT Not After : Dec 27 07:01:51 2025 GMT Subject: CN=39aac2bfb2608e0e48395ac152bf398e1f3b2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:17:3e:e2:a5:42:30:03:67:49:ea:86:0c: 7b:0d:92:92:b7:0f:be:75:07:21:59:38:61:1e:d7: 2f:59:0a:95:d2:15:e1:e6:96:96:42:74:ef:fa:68: 6a:fc:62:fb:45:07:aa:d3:72:4d:27:b9:0e:b6:84: d0:a0:84:f3:bf:90:5e:7a:2e:7f:c0:e4:b7:a3:c7: 7a:1d:6d:1f:7d:5e:8b:c6:bd:d7:9d:60:73:7b:95: f8:e0:79:b0:78:c6:7c:7d:0d:e9:e0:de:ec:87:28: 53:e8:4c:37:e5:1c:a4:38:be:94:b5:24:f8:5a:20: fe:cf:89:4e:64:9d:81:1b:76:94:e5:44:14:14:18: 27:b0:1e:c5:00:3d:8a:ac:15:e0:5b:0f:ea:23:4a: ec:d8:6a:73:66:fd:8e:99:98:9d:34:28:80:e1:79: 41:29:c3:a6:9c:5d:43:15:3c:db:bf:97:b8:88:f2: fc:be:3e:64:10:56:5c:f3:7f:be:cd:6e:f8:c7:89: 8d:df:72:61:97:51:77:0b:17:f7:73:ea:20:98:15: 6c:7b:61:4c:00:41:6d:b2:dd:bc:23:08:85:62:9d: ee:9a:65:93:e8:b7:24:cc:a5:33:dc:ae:4c:4c:df: 02:55:c6:20:83:0d:7e:f4:00:33:9f:06:49:7a:12: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AA:C2:BF:B2:60:8E:0E:48:39:5A:C1:52:BF:39:8E:1F:3B:27:97 X509v3 Authority Key Identifier: keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c6:aa:c1:bc:a6:90:49:8c:75:c4:0d:e1:b2:49:25:20:1d: 6f:fa:84:eb:74:38:99:51:7a:5b:97:2e:1c:b2:2b:79:e1:4e: b9:62:4c:43:1c:4d:3f:b7:5b:31:af:1a:43:b8:4f:cd:a0:37: f4:55:a6:55:d4:02:98:70:28:69:e2:81:a3:ad:50:ad:fd:72: e8:bf:22:d6:67:6f:25:76:c2:e3:a3:7d:9b:2f:33:32:b8:74: 8c:e2:42:56:50:15:90:c7:ac:ea:5a:a9:b7:11:f1:cc:10:36: e3:03:d8:f4:a3:f5:5a:57:4e:f9:a1:cc:60:63:4b:13:fa:80: 5f:47:c9:3b:f1:5d:a9:72:35:3b:89:c4:4a:21:12:68:ec:77: f2:6f:e0:f8:16:a7:f8:c4:ef:0c:1f:dd:75:2d:9e:60:7c:ac: 92:8b:bc:5e:74:19:80:40:41:a8:1f:c4:2d:ed:f4:04:90:f3: 79:9d:e7:b9:07:14:73:9f:5d:a3:26:8b:cc:1b:76:93:f5:64: 87:56:22:82:fc:25:53:d6:1d:b9:8c:c6:a9:c6:7e:6b:d7:c2: d7:2a:6b:8a:83:0a:18:50:81:7c:9e:f4:05:ce:f1:dc:41:91: 0d:8b:cb:93:4b:e3:4d:16:49:53:f4:56:a1:1d:08:8b:87:a3: dd:f2:2f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdroejDVZdfi3Kj54ZVCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjJjZjRjNzFhOTU5MTFiZDYwNDZkMDVjMGE4YmExNjQ2 YzllYWQwHhcNMjUxMjI2MDcwMTUxWhcNMjUxMjI3MDcwMTUxWjAzMTEwLwYDVQQD EygzOWFhYzJiZmIyNjA4ZTBlNDgzOTVhYzE1MmJmMzk4ZTFmM2IyNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26EXPuKlQjADZ0nqhgx7DZKStw++ dQchWThhHtcvWQqV0hXh5paWQnTv+mhq/GL7RQeq03JNJ7kOtoTQoITzv5Beei5/ wOS3o8d6HW0ffV6Lxr3XnWBze5X44HmweMZ8fQ3p4N7shyhT6Ew35RykOL6UtST4 WiD+z4lOZJ2BG3aU5UQUFBgnsB7FAD2KrBXgWw/qI0rs2GpzZv2OmZidNCiA4XlB KcOmnF1DFTzbv5e4iPL8vj5kEFZc83++zW74x4mN33Jhl1F3Cxf3c+ogmBVse2FM AEFtst28IwiFYp3ummWT6LckzKUz3K5MTN8CVcYggw1+9AAznwZJehI8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmqwr+yYI4OSDlawVK/OY4fOyeXMB8GA1UdIwQY MBaAFLsiz0xxqVkRvWBG0FwKi6FkbJ6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMt YmJhZWM3NTA1ZDk3LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMtYmJhZWM3NTA1ZDk3 LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMaqwbym kEmMdcQN4bJJJSAdb/qE63Q4mVF6W5cuHLIreeFOuWJMQxxNP7dbMa8aQ7hPzaA3 9FWmVdQCmHAoaeKBo61Qrf1y6L8i1mdvJXbC46N9my8zMrh0jOJCVlAVkMes6lqp txHxzBA24wPY9KP1WldO+aHMYGNLE/qAX0fJO/FdqXI1O4nESiESaOx38m/g+Ban +MTvDB/ddS2eYHyskou8XnQZgEBBqB/ELe30BJDzeZ3nuQcUc59doyaLzBt2k/Vk h1YigvwlU9YduYzGqcZ+a9fC1yprioMKGFCBfJ70Bc7x3EGRDYvLk0vjTRZJU/RW oR0Ii4ej3fIv0Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:37 2025 by rpki-client