This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft File: uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json) Hash identifier: gfXbMwsd/GKUtJQ7Pa5pczQ3BgMjWs1sGbAei80rYCc= Subject key identifier: 6F:D2:57:9B:80:50:75:1C:85:04:CF:B7:3B:C2:38:75:C5:BA:2D:30 Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6 Certificate issuer: /CN=bb24311c1ec0673c50497924c202a13d212659b6 Certificate serial: 019B35D6F07A4366AA224B7E12837AF36616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft Manifest number: 06BC Signing time: Fri 19 Dec 2025 09:00:37 +0000 Manifest this update: Fri 19 Dec 2025 09:00:37 +0000 Manifest next update: Sat 20 Dec 2025 09:00:37 +0000 Files and hashes: 1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: c2+8Hoj8OQdyke9/n18DsrFxg3MJsIPeGmEKelPl6gA=) 2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f0:7a:43:66:aa:22:4b:7e:12:83:7a:f3:66:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6 Validity Not Before: Dec 19 09:00:37 2025 GMT Not After : Dec 20 09:00:37 2025 GMT Subject: CN=6fd2579b8050751c8504cfb73bc23875c5ba2d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c1:68:a3:56:06:78:6b:6c:c7:b8:12:ee:0a: e5:7d:5d:f3:76:e3:31:f6:97:07:42:54:70:08:dd: db:01:1c:9e:1c:a8:2e:3f:cd:af:fd:f3:3b:07:24: 93:09:e4:c8:75:2f:75:de:eb:c8:9d:a8:91:b0:2b: 48:62:7d:c8:cd:c8:4a:6e:cf:d8:f9:e9:51:6d:39: 71:ad:03:de:11:0c:aa:37:be:9d:b0:2b:02:38:8c: 60:09:58:e4:4e:e4:60:25:05:39:13:6a:aa:57:15: ad:e2:5a:04:34:96:b6:4f:c7:81:99:75:c7:bb:5e: e0:e8:f5:11:20:30:ae:5b:14:cf:9b:6e:35:0e:7c: cd:37:3a:ee:19:da:5b:ef:78:32:e4:3f:3e:ab:8f: 1a:30:47:4d:22:f4:97:57:15:29:3d:ba:e6:4f:ea: f8:90:11:f9:83:b2:a8:1b:cc:de:ad:31:f6:a6:46: 9c:38:6d:a4:73:b1:a7:91:fe:c1:30:7c:43:52:92: f8:f4:69:cb:11:09:57:68:e3:3a:8f:79:fc:7d:f5: 9f:b8:f6:7b:e1:87:ef:f9:a4:48:db:13:63:1e:aa: a9:49:f0:96:fe:f2:f9:f8:34:28:79:48:a6:83:7a: 0e:f3:8d:c5:23:41:44:59:49:c3:c1:9c:a0:5b:41: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D2:57:9B:80:50:75:1C:85:04:CF:B7:3B:C2:38:75:C5:BA:2D:30 X509v3 Authority Key Identifier: keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c6:f0:ca:2c:80:ab:6a:23:40:c0:46:c4:ca:57:63:0b:7c: 19:9e:52:f1:4a:3b:e0:f1:83:7c:c7:17:62:12:03:08:35:94: 06:45:46:34:62:6c:a0:fe:94:8e:1e:53:8f:d0:fe:4b:45:c0: ad:db:ef:54:36:43:a7:3a:c8:d7:cb:bd:89:b3:2a:bc:d4:5d: 26:f8:85:fd:9a:e2:34:7e:c8:28:ac:7b:a2:59:40:c2:08:e7: 8a:95:65:61:a2:48:17:d5:4d:78:04:95:1a:bf:59:5b:00:4d: c9:2f:e2:18:46:4c:85:40:da:d1:62:db:4d:38:3b:bb:02:a4: a6:ef:6c:f5:36:a3:29:13:c4:22:90:3d:9f:31:40:49:4a:ae: 34:1a:15:3c:29:2d:58:a7:a5:44:99:76:d0:14:cb:4a:9b:01: 69:10:45:a6:ac:30:87:d7:98:8e:5a:b8:98:a9:5f:29:bb:b9: cb:ea:fa:eb:00:2f:36:0d:9b:1e:04:07:43:fd:8e:f7:ba:58: b2:89:ba:d8:72:e1:69:92:c5:b3:60:fc:97:5a:7d:88:d3:82: 6c:dc:ff:56:ea:f4:20:d1:d8:ae:a5:f2:e6:ff:fb:09:e5:f3: 14:fa:1d:af:85:c5:6e:42:91:19:8b:1f:ce:ee:ed:1b:23:7c: 7f:ad:d4:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vB6Q2aqIkt+EoN682YWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjQzMTFjMWVjMDY3M2M1MDQ5NzkyNGMyMDJhMTNkMjEy NjU5YjYwHhcNMjUxMjE5MDkwMDM3WhcNMjUxMjIwMDkwMDM3WjAzMTEwLwYDVQQD Eyg2ZmQyNTc5YjgwNTA3NTFjODUwNGNmYjczYmMyMzg3NWM1YmEyZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MFoo1YGeGtsx7gS7grlfV3zduMx 9pcHQlRwCN3bARyeHKguP82v/fM7BySTCeTIdS913uvInaiRsCtIYn3IzchKbs/Y +elRbTlxrQPeEQyqN76dsCsCOIxgCVjkTuRgJQU5E2qqVxWt4loENJa2T8eBmXXH u17g6PURIDCuWxTPm241DnzNNzruGdpb73gy5D8+q48aMEdNIvSXVxUpPbrmT+r4 kBH5g7KoG8zerTH2pkacOG2kc7Gnkf7BMHxDUpL49GnLEQlXaOM6j3n8ffWfuPZ7 4Yfv+aRI2xNjHqqpSfCW/vL5+DQoeUimg3oO843FI0FEWUnDwZygW0E9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/SV5uAUHUchQTPtzvCOHXFui0wMB8GA1UdIwQY MBaAFLskMRwewGc8UEl5JMICoT0hJlm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzct MGE3ZjZjY2E2YmVhLzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzctMGE3ZjZjY2E2YmVh LzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8bwyiyA q2ojQMBGxMpXYwt8GZ5S8Uo74PGDfMcXYhIDCDWUBkVGNGJsoP6Ujh5Tj9D+S0XA rdvvVDZDpzrI18u9ibMqvNRdJviF/ZriNH7IKKx7ollAwgjnipVlYaJIF9VNeASV Gr9ZWwBNyS/iGEZMhUDa0WLbTTg7uwKkpu9s9TajKRPEIpA9nzFASUquNBoVPCkt WKelRJl20BTLSpsBaRBFpqwwh9eYjlq4mKlfKbu5y+r66wAvNg2bHgQHQ/2O97pY som62HLhaZLFs2D8l1p9iNOCbNz/Vur0INHYrqXy5v/7CeXzFPodr4XFbkKRGYsf zu7tGyN8f63UsA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:33 2025 by rpki-client