This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json) Hash identifier: GMaDIrPmnAJJEfOi7Zv+GhJG/Z8V8/h2lMOWo5wvV9E= Subject key identifier: 5A:DE:EB:06:BC:F4:2A:19:61:D8:77:BA:5F:A8:77:DD:15:AE:02:00 Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC Certificate issuer: /CN=b84b63058658a59ecbbf44395bf16f780dc929cc Certificate serial: 019B469455B218FE6D39BA5F8BCB1B300E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 15:01:24 +0000 Manifest this update: Mon 22 Dec 2025 15:01:24 +0000 Manifest next update: Tue 23 Dec 2025 15:01:24 +0000 Files and hashes: 1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: f/DzFgfUPQB//3plTAZ1SK5cPf2VdmXon4Zu4O7Pt0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:55:b2:18:fe:6d:39:ba:5f:8b:cb:1b:30:0e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc Validity Not Before: Dec 22 15:01:24 2025 GMT Not After : Dec 23 15:01:24 2025 GMT Subject: CN=5adeeb06bcf42a1961d877ba5fa877dd15ae0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:8c:87:ac:33:33:dd:8c:af:c7:60:60:01: 8c:e5:26:7e:b8:cd:61:07:08:fc:bf:3e:df:ef:6a: e8:ea:24:3a:07:25:cb:4e:d4:82:8c:ee:df:91:70: b7:82:1e:db:2b:a0:45:02:a0:d3:ca:65:d4:d1:f9: a9:07:25:22:3e:d5:25:5c:62:fe:06:8f:02:ae:ea: c5:62:3c:2b:88:90:d1:b0:82:2b:12:31:14:6c:09: 5f:6e:88:29:94:07:24:2c:ec:cb:18:32:f8:df:ed: 5f:af:78:30:08:d2:c0:2b:97:8a:a1:3b:f8:19:be: 9c:9b:b8:73:f0:a7:7a:23:0c:ad:5c:0b:ff:85:02: ad:2d:36:18:bd:44:3c:66:9c:a3:b9:d6:42:14:a3: 2a:d8:64:d2:ba:14:be:37:74:ec:c5:31:d9:b0:54: bf:22:0c:2e:ff:f7:a6:05:05:a7:2b:41:ab:8b:3a: 18:af:c5:f2:75:4a:ed:bf:8e:53:b2:0b:04:c0:6d: 73:9d:be:59:f7:77:cf:58:34:93:b8:11:91:d9:0c: a1:33:cc:e1:bf:12:a6:76:8f:da:cd:f1:9f:de:f5: 9c:bb:44:f7:5f:79:3f:07:51:71:f5:a5:2d:36:71: 89:6f:2e:e9:42:4a:1e:70:a7:bd:61:e8:ff:f7:be: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DE:EB:06:BC:F4:2A:19:61:D8:77:BA:5F:A8:77:DD:15:AE:02:00 X509v3 Authority Key Identifier: keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c7:9f:de:81:bd:ae:65:09:24:97:38:eb:b8:95:4f:a4:ca: 16:71:4b:e9:c9:61:4f:3a:e7:74:32:90:32:95:59:1e:8b:c0: 42:e2:d6:61:94:7d:f1:f8:27:b7:96:f4:05:c5:74:aa:4a:c6: d8:c8:06:6f:94:6f:66:92:4b:86:4e:c7:63:09:57:94:79:b3: f8:7b:e4:19:0c:92:23:24:4e:e8:de:7b:5c:74:09:6b:e3:de: b4:15:4b:02:5a:38:21:5c:cc:a5:88:32:34:c4:32:c9:0c:98: c7:f9:99:4c:54:14:2f:8d:b4:a2:16:9a:ef:7e:36:9c:77:c0: 1e:cc:a1:c7:eb:56:3d:95:3d:81:46:53:8c:e3:d4:72:61:47: 88:a1:b9:b8:ef:27:0e:c9:6a:25:2e:0e:ec:28:06:70:d0:6c: 45:1a:86:1a:04:ae:39:ae:85:5d:dd:88:9b:00:ed:b3:67:18: 8b:83:da:aa:36:fc:77:60:7c:d2:ac:a0:6f:b5:f6:f8:7d:e1: a4:80:bf:4d:15:67:8d:e3:22:d0:04:c6:08:a9:45:a6:40:e3: fd:85:d3:6d:6e:10:a1:72:4b:f3:9a:ce:36:92:fe:74:d7:20: 33:25:da:09:24:25:25:95:79:53:9e:94:b0:00:d3:ed:74:21: dc:29:87:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlFWyGP5tObpfi8sbMA5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NGI2MzA1ODY1OGE1OWVjYmJmNDQzOTViZjE2Zjc4MGRj OTI5Y2MwHhcNMjUxMjIyMTUwMTI0WhcNMjUxMjIzMTUwMTI0WjAzMTEwLwYDVQQD Eyg1YWRlZWIwNmJjZjQyYTE5NjFkODc3YmE1ZmE4NzdkZDE1YWUwMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkieMh6wzM92Mr8dgYAGM5SZ+uM1h Bwj8vz7f72ro6iQ6ByXLTtSCjO7fkXC3gh7bK6BFAqDTymXU0fmpByUiPtUlXGL+ Bo8CrurFYjwriJDRsIIrEjEUbAlfbogplAckLOzLGDL43+1fr3gwCNLAK5eKoTv4 Gb6cm7hz8Kd6IwytXAv/hQKtLTYYvUQ8ZpyjudZCFKMq2GTSuhS+N3TsxTHZsFS/ Igwu//emBQWnK0GrizoYr8XydUrtv45TsgsEwG1znb5Z93fPWDSTuBGR2QyhM8zh vxKmdo/azfGf3vWcu0T3X3k/B1Fx9aUtNnGJby7pQkoecKe9Yej/975T7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFre6wa89CoZYdh3ul+od90VrgIAMB8GA1UdIwQY MBaAFLhLYwWGWKWey79EOVvxb3gNySnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQt YTEzNWNiNTU5NzU4LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xYmEwM2QtNDI0ZC00N2NlLThiYzQtYTEzNWNiNTU5NzU4 LzEvdUV0akJZWllwWjdMdjBRNVdfRnZlQTNKS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsef3oG9 rmUJJJc467iVT6TKFnFL6clhTzrndDKQMpVZHovAQuLWYZR98fgnt5b0BcV0qkrG 2MgGb5RvZpJLhk7HYwlXlHmz+HvkGQySIyRO6N57XHQJa+PetBVLAlo4IVzMpYgy NMQyyQyYx/mZTFQUL420ohaa7342nHfAHsyhx+tWPZU9gUZTjOPUcmFHiKG5uO8n DslqJS4O7CgGcNBsRRqGGgSuOa6FXd2ImwDts2cYi4Paqjb8d2B80qygb7X2+H3h pIC/TRVnjeMi0ATGCKlFpkDj/YXTbW4QoXJL85rONpL+dNcgMyXaCSQlJZV5U56U sADT7XQh3CmH0A== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:04 2025 by rpki-client