This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft File: uu2YpEwWfcvekny7jgRPz6Oh2GI.mft (raw, json) Hash identifier: Im9LVNo2dLv8d/JN1j87EdlDCHNwLSGNN/sj0SqNcO0= Subject key identifier: 38:59:6F:9A:E9:32:03:8F:0F:4B:89:F3:77:B3:F3:B0:11:D2:9E:B6 Authority key identifier: BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 Certificate issuer: /CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Certificate serial: 019B59776EF4B3A5675FCB7E299DF732B2D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft Manifest number: 7F Signing time: Fri 26 Dec 2025 07:02:37 +0000 Manifest this update: Fri 26 Dec 2025 07:02:37 +0000 Manifest next update: Sat 27 Dec 2025 07:02:37 +0000 Files and hashes: 1: 1-8vTGCS_rJikH2VQxEDwKIsDRmo.roa (hash: 0MJFpH+MZoG9aWkULxwRDSK43Ay6eP/mQFmc18Ajm8M=) 2: uu2YpEwWfcvekny7jgRPz6Oh2GI.crl (hash: D7pi3YwipFgP0obo6HLQUTDSDNVQ6A58O9pTQeD7awY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:6e:f4:b3:a5:67:5f:cb:7e:29:9d:f7:32:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Validity Not Before: Dec 26 07:02:37 2025 GMT Not After : Dec 27 07:02:37 2025 GMT Subject: CN=38596f9ae932038f0f4b89f377b3f3b011d29eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:66:d5:91:6b:34:f4:b9:e2:74:c4:e1:4b: 0f:9e:7f:82:fe:55:a0:39:5e:0c:19:6e:3b:73:9a: 92:cf:60:2e:44:ae:a0:33:4b:47:7e:0f:97:50:82: 58:b1:44:4f:f0:39:c3:bc:ff:26:3a:6f:7e:af:9a: bc:57:18:b1:5a:8b:aa:73:a2:f0:e1:7d:56:42:0a: 54:6c:6e:96:bf:76:8b:4a:ad:0c:85:6f:00:17:fd: 90:39:d9:07:c2:68:c4:17:d7:45:bf:b2:77:98:bb: d8:5f:fe:07:85:05:b5:91:8e:b3:1e:9f:27:76:1d: 77:39:b2:5a:35:9f:63:af:b6:e1:a3:58:45:8a:09: e2:a7:78:29:e5:43:6b:da:22:58:4f:87:29:60:f7: ee:dc:96:66:df:7e:78:73:de:5b:5c:49:df:6e:3c: 00:e1:37:45:62:d4:af:58:f2:48:63:78:fd:ce:cd: 2c:07:31:a5:5a:e9:10:03:9a:2b:c7:b9:02:90:41: e9:8d:25:64:f4:bf:5f:75:9c:0b:e5:b9:91:f2:0e: c7:21:16:3f:07:09:a0:22:90:f6:50:62:4b:96:d2: 34:cd:11:3b:4f:82:5f:c9:69:3b:f6:93:3d:eb:aa: 0a:e6:6a:f4:dd:26:0a:fe:9d:ad:60:e4:da:65:28: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:59:6F:9A:E9:32:03:8F:0F:4B:89:F3:77:B3:F3:B0:11:D2:9E:B6 X509v3 Authority Key Identifier: keyid:BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:84:32:88:19:08:1a:30:16:a8:48:52:c7:7e:f9:42:ff:35: b0:c3:d2:3a:b7:0a:ac:0a:8f:08:0d:f3:db:97:95:36:d0:5d: de:d4:c4:62:25:f4:f3:9f:ae:9a:dd:c5:74:1c:8d:18:ba:ed: ea:f2:f6:2e:5e:93:d7:78:a4:a2:e4:56:d3:97:eb:bc:28:fe: 4b:8f:e4:11:4e:ce:10:36:d5:7b:12:04:13:d2:f0:08:86:c9: 4d:c1:35:67:05:9e:6c:e9:57:c9:50:a1:32:d2:0f:52:c3:5a: cd:0d:29:cb:5b:53:ff:10:6a:01:82:e5:3d:80:ee:2f:bf:44: d1:39:f3:05:b0:00:ff:3b:65:c7:5f:71:2b:90:ec:d5:6f:c8: ec:aa:cc:07:bd:47:ce:46:f8:4c:e6:fb:a3:e4:36:d0:b6:50: ce:b6:5a:ce:54:8e:88:fd:dd:3d:6f:1f:fd:a1:50:78:36:c7: 1f:0a:70:16:49:fd:13:ed:15:75:d1:3d:4b:2d:e7:bb:be:dc: c5:1e:88:88:27:79:62:c9:39:de:2a:08:7f:12:bd:54:b9:e8: 58:a7:1a:b8:ae:3d:2d:a3:a0:a2:d7:78:be:ba:1b:9a:f5:78: 9f:74:1c:f9:bc:6f:86:8a:73:cd:a6:71:ad:58:d8:b6:cc:31: ee:91:c4:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd270s6VnX8t+KZ33MrLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZWQ5OGE0NGMxNjdkY2JkZTkyN2NiYjhlMDQ0ZmNmYTNh MWQ4NjIwHhcNMjUxMjI2MDcwMjM3WhcNMjUxMjI3MDcwMjM3WjAzMTEwLwYDVQQD EygzODU5NmY5YWU5MzIwMzhmMGY0Yjg5ZjM3N2IzZjNiMDExZDI5ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Jm1ZFrNPS54nTE4UsPnn+C/lWg OV4MGW47c5qSz2AuRK6gM0tHfg+XUIJYsURP8DnDvP8mOm9+r5q8VxixWouqc6Lw 4X1WQgpUbG6Wv3aLSq0MhW8AF/2QOdkHwmjEF9dFv7J3mLvYX/4HhQW1kY6zHp8n dh13ObJaNZ9jr7bho1hFignip3gp5UNr2iJYT4cpYPfu3JZm3354c95bXEnfbjwA 4TdFYtSvWPJIY3j9zs0sBzGlWukQA5orx7kCkEHpjSVk9L9fdZwL5bmR8g7HIRY/ BwmgIpD2UGJLltI0zRE7T4JfyWk79pM966oK5mr03SYK/p2tYOTaZSgsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhZb5rpMgOPD0uJ83ez87AR0p62MB8GA1UdIwQY MBaAFLrtmKRMFn3L3pJ8u44ET8+jodhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGIt NmMzNTk1ZmI3MjEyLzEvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGItNmMzNTk1ZmI3MjEy LzEvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoQyiBkI GjAWqEhSx375Qv81sMPSOrcKrAqPCA3z25eVNtBd3tTEYiX085+umt3FdByNGLrt 6vL2Ll6T13ikouRW05frvCj+S4/kEU7OEDbVexIEE9LwCIbJTcE1ZwWebOlXyVCh MtIPUsNazQ0py1tT/xBqAYLlPYDuL79E0TnzBbAA/ztlx19xK5Ds1W/I7KrMB71H zkb4TOb7o+Q20LZQzrZazlSOiP3dPW8f/aFQeDbHHwpwFkn9E+0VddE9Sy3nu77c xR6IiCd5Ysk53ioIfxK9VLnoWKcauK49LaOgotd4vrobmvV4n3Qc+bxvhopzzaZx rVjYtswx7pHEHg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client