This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json) Hash identifier: MKcO8FK6f0M22JsyeWYaqSy/BuZDCbgw8d2mfnlOIWA= Subject key identifier: 62:32:16:25:02:FF:66:DB:C7:E3:87:13:23:C6:36:44:39:D2:61:A3 Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Certificate serial: 019B38A25808C3C2F78657567EFE06E9002B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 22:02:02 +0000 Manifest this update: Fri 19 Dec 2025 22:02:02 +0000 Manifest next update: Sat 20 Dec 2025 22:02:02 +0000 Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=) 2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: FbPhYYZxNVipLuu1XBL2DWLABAOURov+U9XAecWJicA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:58:08:c3:c2:f7:86:57:56:7e:fe:06:e9:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Validity Not Before: Dec 19 22:02:02 2025 GMT Not After : Dec 20 22:02:02 2025 GMT Subject: CN=6232162502ff66dbc7e3871323c6364439d261a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:08:9a:8c:68:ed:94:97:85:0f:14:6a:bf: 9a:c0:89:89:0e:d0:48:f7:85:70:79:15:7d:35:d3: 71:44:da:01:34:01:82:c5:71:2f:5f:40:cd:38:c2: 21:15:76:b8:81:b6:f9:78:6b:f6:64:e9:5f:7e:aa: 70:c5:00:12:a8:1a:09:3e:c0:06:3a:c0:5b:99:76: 2b:f2:1b:6f:48:58:83:46:26:10:c3:1f:51:53:fa: ce:f8:ea:cb:21:53:02:6e:3c:c7:d6:b7:db:ec:34: ff:67:5a:82:27:1c:7d:c2:cd:1c:ae:79:0c:28:5a: 21:07:a0:97:29:d8:fc:ca:7d:87:b2:a2:66:62:f5: 16:9d:ff:ff:f4:5a:79:8b:4a:82:b3:83:cd:68:7c: 42:ad:5d:c1:54:cc:8f:ce:ee:5f:e6:ac:90:e3:c5: 24:28:e0:f5:8b:d7:79:63:de:fa:ef:58:42:67:da: e0:82:ed:bb:4c:e9:99:a6:b1:0d:7f:7a:22:d6:68: 6b:1d:3b:8b:7b:dc:d9:ed:5a:e8:96:a8:28:35:3e: 2d:3a:00:0d:99:a9:8f:17:0f:60:d7:7b:b2:aa:3c: 2b:3c:4a:20:83:12:1f:0e:0d:be:b1:15:7c:db:68: 10:92:4c:f9:86:88:e1:e7:ad:67:e3:57:ff:e7:22: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:16:25:02:FF:66:DB:C7:E3:87:13:23:C6:36:44:39:D2:61:A3 X509v3 Authority Key Identifier: keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:51:dd:87:6f:aa:d5:73:f4:7a:67:c5:a3:7a:73:85:30: 8f:98:ef:67:1a:29:c6:3f:f6:74:3d:d1:22:ab:00:de:0a:e9: 44:bf:41:d7:21:05:fb:e6:40:0d:58:b7:d7:94:76:a7:2d:ce: 44:31:df:a2:c1:c3:8d:85:73:9c:2a:67:df:89:91:72:d2:19: 61:81:15:28:b8:1d:94:3f:e8:a2:f4:78:f6:42:1b:01:03:ad: 25:83:45:9c:40:d9:f3:27:60:9a:53:01:80:be:47:6c:02:df: fe:33:7c:8f:a4:92:14:f8:e2:67:c6:dc:f7:89:8c:a4:a5:0b: 63:5b:72:c3:bd:46:04:2e:c7:83:2e:99:0b:60:8c:00:a8:8d: 13:40:12:6c:ed:07:fe:64:d4:45:bb:6d:64:24:f6:47:37:ad: 9b:cc:9c:b1:4b:37:4b:b4:5c:54:6c:f5:93:80:78:38:3b:b4: 7d:fb:90:bf:b4:35:54:01:02:38:9a:07:2f:ac:3f:05:63:06: a7:09:19:12:76:11:27:2f:ce:90:9f:00:28:da:8c:d0:2d:75: 9e:b4:a3:23:2b:88:42:95:77:4c:cd:27:99:db:68:e5:42:b2: bf:68:c5:8f:0e:bc:3c:c5:f4:39:f7:a4:ad:e0:4c:32:a5:89: 9f:29:59:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4olgIw8L3hldWfv4G6QArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTlhMzM5ODFlMzRiMmFlNTA1ODZlMzA0OGM2NjNhMmM2 Yjg1ODYwHhcNMjUxMjE5MjIwMjAyWhcNMjUxMjIwMjIwMjAyWjAzMTEwLwYDVQQD Eyg2MjMyMTYyNTAyZmY2NmRiYzdlMzg3MTMyM2M2MzY0NDM5ZDI2MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K4Imoxo7ZSXhQ8Uar+awImJDtBI 94VweRV9NdNxRNoBNAGCxXEvX0DNOMIhFXa4gbb5eGv2ZOlffqpwxQASqBoJPsAG OsBbmXYr8htvSFiDRiYQwx9RU/rO+OrLIVMCbjzH1rfb7DT/Z1qCJxx9ws0crnkM KFohB6CXKdj8yn2HsqJmYvUWnf//9Fp5i0qCs4PNaHxCrV3BVMyPzu5f5qyQ48Uk KOD1i9d5Y97671hCZ9rggu27TOmZprENf3oi1mhrHTuLe9zZ7VrolqgoNT4tOgAN mamPFw9g13uyqjwrPEoggxIfDg2+sRV822gQkkz5hojh561n41f/5yIfOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIyFiUC/2bbx+OHEyPGNkQ50mGjMB8GA1UdIwQY MBaAFLsZozmB40sq5QWG4wSMZjosa4WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUt NjA2MGM0OGRhODM3LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUtNjA2MGM0OGRhODM3 LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7dR3Ydv qtVz9HpnxaN6c4Uwj5jvZxopxj/2dD3RIqsA3grpRL9B1yEF++ZADVi315R2py3O RDHfosHDjYVznCpn34mRctIZYYEVKLgdlD/oovR49kIbAQOtJYNFnEDZ8ydgmlMB gL5HbALf/jN8j6SSFPjiZ8bc94mMpKULY1tyw71GBC7Hgy6ZC2CMAKiNE0ASbO0H /mTURbttZCT2Rzetm8ycsUs3S7RcVGz1k4B4ODu0ffuQv7Q1VAECOJoHL6w/BWMG pwkZEnYRJy/OkJ8AKNqM0C11nrSjIyuIQpV3TM0nmdto5UKyv2jFjw68PMX0Ofek reBMMqWJnylZ8w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:12 2025 by rpki-client