This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json) Hash identifier: 1vY741XT/AsBkvBQ5fsWFmD6/mLc2VRMcXr85hb3Jgs= Subject key identifier: 08:46:7D:F5:85:FB:45:13:72:8B:36:B3:4D:C4:BA:C7:24:01:3F:76 Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8 Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8 Certificate serial: 019B5AF6A4F5EFC5ABB62CA0B3143B9800C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft Manifest number: 66 Signing time: Fri 26 Dec 2025 14:01:11 +0000 Manifest this update: Fri 26 Dec 2025 14:01:11 +0000 Manifest next update: Sat 27 Dec 2025 14:01:11 +0000 Files and hashes: 1: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: a97JGyD2OF1UVA/rhHV0cWYm+Fqhxl/csHViLnuv0jM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:a4:f5:ef:c5:ab:b6:2c:a0:b3:14:3b:98:00:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8 Validity Not Before: Dec 26 14:01:11 2025 GMT Not After : Dec 27 14:01:11 2025 GMT Subject: CN=08467df585fb4513728b36b34dc4bac724013f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:ae:b8:a2:56:0f:9e:0c:8e:bb:24:11:72: 4e:43:5f:9e:ff:4f:16:9b:2e:8e:a8:63:0a:e2:cd: 97:cf:aa:e2:ce:8d:72:11:f7:48:36:7e:49:82:95: 96:d2:e8:75:e9:78:fa:d0:a3:1e:a7:15:9e:53:c1: ab:6a:ea:55:bd:4a:55:46:f5:62:7a:57:4d:9d:68: bf:18:6a:a2:18:73:1f:ef:a8:cd:0f:1a:7e:9c:14: eb:71:f9:bb:80:4c:e8:49:cf:dd:8e:74:98:72:65: 21:3a:fe:7d:ef:5a:11:34:3e:26:20:c0:2d:39:73: f0:63:53:66:b2:01:95:ff:d7:53:8b:6f:4a:cf:50: b2:ab:8f:78:a5:91:0c:f7:9c:46:0a:d0:42:3f:20: 01:10:1a:f5:cf:06:5c:08:6c:5f:48:b2:ba:88:50: 0b:94:34:ff:47:66:18:42:98:49:f2:3e:ea:64:70: 82:68:bb:62:c0:ab:6d:0e:9d:03:4e:81:b0:cd:e5: 78:cd:1a:e5:48:a3:2b:32:2d:f6:e9:05:ce:0b:2d: 3a:a2:67:d5:79:5b:71:7b:81:10:c2:e9:a1:a7:4e: f8:12:5d:47:1b:9d:b7:01:92:2d:02:8b:2e:48:41: 07:88:3f:2a:7f:79:08:85:fc:fb:17:78:5e:f6:2c: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:7D:F5:85:FB:45:13:72:8B:36:B3:4D:C4:BA:C7:24:01:3F:76 X509v3 Authority Key Identifier: keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:44:03:9b:67:9a:25:e7:66:95:81:a6:16:b9:74:d3:f8:09: be:43:2f:4f:cc:a4:69:35:21:cc:63:d0:3b:e8:86:aa:aa:72: 84:19:15:53:8e:d0:7c:09:0d:ef:c8:e0:6c:88:06:2e:0f:4c: 4e:e4:88:2d:25:ab:20:f0:4a:de:79:a3:7d:a0:08:df:54:0e: a9:eb:3c:c4:1a:2f:65:f7:6a:36:f1:cb:40:1c:92:21:9a:b5: 3a:d4:b1:76:3f:3a:d1:5f:21:b6:6e:ed:14:7f:18:f0:5e:4b: 67:3b:5a:02:52:d6:a6:b3:6c:9b:69:e7:76:6e:2e:aa:7b:76: 01:98:22:75:bc:cb:01:1b:75:a5:11:aa:b3:49:c8:30:18:97: 4b:c8:28:bb:3d:a9:f7:78:f4:2f:2b:98:0f:a4:28:1f:39:08: a2:8e:01:88:7c:1e:93:2e:3f:ea:b0:1d:2e:10:5a:9a:63:20: 1b:d5:3a:2f:8b:bf:99:79:48:0e:f6:03:fd:2a:5e:1c:1b:06: 5a:0e:53:aa:9f:04:4e:45:6f:44:bf:ad:dc:bb:7a:63:95:2b: 4e:0e:41:2a:95:73:f6:93:a7:66:01:e5:fe:91:8a:4b:ea:c0: 08:af:9b:d0:82:be:ca:e0:af:f7:2b:32:1e:1f:bd:8b:7e:00: e3:00:e2:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qT178WrtiygsxQ7mADFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTkwYTg1NTIyYWE2MzlkNTc4ODJmZmQ5N2RiMWE0ZGQ4 MTEwYjgwHhcNMjUxMjI2MTQwMTExWhcNMjUxMjI3MTQwMTExWjAzMTEwLwYDVQQD EygwODQ2N2RmNTg1ZmI0NTEzNzI4YjM2YjM0ZGM0YmFjNzI0MDEzZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP2uuKJWD54MjrskEXJOQ1+e/08W my6OqGMK4s2Xz6rizo1yEfdINn5JgpWW0uh16Xj60KMepxWeU8GraupVvUpVRvVi eldNnWi/GGqiGHMf76jNDxp+nBTrcfm7gEzoSc/djnSYcmUhOv5971oRND4mIMAt OXPwY1NmsgGV/9dTi29Kz1Cyq494pZEM95xGCtBCPyABEBr1zwZcCGxfSLK6iFAL lDT/R2YYQphJ8j7qZHCCaLtiwKttDp0DToGwzeV4zRrlSKMrMi326QXOCy06omfV eVtxe4EQwumhp074El1HG523AZItAosuSEEHiD8qf3kIhfz7F3he9iweiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhGffWF+0UTcos2s03EusckAT92MB8GA1UdIwQY MBaAFLmpCoVSKqY51XiC/9l9saTdgRC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jYjc2MDQtNjVjMC00OTk4LWE4OWMt NTllZmMyYTNiMDRmLzEvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jYjc2MDQtNjVjMC00OTk4LWE4OWMtNTllZmMyYTNiMDRm LzEvdWFrS2hWSXFwam5WZUlMXzJYMnhwTjJCRUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUQDm2ea JedmlYGmFrl00/gJvkMvT8ykaTUhzGPQO+iGqqpyhBkVU47QfAkN78jgbIgGLg9M TuSILSWrIPBK3nmjfaAI31QOqes8xBovZfdqNvHLQBySIZq1OtSxdj860V8htm7t FH8Y8F5LZztaAlLWprNsm2nndm4uqnt2AZgidbzLARt1pRGqs0nIMBiXS8gouz2p 93j0LyuYD6QoHzkIoo4BiHweky4/6rAdLhBammMgG9U6L4u/mXlIDvYD/SpeHBsG Wg5Tqp8ETkVvRL+t3Lt6Y5UrTg5BKpVz9pOnZgHl/pGKS+rACK+b0IK+yuCv9ysy Hh+9i34A4wDiZw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client