This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft File: uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json) Hash identifier: di7Jbajv2dlXeK7F/qLuWkJrQ8YFVmcn4eJVPbQRKtU= Subject key identifier: 3D:BB:33:58:58:5A:1A:56:42:F1:E7:13:1F:8C:22:FD:91:D0:A8:A7 Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72 Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72 Certificate serial: 019B5ABFF342BE3F631176310E251E535B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft Manifest number: 0E9E Signing time: Fri 26 Dec 2025 13:01:27 +0000 Manifest this update: Fri 26 Dec 2025 13:01:27 +0000 Manifest next update: Sat 27 Dec 2025 13:01:27 +0000 Files and hashes: 1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=) 2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: mH7WpSnyQAniKVI0lzO6FLc/osZByesL5RVoFP0FTYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:f3:42:be:3f:63:11:76:31:0e:25:1e:53:5b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72 Validity Not Before: Dec 26 13:01:27 2025 GMT Not After : Dec 27 13:01:27 2025 GMT Subject: CN=3dbb3358585a1a5642f1e7131f8c22fd91d0a8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:57:29:4b:0a:c2:40:73:c9:47:f4:98:0e: 05:9a:9c:1e:1c:ee:b7:ee:95:60:3f:0e:cd:3c:de: 68:a8:9d:55:01:24:66:c0:4c:be:25:84:3b:35:a9: 5f:5b:b8:02:3a:8e:ca:32:27:c8:54:9c:3c:45:ea: a6:3e:f0:68:21:81:26:b0:76:e2:0f:03:ea:2a:0f: 5c:04:6c:88:51:3a:2e:ce:3e:fc:fe:3f:a4:e6:4a: 0f:f7:36:8d:54:e5:6c:2e:2a:7e:96:7f:a1:4d:77: 58:e5:8a:47:93:f7:80:de:76:17:0f:2b:ab:f9:cc: d7:cc:a3:c9:b8:ef:e5:e8:31:cd:65:26:0c:4c:68: 11:0c:24:8c:ea:2d:61:96:f5:db:62:5a:b8:53:01: 86:8e:cd:58:b9:66:37:d3:ff:dc:67:fb:d1:f4:07: 36:df:ac:1d:1c:d5:34:c7:4f:56:62:eb:90:77:fd: 2e:d8:f8:29:87:f7:a2:a7:c3:89:c0:5c:95:bd:9e: 2e:3f:64:12:f2:eb:2c:de:95:44:99:63:46:e3:53: 82:74:7b:bc:4b:77:17:8d:3b:fd:01:2a:ee:3b:f1: e8:9b:28:7e:13:3a:6b:62:5f:3e:36:f4:a5:04:fc: 30:ee:a2:9b:d5:68:77:77:8f:ce:b8:39:66:b3:c5: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:33:58:58:5A:1A:56:42:F1:E7:13:1F:8C:22:FD:91:D0:A8:A7 X509v3 Authority Key Identifier: keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c5:6e:ba:0d:05:c0:c6:89:68:d4:11:fd:ce:86:ef:91:44: 3b:b8:21:29:8a:08:9a:a9:2f:08:26:e0:f6:f9:cd:be:d9:60: 90:b0:87:8f:1b:38:31:e5:ef:97:8d:a5:33:31:16:f2:ae:a2: 54:d4:35:d6:12:3a:71:07:48:03:54:4f:d5:59:16:8b:71:5c: 7d:c9:a0:63:86:9b:56:d6:d9:c0:28:04:d6:b8:97:6b:04:7d: 67:42:f3:01:18:b8:32:50:39:b6:49:ff:45:a5:80:7d:be:fe: b1:7a:1b:d9:85:44:e4:fe:00:8a:fb:8e:2a:fc:fd:de:67:b6: bb:41:33:65:6c:9c:a5:d6:0f:ea:63:10:42:86:fc:b7:2c:44: 13:8e:35:02:4e:ce:23:b2:5e:be:b2:ab:4b:d4:73:56:2b:73: 18:67:ba:c1:ab:65:85:62:1c:37:d2:75:bd:3c:75:55:0b:cb: 3e:7c:f3:86:b3:de:11:fd:75:90:6b:01:c7:d8:28:35:0f:71: a2:fd:3f:2b:c5:a7:96:9e:2f:58:43:28:07:ed:a8:7d:ea:b7: ce:e4:b3:52:30:ed:e0:cb:3f:9a:e5:6b:99:69:00:b4:ce:3e: 08:bd:eb:68:34:bd:b5:cf:8f:77:d1:c2:ba:cf:4e:49:00:3b: 10:7f:9d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav/NCvj9jEXYxDiUeU1sMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NjllNzNkZTgzNmY0MWZmMjcyNDM0MGI5M2VjMTc3NjNk NjllNzIwHhcNMjUxMjI2MTMwMTI3WhcNMjUxMjI3MTMwMTI3WjAzMTEwLwYDVQQD EygzZGJiMzM1ODU4NWExYTU2NDJmMWU3MTMxZjhjMjJmZDkxZDBhOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSZXKUsKwkBzyUf0mA4FmpweHO63 7pVgPw7NPN5oqJ1VASRmwEy+JYQ7NalfW7gCOo7KMifIVJw8ReqmPvBoIYEmsHbi DwPqKg9cBGyIUTouzj78/j+k5koP9zaNVOVsLip+ln+hTXdY5YpHk/eA3nYXDyur +czXzKPJuO/l6DHNZSYMTGgRDCSM6i1hlvXbYlq4UwGGjs1YuWY30//cZ/vR9Ac2 36wdHNU0x09WYuuQd/0u2Pgph/eip8OJwFyVvZ4uP2QS8uss3pVEmWNG41OCdHu8 S3cXjTv9ASruO/Homyh+EzprYl8+NvSlBPww7qKb1Wh3d4/OuDlms8WpHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD27M1hYWhpWQvHnEx+MIv2R0KinMB8GA1UdIwQY MBaAFLlp5z3oNvQf8nJDQLk+wXdj1p5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAt MDc0ZDI3ZGQ5MzBlLzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAtMDc0ZDI3ZGQ5MzBl LzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsVuug0F wMaJaNQR/c6G75FEO7ghKYoImqkvCCbg9vnNvtlgkLCHjxs4MeXvl42lMzEW8q6i VNQ11hI6cQdIA1RP1VkWi3FcfcmgY4abVtbZwCgE1riXawR9Z0LzARi4MlA5tkn/ RaWAfb7+sXob2YVE5P4AivuOKvz93me2u0EzZWycpdYP6mMQQob8tyxEE441Ak7O I7JevrKrS9RzVitzGGe6watlhWIcN9J1vTx1VQvLPnzzhrPeEf11kGsBx9goNQ9x ov0/K8Wnlp4vWEMoB+2ofeq3zuSzUjDt4Ms/muVrmWkAtM4+CL3raDS9tc+Pd9HC us9OSQA7EH+d0g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:14:14 2025 by rpki-client