This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json) Hash identifier: EFOXA5/woGtcw4VYDdhuWHwOul3Z8epbGmgGmz8RjXA= Subject key identifier: 6F:44:95:B0:F1:C0:6A:FD:1F:2A:91:B2:28:2C:7A:45:D2:CB:1D:0A Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Certificate serial: 019B4B4D2182145266BACC710C1A6155F399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft Manifest number: 1572 Signing time: Tue 23 Dec 2025 13:01:44 +0000 Manifest this update: Tue 23 Dec 2025 13:01:44 +0000 Manifest next update: Wed 24 Dec 2025 13:01:44 +0000 Files and hashes: 1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: lUBJzXqjso6arMGjEPZSHwtB4HD+LLrGEEYpo95KjsM=) 2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:21:82:14:52:66:ba:cc:71:0c:1a:61:55:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Validity Not Before: Dec 23 13:01:44 2025 GMT Not After : Dec 24 13:01:44 2025 GMT Subject: CN=6f4495b0f1c06afd1f2a91b2282c7a45d2cb1d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:5f:e3:30:d9:49:73:03:1c:d2:5d:3e:75: b0:a0:79:0d:e6:ac:86:e3:c1:8c:af:10:d2:28:8b: 61:6d:f5:67:87:f0:09:24:71:ab:42:c5:13:d9:23: 00:aa:09:f6:ab:98:95:eb:d0:a4:ec:62:27:e1:89: 7a:10:8f:54:28:0c:20:f6:d8:62:08:fa:5f:63:3b: c6:4f:e7:f2:51:3f:ec:a0:98:b3:75:68:a2:75:8a: a9:ff:3e:19:2d:da:ad:12:c4:f2:73:7c:a6:08:b7: 8e:7f:7e:a1:dd:4c:df:eb:7b:89:b1:9f:d9:7b:88: c6:19:3d:6e:62:ed:92:9c:ea:ac:5c:1b:00:03:7c: 63:25:3b:f4:8d:67:14:cb:45:97:64:6a:4c:58:2c: eb:20:53:c0:8c:a6:27:82:47:e0:cb:95:47:98:ae: 1d:87:4b:b2:4c:d1:a3:63:26:10:5f:e0:db:1f:fb: e2:54:5a:00:ab:0c:e5:a1:f5:7c:fb:bb:d4:77:f3: 88:32:d0:aa:9c:cd:4e:dd:e3:83:f8:af:2f:d5:84: 78:7c:74:12:9d:b4:c4:66:0e:79:07:71:08:d9:48: 81:7f:29:10:60:6f:ad:64:6d:60:f2:34:0f:31:20: 88:a0:1b:4b:b7:cc:ac:30:0f:89:83:0c:22:67:05: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:44:95:B0:F1:C0:6A:FD:1F:2A:91:B2:28:2C:7A:45:D2:CB:1D:0A X509v3 Authority Key Identifier: keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a1:47:77:90:c9:c0:b3:b4:19:85:ca:84:37:8c:bc:36:ca: 11:eb:35:3c:19:f8:71:1b:9a:a1:9f:f4:47:34:6a:55:45:ca: 4e:cb:4f:0c:0f:15:0b:52:d4:73:ea:51:d2:60:f5:3b:70:a3: 02:24:bd:37:e4:81:c7:14:ae:8f:58:4b:bd:fb:19:f2:a2:66: 3f:5b:74:37:0d:d3:33:d9:96:07:57:77:62:21:6b:32:ab:f8: 56:81:77:e0:07:48:ca:ac:94:2c:f2:d8:a8:20:d4:48:84:98: 0d:ce:72:e2:2a:d7:a2:24:4d:e7:52:63:62:3a:76:9d:53:5b: d7:73:7e:bf:92:23:0c:d8:a8:e3:a6:ca:e0:aa:c0:de:41:f6: 80:d3:81:ca:0f:24:8b:d7:80:e6:97:2f:3b:ea:51:ef:8b:17: a9:66:da:8f:3d:2a:05:f0:d6:17:04:d5:67:fd:9c:76:a5:62: 70:67:d6:f2:da:17:70:68:22:75:ef:09:f4:3f:6f:3a:7b:1b: 8b:e7:ff:f0:95:f7:20:4b:3a:2c:b2:34:7d:29:7e:f2:f8:c0: 02:f3:f5:e3:bf:28:59:09:fd:45:e8:22:70:0c:af:ae:37:f0: 40:cc:9e:12:c1:70:5c:8c:00:f9:b7:7f:9e:ae:fa:f7:96:78: 3a:8c:b9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTSGCFFJmusxxDBphVfOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWEwMWFiMzUyNmI4ZWJiOGFmYjE3Yjk4YTcxMjdmMGY1 NGNhNDUwHhcNMjUxMjIzMTMwMTQ0WhcNMjUxMjI0MTMwMTQ0WjAzMTEwLwYDVQQD Eyg2ZjQ0OTViMGYxYzA2YWZkMWYyYTkxYjIyODJjN2E0NWQyY2IxZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGRf4zDZSXMDHNJdPnWwoHkN5qyG 48GMrxDSKIthbfVnh/AJJHGrQsUT2SMAqgn2q5iV69Ck7GIn4Yl6EI9UKAwg9thi CPpfYzvGT+fyUT/soJizdWiidYqp/z4ZLdqtEsTyc3ymCLeOf36h3Uzf63uJsZ/Z e4jGGT1uYu2SnOqsXBsAA3xjJTv0jWcUy0WXZGpMWCzrIFPAjKYngkfgy5VHmK4d h0uyTNGjYyYQX+DbH/viVFoAqwzlofV8+7vUd/OIMtCqnM1O3eOD+K8v1YR4fHQS nbTEZg55B3EI2UiBfykQYG+tZG1g8jQPMSCIoBtLt8ysMA+JgwwiZwUYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9ElbDxwGr9HyqRsigsekXSyx0KMB8GA1UdIwQY MBaAFLmqAas1JrjruK+xe5inEn8PVMpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEt NWE3YmZiM2NkMDhiLzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEtNWE3YmZiM2NkMDhi LzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqFHd5DJ wLO0GYXKhDeMvDbKEes1PBn4cRuaoZ/0RzRqVUXKTstPDA8VC1LUc+pR0mD1O3Cj AiS9N+SBxxSuj1hLvfsZ8qJmP1t0Nw3TM9mWB1d3YiFrMqv4VoF34AdIyqyULPLY qCDUSISYDc5y4irXoiRN51JjYjp2nVNb13N+v5IjDNio46bK4KrA3kH2gNOByg8k i9eA5pcvO+pR74sXqWbajz0qBfDWFwTVZ/2cdqVicGfW8toXcGgide8J9D9vOnsb i+f/8JX3IEs6LLI0fSl+8vjAAvP1478oWQn9RegicAyvrjfwQMyeEsFwXIwA+bd/ nq7695Z4Ooy52Q== -----END CERTIFICATE-----Generated at Tue Dec 23 18:01:08 2025 by rpki-client