This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json) Hash identifier: SmnxVBeF9u3O67f1qFG574FQduYY8rYORfA6Pa4FtaU= Subject key identifier: 79:BE:50:EC:5D:D7:06:82:8A:29:B8:FA:CE:64:C2:44:D5:2A:BE:00 Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Certificate serial: 019B3AFE228CB6696358AF400E124068956B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 09:01:32 +0000 Manifest this update: Sat 20 Dec 2025 09:01:32 +0000 Manifest next update: Sun 21 Dec 2025 09:01:32 +0000 Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: /BZbfp8DYK8ImkiqoNYBwmxCIN+6hiAoxuM8ppCGlwc=) 2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:22:8c:b6:69:63:58:af:40:0e:12:40:68:95:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Validity Not Before: Dec 20 09:01:32 2025 GMT Not After : Dec 21 09:01:32 2025 GMT Subject: CN=79be50ec5dd706828a29b8face64c244d52abe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:9a:6f:c0:be:59:16:b4:17:09:34:bd:93: 05:75:7c:9d:99:b4:0d:5b:2c:d2:94:f3:0c:be:5b: 1e:7a:cf:d6:9b:94:a7:70:8f:98:a9:d9:a3:fb:f0: cb:d6:d6:28:b6:3c:c6:0c:0b:82:7d:91:54:e9:75: 8b:92:b2:bb:77:1d:33:3b:77:77:65:8d:e5:14:36: 46:df:93:09:a2:fb:4c:b0:45:56:b9:60:8e:1d:51: 9e:64:a3:eb:ec:d3:60:09:0a:7e:cd:10:c2:0e:00: 02:e5:5d:8f:03:1c:63:c4:bb:4e:5c:76:1d:07:60: 49:67:1d:37:3e:19:05:9d:26:99:a0:f5:df:a2:cb: 16:04:96:f6:23:76:e2:a0:ba:ee:b4:17:31:06:a6: 30:54:5e:71:1b:76:dc:fc:64:d7:fe:f8:e4:3a:48: db:1c:11:14:ca:4d:5a:8c:cf:b1:60:28:f7:dd:36: 77:fb:63:a5:2d:88:49:3b:6a:96:51:2e:74:ff:d6: 62:9f:9f:d7:79:fe:38:d1:eb:1a:18:4c:ee:22:d0: 23:aa:fd:28:0e:82:f9:0e:1a:e9:5d:30:9d:77:e3: 76:70:30:b0:f8:fc:71:c2:ff:e8:dc:65:b2:2b:0e: 52:c3:73:57:f3:41:06:24:cc:d0:6d:cc:15:9d:b0: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:50:EC:5D:D7:06:82:8A:29:B8:FA:CE:64:C2:44:D5:2A:BE:00 X509v3 Authority Key Identifier: keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:40:9d:b0:7d:a0:dc:96:e2:9f:bc:73:76:d9:6f:79:d5:04: b0:88:ff:67:a5:2d:61:3a:bf:ef:8b:10:26:8a:fb:f6:7c:84: ba:14:b6:2f:e0:1d:78:d2:b4:f1:59:af:cf:82:70:2e:21:47: d0:c9:bd:eb:a3:fd:86:20:64:fd:1f:4e:45:bb:13:01:d3:2b: ed:23:24:4f:71:35:fd:d1:d0:93:37:f8:17:b9:bd:a8:ec:59: dc:2c:0c:04:70:00:69:e2:ff:d6:9a:78:e5:e6:f1:01:86:5c: 28:64:1c:95:01:77:e3:8f:32:dc:25:c2:c0:ef:9a:f8:e0:69: 6d:74:1d:29:e2:3d:b9:c9:41:eb:02:89:58:c7:0e:ff:99:d0: a5:6a:5a:56:2f:d5:6a:be:47:02:e2:83:55:70:e9:11:35:87: ac:f9:c6:c6:f6:a0:4b:d8:4c:19:29:f8:c5:39:68:72:94:8f: 4d:bd:a8:c9:f0:f4:b9:28:63:0a:6b:02:e5:dc:4d:d2:51:db: 8d:89:a3:19:16:04:73:60:b4:e2:94:a9:e1:b6:44:99:9b:3d: 57:a5:01:89:11:29:2a:cf:49:ee:12:05:3c:cf:da:1f:e8:bd: 2e:a1:b0:70:58:43:49:8a:11:19:fa:67:e7:07:3b:98:8b:2c: 01:a6:8b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/iKMtmljWK9ADhJAaJVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0 OGU3OGUwHhcNMjUxMjIwMDkwMTMyWhcNMjUxMjIxMDkwMTMyWjAzMTEwLwYDVQQD Eyg3OWJlNTBlYzVkZDcwNjgyOGEyOWI4ZmFjZTY0YzI0NGQ1MmFiZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupmab8C+WRa0Fwk0vZMFdXydmbQN WyzSlPMMvlsees/Wm5SncI+Yqdmj+/DL1tYotjzGDAuCfZFU6XWLkrK7dx0zO3d3 ZY3lFDZG35MJovtMsEVWuWCOHVGeZKPr7NNgCQp+zRDCDgAC5V2PAxxjxLtOXHYd B2BJZx03PhkFnSaZoPXfossWBJb2I3bioLrutBcxBqYwVF5xG3bc/GTX/vjkOkjb HBEUyk1ajM+xYCj33TZ3+2OlLYhJO2qWUS50/9Zin5/Xef440esaGEzuItAjqv0o DoL5DhrpXTCdd+N2cDCw+Pxxwv/o3GWyKw5Sw3NX80EGJMzQbcwVnbC5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm+UOxd1waCiim4+s5kwkTVKr4AMB8GA1UdIwQY MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt NGZmOTBkMzc4NjQyLzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkCdsH2g 3Jbin7xzdtlvedUEsIj/Z6UtYTq/74sQJor79nyEuhS2L+AdeNK08Vmvz4JwLiFH 0Mm966P9hiBk/R9ORbsTAdMr7SMkT3E1/dHQkzf4F7m9qOxZ3CwMBHAAaeL/1pp4 5ebxAYZcKGQclQF3448y3CXCwO+a+OBpbXQdKeI9uclB6wKJWMcO/5nQpWpaVi/V ar5HAuKDVXDpETWHrPnGxvagS9hMGSn4xTlocpSPTb2oyfD0uShjCmsC5dxN0lHb jYmjGRYEc2C04pSp4bZEmZs9V6UBiREpKs9J7hIFPM/aH+i9LqGwcFhDSYoRGfpn 5wc7mIssAaaLXw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:45 2025 by rpki-client