This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json) Hash identifier: wRj6NK43C99M5vjWw8sYoW4HfLk0AWYEjuyaLC5PkC0= Subject key identifier: 38:8A:EA:44:14:22:D4:17:BF:4B:A9:46:94:6E:E4:35:FE:D3:8E:B8 Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16 Certificate serial: 019B32D6AA1FEEA1BC354C7D708027A1DFF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft Manifest number: 0B08 Signing time: Thu 18 Dec 2025 19:01:27 +0000 Manifest this update: Thu 18 Dec 2025 19:01:27 +0000 Manifest next update: Fri 19 Dec 2025 19:01:27 +0000 Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: mYBMzcnIlY/OqFWa31F8xbnA8bdE1EvpBjYh+bcD7Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:aa:1f:ee:a1:bc:35:4c:7d:70:80:27:a1:df:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528526de7a42f1e080916840eebf39038b893d16 Validity Not Before: Dec 18 19:01:27 2025 GMT Not After : Dec 19 19:01:27 2025 GMT Subject: CN=388aea441422d417bf4ba946946ee435fed38eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:3d:f9:bb:dc:c7:05:9e:0d:a4:a7:29:c8: 33:2f:68:76:07:f5:78:c7:d3:d9:b8:75:8e:05:a4: 41:08:05:df:4e:dc:ec:be:a2:34:f6:c6:18:18:d6: 5a:c8:61:4e:25:4b:5a:39:31:ee:f0:ce:db:05:0d: b9:39:53:0f:66:2a:62:65:c0:fc:d8:16:87:ba:db: 5b:2e:99:e1:47:d8:d6:c9:79:ba:c0:89:90:c4:e0: 0a:9d:28:e1:44:8a:43:d8:8d:a0:d5:99:45:7a:a6: e6:37:90:5d:06:e8:5f:c7:5c:13:35:c7:62:16:02: c7:5d:7f:7f:11:27:03:27:ec:30:84:87:e5:bc:b5: c5:ea:e1:bd:83:cd:4c:59:24:17:23:9c:35:5d:c5: 2f:3b:2c:37:ea:34:84:7d:27:63:aa:c6:c8:d7:9e: aa:5d:b0:6c:d9:c8:47:5d:fb:4f:8c:d6:cc:8e:eb: 86:1e:af:4c:32:97:4f:36:9e:02:e5:b4:fd:de:71: 20:fb:f5:04:6b:66:0b:4a:fa:86:e0:26:fd:84:f6: 36:fa:a8:ab:11:55:0a:d3:22:bb:d0:f7:b6:90:f6: 58:d7:77:49:da:43:4f:c3:9c:f6:36:b8:e4:50:b5: 87:bd:e7:6e:9c:2d:2e:71:42:f0:72:3b:62:69:5f: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:EA:44:14:22:D4:17:BF:4B:A9:46:94:6E:E4:35:FE:D3:8E:B8 X509v3 Authority Key Identifier: keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2d:d7:1f:22:a3:f9:2b:16:55:e4:51:a9:02:9a:35:fb:37: b8:46:ab:91:e9:79:6a:e8:37:3d:ca:7d:25:ed:29:fa:50:fb: 0d:75:ed:26:a0:22:66:37:0a:cc:c1:64:03:df:33:17:96:e7: 45:f1:44:23:79:20:bf:07:82:bc:03:2a:7b:ef:b6:ea:50:3b: dd:75:d9:d2:4d:75:8e:35:b1:71:d9:f6:c9:2d:ae:86:34:e0: c3:7b:90:96:81:33:8a:b7:38:22:bc:4c:d8:e3:a5:b3:1b:ae: 74:eb:a3:d4:33:65:af:c1:27:2a:dd:c1:64:1d:ab:d2:0b:f0: e9:29:a0:19:58:7d:ab:40:0c:7e:d7:3b:64:dd:69:5b:97:33: 95:ad:9d:99:8c:98:0d:28:b0:83:68:32:6f:58:ea:76:32:c2: 5d:5a:e7:c1:55:49:4d:bc:a9:e0:65:da:cc:d8:78:91:88:db: b6:f3:fe:27:25:88:ed:63:44:1f:75:03:82:96:04:40:aa:8d: 40:7d:24:5d:01:3e:d6:54:a7:1d:d9:f1:3f:97:c1:c3:dc:22: 98:16:99:a7:b7:d5:c1:9b:7b:30:79:6c:f0:e8:72:38:5c:bf: 28:21:b6:28:c3:d3:71:db:a0:cd:1c:b4:af:53:1c:94:22:fb: 36:1f:e3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1qof7qG8NUx9cIAnod/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyODUyNmRlN2E0MmYxZTA4MDkxNjg0MGVlYmYzOTAzOGI4 OTNkMTYwHhcNMjUxMjE4MTkwMTI3WhcNMjUxMjE5MTkwMTI3WjAzMTEwLwYDVQQD EygzODhhZWE0NDE0MjJkNDE3YmY0YmE5NDY5NDZlZTQzNWZlZDM4ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHg9+bvcxwWeDaSnKcgzL2h2B/V4 x9PZuHWOBaRBCAXfTtzsvqI09sYYGNZayGFOJUtaOTHu8M7bBQ25OVMPZipiZcD8 2BaHuttbLpnhR9jWyXm6wImQxOAKnSjhRIpD2I2g1ZlFeqbmN5BdBuhfx1wTNcdi FgLHXX9/EScDJ+wwhIflvLXF6uG9g81MWSQXI5w1XcUvOyw36jSEfSdjqsbI156q XbBs2chHXftPjNbMjuuGHq9MMpdPNp4C5bT93nEg+/UEa2YLSvqG4Cb9hPY2+qir EVUK0yK70Pe2kPZY13dJ2kNPw5z2NrjkULWHvedunC0ucULwcjtiaV+OEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiK6kQUItQXv0upRpRu5DX+0464MB8GA1UdIwQY MBaAFFKFJt56QvHggJFoQO6/OQOLiT0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEt NTBjOWY1YjNjM2U0LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEtNTBjOWY1YjNjM2U0 LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby3XHyKj +SsWVeRRqQKaNfs3uEarkel5aug3Pcp9Je0p+lD7DXXtJqAiZjcKzMFkA98zF5bn RfFEI3kgvweCvAMqe++26lA73XXZ0k11jjWxcdn2yS2uhjTgw3uQloEzirc4IrxM 2OOlsxuudOuj1DNlr8EnKt3BZB2r0gvw6SmgGVh9q0AMftc7ZN1pW5czla2dmYyY DSiwg2gyb1jqdjLCXVrnwVVJTbyp4GXazNh4kYjbtvP+JyWI7WNEH3UDgpYEQKqN QH0kXQE+1lSnHdnxP5fBw9wimBaZp7fVwZt7MHls8OhyOFy/KCG2KMPTcdugzRy0 r1MclCL7Nh/jyg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:34 2025 by rpki-client