This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json) Hash identifier: 0zGACujeCLcTGpu5TKfbTpZL0rsYXR03Csi+O/tFWEk= Subject key identifier: 40:54:D1:2A:01:B2:BA:EA:43:49:EE:87:C9:5E:FC:7C:E9:57:14:CE Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16 Certificate serial: 019B4DDFF6F9D8C09D21EA9ACB5763A2986E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft Manifest number: 0B16 Signing time: Wed 24 Dec 2025 01:01:21 +0000 Manifest this update: Wed 24 Dec 2025 01:01:21 +0000 Manifest next update: Thu 25 Dec 2025 01:01:21 +0000 Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: On4AWICQZbRyl++VRPv1k2sFZ13W+gMJYJnD6YJl/AI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:f6:f9:d8:c0:9d:21:ea:9a:cb:57:63:a2:98:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528526de7a42f1e080916840eebf39038b893d16 Validity Not Before: Dec 24 01:01:21 2025 GMT Not After : Dec 25 01:01:21 2025 GMT Subject: CN=4054d12a01b2baea4349ee87c95efc7ce95714ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:d6:16:21:bc:1f:d0:18:f9:63:23:70:e0: e4:15:44:c6:ca:17:32:91:90:ac:55:78:8c:af:d6: cf:c1:09:e2:48:0f:22:b3:dd:42:af:d0:95:fb:ec: 49:76:59:8f:da:20:91:29:d2:4b:6b:c5:a6:3e:a6: 09:30:5a:d4:0a:3d:27:e6:fb:4a:ad:9a:7a:7a:28: 20:1c:68:a4:08:89:7c:ff:03:f5:d4:ad:2b:21:e4: d3:f2:fb:da:e8:b3:ab:88:d1:c0:07:db:07:44:16: ae:ac:10:39:f8:f3:1a:7d:1a:27:d0:bc:cd:b0:7e: be:6b:70:9f:f5:19:ab:96:77:50:81:35:4d:0d:b2: 32:ff:14:17:3e:6e:a2:a9:72:ef:b5:81:76:4b:1a: 45:6c:63:63:d8:67:e9:12:27:b5:09:4e:36:ac:f3: 8f:83:1c:99:95:cf:a6:89:12:35:b0:d8:f7:cd:4c: 4d:1d:a6:f6:85:69:7f:48:f1:80:9e:96:76:30:ec: 0e:0c:90:c4:10:c8:fb:62:53:dd:4d:3d:3e:ef:9e: 3e:ec:49:16:3b:89:68:0e:af:b5:1e:57:21:e9:8a: 1b:9a:6c:ab:8c:78:8b:94:fa:49:a0:b8:49:3c:ce: 9d:a2:28:64:6d:60:28:24:17:b3:74:db:60:65:92: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:D1:2A:01:B2:BA:EA:43:49:EE:87:C9:5E:FC:7C:E9:57:14:CE X509v3 Authority Key Identifier: keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9c:02:91:43:25:1b:05:70:97:94:f5:5a:7c:a4:80:ac:dd: 25:b7:57:f5:af:ab:5f:62:3c:ee:f6:3a:a3:09:14:8c:7b:51: 63:09:23:f9:c1:d4:30:3e:d4:bd:55:db:30:f4:96:bc:fa:c5: 64:fa:14:30:1f:84:74:13:ec:14:ae:a7:a5:a1:00:37:89:c7: 3a:93:66:e1:28:10:7a:42:a5:ad:41:17:4e:15:62:57:6b:4a: ad:55:74:84:90:97:76:75:2f:27:0d:b4:a6:5f:eb:a2:77:17: c4:0a:7e:53:e6:c3:8e:4e:65:64:e9:b4:e3:d9:66:9b:9e:b4: 70:6d:9a:65:d2:11:54:0c:ce:82:94:ce:28:4d:e9:f9:20:f6: 17:3f:b0:7a:d9:f3:ad:e7:2a:d9:5d:d0:f2:5c:69:ca:c5:eb: c1:83:40:90:ee:57:b3:68:49:ae:2f:36:46:57:51:bb:e0:1b: e5:ec:a0:ab:4a:ee:07:ae:ad:9e:ea:57:d2:c1:72:cf:22:ee: 6b:00:bd:da:b6:31:99:8c:9f:f4:07:dd:b3:16:cc:17:4d:8e: 08:a4:82:0b:1a:41:ca:86:e7:d2:c6:2b:64:53:27:60:57:8d: 14:0d:b7:5f:61:db:e0:58:27:19:e9:15:bf:92:cc:22:a3:a1: 10:31:d8:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN3/b52MCdIeqay1djophuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyODUyNmRlN2E0MmYxZTA4MDkxNjg0MGVlYmYzOTAzOGI4 OTNkMTYwHhcNMjUxMjI0MDEwMTIxWhcNMjUxMjI1MDEwMTIxWjAzMTEwLwYDVQQD Eyg0MDU0ZDEyYTAxYjJiYWVhNDM0OWVlODdjOTVlZmM3Y2U5NTcxNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQHWFiG8H9AY+WMjcODkFUTGyhcy kZCsVXiMr9bPwQniSA8is91Cr9CV++xJdlmP2iCRKdJLa8WmPqYJMFrUCj0n5vtK rZp6eiggHGikCIl8/wP11K0rIeTT8vva6LOriNHAB9sHRBaurBA5+PMafRon0LzN sH6+a3Cf9RmrlndQgTVNDbIy/xQXPm6iqXLvtYF2SxpFbGNj2GfpEie1CU42rPOP gxyZlc+miRI1sNj3zUxNHab2hWl/SPGAnpZ2MOwODJDEEMj7YlPdTT0+754+7EkW O4loDq+1Hlch6YobmmyrjHiLlPpJoLhJPM6doihkbWAoJBezdNtgZZInzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBU0SoBsrrqQ0nuh8le/HzpVxTOMB8GA1UdIwQY MBaAFFKFJt56QvHggJFoQO6/OQOLiT0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEt NTBjOWY1YjNjM2U0LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEtNTBjOWY1YjNjM2U0 LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5wCkUMl GwVwl5T1WnykgKzdJbdX9a+rX2I87vY6owkUjHtRYwkj+cHUMD7UvVXbMPSWvPrF ZPoUMB+EdBPsFK6npaEAN4nHOpNm4SgQekKlrUEXThViV2tKrVV0hJCXdnUvJw20 pl/roncXxAp+U+bDjk5lZOm049lmm560cG2aZdIRVAzOgpTOKE3p+SD2Fz+wetnz recq2V3Q8lxpysXrwYNAkO5Xs2hJri82RldRu+Ab5eygq0ruB66tnupX0sFyzyLu awC92rYxmYyf9AfdsxbMF02OCKSCCxpByobn0sYrZFMnYFeNFA23X2Hb4FgnGekV v5LMIqOhEDHY9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:48 2025 by rpki-client