This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft File: uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json) Hash identifier: BUlZiworRzBdcFXmce9uhG2eE1f00kdhqYYo0WVHxNA= Subject key identifier: FB:56:D9:CA:A4:8C:08:C1:E4:1F:EE:DB:75:36:96:B2:E3:15:8C:E5 Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81 Certificate issuer: /CN=bb362881ffe362531400608b6328bb12dfa16081 Certificate serial: 019B5D5347CDDD5F58A17147B906A93C5B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft Manifest number: 0E9E Signing time: Sat 27 Dec 2025 01:01:37 +0000 Manifest this update: Sat 27 Dec 2025 01:01:37 +0000 Manifest next update: Sun 28 Dec 2025 01:01:37 +0000 Files and hashes: 1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: kYjrC2EEuN0NMijJzRYx8VbnkH5NBMBMShvnt/vbmww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:47:cd:dd:5f:58:a1:71:47:b9:06:a9:3c:5b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081 Validity Not Before: Dec 27 01:01:37 2025 GMT Not After : Dec 28 01:01:37 2025 GMT Subject: CN=fb56d9caa48c08c1e41feedb753696b2e3158ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:ac:75:e2:d3:21:a8:29:ee:6c:c7:da:94: 8d:0c:26:c5:52:26:24:ee:98:a3:48:9b:00:22:56: 72:29:96:5a:6a:60:14:cf:4e:09:71:4c:f9:cd:ac: 4f:be:17:9e:cd:47:24:6b:ef:7f:e8:fe:e1:6a:80: ef:7e:a1:e2:82:22:67:2f:3b:2e:5b:26:9b:48:90: b9:b0:2f:7b:02:e3:9f:e6:d5:5c:07:98:86:36:eb: 05:95:f1:6a:22:09:e2:44:ff:df:c8:4b:58:af:46: 23:4b:29:7d:28:c3:8a:22:d8:f8:4c:da:34:74:9a: c8:bd:29:6f:90:fb:8d:00:f0:df:dd:1c:36:0c:d4: d4:88:a1:3c:07:c5:25:aa:8c:23:ea:bb:f4:40:e2: dc:47:7a:9c:d3:57:59:28:82:e8:45:58:fe:5a:bb: e2:7c:bd:b6:74:fd:25:a1:bd:68:f6:23:1a:b7:04: f8:1c:e0:57:42:ab:af:7b:ba:5b:11:5e:29:7c:d1: 93:52:0d:94:6d:6d:16:29:6d:54:00:92:64:f2:69: 19:dd:49:d0:c8:ba:53:95:ed:c2:8c:cf:c4:ed:2f: 9f:cf:51:d7:01:42:f1:ee:35:af:a4:2e:0e:28:0f: 7f:f1:1d:5c:ae:2e:70:61:f4:e0:aa:b8:02:94:7d: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:56:D9:CA:A4:8C:08:C1:E4:1F:EE:DB:75:36:96:B2:E3:15:8C:E5 X509v3 Authority Key Identifier: keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4a:24:dd:70:0d:a9:e7:50:69:b6:f6:d7:2b:6e:3c:45:f5: 59:03:82:0d:14:f8:72:cd:65:c6:e6:2d:7e:50:73:6d:92:2a: 1d:28:a2:57:b6:95:34:74:1b:e6:e6:39:d8:e5:b1:c8:90:aa: 72:ff:75:4f:8f:a9:72:99:25:c6:c5:a8:36:c1:26:5a:48:13: c2:d8:92:9c:a6:a0:4a:b1:58:97:9f:b3:d6:1f:05:3c:62:40: 99:88:e0:3c:5f:1b:68:59:46:7f:d7:8d:6d:66:65:83:19:51: 2b:a3:14:47:ed:64:cd:86:1c:62:85:a3:07:3d:3b:5f:86:8d: 6c:01:52:9b:cc:df:1f:82:32:55:5a:66:7f:54:b6:fc:ff:0b: 07:2b:7b:6d:d0:d5:9b:0a:8a:2f:13:7d:38:f7:c4:fa:b2:d3: 52:f8:91:50:4e:c0:31:d5:cb:9b:04:e7:a8:45:ee:df:23:5c: 4d:4c:a5:3e:27:47:3e:99:a2:80:f6:f7:6c:39:08:40:99:79: 3b:82:67:7a:8e:bf:89:6f:b0:89:e7:e7:c7:dc:5f:16:cd:9d: 7c:02:85:2a:80:4b:fc:21:f9:d9:93:9a:d9:18:a5:5b:87:5d: 97:9d:b7:44:66:d7:1d:45:84:b5:53:fc:82:19:7a:84:32:11: 56:94:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU0fN3V9YoXFHuQapPFsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMzYyODgxZmZlMzYyNTMxNDAwNjA4YjYzMjhiYjEyZGZh MTYwODEwHhcNMjUxMjI3MDEwMTM3WhcNMjUxMjI4MDEwMTM3WjAzMTEwLwYDVQQD EyhmYjU2ZDljYWE0OGMwOGMxZTQxZmVlZGI3NTM2OTZiMmUzMTU4Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZWsdeLTIagp7mzH2pSNDCbFUiYk 7pijSJsAIlZyKZZaamAUz04JcUz5zaxPvheezUcka+9/6P7haoDvfqHigiJnLzsu WyabSJC5sC97AuOf5tVcB5iGNusFlfFqIgniRP/fyEtYr0YjSyl9KMOKItj4TNo0 dJrIvSlvkPuNAPDf3Rw2DNTUiKE8B8Ulqowj6rv0QOLcR3qc01dZKILoRVj+Wrvi fL22dP0lob1o9iMatwT4HOBXQquve7pbEV4pfNGTUg2UbW0WKW1UAJJk8mkZ3UnQ yLpTle3CjM/E7S+fz1HXAULx7jWvpC4OKA9/8R1cri5wYfTgqrgClH3PWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtW2cqkjAjB5B/u23U2lrLjFYzlMB8GA1UdIwQY MBaAFLs2KIH/42JTFABgi2MouxLfoWCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kNDY4M2UtMTViZi00MjhiLTg5YjMt NmQ4N2Q0NjViOWUxLzEvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kNDY4M2UtMTViZi00MjhiLTg5YjMtNmQ4N2Q0NjViOWUx LzEvdXpZb2dmX2pZbE1VQUdDTFl5aTdFdC1oWUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEok3XAN qedQabb21ytuPEX1WQOCDRT4cs1lxuYtflBzbZIqHSiiV7aVNHQb5uY52OWxyJCq cv91T4+pcpklxsWoNsEmWkgTwtiSnKagSrFYl5+z1h8FPGJAmYjgPF8baFlGf9eN bWZlgxlRK6MUR+1kzYYcYoWjBz07X4aNbAFSm8zfH4IyVVpmf1S2/P8LByt7bdDV mwqKLxN9OPfE+rLTUviRUE7AMdXLmwTnqEXu3yNcTUylPidHPpmigPb3bDkIQJl5 O4Jneo6/iW+wiefnx9xfFs2dfAKFKoBL/CH52ZOa2RilW4ddl523RGbXHUWEtVP8 ghl6hDIRVpRtmQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:11:30 2025 by rpki-client