This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json) Hash identifier: eceUF77KH7OecHa2poE4+zcr/03E1zu4R9ArWnSybiQ= Subject key identifier: 2D:07:75:A3:63:5C:BD:A3:80:04:64:3F:96:8D:4C:74:6E:D9:C0:0C Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca Certificate serial: 019B32D69126B0D80A0FD1CAC109321211E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft Manifest number: 1768 Signing time: Thu 18 Dec 2025 19:01:21 +0000 Manifest this update: Thu 18 Dec 2025 19:01:21 +0000 Manifest next update: Fri 19 Dec 2025 19:01:21 +0000 Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: ZwuNEEQGlmyQSStPGvA3DnmrZ4kJeJ/Bta6jpZ9eYcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:91:26:b0:d8:0a:0f:d1:ca:c1:09:32:12:11:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca Validity Not Before: Dec 18 19:01:21 2025 GMT Not After : Dec 19 19:01:21 2025 GMT Subject: CN=2d0775a3635cbda38004643f968d4c746ed9c00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:0e:d5:f6:3a:03:92:8d:78:62:53:cb:49: 21:4c:f8:ee:95:44:c5:4a:65:14:38:b7:ad:40:58: c0:46:a8:fe:c4:cb:13:44:f5:90:2d:46:4d:37:68: c7:61:4c:ed:0a:15:94:a7:36:44:bb:28:89:37:33: c0:e0:a0:1f:af:2f:e9:ce:fe:ab:a6:37:bb:4f:3e: 10:62:8d:67:f9:de:2b:83:a2:60:84:bd:bb:b8:d2: a0:e3:b0:d4:7c:13:db:f1:4c:21:e3:c7:c4:cd:7c: e0:ab:dd:d0:37:3f:39:df:76:67:8a:08:f8:76:8c: 71:89:6d:cc:b4:7d:e5:22:18:8c:16:f1:63:e6:1a: ee:7b:83:75:83:97:5f:62:84:2d:65:09:8f:45:ce: 40:9b:6c:53:42:b6:04:d9:99:f3:71:56:a9:fd:be: fa:0c:c3:b7:7d:3e:1d:86:cc:08:25:44:42:57:c2: ab:f9:62:e5:73:0d:77:3c:19:05:9b:e9:f3:68:7d: c0:77:3e:ce:e8:2c:63:f5:bc:c2:64:e8:bf:53:be: 71:3d:e9:94:bc:17:26:66:03:f4:f2:02:09:52:33: 94:68:e7:85:8e:30:27:76:78:d7:7c:3f:d4:f4:8c: a3:0b:80:c4:ad:cb:0c:1c:1c:35:aa:1e:11:f6:af: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:75:A3:63:5C:BD:A3:80:04:64:3F:96:8D:4C:74:6E:D9:C0:0C X509v3 Authority Key Identifier: keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:08:da:2a:e5:fa:1e:77:2f:10:96:c3:8f:09:b5:0e:f6: 33:b7:9d:d6:75:42:d5:58:3e:62:be:46:21:2e:cc:2e:17:8d: 71:9c:b7:5e:45:17:23:c3:b5:57:7c:21:73:7a:dc:5b:00:d9: 51:08:64:1e:2f:81:1f:00:01:15:0e:6e:b5:c6:3c:6e:61:97: 5c:0d:70:7d:0d:4a:8a:d0:d8:8b:da:f7:27:96:83:a3:86:ff: 9e:15:54:da:25:52:de:bb:73:78:f9:6f:93:d3:10:ca:02:6c: 9b:71:44:ea:ea:c1:84:33:33:e3:2d:17:d0:35:92:e4:2a:cb: d6:6f:58:93:0b:cd:74:bb:68:46:9b:64:af:72:54:44:f2:6c: 41:33:85:af:c8:40:76:02:82:9b:67:4e:4c:3f:4f:44:c8:b8: 3e:ce:63:4d:dc:c2:32:d4:bb:df:3c:40:60:5f:14:94:14:ab: 18:db:df:21:2b:32:18:33:af:de:3e:bd:4b:01:ca:0b:45:13: 41:14:fc:7a:91:16:b6:a9:5b:41:a7:91:0b:77:9c:34:28:67: e3:34:d1:c0:63:ba:e3:e3:51:05:6a:a6:b7:db:76:1a:70:44: 79:c6:45:5d:2e:45:ac:14:a6:06:f0:32:76:61:7f:40:bf:52: ec:b3:3a:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pEmsNgKD9HKwQkyEhHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDNkN2U0NGQzN2FjNTkxMDAyNjMxOWYxMGNkZDczOTY3 ZDk3Y2EwHhcNMjUxMjE4MTkwMTIxWhcNMjUxMjE5MTkwMTIxWjAzMTEwLwYDVQQD EygyZDA3NzVhMzYzNWNiZGEzODAwNDY0M2Y5NjhkNGM3NDZlZDljMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEQO1fY6A5KNeGJTy0khTPjulUTF SmUUOLetQFjARqj+xMsTRPWQLUZNN2jHYUztChWUpzZEuyiJNzPA4KAfry/pzv6r pje7Tz4QYo1n+d4rg6JghL27uNKg47DUfBPb8Uwh48fEzXzgq93QNz8533Znigj4 doxxiW3MtH3lIhiMFvFj5hrue4N1g5dfYoQtZQmPRc5Am2xTQrYE2ZnzcVap/b76 DMO3fT4dhswIJURCV8Kr+WLlcw13PBkFm+nzaH3Adz7O6Cxj9bzCZOi/U75xPemU vBcmZgP08gIJUjOUaOeFjjAndnjXfD/U9IyjC4DErcsMHBw1qh4R9q+WFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0HdaNjXL2jgARkP5aNTHRu2cAMMB8GA1UdIwQY MBaAFLlD1+RNN6xZEAJjGfEM3XOWfZfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQt MDgzZTdlNWZkNmE1LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zZjMwODAtYzE5MC00ZGE2LThhYjQtMDgzZTdlNWZkNmE1 LzEvdVVQWDVFMDNyRmtRQW1NWjhRemRjNVo5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTgI2irl +h53LxCWw48JtQ72M7ed1nVC1Vg+Yr5GIS7MLheNcZy3XkUXI8O1V3whc3rcWwDZ UQhkHi+BHwABFQ5utcY8bmGXXA1wfQ1KitDYi9r3J5aDo4b/nhVU2iVS3rtzePlv k9MQygJsm3FE6urBhDMz4y0X0DWS5CrL1m9YkwvNdLtoRptkr3JURPJsQTOFr8hA dgKCm2dOTD9PRMi4Ps5jTdzCMtS73zxAYF8UlBSrGNvfISsyGDOv3j69SwHKC0UT QRT8epEWtqlbQaeRC3ecNChn4zTRwGO64+NRBWqmt9t2GnBEecZFXS5FrBSmBvAy dmF/QL9S7LM6hA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:11 2025 by rpki-client