This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json) Hash identifier: GoW7bEoJl/UTgut2yOBNiNiaeriII1+1DB4YQs/8fDs= Subject key identifier: AD:48:8E:70:C3:72:9F:DB:2E:DD:1D:86:42:06:1A:64:25:D7:C0:13 Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Certificate serial: 019B42496D8CA2591EDBC14513E31E7C9819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:01:06 +0000 Manifest this update: Sun 21 Dec 2025 19:01:06 +0000 Manifest next update: Mon 22 Dec 2025 19:01:06 +0000 Files and hashes: 1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: ZXBpbnJkOnlXh1nMbIa/GGQRxs8URtXMhHXBTDG4BdQ=) 2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:6d:8c:a2:59:1e:db:c1:45:13:e3:1e:7c:98:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Validity Not Before: Dec 21 19:01:06 2025 GMT Not After : Dec 22 19:01:06 2025 GMT Subject: CN=ad488e70c3729fdb2edd1d8642061a6425d7c013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:e9:17:4e:05:d3:76:75:01:12:93:d1:df: fa:bf:7b:54:2b:79:8c:6f:cc:d9:30:40:d5:f8:01: 6a:d0:41:da:d6:e6:a0:1f:1e:97:9b:7e:71:a2:91: 65:0f:f8:cc:c7:e7:8c:48:f7:bf:96:04:09:04:cc: 69:2c:6a:a7:76:a1:a6:95:2e:ea:c9:66:cd:c6:07: b5:b1:a5:28:1f:1f:2c:36:bc:57:d8:e5:73:67:d2: 4d:ed:21:d3:98:a0:34:96:be:74:a8:b0:74:58:56: b4:12:92:b8:57:4c:87:86:cd:44:7f:81:05:24:28: 12:7c:a8:af:32:d8:e4:a8:5e:7c:2e:50:23:98:b6: bc:3e:ef:bd:7b:dd:d9:53:6d:7d:e1:83:c4:70:38: d2:0a:d3:5f:b4:39:2a:fb:99:3a:a0:09:d9:63:8e: f1:ba:05:c7:6c:ab:a8:4e:c8:ee:c8:64:78:44:14: 0d:d5:30:27:b8:80:53:0a:14:1d:17:ed:d6:ad:0d: 80:4e:b2:6d:33:c1:46:d2:dc:b9:b7:b6:68:fe:f1: 04:68:d0:d2:8c:19:2c:ff:c6:01:6d:98:4d:9c:f7: 7d:2b:7c:3b:9b:dd:0c:b7:4f:3c:67:ff:96:8f:6e: 94:2d:47:aa:a0:f2:6e:59:2a:36:1a:7b:92:95:2e: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:8E:70:C3:72:9F:DB:2E:DD:1D:86:42:06:1A:64:25:D7:C0:13 X509v3 Authority Key Identifier: keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ec:01:51:b5:e4:74:73:79:ea:7a:2a:fb:d6:08:5c:30:07: d6:c2:8b:e3:40:da:63:a7:8e:48:f9:c2:9c:08:96:6a:d3:f6: 53:59:73:e5:b9:00:1a:9e:1e:82:30:b0:72:e8:6a:7a:7e:57: b6:cb:de:53:81:de:14:7d:a2:04:48:9c:53:71:b6:19:8f:bd: 33:12:91:44:a1:9b:d1:c4:82:9a:78:69:b3:4e:e3:e2:b4:56: d7:48:44:d7:e0:2d:1c:19:8b:b6:08:6c:7e:32:c0:77:ad:54: 16:cd:23:88:8a:b7:70:db:8b:a1:b3:7e:3b:f6:e7:9a:c6:de: bd:e2:fb:16:aa:da:dd:f6:f1:04:db:19:30:24:e8:c6:2a:ad: 85:46:f7:6c:d0:0d:ce:56:27:8f:1b:3e:63:61:8a:c8:89:19: 39:94:76:e0:aa:3b:78:83:84:c0:46:d7:5c:51:8a:21:27:b7: 6a:d9:45:1a:e0:e3:1b:d1:2f:74:16:1d:ff:30:56:ad:1f:e8: e6:ee:74:ed:31:5e:76:18:50:09:dd:1e:a9:3a:92:8c:20:e1: ba:f8:0e:8d:8b:0f:f4:00:a5:08:33:2f:96:94:d8:3a:57:8d: 46:86:cf:a4:ab:10:ba:e1:5f:6f:72:9a:a2:a3:b1:ca:5c:0e: 1b:f1:73:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSW2Molke28FFE+MefJgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzI0ZWE3YmI5ZWQ1OGQ4ZDdiODVkNWQxY2RjMGZlNDNi Y2UyMzYwHhcNMjUxMjIxMTkwMTA2WhcNMjUxMjIyMTkwMTA2WjAzMTEwLwYDVQQD EyhhZDQ4OGU3MGMzNzI5ZmRiMmVkZDFkODY0MjA2MWE2NDI1ZDdjMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqHpF04F03Z1ARKT0d/6v3tUK3mM b8zZMEDV+AFq0EHa1uagHx6Xm35xopFlD/jMx+eMSPe/lgQJBMxpLGqndqGmlS7q yWbNxge1saUoHx8sNrxX2OVzZ9JN7SHTmKA0lr50qLB0WFa0EpK4V0yHhs1Ef4EF JCgSfKivMtjkqF58LlAjmLa8Pu+9e93ZU2194YPEcDjSCtNftDkq+5k6oAnZY47x ugXHbKuoTsjuyGR4RBQN1TAnuIBTChQdF+3WrQ2ATrJtM8FG0ty5t7Zo/vEEaNDS jBks/8YBbZhNnPd9K3w7m90Mt088Z/+Wj26ULUeqoPJuWSo2GnuSlS5TXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1IjnDDcp/bLt0dhkIGGmQl18ATMB8GA1UdIwQY MBaAFFMyTqe7ntWNjXuF1dHNwP5DvOI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEt Mjg4ZmNkZjBjZDBiLzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEtMjg4ZmNkZjBjZDBi LzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIewBUbXk dHN56noq+9YIXDAH1sKL40DaY6eOSPnCnAiWatP2U1lz5bkAGp4egjCwcuhqen5X tsveU4HeFH2iBEicU3G2GY+9MxKRRKGb0cSCmnhps07j4rRW10hE1+AtHBmLtghs fjLAd61UFs0jiIq3cNuLobN+O/bnmsbeveL7Fqra3fbxBNsZMCToxiqthUb3bNAN zlYnjxs+Y2GKyIkZOZR24Ko7eIOEwEbXXFGKISe3atlFGuDjG9EvdBYd/zBWrR/o 5u507TFedhhQCd0eqTqSjCDhuvgOjYsP9AClCDMvlpTYOleNRobPpKsQuuFfb3Ka oqOxylwOG/FzOw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:08:21 2025 by rpki-client