This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json) Hash identifier: oTXfHLXDwc655tXtNIfVEi9gM43ljsXPce9mzW9oZ7U= Subject key identifier: 44:6C:44:8E:B1:55:6A:DF:DE:0F:F1:DB:1D:14:A8:64:86:D4:B0:7C Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Certificate serial: 019B559A5A06EBD0C6A30EA4750C5C2C8F5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 13:02:17 +0000 Manifest this update: Thu 25 Dec 2025 13:02:17 +0000 Manifest next update: Fri 26 Dec 2025 13:02:17 +0000 Files and hashes: 1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: QuoTs2NK7rLp6QpK1GeUIBK70DE8RnZM/quPpnJqh3s=) 2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:5a:06:eb:d0:c6:a3:0e:a4:75:0c:5c:2c:8f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Validity Not Before: Dec 25 13:02:17 2025 GMT Not After : Dec 26 13:02:17 2025 GMT Subject: CN=446c448eb1556adfde0ff1db1d14a86486d4b07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:19:6d:08:77:28:aa:fe:b1:ab:ae:23:37: d4:74:bf:45:00:29:52:74:e5:79:05:7e:f9:30:aa: f8:1d:69:5b:79:ae:fd:68:7b:cd:53:82:e0:21:a8: 79:5a:3f:f0:df:c1:ec:d7:3b:42:9c:1f:8a:51:27: c6:5b:d1:54:8f:83:83:b2:ee:bb:a9:e8:ab:c1:7f: ca:b4:ed:97:8d:2b:53:ce:ff:32:cf:c1:4f:94:a1: 4c:57:c1:32:00:6e:86:ac:60:74:40:22:31:c0:7b: be:04:3b:ca:50:f0:36:e8:62:02:6b:ed:20:83:39: fa:56:03:77:e0:ff:a8:63:c0:21:ad:47:78:e4:33: f2:bc:58:cb:a4:88:b7:99:06:52:0f:0e:f7:d5:b2: d0:ce:dd:cd:ef:f1:f9:38:6f:85:9d:f5:24:04:07: e0:c7:0b:31:47:0b:8c:15:c3:1b:0f:34:e7:ca:1a: 9b:b2:9a:43:9a:f3:29:fb:9f:54:98:7c:0c:c8:27: 71:71:7a:22:67:8c:77:ac:c5:f6:77:41:09:3c:6f: 6c:42:07:f8:be:47:f5:c3:22:99:97:be:34:37:1c: d6:ac:ad:27:87:4e:3a:9c:f2:a7:5e:7e:96:d9:2d: 55:db:a9:b5:b5:1f:2e:86:c9:35:13:3b:01:4c:82: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:44:8E:B1:55:6A:DF:DE:0F:F1:DB:1D:14:A8:64:86:D4:B0:7C X509v3 Authority Key Identifier: keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:39:67:05:75:2a:fd:81:00:79:26:e2:05:d2:13:b6:89:75: a1:e7:ec:23:db:35:cd:58:2b:8e:9a:41:07:e5:39:cc:c0:d2: 93:25:41:72:92:be:6e:8b:6a:d7:94:b4:e9:62:00:54:a2:47: 53:ba:85:85:c9:d0:72:f0:8b:a7:69:61:4c:df:fb:38:d9:53: 95:c0:a7:9b:72:18:de:48:92:3e:d0:82:87:8c:b0:0b:42:12: a0:38:d2:7c:87:f8:31:c5:cc:45:6b:3c:79:0a:52:55:c1:03: f2:a9:75:1c:12:d5:75:d4:41:24:f8:3c:54:2d:66:c0:44:2c: ad:2a:32:6b:5b:de:2f:f5:34:fe:2f:00:f3:77:9a:2b:17:4c: 70:2a:d2:d2:c4:13:b0:f8:69:1c:e8:d3:ff:3d:01:a2:93:43: 2b:0a:5c:7e:34:12:a1:78:83:78:34:aa:01:62:3b:a3:22:18: 00:86:3f:e3:5f:c4:92:12:76:b5:e9:34:d7:95:cc:c7:39:20: 05:13:1a:40:76:17:a0:7e:b0:67:61:a0:a8:b7:eb:8f:a7:79: 9b:bd:fa:93:5e:fc:c6:04:f6:e8:20:15:4b:79:d8:56:51:23: 98:c6:7e:38:24:70:e2:4b:68:02:57:f2:0b:d7:48:05:ce:8e: c5:96:ac:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmloG69DGow6kdQxcLI9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzI0ZWE3YmI5ZWQ1OGQ4ZDdiODVkNWQxY2RjMGZlNDNi Y2UyMzYwHhcNMjUxMjI1MTMwMjE3WhcNMjUxMjI2MTMwMjE3WjAzMTEwLwYDVQQD Eyg0NDZjNDQ4ZWIxNTU2YWRmZGUwZmYxZGIxZDE0YTg2NDg2ZDRiMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfwZbQh3KKr+sauuIzfUdL9FAClS dOV5BX75MKr4HWlbea79aHvNU4LgIah5Wj/w38Hs1ztCnB+KUSfGW9FUj4ODsu67 qeirwX/KtO2XjStTzv8yz8FPlKFMV8EyAG6GrGB0QCIxwHu+BDvKUPA26GICa+0g gzn6VgN34P+oY8AhrUd45DPyvFjLpIi3mQZSDw731bLQzt3N7/H5OG+FnfUkBAfg xwsxRwuMFcMbDzTnyhqbsppDmvMp+59UmHwMyCdxcXoiZ4x3rMX2d0EJPG9sQgf4 vkf1wyKZl740NxzWrK0nh046nPKnXn6W2S1V26m1tR8uhsk1EzsBTILRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERsRI6xVWrf3g/x2x0UqGSG1LB8MB8GA1UdIwQY MBaAFFMyTqe7ntWNjXuF1dHNwP5DvOI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEt Mjg4ZmNkZjBjZDBiLzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEtMjg4ZmNkZjBjZDBi LzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDlnBXUq /YEAeSbiBdITtol1oefsI9s1zVgrjppBB+U5zMDSkyVBcpK+botq15S06WIAVKJH U7qFhcnQcvCLp2lhTN/7ONlTlcCnm3IY3kiSPtCCh4ywC0ISoDjSfIf4McXMRWs8 eQpSVcED8ql1HBLVddRBJPg8VC1mwEQsrSoya1veL/U0/i8A83eaKxdMcCrS0sQT sPhpHOjT/z0BopNDKwpcfjQSoXiDeDSqAWI7oyIYAIY/41/EkhJ2tek015XMxzkg BRMaQHYXoH6wZ2GgqLfrj6d5m736k178xgT26CAVS3nYVlEjmMZ+OCRw4ktoAlfy C9dIBc6OxZasSQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:14:00 2025 by rpki-client