This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json) Hash identifier: d7lfmcWtpXievZuFJo535iXN1s00T5Wuc/Ke5slXvh4= Subject key identifier: CC:96:0E:AB:BB:54:CC:1E:52:E4:A5:7A:27:7F:B5:EB:2E:F4:C1:A3 Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Certificate serial: 019B68E9229398681219E105E61750B4CF72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 07:01:07 +0000 Manifest this update: Mon 29 Dec 2025 07:01:07 +0000 Manifest next update: Tue 30 Dec 2025 07:01:07 +0000 Files and hashes: 1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: cVX+3Gd696Cu5cGyPa2a544sZoNbmp+9G8PoF5tIrc4=) 2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:22:93:98:68:12:19:e1:05:e6:17:50:b4:cf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236 Validity Not Before: Dec 29 07:01:07 2025 GMT Not After : Dec 30 07:01:07 2025 GMT Subject: CN=cc960eabbb54cc1e52e4a57a277fb5eb2ef4c1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:6e:0e:03:c1:1d:f8:f4:e1:fe:cc:73:22: 75:ad:6d:bc:7d:e4:19:ed:e8:3a:b0:5e:44:70:b6: 09:9e:6d:c4:b5:12:85:b4:1a:5b:91:82:3a:e0:62: 64:30:b4:ef:1a:7d:be:34:0b:16:19:fb:9d:45:27: d0:f1:07:5b:f1:c8:b5:d2:b4:45:87:ca:8c:ae:81: 00:e2:75:97:74:ee:33:33:23:00:ab:70:a0:8f:32: 2d:5a:e1:25:80:e2:0c:d8:50:52:17:5d:cc:d7:55: 87:0b:24:90:65:9d:c4:e9:9a:2d:c5:f0:61:f0:56: dd:51:8a:0d:b2:ba:af:10:bd:72:48:e8:c5:96:c6: 2b:6c:9d:c9:40:b0:04:d4:1f:86:9c:d4:cc:bd:33: dc:a9:4d:f6:86:40:e9:a0:54:1b:fd:06:c5:54:ed: 35:2e:ad:8d:0a:45:89:c3:70:6e:fd:51:47:79:b2: 71:3f:0f:25:6a:34:b2:ff:0c:3c:2b:23:95:22:28: 39:aa:f9:09:e4:d6:56:f9:0f:6d:56:8c:5c:5c:17: 23:80:5f:02:74:57:62:ac:ca:5e:e1:53:ae:85:f0: 1e:61:29:58:53:1d:76:5f:fd:2a:f5:4c:07:03:be: 88:6c:9c:70:20:a0:4c:68:ff:a1:c6:fb:be:d9:de: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:0E:AB:BB:54:CC:1E:52:E4:A5:7A:27:7F:B5:EB:2E:F4:C1:A3 X509v3 Authority Key Identifier: keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5f:ec:45:2d:ea:61:12:19:42:5f:8c:43:57:b7:69:4c:42: 0e:aa:08:e5:3b:8f:ed:8a:11:97:b6:1f:93:fd:54:d6:1e:d0: b1:ed:2f:73:be:4b:ae:36:1c:e8:ef:5e:1c:43:bf:46:97:cf: 15:60:00:7d:a6:96:8a:a8:78:8c:87:20:6c:35:b9:b3:38:40: e0:a6:21:eb:f3:66:2f:ab:34:b6:eb:c9:56:b4:e0:fd:df:50: 07:b7:61:f8:6b:77:67:ea:6d:20:ca:4c:ea:53:5d:4b:ae:13: 10:90:ca:01:20:c7:e9:48:fd:99:db:b9:c1:a9:54:53:a3:58: 04:50:3f:23:7e:7f:c7:8f:e3:3d:b4:bf:9a:17:03:30:0e:d3: 15:61:fd:ec:ae:96:aa:2c:eb:0c:30:64:ed:28:2a:ea:30:4c: a0:be:ab:29:b4:77:4e:77:ee:be:7a:0f:29:ac:18:2e:0d:13: d7:3e:e3:dd:2b:28:6c:a4:a6:a0:a3:5e:54:be:7e:54:f6:47: 57:31:43:5d:6b:34:06:8f:77:34:cd:35:ce:6d:38:bf:6b:42: e1:69:9d:65:ca:f8:83:8d:f1:0b:10:14:2f:7c:86:81:92:2c: 70:d7:3c:83:c4:65:9d:30:f5:6d:3e:e3:c6:f1:26:1f:30:74: 75:84:f4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6SKTmGgSGeEF5hdQtM9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzI0ZWE3YmI5ZWQ1OGQ4ZDdiODVkNWQxY2RjMGZlNDNi Y2UyMzYwHhcNMjUxMjI5MDcwMTA3WhcNMjUxMjMwMDcwMTA3WjAzMTEwLwYDVQQD EyhjYzk2MGVhYmJiNTRjYzFlNTJlNGE1N2EyNzdmYjVlYjJlZjRjMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvRuDgPBHfj04f7McyJ1rW28feQZ 7eg6sF5EcLYJnm3EtRKFtBpbkYI64GJkMLTvGn2+NAsWGfudRSfQ8Qdb8ci10rRF h8qMroEA4nWXdO4zMyMAq3CgjzItWuElgOIM2FBSF13M11WHCySQZZ3E6ZotxfBh 8FbdUYoNsrqvEL1ySOjFlsYrbJ3JQLAE1B+GnNTMvTPcqU32hkDpoFQb/QbFVO01 Lq2NCkWJw3Bu/VFHebJxPw8lajSy/ww8KyOVIig5qvkJ5NZW+Q9tVoxcXBcjgF8C dFdirMpe4VOuhfAeYSlYUx12X/0q9UwHA76IbJxwIKBMaP+hxvu+2d4rJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyWDqu7VMweUuSleid/tesu9MGjMB8GA1UdIwQY MBaAFFMyTqe7ntWNjXuF1dHNwP5DvOI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEt Mjg4ZmNkZjBjZDBiLzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NTUwODAtYTQ4OC00ZWJlLWE0NzEtMjg4ZmNkZjBjZDBi LzEvVXpKT3A3dWUxWTJOZTRYVjBjM0Ffa084NGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV/sRS3q YRIZQl+MQ1e3aUxCDqoI5TuP7YoRl7Yfk/1U1h7Qse0vc75LrjYc6O9eHEO/RpfP FWAAfaaWiqh4jIcgbDW5szhA4KYh6/NmL6s0tuvJVrTg/d9QB7dh+Gt3Z+ptIMpM 6lNdS64TEJDKASDH6Uj9mdu5walUU6NYBFA/I35/x4/jPbS/mhcDMA7TFWH97K6W qizrDDBk7Sgq6jBMoL6rKbR3TnfuvnoPKawYLg0T1z7j3SsobKSmoKNeVL5+VPZH VzFDXWs0Bo93NM01zm04v2tC4WmdZcr4g43xCxAUL3yGgZIscNc8g8RlnTD1bT7j xvEmHzB0dYT0oA== -----END CERTIFICATE-----Generated at Mon Dec 29 16:20:55 2025 by rpki-client