This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json) Hash identifier: s+dgtziWdo9dG+wzwrqq3ngfhvDmgmDyz3Eph7Pr8is= Subject key identifier: BD:93:0F:80:5F:DE:63:8F:75:2A:0D:7C:B4:16:36:64:E5:AC:2B:44 Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Certificate serial: 019B7E5E07C3D0A5EACC5886FF3A446B8DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft Manifest number: 02FA Signing time: Fri 02 Jan 2026 11:00:50 +0000 Manifest this update: Fri 02 Jan 2026 11:00:50 +0000 Manifest next update: Sat 03 Jan 2026 11:00:50 +0000 Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: R+TEcZNN3kXl2HJMgxo1UaA1VVfa3aO5LVb7/u9zlWM=) 2: u2I4q7xBL8mYLta1M7INCxZpXAY.roa (hash: 3ZlXswl10jzu9dupP4EFIogY6nOqpccwvTneFAi7+uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:5e:07:c3:d0:a5:ea:cc:58:86:ff:3a:44:6b:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Validity Not Before: Jan 2 11:00:50 2026 GMT Not After : Jan 3 11:00:50 2026 GMT Subject: CN=bd930f805fde638f752a0d7cb4163664e5ac2b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:d5:f2:f0:62:90:f7:1b:05:74:15:52:55: 7f:40:f2:32:39:44:7c:eb:48:33:37:3d:a2:17:24: 1a:8d:00:de:b5:e9:3c:1c:37:24:1a:9c:09:d5:c8: 36:03:31:2f:b4:b7:a8:24:24:2c:bf:66:c2:a5:e5: 5f:05:bd:5f:43:1a:c4:ca:21:51:4f:ef:8d:e6:ed: a7:da:64:eb:b8:46:bb:f8:2f:93:4f:68:c2:6b:d1: 95:30:f8:ce:6f:67:63:85:ae:c6:e6:d4:b9:52:99: bc:67:4c:4a:61:90:40:0c:d8:2e:bc:34:af:d2:a6: 9c:78:79:36:c2:01:4d:5a:be:b3:7c:40:2f:db:98: 21:66:35:de:d3:64:68:b0:ac:50:7b:40:7e:b5:b4: aa:c2:c8:1c:59:b7:c1:cd:98:7b:82:38:4b:8f:14: 4a:44:b1:d4:d6:7d:b6:ca:b5:cb:e7:a7:be:79:55: c8:58:f2:82:60:6a:bd:6f:1f:1f:d9:95:92:44:8f: b4:8e:29:17:b9:bd:32:28:18:d4:f0:7b:a9:99:9d: 98:98:e5:0e:9a:03:00:f5:28:4a:27:ec:1c:fb:2a: d2:10:32:5d:60:9a:79:8d:8c:7c:a4:a5:c9:cc:9d: 4f:9b:3c:04:22:ea:68:1d:d8:ca:d6:2a:22:80:4a: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:93:0F:80:5F:DE:63:8F:75:2A:0D:7C:B4:16:36:64:E5:AC:2B:44 X509v3 Authority Key Identifier: keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:cd:bb:3d:da:fd:a4:92:b1:bd:a0:be:63:08:47:a6:7f: 46:4f:92:29:5b:83:ec:d2:79:f6:3f:09:56:6b:df:52:86:cd: a3:08:7a:4f:47:89:2c:b9:4c:9d:2f:ce:59:82:58:a7:54:33: e0:06:5e:9b:6f:c7:c3:ed:76:82:f3:9a:28:46:47:96:53:d4: 3d:5f:c7:d4:b2:92:72:3d:fe:ea:6b:83:2f:5f:39:d4:89:99: e6:f6:c5:0e:d4:7b:ec:9b:2a:2b:6b:00:09:a8:33:8f:42:ab: ed:e2:93:30:9c:90:e0:28:33:69:ea:a3:3b:45:09:29:e2:ff: cd:ba:74:4f:58:f8:7e:3a:0f:3b:6a:a4:fd:6b:9f:28:0e:95: 74:f8:35:5c:54:e2:a8:3f:74:4c:5b:8f:ac:23:6c:82:df:58: 81:6b:f8:84:c9:a2:a2:5e:60:68:68:97:be:58:10:5d:ee:58: 20:cd:f6:c2:ec:69:67:15:31:41:e1:cb:36:fa:89:8e:b8:1d: 29:eb:fb:b1:40:18:6c:bd:11:0b:b0:41:ff:39:2f:0e:d3:8f: 26:68:d5:94:c1:70:74:e9:29:c7:36:ea:9f:cd:85:2b:f1:fb: d0:15:b3:47:b4:81:e7:69:c5:a8:ca:e2:f6:fd:8e:6a:b9:43: db:ba:1f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+XgfD0KXqzFiG/zpEa43LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzVjYWM3MGExOThhODVmMzI0YmZlZGEwZjM1ZWQ3OTkx YzJhZWIwHhcNMjYwMTAyMTEwMDUwWhcNMjYwMTAzMTEwMDUwWjAzMTEwLwYDVQQD EyhiZDkzMGY4MDVmZGU2MzhmNzUyYTBkN2NiNDE2MzY2NGU1YWMyYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/XV8vBikPcbBXQVUlV/QPIyOUR8 60gzNz2iFyQajQDetek8HDckGpwJ1cg2AzEvtLeoJCQsv2bCpeVfBb1fQxrEyiFR T++N5u2n2mTruEa7+C+TT2jCa9GVMPjOb2djha7G5tS5Upm8Z0xKYZBADNguvDSv 0qaceHk2wgFNWr6zfEAv25ghZjXe02RosKxQe0B+tbSqwsgcWbfBzZh7gjhLjxRK RLHU1n22yrXL56e+eVXIWPKCYGq9bx8f2ZWSRI+0jikXub0yKBjU8HupmZ2YmOUO mgMA9ShKJ+wc+yrSEDJdYJp5jYx8pKXJzJ1PmzwEIupoHdjK1ioigEpO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2TD4Bf3mOPdSoNfLQWNmTlrCtEMB8GA1UdIwQY MBaAFFM1yscKGYqF8yS/7aDzXteZHCrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQt ZjM0YThmNzJlZWM0LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MGNmM2UtZDQ2OC00NDNjLWFmYTQtZjM0YThmNzJlZWM0 LzEvVXpYS3h3b1ppb1h6SkxfdG9QTmUxNWtjS3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUvNuz3a /aSSsb2gvmMIR6Z/Rk+SKVuD7NJ59j8JVmvfUobNowh6T0eJLLlMnS/OWYJYp1Qz 4AZem2/Hw+12gvOaKEZHllPUPV/H1LKScj3+6muDL1851ImZ5vbFDtR77JsqK2sA Cagzj0Kr7eKTMJyQ4CgzaeqjO0UJKeL/zbp0T1j4fjoPO2qk/WufKA6VdPg1XFTi qD90TFuPrCNsgt9YgWv4hMmiol5gaGiXvlgQXe5YIM32wuxpZxUxQeHLNvqJjrgd Kev7sUAYbL0RC7BB/zkvDtOPJmjVlMFwdOkpxzbqn82FK/H70BWzR7SB52nFqMri 9v2OarlD27ofNw== -----END CERTIFICATE-----Generated at Fri Jan 2 18:29:02 2026 by rpki-client