This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json) Hash identifier: bpuKVEDlsTpy6MO+Kzi4hcRfps4zhlbdlMr50ZhelPA= Subject key identifier: 05:80:9F:6B:02:FF:E0:B9:01:C2:64:90:E3:68:69:A9:C6:B2:9D:98 Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Certificate serial: 019B337AD89268BA5D24C7595B4E11400677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft Manifest number: 035D Signing time: Thu 18 Dec 2025 22:00:47 +0000 Manifest this update: Thu 18 Dec 2025 22:00:47 +0000 Manifest next update: Fri 19 Dec 2025 22:00:47 +0000 Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: ZRJ/XnKWclt+dMIh5WVlNBMX1E+FktllyONrHcasGxE=) 2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:d8:92:68:ba:5d:24:c7:59:5b:4e:11:40:06:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2 Validity Not Before: Dec 18 22:00:47 2025 GMT Not After : Dec 19 22:00:47 2025 GMT Subject: CN=05809f6b02ffe0b901c26490e36869a9c6b29d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:38:7b:ba:4c:38:25:1c:fa:9f:9e:0f:b1: dc:ed:ad:02:53:43:06:cf:01:db:d5:20:6a:bf:2d: 88:31:e3:01:2f:d4:6b:08:66:d0:c1:3e:1a:f0:b9: 6d:1d:43:a3:1b:9f:6d:33:9c:f5:d3:8b:9b:8c:73: a9:c5:4b:ed:dc:11:00:9d:a3:5a:33:43:2c:03:63: c5:e0:4b:8a:d7:b0:40:d4:b6:2b:e9:93:9b:16:86: ac:04:da:d7:6a:6a:f6:10:c5:35:28:28:d7:82:c5: 0a:b9:b1:33:dc:98:7b:5b:6a:fa:7f:fb:3c:55:7a: 1c:49:cc:15:92:b6:c2:65:53:17:42:11:94:0f:ed: 8f:a3:34:04:af:24:3a:f4:3d:15:4f:7d:8f:bf:a2: 3b:8f:7e:24:95:01:2b:df:1b:14:28:88:92:74:3d: db:c8:37:74:44:04:eb:db:ea:37:31:f3:4d:f6:e9: f9:1a:b8:c8:19:55:db:59:45:cd:4c:2c:77:bd:d7: df:d7:59:76:2f:8a:f7:26:c3:bc:6c:59:1f:00:84: 27:73:ac:70:82:6c:6b:f4:d7:07:b4:b8:a5:63:d1: 68:5b:22:63:ee:e9:8a:01:0e:eb:cd:32:4d:2f:44: 34:13:71:a8:0d:5a:b2:43:68:ed:3e:ab:1c:b0:64: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:80:9F:6B:02:FF:E0:B9:01:C2:64:90:E3:68:69:A9:C6:B2:9D:98 X509v3 Authority Key Identifier: keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:05:6b:8a:3e:01:01:65:f6:58:e1:bf:b4:26:0d:f1:ee:dd: 51:85:df:f4:b0:bd:59:fe:84:d6:23:2e:68:ea:fa:31:d3:e9: c5:66:09:de:d5:b0:4c:a5:f9:c3:59:e5:7f:01:3d:2c:51:28: 5f:75:83:ec:0a:e2:91:3e:b7:0f:0f:dc:f5:94:ce:4c:c4:65: bd:c3:e5:a5:42:2e:3c:6a:c8:3f:c4:6f:e4:7f:90:7f:e2:84: 25:04:5c:63:a9:6b:77:f7:3e:c4:5b:4f:2a:df:08:66:63:4e: ff:b1:46:0a:a1:2f:43:22:72:45:69:7b:12:e5:b4:06:0a:cd: 3b:8a:7d:93:d9:e9:3b:0b:e1:ec:3e:7a:a5:68:c8:0d:e9:b9: bd:e1:6c:f4:29:3e:36:de:2b:fc:ff:6c:60:d2:15:4f:d1:12: e4:e9:8e:cc:2d:ae:6c:ef:97:a4:f1:99:5b:31:cc:44:9f:66: 98:b7:46:77:6f:62:bf:bd:8a:e5:8d:6c:a9:7d:2f:da:7e:10: 41:91:ed:b7:ae:dd:f7:6c:03:8d:fb:6a:06:04:f5:ee:e7:d8: 0f:35:bd:17:af:4f:14:89:84:14:9b:c3:87:43:5c:62:f3:bb: be:82:3a:06:5e:cd:32:c3:9b:8d:ff:9b:c3:ba:bb:8e:8c:84: 0a:35:fb:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszetiSaLpdJMdZW04RQAZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4 YWFlYjIwHhcNMjUxMjE4MjIwMDQ3WhcNMjUxMjE5MjIwMDQ3WjAzMTEwLwYDVQQD EygwNTgwOWY2YjAyZmZlMGI5MDFjMjY0OTBlMzY4NjlhOWM2YjI5ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1U4e7pMOCUc+p+eD7Hc7a0CU0MG zwHb1SBqvy2IMeMBL9RrCGbQwT4a8LltHUOjG59tM5z104ubjHOpxUvt3BEAnaNa M0MsA2PF4EuK17BA1LYr6ZObFoasBNrXamr2EMU1KCjXgsUKubEz3Jh7W2r6f/s8 VXocScwVkrbCZVMXQhGUD+2PozQEryQ69D0VT32Pv6I7j34klQEr3xsUKIiSdD3b yDd0RATr2+o3MfNN9un5GrjIGVXbWUXNTCx3vdff11l2L4r3JsO8bFkfAIQnc6xw gmxr9NcHtLilY9FoWyJj7umKAQ7rzTJNL0Q0E3GoDVqyQ2jtPqscsGTUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWAn2sC/+C5AcJkkONoaanGsp2YMB8GA1UdIwQY MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5 LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwVrij4B AWX2WOG/tCYN8e7dUYXf9LC9Wf6E1iMuaOr6MdPpxWYJ3tWwTKX5w1nlfwE9LFEo X3WD7ArikT63Dw/c9ZTOTMRlvcPlpUIuPGrIP8Rv5H+Qf+KEJQRcY6lrd/c+xFtP Kt8IZmNO/7FGCqEvQyJyRWl7EuW0BgrNO4p9k9npOwvh7D56pWjIDem5veFs9Ck+ Nt4r/P9sYNIVT9ES5OmOzC2ubO+XpPGZWzHMRJ9mmLdGd29iv72K5Y1sqX0v2n4Q QZHtt67d92wDjftqBgT17ufYDzW9F69PFImEFJvDh0NcYvO7voI6Bl7NMsObjf+b w7q7joyECjX7yA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:25 2025 by rpki-client