This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json) Hash identifier: qD2EcnAXl+ZxUoaI54jNfNzCahdGk0/P+SxVR3gPe6A= Subject key identifier: 5E:90:7A:FD:26:40:56:2C:B1:0D:C0:D5:92:EF:A3:F1:5A:2C:63:4F Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Certificate serial: 019B3C7E2B0BE888C82D8773B9FCB998A07C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft Manifest number: 103B Signing time: Sat 20 Dec 2025 16:01:00 +0000 Manifest this update: Sat 20 Dec 2025 16:01:00 +0000 Manifest next update: Sun 21 Dec 2025 16:01:00 +0000 Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: rh+CfTnTXtw1yM/8l6B+zrW+oPHTxDQpd7iGWhqwPZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2b:0b:e8:88:c8:2d:87:73:b9:fc:b9:98:a0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Validity Not Before: Dec 20 16:01:00 2025 GMT Not After : Dec 21 16:01:00 2025 GMT Subject: CN=5e907afd2640562cb10dc0d592efa3f15a2c634f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:06:ae:5a:9f:0f:53:ca:0e:ea:24:93:48: e3:26:ae:6d:84:d1:a2:fd:1b:46:65:6f:1b:02:4d: 4f:03:72:3b:2f:97:46:9c:26:57:40:3b:37:9a:3f: 2d:f6:df:bd:41:5f:5c:58:3a:b8:f6:07:f3:38:03: b3:ae:08:9b:ae:eb:16:b4:8a:cd:8b:97:ca:65:1c: 98:45:f5:2d:e5:e1:a0:da:12:83:a6:a0:ca:73:b2: c3:03:be:89:9a:77:62:9b:49:56:5f:d5:2a:34:fc: fa:c6:62:1d:69:c2:31:52:79:4d:07:df:05:57:7b: 52:23:ed:8c:17:50:fd:8a:ba:31:61:06:f6:87:b0: b7:be:f4:65:6a:a1:ad:af:f3:d7:7a:98:03:9f:9a: b3:df:74:af:af:0a:35:b1:15:67:1d:01:4d:f0:5b: cf:61:3d:4e:ed:55:f9:1e:eb:3a:a1:82:f6:11:48: 89:78:8a:5e:29:19:ad:46:32:e2:45:9e:e3:5c:94: 15:b7:cc:83:89:89:17:f6:16:13:37:03:80:6b:69: 8e:3e:e3:e5:67:ab:d7:b8:99:bf:55:02:83:65:85: 35:ae:51:a8:26:0c:36:7b:0e:9e:da:57:f1:fd:e5: a5:20:2a:45:b8:49:21:4b:e6:de:b8:02:a4:a0:ad: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:90:7A:FD:26:40:56:2C:B1:0D:C0:D5:92:EF:A3:F1:5A:2C:63:4F X509v3 Authority Key Identifier: keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d2:2e:48:e1:68:44:43:75:4c:62:a8:01:43:ee:5a:5e:06: 27:d2:c1:2e:19:05:38:de:a9:8d:f0:52:ae:e6:4d:52:6f:eb: d2:1b:2d:55:6c:ca:33:d1:c6:ac:7a:27:a6:9a:78:c3:1e:1c: c5:98:ae:3e:2f:d0:f1:ce:50:ec:ee:e0:d1:8b:4d:7e:3f:30: b5:15:38:ee:eb:2b:7e:ad:2b:33:71:f6:c1:71:86:7e:bf:41: e5:a4:d1:48:5c:7f:7d:f4:a3:ce:4a:2a:e3:af:57:e7:f0:66: 92:08:f6:83:d4:4b:26:8a:87:33:bd:41:fe:2c:2f:6f:08:20: 84:74:29:67:ee:49:01:07:3e:b6:c5:5d:c3:8a:ae:d1:3f:80: 18:c9:bd:34:47:af:a2:f9:f4:c8:db:b4:cc:8c:32:fd:01:12: 44:72:cc:f5:37:c0:2f:0e:be:18:28:46:6a:d3:f7:28:8d:40: 58:f5:8a:52:5a:a7:51:db:47:ce:4a:7e:d7:f4:16:f3:4d:8c: 36:db:a1:56:df:39:1a:f1:76:18:8e:92:25:5e:3f:20:76:b2: e8:f3:39:86:0c:91:cc:ec:b9:4a:1e:58:2f:c2:41:e8:d5:c7: fa:6f:30:32:87:d5:ea:9f:1d:98:c2:e6:93:1a:8c:ad:21:b0: 90:90:40:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fisL6IjILYdzufy5mKB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm ZGQ1YTUwHhcNMjUxMjIwMTYwMTAwWhcNMjUxMjIxMTYwMTAwWjAzMTEwLwYDVQQD Eyg1ZTkwN2FmZDI2NDA1NjJjYjEwZGMwZDU5MmVmYTNmMTVhMmM2MzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZIGrlqfD1PKDuokk0jjJq5thNGi /RtGZW8bAk1PA3I7L5dGnCZXQDs3mj8t9t+9QV9cWDq49gfzOAOzrgibrusWtIrN i5fKZRyYRfUt5eGg2hKDpqDKc7LDA76Jmndim0lWX9UqNPz6xmIdacIxUnlNB98F V3tSI+2MF1D9iroxYQb2h7C3vvRlaqGtr/PXepgDn5qz33Svrwo1sRVnHQFN8FvP YT1O7VX5Hus6oYL2EUiJeIpeKRmtRjLiRZ7jXJQVt8yDiYkX9hYTNwOAa2mOPuPl Z6vXuJm/VQKDZYU1rlGoJgw2ew6e2lfx/eWlICpFuEkhS+beuAKkoK0WZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6Qev0mQFYssQ3A1ZLvo/FaLGNPMB8GA1UdIwQY MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3 LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdIuSOFo REN1TGKoAUPuWl4GJ9LBLhkFON6pjfBSruZNUm/r0hstVWzKM9HGrHonppp4wx4c xZiuPi/Q8c5Q7O7g0YtNfj8wtRU47usrfq0rM3H2wXGGfr9B5aTRSFx/ffSjzkoq 469X5/Bmkgj2g9RLJoqHM71B/iwvbwgghHQpZ+5JAQc+tsVdw4qu0T+AGMm9NEev ovn0yNu0zIwy/QESRHLM9TfALw6+GChGatP3KI1AWPWKUlqnUdtHzkp+1/QW802M NtuhVt85GvF2GI6SJV4/IHay6PM5hgyRzOy5Sh5YL8JB6NXH+m8wMofV6p8dmMLm kxqMrSGwkJBAjw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:22:41 2025 by rpki-client