This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json) Hash identifier: Be706gBpnHKrs/4hwxiDK9tYGZMv/jnm4kcxILBYyHE= Subject key identifier: A6:11:CF:45:EB:D8:06:F8:14:15:83:8F:4E:B8:3A:CC:F6:09:94:FA Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Certificate serial: 019B5298851CDF04CEF460C64BFCBE6664E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft Manifest number: 0A44 Signing time: Wed 24 Dec 2025 23:01:25 +0000 Manifest this update: Wed 24 Dec 2025 23:01:25 +0000 Manifest next update: Thu 25 Dec 2025 23:01:25 +0000 Files and hashes: 1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=) 2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: /wru3cGJGfxB2UrPVKoV76ntOT5juc1/iUWMSMk4Tv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:85:1c:df:04:ce:f4:60:c6:4b:fc:be:66:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Validity Not Before: Dec 24 23:01:25 2025 GMT Not After : Dec 25 23:01:25 2025 GMT Subject: CN=a611cf45ebd806f81415838f4eb83accf60994fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:f3:04:60:8f:51:9f:66:4e:f5:80:64:34: 59:00:c9:56:c0:19:39:e2:94:98:37:9a:77:a5:9b: 15:74:c0:6e:75:6b:1b:b4:08:81:9d:92:81:54:73: fe:9a:b1:2c:bf:ac:3c:a0:7c:45:bd:69:b0:a1:07: fc:1a:2f:21:a1:8a:4a:23:ae:e7:2b:27:f1:4e:2c: 4e:01:92:1d:80:7f:5d:e1:2a:67:23:38:99:ed:d5: ef:60:07:f4:a9:9f:f6:45:b4:16:db:dd:89:d5:52: c3:ae:f3:16:25:1a:60:87:3a:9f:61:7a:55:d7:03: b1:ca:e3:16:5c:67:22:53:f1:d5:bc:53:26:ba:f7: 2f:bf:c0:46:dd:19:3c:cf:6e:2a:87:4d:bd:99:08: 72:ec:2f:97:d7:56:92:75:a3:64:48:47:68:08:d0: 4e:df:c2:73:bd:fe:8b:28:6d:cb:de:b0:e2:9c:aa: cb:16:cf:09:69:b1:93:94:9f:7a:c7:ee:da:b9:03: 5d:6d:c8:36:b4:25:7e:87:d6:9c:bb:50:39:ad:45: 1a:5f:9d:42:69:4a:fe:31:cf:f0:ef:35:af:11:b2: f5:d5:24:59:0a:24:ff:99:51:aa:a1:ec:c0:58:eb: e4:09:59:2f:89:0e:ce:9a:55:6b:6a:e9:5a:48:19: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:CF:45:EB:D8:06:F8:14:15:83:8F:4E:B8:3A:CC:F6:09:94:FA X509v3 Authority Key Identifier: keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b0:63:bd:50:d4:69:3c:dd:d4:28:7f:93:46:91:dd:06:8f: 1d:d7:68:01:ff:ae:8c:88:14:92:3f:bc:62:41:da:3a:a0:2d: 25:76:ea:5b:7d:70:d7:90:fe:9b:91:5e:5c:9c:15:4b:b8:ec: 20:ac:20:bd:53:4d:93:aa:5d:3a:4d:d4:64:b9:99:50:73:1e: b2:d6:a8:94:5a:3b:4f:95:2b:10:59:0a:d6:3b:cb:30:75:2d: db:9b:ed:be:f9:08:d8:c5:b2:1d:c4:9e:a6:55:52:66:f5:11: 68:79:ef:22:7e:f2:32:fe:f0:87:d5:d2:58:c2:9a:54:4a:95: 87:a3:bf:35:6a:25:17:8c:65:d4:2e:76:3c:2b:2c:d8:e4:0e: 87:10:43:24:fa:1d:07:46:ad:8d:c1:70:7b:3f:ca:a6:df:4e: bc:2a:ff:44:41:06:3e:43:2f:16:aa:df:a3:d3:39:b9:2d:6f: f3:95:d4:ca:6f:c9:ae:9f:33:37:ab:8e:c0:1c:9f:30:3b:be: 07:d3:92:db:7e:16:9c:d4:cc:38:51:49:c6:a1:e2:bc:5b:2b: f2:c2:4d:6d:91:20:40:3b:4c:c3:c8:21:d9:95:af:5f:06:1a: f0:49:03:a8:f8:f7:d7:05:09:92:92:3b:25:8e:de:8b:87:e8: 87:38:d0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmIUc3wTO9GDGS/y+ZmToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi NGU3NDMwHhcNMjUxMjI0MjMwMTI1WhcNMjUxMjI1MjMwMTI1WjAzMTEwLwYDVQQD EyhhNjExY2Y0NWViZDgwNmY4MTQxNTgzOGY0ZWI4M2FjY2Y2MDk5NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sfzBGCPUZ9mTvWAZDRZAMlWwBk5 4pSYN5p3pZsVdMBudWsbtAiBnZKBVHP+mrEsv6w8oHxFvWmwoQf8Gi8hoYpKI67n KyfxTixOAZIdgH9d4SpnIziZ7dXvYAf0qZ/2RbQW292J1VLDrvMWJRpghzqfYXpV 1wOxyuMWXGciU/HVvFMmuvcvv8BG3Rk8z24qh029mQhy7C+X11aSdaNkSEdoCNBO 38Jzvf6LKG3L3rDinKrLFs8JabGTlJ96x+7auQNdbcg2tCV+h9acu1A5rUUaX51C aUr+Mc/w7zWvEbL11SRZCiT/mVGqoezAWOvkCVkviQ7OmlVraulaSBmaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYRz0Xr2Ab4FBWDj064Osz2CZT6MB8GA1UdIwQY MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorBjvVDU aTzd1Ch/k0aR3QaPHddoAf+ujIgUkj+8YkHaOqAtJXbqW31w15D+m5FeXJwVS7js IKwgvVNNk6pdOk3UZLmZUHMestaolFo7T5UrEFkK1jvLMHUt25vtvvkI2MWyHcSe plVSZvURaHnvIn7yMv7wh9XSWMKaVEqVh6O/NWolF4xl1C52PCss2OQOhxBDJPod B0atjcFwez/Kpt9OvCr/REEGPkMvFqrfo9M5uS1v85XUym/Jrp8zN6uOwByfMDu+ B9OS234WnNTMOFFJxqHivFsr8sJNbZEgQDtMw8gh2ZWvXwYa8EkDqPj31wUJkpI7 JY7ei4fohzjQfw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:24:44 2025 by rpki-client