This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json) Hash identifier: qDZ5Is3R3vKDPWybSKQr2V4B1CCXCysqS6ZgOcxEd+k= Subject key identifier: 57:2F:CA:47:2A:D9:23:D2:A2:85:9F:E8:AB:DF:0E:6B:39:2F:F8:05 Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Certificate serial: 019B38A10DA027B695C9F9763EE61D28F15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft Manifest number: 09C8 Signing time: Fri 19 Dec 2025 22:00:37 +0000 Manifest this update: Fri 19 Dec 2025 22:00:37 +0000 Manifest next update: Sat 20 Dec 2025 22:00:37 +0000 Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: lz9lmaBVcTse3HAR8u1DPvlTbaR6JVi343mvDrCqOqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:0d:a0:27:b6:95:c9:f9:76:3e:e6:1d:28:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Validity Not Before: Dec 19 22:00:37 2025 GMT Not After : Dec 20 22:00:37 2025 GMT Subject: CN=572fca472ad923d2a2859fe8abdf0e6b392ff805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:ba:9e:eb:c1:16:cb:38:d5:dc:e2:35:48: f8:16:3b:98:08:8c:79:5b:10:89:87:f7:ba:c9:25: 6a:17:27:71:04:9a:1a:b4:48:39:78:e0:f3:10:b1: 64:ce:2e:ef:d5:76:98:2f:63:fd:cb:cc:d6:77:77: 19:4f:a7:4d:b1:57:24:8b:a1:97:47:89:28:ed:9b: c3:af:6b:e5:3f:9f:f4:bf:df:47:a8:c2:f3:3a:96: 3d:bf:94:46:47:72:08:51:5c:0e:d7:b5:77:02:3e: d6:01:7f:95:dd:d5:98:69:d5:80:e4:11:fb:eb:75: a6:71:04:09:80:28:c1:ab:7a:33:ff:3d:1a:79:b8: ad:3e:61:62:32:e6:5f:80:68:57:1f:da:0a:c2:dc: c7:ef:c3:7a:b7:af:ff:e9:11:a9:fd:14:2a:7d:4c: 19:b9:7b:12:b2:dc:cd:56:4f:b6:33:6b:1e:07:7e: a4:f1:a8:3d:26:25:cf:76:e7:64:2c:5b:4e:1e:fc: 3b:f1:57:f0:1a:4b:7e:41:e4:32:ab:be:ef:51:87: 86:d0:9b:3e:19:3c:f8:75:36:ba:1d:2d:0e:db:d2: 69:c7:5b:8e:d3:45:15:d5:0e:a0:b6:21:a6:7d:71: 1c:98:2e:86:57:4b:6a:0a:c8:f8:d2:0a:10:af:83: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:CA:47:2A:D9:23:D2:A2:85:9F:E8:AB:DF:0E:6B:39:2F:F8:05 X509v3 Authority Key Identifier: keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:e9:d9:3d:ef:a2:71:bc:58:15:90:32:39:2b:44:f4:06: b9:1f:a5:56:97:83:59:c7:d2:23:e4:a0:ed:f5:3b:fb:39:86: bd:af:7b:3b:43:41:6c:b8:87:75:b1:0f:c6:73:08:49:00:a7: 31:22:10:b7:2c:fb:f1:a2:37:6b:7b:80:9f:c6:dc:9f:f5:bf: 58:c2:5f:e6:72:63:0b:5f:e5:49:54:3e:ec:d3:7a:09:40:aa: 0e:39:c5:a7:e1:23:f2:ac:d6:b8:72:56:7f:64:9c:cf:a4:9a: 64:5d:36:9b:98:b3:35:05:ea:99:29:a2:60:e9:7b:75:ca:f8: 4a:28:bf:8a:86:e7:43:c9:ef:93:af:97:15:c9:e0:2e:a9:ec: 1c:9a:24:92:2c:86:95:38:29:36:4d:80:3a:aa:fb:37:2c:d3: 1b:84:ee:0f:5d:e9:bd:e3:f2:70:73:5f:c8:20:0e:da:6a:c7: 46:c3:bb:12:e7:71:81:68:ec:f1:3e:6a:83:b3:d9:57:be:aa: 94:7e:d2:8a:da:be:05:ef:f3:f6:2f:83:65:c1:ac:a7:85:dd: 82:6e:ee:5d:56:f9:8e:b7:14:88:dc:79:9c:96:d4:a1:8f:7b: 62:a4:45:b1:5b:c4:36:ee:e2:1e:d9:f7:55:6c:70:97:2c:c4: 3c:6e:71:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oQ2gJ7aVyfl2PuYdKPFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWY4ZGIwMmUyZTk3MWQ1NGY5MGVlZjEwNzA5MDM5OGZj YzNkOTIwHhcNMjUxMjE5MjIwMDM3WhcNMjUxMjIwMjIwMDM3WjAzMTEwLwYDVQQD Eyg1NzJmY2E0NzJhZDkyM2QyYTI4NTlmZThhYmRmMGU2YjM5MmZmODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPS6nuvBFss41dziNUj4FjuYCIx5 WxCJh/e6ySVqFydxBJoatEg5eODzELFkzi7v1XaYL2P9y8zWd3cZT6dNsVcki6GX R4ko7ZvDr2vlP5/0v99HqMLzOpY9v5RGR3IIUVwO17V3Aj7WAX+V3dWYadWA5BH7 63WmcQQJgCjBq3oz/z0aebitPmFiMuZfgGhXH9oKwtzH78N6t6//6RGp/RQqfUwZ uXsSstzNVk+2M2seB36k8ag9JiXPdudkLFtOHvw78VfwGkt+QeQyq77vUYeG0Js+ GTz4dTa6HS0O29Jpx1uO00UV1Q6gtiGmfXEcmC6GV0tqCsj40goQr4MM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcvykcq2SPSooWf6KvfDms5L/gFMB8GA1UdIwQY MBaAFLkfjbAuLpcdVPkO7xBwkDmPzD2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjkt NjJlMTllZjk2MGE0LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjktNjJlMTllZjk2MGE0 LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn/p2T3v onG8WBWQMjkrRPQGuR+lVpeDWcfSI+Sg7fU7+zmGva97O0NBbLiHdbEPxnMISQCn MSIQtyz78aI3a3uAn8bcn/W/WMJf5nJjC1/lSVQ+7NN6CUCqDjnFp+Ej8qzWuHJW f2Scz6SaZF02m5izNQXqmSmiYOl7dcr4Sii/iobnQ8nvk6+XFcngLqnsHJokkiyG lTgpNk2AOqr7NyzTG4TuD13pvePycHNfyCAO2mrHRsO7EudxgWjs8T5qg7PZV76q lH7Sitq+Be/z9i+DZcGsp4Xdgm7uXVb5jrcUiNx5nJbUoY97YqRFsVvENu7iHtn3 VWxwlyzEPG5xIw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:49 2025 by rpki-client