This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft File: uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft (raw, json) Hash identifier: Ubr8rPyc3jpLwlaM2GhsP3xiu3W1pTfAPTZ8JGVvBIE= Subject key identifier: E2:F5:33:10:D9:49:74:E2:D6:59:81:DD:46:8B:88:38:B9:68:A2:FE Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f Certificate serial: 019B533D01C2C0391461ABBA9D61F0B5A3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft Manifest number: 1101 Signing time: Thu 25 Dec 2025 02:01:05 +0000 Manifest this update: Thu 25 Dec 2025 02:01:05 +0000 Manifest next update: Fri 26 Dec 2025 02:01:05 +0000 Files and hashes: 1: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (hash: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=) 2: uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl (hash: ftL2VExp3nnctmug9l6+P2yZ9kWmCVs0sV8NHAjZ81w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:01:c2:c0:39:14:61:ab:ba:9d:61:f0:b5:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f Validity Not Before: Dec 25 02:01:05 2025 GMT Not After : Dec 26 02:01:05 2025 GMT Subject: CN=e2f53310d94974e2d65981dd468b8838b968a2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:b2:f7:e3:4a:1e:43:7a:1f:ba:87:ab:46: b6:92:6b:a5:80:80:3a:d5:d3:ab:dd:ba:10:14:2d: 46:7a:89:98:51:5f:12:90:b6:db:b8:31:89:86:6f: 71:53:7c:cb:7b:8d:1d:ad:88:1e:6e:2a:51:7e:4c: d1:d9:96:3b:7f:61:08:ef:9e:73:60:52:5d:0f:0d: e5:e9:25:04:ce:2b:ce:fe:59:22:55:5d:ba:af:3f: cf:6a:7c:51:f4:2e:de:c6:b1:57:1d:ff:1e:b8:80: 7e:68:86:88:b0:e8:7d:e4:f7:68:fa:e5:69:22:62: 00:a3:66:4b:70:fa:a8:d6:4a:86:1f:f2:d2:b2:a2: 45:f0:c8:9b:e5:ba:e2:72:77:20:d7:99:19:c7:96: bb:59:ad:0f:ce:db:ba:cf:37:3f:2f:b6:20:08:0b: 24:63:73:74:6e:6b:39:7c:d4:c5:d8:e3:e2:19:5c: d9:ac:b7:5e:cc:55:40:1a:77:fb:8d:47:de:11:a1: a8:9f:03:d1:96:86:89:2c:04:79:6c:0a:4a:a8:43: 04:a3:34:55:b5:31:9c:41:e6:09:a8:87:2f:1f:90: 62:0a:66:17:46:db:6b:16:b4:26:36:fc:fb:c4:cb: 93:dc:d3:c5:42:a7:be:8c:fa:39:53:92:7d:e2:f1: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F5:33:10:D9:49:74:E2:D6:59:81:DD:46:8B:88:38:B9:68:A2:FE X509v3 Authority Key Identifier: keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4f:e3:8c:26:36:cf:f6:9c:76:e2:b1:88:a4:85:5c:91:b8: 8e:4c:5f:dd:b9:63:09:6e:4c:75:21:1e:54:da:d9:ae:39:6a: 7d:7f:ef:ab:b0:4c:77:67:e9:96:44:5d:7c:12:c8:1b:c4:2f: 18:2d:5c:4d:4c:c6:51:bf:85:4e:22:41:10:ae:2f:f0:f9:05: 2c:68:e1:98:1e:05:59:7b:b1:aa:e4:9a:a3:34:3c:12:e9:b0: 59:1d:40:5d:a9:66:fd:60:45:43:98:a3:48:74:29:d4:5e:44: f8:14:2b:30:81:bb:36:09:38:d0:3b:c7:56:ff:26:80:b3:7f: 57:e2:6b:b3:4c:53:b5:f4:b7:a0:55:6d:eb:2d:cb:c9:a7:45: ba:53:58:af:b3:8b:45:17:e1:82:b1:7b:e3:3d:e0:19:21:b8: 83:c6:c0:52:48:d1:b6:3c:f0:bc:59:7f:f2:6d:d0:f0:fa:fa: 6d:a6:17:6b:84:82:ae:1e:28:43:28:21:36:10:f1:41:b3:25: d7:94:0a:2c:cb:a7:8e:e1:ab:58:46:1b:2c:f1:95:41:68:55: e4:f1:a3:e2:fb:80:aa:39:eb:75:f4:3a:58:7e:d2:be:3f:46: 21:24:a1:c4:dd:f1:ed:47:4d:44:10:7e:c7:73:d5:a2:e1:39: 52:78:13:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQHCwDkUYau6nWHwtaPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg4OTEyMGM0ZTBiZmY0ZWNlOWEyYWJiODYyZDRjMGNk OGEzMWYwHhcNMjUxMjI1MDIwMTA1WhcNMjUxMjI2MDIwMTA1WjAzMTEwLwYDVQQD EyhlMmY1MzMxMGQ5NDk3NGUyZDY1OTgxZGQ0NjhiODgzOGI5NjhhMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ2y9+NKHkN6H7qHq0a2kmulgIA6 1dOr3boQFC1GeomYUV8SkLbbuDGJhm9xU3zLe40drYgebipRfkzR2ZY7f2EI755z YFJdDw3l6SUEzivO/lkiVV26rz/PanxR9C7exrFXHf8euIB+aIaIsOh95Pdo+uVp ImIAo2ZLcPqo1kqGH/LSsqJF8Mib5bricncg15kZx5a7Wa0Pztu6zzc/L7YgCAsk Y3N0bms5fNTF2OPiGVzZrLdezFVAGnf7jUfeEaGonwPRloaJLAR5bApKqEMEozRV tTGcQeYJqIcvH5BiCmYXRttrFrQmNvz7xMuT3NPFQqe+jPo5U5J94vEREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL1MxDZSXTi1lmB3UaLiDi5aKL+MB8GA1UdIwQY MBaAFLlIiRIMTgv/Ts6aKruGLUwM2KMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDIt ODVkMzMyNjA0YWFmLzEvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDItODVkMzMyNjA0YWFm LzEvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE/jjCY2 z/acduKxiKSFXJG4jkxf3bljCW5MdSEeVNrZrjlqfX/vq7BMd2fplkRdfBLIG8Qv GC1cTUzGUb+FTiJBEK4v8PkFLGjhmB4FWXuxquSaozQ8EumwWR1AXalm/WBFQ5ij SHQp1F5E+BQrMIG7Ngk40DvHVv8mgLN/V+Jrs0xTtfS3oFVt6y3LyadFulNYr7OL RRfhgrF74z3gGSG4g8bAUkjRtjzwvFl/8m3Q8Pr6baYXa4SCrh4oQyghNhDxQbMl 15QKLMunjuGrWEYbLPGVQWhV5PGj4vuAqjnrdfQ6WH7Svj9GISShxN3x7UdNRBB+ x3PVouE5UngTKQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:51 2025 by rpki-client