This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json) Hash identifier: CrSgCOEUYWTGlVtE6JY/Pi71dmy3cPLL54sfJlb618w= Subject key identifier: B6:D1:0D:14:33:95:77:43:D0:50:40:28:33:65:3F:0F:5C:C3:79:2C Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726 Certificate serial: 019B4ADEFB0B2B42F7BB5001AA664814EC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft Manifest number: 164D Signing time: Tue 23 Dec 2025 11:01:25 +0000 Manifest this update: Tue 23 Dec 2025 11:01:25 +0000 Manifest next update: Wed 24 Dec 2025 11:01:25 +0000 Files and hashes: 1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: ufEgT0sxDDO3TJiOY/TY2xWDw6SpM1/9s3a6BX+ntfo=) 2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:fb:0b:2b:42:f7:bb:50:01:aa:66:48:14:ec:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726 Validity Not Before: Dec 23 11:01:25 2025 GMT Not After : Dec 24 11:01:25 2025 GMT Subject: CN=b6d10d1433957743d050402833653f0f5cc3792c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:2b:df:19:12:10:0d:96:e1:43:36:46:8b: b6:4b:0b:4e:d3:4e:a1:48:39:7c:26:56:f8:1a:64: ff:79:15:58:9b:5d:78:5d:be:48:42:22:d0:5e:2e: f6:87:e8:13:71:5e:08:fb:d0:3e:80:57:33:b9:2b: d6:17:9e:ad:09:3d:fa:ae:4b:cf:62:8a:19:6a:64: 04:1f:f6:5c:cf:ec:d5:29:ad:f4:13:95:4d:5c:f2: e6:c2:c3:d4:40:48:cc:86:fb:45:b5:da:7c:76:7c: d3:78:34:4f:c1:44:1f:4e:9c:e4:c1:87:23:c7:93: 3b:d6:de:20:fc:53:dd:3e:4e:e5:57:a5:0a:5a:5e: ff:be:aa:2e:03:9d:8a:3a:a9:5c:70:41:f4:c7:dc: d2:dc:3d:c9:f7:71:08:14:08:72:0c:f3:14:d5:d8: d4:f3:1e:73:f8:7e:dd:8e:f3:84:43:53:dd:fa:31: a5:ed:c2:0a:78:6c:7c:36:4f:42:6f:fa:ce:96:49: cf:70:48:3f:a2:bb:dc:4a:b4:72:76:0d:fd:a7:4f: 18:93:2b:ff:09:bd:e9:fd:16:fa:52:7a:3e:0a:73: 84:19:f4:92:77:7f:92:ca:31:ae:5b:92:89:69:22: 52:03:22:db:84:89:22:b1:59:63:4e:39:04:01:9d: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D1:0D:14:33:95:77:43:D0:50:40:28:33:65:3F:0F:5C:C3:79:2C X509v3 Authority Key Identifier: keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:e5:ac:31:52:e6:5b:dc:7c:e4:b0:b0:01:04:b0:c7:92: 76:e2:6f:99:90:27:21:f3:e0:0a:9f:15:72:e8:db:69:b0:1e: dd:a3:f0:3e:87:77:8a:09:95:eb:dd:91:6d:09:9f:7e:69:90: 1b:ce:4d:38:6a:c4:a2:70:eb:58:b8:60:92:a3:65:f6:6d:c3: 93:87:9a:0b:f6:02:12:16:84:97:d4:20:a3:de:83:72:89:46: 27:03:5d:e5:92:ac:36:f4:ca:23:af:7b:0f:92:0e:1e:6c:42: 85:b3:1e:f8:1d:af:0d:ca:ab:08:be:e4:02:2b:75:37:3b:f5: 36:b2:12:61:b7:f2:99:cd:72:0e:8f:80:fc:dc:68:4d:0c:71: 2e:28:bc:b0:b9:d1:18:ff:30:c9:7d:e5:99:d2:13:22:a9:35: b9:91:b3:48:ef:11:51:8f:9a:f2:75:b1:bf:4a:d8:35:ce:ac: 4b:8b:a9:f2:05:fa:ca:bc:63:65:3c:76:d9:b4:03:b7:d6:ef: 5f:a1:59:4c:df:1d:cc:29:44:5e:8b:0b:39:63:dc:37:16:f3: 87:98:99:fa:e7:c2:f5:c3:d1:34:51:ed:7e:7b:1d:85:f7:b7: 58:3d:ac:72:1b:59:5a:4d:70:11:72:e7:9f:1f:a2:e1:f1:a3: 24:c7:9b:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3vsLK0L3u1ABqmZIFOyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmEyMmJjY2QzZGU4MjY1YWZkNTVmOTgzMGZmYzAxYzgz YWY3MjYwHhcNMjUxMjIzMTEwMTI1WhcNMjUxMjI0MTEwMTI1WjAzMTEwLwYDVQQD EyhiNmQxMGQxNDMzOTU3NzQzZDA1MDQwMjgzMzY1M2YwZjVjYzM3OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Ir3xkSEA2W4UM2Rou2SwtO006h SDl8Jlb4GmT/eRVYm114Xb5IQiLQXi72h+gTcV4I+9A+gFczuSvWF56tCT36rkvP YooZamQEH/Zcz+zVKa30E5VNXPLmwsPUQEjMhvtFtdp8dnzTeDRPwUQfTpzkwYcj x5M71t4g/FPdPk7lV6UKWl7/vqouA52KOqlccEH0x9zS3D3J93EIFAhyDPMU1djU 8x5z+H7djvOEQ1Pd+jGl7cIKeGx8Nk9Cb/rOlknPcEg/orvcSrRydg39p08Ykyv/ Cb3p/Rb6Uno+CnOEGfSSd3+SyjGuW5KJaSJSAyLbhIkisVljTjkEAZ1CwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbRDRQzlXdD0FBAKDNlPw9cw3ksMB8GA1UdIwQY MBaAFFIqIrzNPegmWv1V+YMP/AHIOvcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUt ZmYzNzIzZTc4YmQzLzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUtZmYzNzIzZTc4YmQz LzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlrlrDFS 5lvcfOSwsAEEsMeSduJvmZAnIfPgCp8VcujbabAe3aPwPod3igmV692RbQmffmmQ G85NOGrEonDrWLhgkqNl9m3Dk4eaC/YCEhaEl9Qgo96DcolGJwNd5ZKsNvTKI697 D5IOHmxChbMe+B2vDcqrCL7kAit1Nzv1NrISYbfymc1yDo+A/NxoTQxxLii8sLnR GP8wyX3lmdITIqk1uZGzSO8RUY+a8nWxv0rYNc6sS4up8gX6yrxjZTx22bQDt9bv X6FZTN8dzClEXosLOWPcNxbzh5iZ+ufC9cPRNFHtfnsdhfe3WD2schtZWk1wEXLn nx+i4fGjJMebcQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:47:13 2025 by rpki-client