This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json) Hash identifier: aKjW4u0bdRaqfmiGFMKdDiIEIS32yg2GFo+dU1gQsnU= Subject key identifier: A0:B7:89:97:32:1B:D8:A3:F7:01:81:CF:D0:D5:55:A7:C9:6B:31:14 Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708 Certificate serial: 019B679F0D22348483028716208E546185ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft Manifest number: 15A9 Signing time: Mon 29 Dec 2025 01:00:35 +0000 Manifest this update: Mon 29 Dec 2025 01:00:35 +0000 Manifest next update: Tue 30 Dec 2025 01:00:35 +0000 Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=) 2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: nXvHDUaGQTtFMVOXDLnZmOqT/4mao/ZldFz8TP6Fx9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:0d:22:34:84:83:02:87:16:20:8e:54:61:85:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708 Validity Not Before: Dec 29 01:00:35 2025 GMT Not After : Dec 30 01:00:35 2025 GMT Subject: CN=a0b78997321bd8a3f70181cfd0d555a7c96b3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:bd:c8:97:64:08:13:e0:65:dd:0b:9e:b5: 51:3e:b0:1f:3e:cd:bc:7e:8c:6c:a7:93:0c:56:d6: bf:2d:b6:18:4f:77:77:33:ae:11:a1:e6:71:e1:85: 95:81:98:0e:57:56:84:ef:ca:f1:16:f9:2a:26:e1: 31:79:cf:7e:18:d9:45:39:45:40:de:15:e9:86:45: 91:09:2a:fa:3a:04:dc:31:44:cc:ff:6e:3d:6f:df: b3:72:b7:5d:af:3d:2e:69:7f:cd:5a:52:16:ee:3a: d7:70:5d:95:40:ec:56:0c:03:65:5e:27:37:2d:9a: 05:3b:a6:18:ef:e8:7e:5d:1c:31:31:3a:88:19:90: 2c:0b:a4:ed:44:51:d0:aa:b3:dc:ee:e1:4a:42:4b: f3:a9:65:c6:38:75:42:f5:ca:1c:ae:33:6e:e1:4d: 0e:a6:57:08:bf:27:ae:33:85:b0:fd:52:d0:71:af: bf:c1:ec:95:84:2e:87:01:05:61:c7:b3:1e:65:1a: 15:16:88:33:3e:ac:f2:56:2a:0f:07:7d:34:10:fe: 76:89:8a:2c:ab:7d:e3:18:5c:a1:04:18:4f:60:7c: 54:54:79:e3:f2:f6:d9:6c:7a:83:88:b6:fb:be:1d: e8:e8:b9:d3:82:8e:ce:a6:19:a6:1b:54:d2:bf:77: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:89:97:32:1B:D8:A3:F7:01:81:CF:D0:D5:55:A7:C9:6B:31:14 X509v3 Authority Key Identifier: keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ab:de:3f:a4:d7:09:16:eb:18:9c:84:77:6b:b0:b7:5f:f5: 53:ca:4e:a6:08:30:1b:c2:15:a8:05:5e:9b:93:e2:17:c0:de: 9c:c8:be:a5:55:a6:ff:98:ab:5d:d7:da:80:7e:d5:f5:f3:d4: ea:50:29:c8:01:ca:9f:cc:cc:3a:2f:60:13:07:79:83:a7:ae: 9f:e7:ab:55:ce:f1:ae:9d:d7:a3:89:fc:74:47:d5:33:5d:21: 51:fc:c3:ab:8b:f3:f8:76:5c:0a:85:1a:e8:b4:a7:4a:b8:31: 30:27:6e:b3:9c:72:4c:fd:1e:4b:c2:39:bf:9c:34:36:a7:43: 14:ba:65:e2:27:e2:e1:c5:fa:4b:ee:ee:43:1c:2d:f0:59:ef: 75:c2:41:52:99:a5:be:5e:89:4a:ae:8a:6e:0c:96:20:08:95: 11:b5:ee:5b:f9:df:7a:00:d1:a2:58:65:36:e5:12:d5:35:21: 86:9a:10:93:9a:1b:90:b6:f6:a4:2d:5d:f1:83:75:9f:6b:7a: a2:d0:2c:67:46:b7:6f:82:ae:08:88:2b:cf:15:03:30:64:58: 01:12:16:08:0a:99:f2:e0:11:0f:2b:dd:d8:7b:62:ac:a7:be: 4b:13:6e:e1:ce:2d:c1:9b:85:45:4e:c8:53:0b:e8:0b:51:25: ee:fa:b7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnnw0iNISDAocWII5UYYXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw OTY3MDgwHhcNMjUxMjI5MDEwMDM1WhcNMjUxMjMwMDEwMDM1WjAzMTEwLwYDVQQD EyhhMGI3ODk5NzMyMWJkOGEzZjcwMTgxY2ZkMGQ1NTVhN2M5NmIzMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0u9yJdkCBPgZd0LnrVRPrAfPs28 foxsp5MMVta/LbYYT3d3M64RoeZx4YWVgZgOV1aE78rxFvkqJuExec9+GNlFOUVA 3hXphkWRCSr6OgTcMUTM/249b9+zcrddrz0uaX/NWlIW7jrXcF2VQOxWDANlXic3 LZoFO6YY7+h+XRwxMTqIGZAsC6TtRFHQqrPc7uFKQkvzqWXGOHVC9cocrjNu4U0O plcIvyeuM4Ww/VLQca+/weyVhC6HAQVhx7MeZRoVFogzPqzyVioPB300EP52iYos q33jGFyhBBhPYHxUVHnj8vbZbHqDiLb7vh3o6LnTgo7OphmmG1TSv3eybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC3iZcyG9ij9wGBz9DVVafJazEUMB8GA1UdIwQY MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKveP6TX CRbrGJyEd2uwt1/1U8pOpggwG8IVqAVem5PiF8DenMi+pVWm/5irXdfagH7V9fPU 6lApyAHKn8zMOi9gEwd5g6eun+erVc7xrp3Xo4n8dEfVM10hUfzDq4vz+HZcCoUa 6LSnSrgxMCdus5xyTP0eS8I5v5w0NqdDFLpl4ifi4cX6S+7uQxwt8FnvdcJBUpml vl6JSq6KbgyWIAiVEbXuW/nfegDRolhlNuUS1TUhhpoQk5obkLb2pC1d8YN1n2t6 otAsZ0a3b4KuCIgrzxUDMGRYARIWCAqZ8uARDyvd2HtirKe+SxNu4c4twZuFRU7I UwvoC1El7vq3MA== -----END CERTIFICATE-----Generated at Mon Dec 29 08:27:11 2025 by rpki-client