This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json) Hash identifier: 6/CrMv1X4rAfbJ5x1/C66/OqahrN1blrWanp0OX3yD0= Subject key identifier: FB:67:E1:F6:80:DD:96:70:41:52:A3:22:5D:C8:9C:37:BF:D8:41:FF Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708 Certificate serial: 019B3F114E9E205C1BE1B3A6F599E56CC46A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft Manifest number: 1594 Signing time: Sun 21 Dec 2025 04:00:57 +0000 Manifest this update: Sun 21 Dec 2025 04:00:57 +0000 Manifest next update: Mon 22 Dec 2025 04:00:57 +0000 Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=) 2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: YJ6hIJhhLYwKMFt0Fpe2QBydJS9uHk39o/ekkB3/OYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4e:9e:20:5c:1b:e1:b3:a6:f5:99:e5:6c:c4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708 Validity Not Before: Dec 21 04:00:57 2025 GMT Not After : Dec 22 04:00:57 2025 GMT Subject: CN=fb67e1f680dd96704152a3225dc89c37bfd841ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:de:7f:66:2f:bd:aa:eb:8f:bf:cd:c5:92: d3:90:41:56:ab:5a:40:ce:b7:66:8e:23:06:57:86: a7:d9:95:c5:af:48:ac:f1:a0:1a:09:22:01:a9:08: bd:42:83:4d:82:62:90:dc:6c:f9:15:86:98:c6:a7: 1e:d6:8c:cf:8c:3d:48:8f:43:17:bb:66:2a:98:e4: e5:94:85:cc:fb:ae:c7:9e:04:03:af:5a:b7:1a:6e: d1:64:3d:be:e2:77:b3:b2:d7:17:a2:bd:11:ac:cf: e3:99:bc:e3:6e:c1:87:9a:3c:a5:ee:43:8d:0c:f0: e2:05:f5:15:e6:0c:18:bf:62:7c:4f:59:ad:cc:e7: 2e:98:38:d8:a4:20:17:44:a0:1e:25:68:8e:e4:ce: 4e:8c:14:5d:3b:c3:cd:55:c0:af:f9:d7:00:da:30: 75:ea:4d:87:40:39:43:c5:36:0b:94:03:94:e8:65: f9:7f:5c:4f:e5:4b:5f:c1:0f:b3:c4:57:6e:ef:ba: e3:14:de:78:92:e4:43:a6:9d:3c:c8:60:3f:e5:70: 94:f2:67:27:23:1d:bc:3a:55:8d:fa:9e:44:1e:7d: 45:d1:67:0d:40:52:02:ab:a5:9d:86:11:c9:0d:01: bb:28:81:92:53:29:6c:64:20:0d:d1:4c:aa:65:35: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:E1:F6:80:DD:96:70:41:52:A3:22:5D:C8:9C:37:BF:D8:41:FF X509v3 Authority Key Identifier: keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fa:db:2f:e2:aa:be:c9:b9:2a:da:37:2b:5d:42:40:08:a7: 8b:0c:d9:c7:d3:18:57:1e:7a:ef:a7:e2:29:ad:16:f2:c7:de: f1:41:f0:21:97:53:43:4e:77:d5:05:04:d7:26:7d:03:b0:23: 45:97:9a:30:d8:4c:d4:de:97:a8:2c:7b:9a:36:79:1f:6d:5f: 6c:00:97:65:2f:d9:d3:3a:6b:97:b5:36:05:7b:49:2c:23:ce: b6:d9:b8:75:46:1c:5b:50:e8:50:8f:eb:ce:cf:dc:d5:9d:4f: 18:32:60:1a:31:aa:72:f9:dd:5f:aa:b2:a1:11:e8:1a:64:3a: 82:12:2f:29:d5:28:7d:ad:67:3f:0b:9d:0f:bc:cb:5f:10:25: 07:cb:15:85:43:d6:aa:43:a9:d1:66:ec:ac:d5:40:d3:4a:e8: b9:34:3e:1c:4f:01:76:f6:eb:18:3e:53:5b:94:03:a1:97:8d: 33:0b:c6:f3:86:18:5d:ea:3b:a4:c9:29:da:03:62:c0:f4:36: fe:b9:af:5d:b5:5b:e0:9b:ef:54:7b:d9:f0:50:1d:9f:7e:22: 88:32:8d:3d:47:64:74:28:de:3c:23:d7:f7:9b:2c:08:eb:b8: 28:56:1e:56:bc:da:52:2b:48:bb:89:db:21:8d:fc:52:ae:16: 64:3c:6a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EU6eIFwb4bOm9ZnlbMRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw OTY3MDgwHhcNMjUxMjIxMDQwMDU3WhcNMjUxMjIyMDQwMDU3WjAzMTEwLwYDVQQD EyhmYjY3ZTFmNjgwZGQ5NjcwNDE1MmEzMjI1ZGM4OWMzN2JmZDg0MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEfef2Yvvarrj7/NxZLTkEFWq1pA zrdmjiMGV4an2ZXFr0is8aAaCSIBqQi9QoNNgmKQ3Gz5FYaYxqce1ozPjD1Ij0MX u2YqmOTllIXM+67HngQDr1q3Gm7RZD2+4nezstcXor0RrM/jmbzjbsGHmjyl7kON DPDiBfUV5gwYv2J8T1mtzOcumDjYpCAXRKAeJWiO5M5OjBRdO8PNVcCv+dcA2jB1 6k2HQDlDxTYLlAOU6GX5f1xP5UtfwQ+zxFdu77rjFN54kuRDpp08yGA/5XCU8mcn Ix28OlWN+p5EHn1F0WcNQFICq6WdhhHJDQG7KIGSUylsZCAN0UyqZTXa6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtn4faA3ZZwQVKjIl3InDe/2EH/MB8GA1UdIwQY MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPrbL+Kq vsm5Kto3K11CQAiniwzZx9MYVx5676fiKa0W8sfe8UHwIZdTQ0531QUE1yZ9A7Aj RZeaMNhM1N6XqCx7mjZ5H21fbACXZS/Z0zprl7U2BXtJLCPOttm4dUYcW1DoUI/r zs/c1Z1PGDJgGjGqcvndX6qyoRHoGmQ6ghIvKdUofa1nPwudD7zLXxAlB8sVhUPW qkOp0WbsrNVA00rouTQ+HE8BdvbrGD5TW5QDoZeNMwvG84YYXeo7pMkp2gNiwPQ2 /rmvXbVb4JvvVHvZ8FAdn34iiDKNPUdkdCjePCPX95ssCOu4KFYeVrzaUitIu4nb IY38Uq4WZDxqPg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:59 2025 by rpki-client