This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft File: UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json) Hash identifier: ADdRLEc4kAM95hqjMyDRnwuo9fGn210GPBmgX8ZavyI= Subject key identifier: D2:A8:AD:1C:09:23:48:69:5D:B8:49:01:92:5C:B3:8C:39:9D:6C:A6 Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Certificate serial: 019B3CB4C15D53AA20CA5B4F576FEFA9A560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft Manifest number: 10D8 Signing time: Sat 20 Dec 2025 17:00:37 +0000 Manifest this update: Sat 20 Dec 2025 17:00:37 +0000 Manifest next update: Sun 21 Dec 2025 17:00:37 +0000 Files and hashes: 1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: Q+ldo+sm3QDKdeUkQ+FrsvCUv/fOlTv3Qgkb1jtUQRs=) 2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c1:5d:53:aa:20:ca:5b:4f:57:6f:ef:a9:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Validity Not Before: Dec 20 17:00:37 2025 GMT Not After : Dec 21 17:00:37 2025 GMT Subject: CN=d2a8ad1c092348695db84901925cb38c399d6ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:1f:aa:39:c0:ae:22:21:a2:dc:af:8e:d4: d2:2f:a7:38:72:ba:f6:bb:19:ca:a9:db:b0:09:31: 50:9c:aa:ed:9a:76:68:ce:55:dc:cb:1b:ef:c0:02: 3f:10:2f:ff:ea:ab:d8:7a:e4:6c:3d:41:15:41:7f: 5c:ac:34:7d:8d:21:5a:fa:c8:b6:6b:43:77:2c:cf: 0d:20:6b:be:a3:25:25:66:7d:8d:bc:49:3f:ca:e9: 6b:34:46:b1:61:99:81:aa:87:f1:ab:f4:60:ff:bc: 12:6f:7d:81:8a:06:8f:8d:a0:29:76:39:5e:b6:01: 06:7d:bb:a2:20:4b:c2:e8:57:23:30:d2:18:0b:56: 72:37:54:bc:d0:d3:a2:45:a8:ba:5b:09:3a:5d:cd: 37:44:a4:6c:e8:00:e1:0c:9d:5c:42:6c:49:00:62: fd:36:87:e0:41:2b:d1:cc:7e:44:0a:77:32:15:db: ef:81:25:5d:da:75:ed:bf:80:24:36:ee:cc:8e:4e: 36:93:d6:d0:b2:ee:3c:92:a5:f5:e3:e5:53:ec:64: 81:eb:0c:2a:01:38:a1:74:2d:9e:16:e1:10:9e:b5: 6c:52:85:25:67:cb:67:6c:d4:c8:1f:71:5c:85:43: 8b:65:b3:22:a4:d9:e8:4d:a5:c7:6c:e5:30:35:a8: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A8:AD:1C:09:23:48:69:5D:B8:49:01:92:5C:B3:8C:39:9D:6C:A6 X509v3 Authority Key Identifier: keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f8:a4:5d:41:be:56:a7:06:35:20:13:16:d8:33:dd:0c:6c: 11:30:14:79:f6:02:57:86:ce:28:a6:f8:e7:3f:a8:a5:2c:85: 45:cb:96:3e:2e:6a:09:e9:32:e6:85:12:70:12:f4:87:05:21: 5a:60:97:62:ec:e8:ca:83:7c:3d:75:d3:37:87:3f:91:4d:50: 6c:1b:c6:99:f5:ae:b4:a4:a5:25:73:83:71:78:71:a2:3f:5e: 9c:fd:97:64:e9:cf:1c:9c:98:07:ce:f7:6b:b6:42:5a:f6:fb: 9b:95:e7:42:e7:79:8e:be:e3:72:7b:4f:48:43:4e:de:d4:31: 68:5f:f8:c1:68:c8:5a:a3:fc:55:05:72:70:0b:f9:09:32:58: e0:0e:0c:5b:96:65:9a:e7:0a:f3:e8:b7:c5:da:fb:c4:11:02: 6c:32:89:fe:91:57:0c:6e:ae:19:c2:a5:b9:81:88:b9:de:27: 62:50:d0:a4:08:cc:04:58:5e:4f:ab:5e:e0:af:74:e9:00:ad: b2:99:11:76:70:8e:16:bf:42:05:da:dd:db:39:f4:ea:f8:fa: f5:c2:d3:b6:f9:51:1c:fa:61:c1:41:8c:1a:2d:83:fc:fb:2c: e3:e6:24:c3:f1:a0:73:fd:e9:31:ea:ea:93:c9:d4:94:74:f8: 73:53:7f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMFdU6ogyltPV2/vqaVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMjQxNDQ5MmJiMmNmYTQwOGZmNTczYWEwNjhmY2Y5YTVl Nzc4ZWUwHhcNMjUxMjIwMTcwMDM3WhcNMjUxMjIxMTcwMDM3WjAzMTEwLwYDVQQD EyhkMmE4YWQxYzA5MjM0ODY5NWRiODQ5MDE5MjVjYjM4YzM5OWQ2Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52cfqjnAriIhotyvjtTSL6c4crr2 uxnKqduwCTFQnKrtmnZozlXcyxvvwAI/EC//6qvYeuRsPUEVQX9crDR9jSFa+si2 a0N3LM8NIGu+oyUlZn2NvEk/yulrNEaxYZmBqofxq/Rg/7wSb32BigaPjaApdjle tgEGfbuiIEvC6FcjMNIYC1ZyN1S80NOiRai6Wwk6Xc03RKRs6ADhDJ1cQmxJAGL9 NofgQSvRzH5ECncyFdvvgSVd2nXtv4AkNu7Mjk42k9bQsu48kqX14+VT7GSB6wwq ATihdC2eFuEQnrVsUoUlZ8tnbNTIH3FchUOLZbMipNnoTaXHbOUwNagFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKorRwJI0hpXbhJAZJcs4w5nWymMB8GA1UdIwQY MBaAFFMkFEkrss+kCP9XOqBo/Pml53juMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYt Y2Q2NzY2YzM2OWExLzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYtY2Q2NzY2YzM2OWEx LzEvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPikXUG+ VqcGNSATFtgz3QxsETAUefYCV4bOKKb45z+opSyFRcuWPi5qCeky5oUScBL0hwUh WmCXYuzoyoN8PXXTN4c/kU1QbBvGmfWutKSlJXODcXhxoj9enP2XZOnPHJyYB873 a7ZCWvb7m5XnQud5jr7jcntPSENO3tQxaF/4wWjIWqP8VQVycAv5CTJY4A4MW5Zl mucK8+i3xdr7xBECbDKJ/pFXDG6uGcKluYGIud4nYlDQpAjMBFheT6te4K906QCt spkRdnCOFr9CBdrd2zn06vj69cLTtvlRHPphwUGMGi2D/Pss4+Ykw/Ggc/3pMerq k8nUlHT4c1N/Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:41 2025 by rpki-client