This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json) Hash identifier: NnyBGJ/6rbwDSQzmNHhxVDQcIVXzHvx9epFCFGOk0qE= Subject key identifier: 7F:E6:C1:C5:33:0C:90:AA:D3:FF:2E:FF:96:64:33:37:3C:A4:C7:2C Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041 Certificate serial: 019B446E63BE21217510A49A916E78985BD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft Manifest number: 0B55 Signing time: Mon 22 Dec 2025 05:00:43 +0000 Manifest this update: Mon 22 Dec 2025 05:00:43 +0000 Manifest next update: Tue 23 Dec 2025 05:00:43 +0000 Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=) 2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=) 3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: bq+9XCWPzZhJ94NGeV0MfNc1eQRmwPcyxk+28l0zCRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:63:be:21:21:75:10:a4:9a:91:6e:78:98:5b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041 Validity Not Before: Dec 22 05:00:43 2025 GMT Not After : Dec 23 05:00:43 2025 GMT Subject: CN=7fe6c1c5330c90aad3ff2eff966433373ca4c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:9c:84:65:c8:8f:f1:dd:c9:fe:c0:d3:b3: fb:a8:a8:1b:f6:57:af:c8:89:ce:34:f2:c5:93:f3: 86:2e:11:51:80:ba:3b:9d:d0:25:09:44:25:7a:66: ef:95:38:28:dd:21:ce:58:43:31:da:93:b5:dc:cf: c0:d0:61:8b:e6:7a:32:33:69:a0:0f:11:65:ba:e7: 58:71:16:00:01:1b:ec:c4:b3:04:77:f3:05:ed:2e: f9:ed:41:83:bf:68:7c:96:b0:a8:91:9c:31:b1:c6: 63:4d:99:a7:ce:03:d4:fd:aa:59:01:37:97:f4:b3: 26:b9:16:fa:fb:ac:c8:68:76:2a:8b:de:bd:75:4e: 33:67:60:70:6d:4c:b8:6b:f5:2c:eb:b3:62:75:5d: 0d:6b:2c:e4:0b:a7:64:d1:70:88:9f:df:71:c1:ba: 5a:da:98:5a:a0:ee:6f:c0:d3:5c:d4:f9:6c:ee:ae: 7b:44:13:e8:56:31:4e:a2:0d:42:b5:9a:75:86:bd: 3e:65:5e:9c:97:e1:a4:11:a5:48:cc:12:08:ed:85: 25:e1:09:6c:bc:8a:69:43:57:80:f2:75:ed:72:b7: ee:c0:6e:b2:db:e9:b2:aa:65:bc:a5:03:b1:17:38: 8a:21:28:5b:4c:df:13:7b:d8:60:ba:38:3e:44:52: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:C1:C5:33:0C:90:AA:D3:FF:2E:FF:96:64:33:37:3C:A4:C7:2C X509v3 Authority Key Identifier: keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d0:ed:f7:bf:ed:aa:5e:7a:1e:be:c6:93:ca:3c:3e:a5:f8: 34:c1:a6:9a:c6:99:5f:23:d8:33:09:86:63:e6:6f:db:7d:91: 3a:5a:6d:74:57:e0:73:1a:22:d6:30:eb:cb:50:2f:65:fc:37: 86:d0:08:ee:b2:58:97:fb:97:5e:f0:15:c7:51:0a:39:16:fb: 7a:55:a6:bb:ce:23:ce:c6:20:ae:cd:36:10:c4:d5:e9:ab:f5: a5:9b:07:f9:02:06:2e:6e:51:41:97:2b:ce:17:4d:52:3a:d5: 5c:86:82:11:8e:4c:21:5e:9d:5a:88:44:44:93:f0:04:ef:64: c2:65:15:cc:67:2d:8a:6c:1f:73:df:49:c2:cb:61:1a:b6:1d: c7:49:88:0a:33:bb:46:a6:74:27:0f:81:71:0b:ab:04:7e:a4: ab:cc:9e:d8:c1:10:5c:12:2e:b3:d8:da:25:39:18:e1:8e:4e: 3b:7f:bf:0e:19:27:ed:2e:bd:64:83:c8:b0:18:5c:4f:12:41: 6e:4a:ca:28:9b:55:1f:f4:6d:b2:02:6e:40:10:8b:67:b8:ae: ae:db:dc:da:50:e7:cf:1e:dc:2b:02:cd:c3:04:64:25:d1:02: 60:b4:7c:d5:ad:e3:dc:4d:ae:8e:10:e4:05:ef:70:aa:11:c8: c9:d9:13:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmO+ISF1EKSakW54mFvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3 MzAwNDEwHhcNMjUxMjIyMDUwMDQzWhcNMjUxMjIzMDUwMDQzWjAzMTEwLwYDVQQD Eyg3ZmU2YzFjNTMzMGM5MGFhZDNmZjJlZmY5NjY0MzMzNzNjYTRjNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4WchGXIj/Hdyf7A07P7qKgb9lev yInONPLFk/OGLhFRgLo7ndAlCUQlembvlTgo3SHOWEMx2pO13M/A0GGL5noyM2mg DxFluudYcRYAARvsxLMEd/MF7S757UGDv2h8lrCokZwxscZjTZmnzgPU/apZATeX 9LMmuRb6+6zIaHYqi969dU4zZ2BwbUy4a/Us67NidV0NayzkC6dk0XCIn99xwbpa 2phaoO5vwNNc1Pls7q57RBPoVjFOog1CtZp1hr0+ZV6cl+GkEaVIzBII7YUl4Qls vIppQ1eA8nXtcrfuwG6y2+myqmW8pQOxFziKIShbTN8Te9hgujg+RFIDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/mwcUzDJCq0/8u/5ZkMzc8pMcsMB8GA1UdIwQY MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt YTEyYjNjM2FlODhmLzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANDt97/t ql56Hr7Gk8o8PqX4NMGmmsaZXyPYMwmGY+Zv232ROlptdFfgcxoi1jDry1AvZfw3 htAI7rJYl/uXXvAVx1EKORb7elWmu84jzsYgrs02EMTV6av1pZsH+QIGLm5RQZcr zhdNUjrVXIaCEY5MIV6dWohERJPwBO9kwmUVzGctimwfc99JwsthGrYdx0mICjO7 RqZ0Jw+BcQurBH6kq8ye2MEQXBIus9jaJTkY4Y5OO3+/Dhkn7S69ZIPIsBhcTxJB bkrKKJtVH/RtsgJuQBCLZ7iurtvc2lDnzx7cKwLNwwRkJdECYLR81a3j3E2ujhDk Be9wqhHIydkT2A== -----END CERTIFICATE-----Generated at Mon Dec 22 14:04:21 2025 by rpki-client