This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json) Hash identifier: wQ+jLEswdziewGSriMfwVyjgv4pYeeZ6wQ8G+kKzMSc= Subject key identifier: 0D:74:46:60:CF:9A:F2:A3:6A:A9:F7:1D:ED:86:71:14:92:F1:80:5E Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Certificate serial: 019B3DFE5CB5ACAB15E6C654A702D5CC531B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft Manifest number: 1796 Signing time: Sat 20 Dec 2025 23:00:38 +0000 Manifest this update: Sat 20 Dec 2025 23:00:38 +0000 Manifest next update: Sun 21 Dec 2025 23:00:38 +0000 Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: z3Wbv8CT5gDHNTPPBdDkXZeirwglmhyRsXWnr+Q7rTY=) 2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=) 3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5c:b5:ac:ab:15:e6:c6:54:a7:02:d5:cc:53:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Validity Not Before: Dec 20 23:00:38 2025 GMT Not After : Dec 21 23:00:38 2025 GMT Subject: CN=0d744660cf9af2a36aa9f71ded86711492f1805e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:eb:3e:33:9f:18:60:15:d1:9a:c0:7b:88: 86:3a:76:bf:e7:7a:84:07:45:b5:eb:ea:cd:bb:ba: 50:9a:a7:c6:f5:5a:f8:36:78:17:a3:16:9b:c1:dd: b1:34:81:0e:b6:51:92:2a:8b:6f:4e:a8:de:fc:54: 44:e8:3b:4d:da:ba:6a:a7:ad:5c:c4:18:46:77:ea: d7:94:e4:3f:9a:34:0d:f8:9f:dd:2c:53:b1:4e:48: 80:96:c5:6e:a6:fd:98:9f:ea:a0:51:40:c5:84:ca: 0f:64:06:9d:8f:4d:88:d2:d5:1d:21:ce:b8:95:56: 3f:2a:0b:b9:46:7d:59:c3:d8:a6:03:58:a5:ac:28: 60:59:67:e7:aa:24:d6:47:56:e1:a8:c3:5d:db:54: aa:c3:d8:5a:77:b3:76:51:2f:6f:83:b5:fb:58:47: e3:39:8f:8c:49:da:64:72:45:f0:88:ac:04:7f:dd: 76:7a:e2:ae:f4:52:fe:b8:d9:21:48:34:6f:51:a5: ea:58:0c:fa:c3:25:63:0f:dc:4f:10:97:e7:ff:30: b4:e7:f8:da:1d:22:34:f5:c2:a3:f8:39:bd:a6:95: a1:17:55:c1:96:57:d2:eb:db:d3:25:fe:9d:65:ad: 70:fd:f3:4f:ed:3a:5b:fb:9a:1e:fc:aa:95:fa:90: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:74:46:60:CF:9A:F2:A3:6A:A9:F7:1D:ED:86:71:14:92:F1:80:5E X509v3 Authority Key Identifier: keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9f:f4:fc:cc:b8:6e:4e:3b:6a:89:82:f6:8e:e8:e4:71:18: 82:17:5b:74:73:2f:1e:d2:4e:11:8a:eb:30:da:07:6a:3d:e2: 98:81:9e:c1:2a:af:da:e5:d2:cb:c0:0c:7b:5a:3e:cf:5e:e6: ce:e1:7a:fd:d6:c1:af:e9:c9:7e:6d:06:25:e0:48:a1:aa:d3: bd:f1:82:49:6b:a0:93:c2:ef:3d:49:1a:93:12:fe:ff:3c:92: a3:22:70:e3:17:af:36:af:8e:bb:4c:6b:61:28:66:13:5b:c7: fa:d9:e4:83:0c:c8:32:54:d3:c1:b8:fc:9f:ef:d0:c8:a7:3e: aa:95:46:b5:5e:a4:d2:a9:d1:41:78:4a:64:7a:6f:0c:7f:ba: 6d:54:5a:43:18:2e:26:02:6b:34:13:8e:f2:15:bd:92:6d:07: 5b:f2:ff:73:a4:cf:67:a9:ad:f9:98:de:1e:9d:ff:85:f1:fe: ba:88:3c:85:4c:18:da:81:92:24:49:73:16:04:17:15:57:9b: 88:50:3d:d8:2c:7f:c0:85:11:ba:d2:d9:62:61:92:7d:b6:8f: 38:e7:be:89:3a:47:29:a6:10:b4:10:98:b1:8d:b8:5d:4b:3d: 06:be:76:35:37:db:7f:53:d8:94:6c:67:91:ae:91:97:6f:38: fd:74:ca:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ly1rKsV5sZUpwLVzFMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4 ZDM0NGYwHhcNMjUxMjIwMjMwMDM4WhcNMjUxMjIxMjMwMDM4WjAzMTEwLwYDVQQD EygwZDc0NDY2MGNmOWFmMmEzNmFhOWY3MWRlZDg2NzExNDkyZjE4MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08jrPjOfGGAV0ZrAe4iGOna/53qE B0W16+rNu7pQmqfG9Vr4NngXoxabwd2xNIEOtlGSKotvTqje/FRE6DtN2rpqp61c xBhGd+rXlOQ/mjQN+J/dLFOxTkiAlsVupv2Yn+qgUUDFhMoPZAadj02I0tUdIc64 lVY/Kgu5Rn1Zw9imA1ilrChgWWfnqiTWR1bhqMNd21Sqw9had7N2US9vg7X7WEfj OY+MSdpkckXwiKwEf912euKu9FL+uNkhSDRvUaXqWAz6wyVjD9xPEJfn/zC05/ja HSI09cKj+Dm9ppWhF1XBllfS69vTJf6dZa1w/fNP7Tpb+5oe/KqV+pCAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA10RmDPmvKjaqn3He2GcRSS8YBeMB8GA1UdIwQY MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt ZGNmYzZhOWUwZGM3LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3 LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5/0/My4 bk47aomC9o7o5HEYghdbdHMvHtJOEYrrMNoHaj3imIGewSqv2uXSy8AMe1o+z17m zuF6/dbBr+nJfm0GJeBIoarTvfGCSWugk8LvPUkakxL+/zySoyJw4xevNq+Ou0xr YShmE1vH+tnkgwzIMlTTwbj8n+/QyKc+qpVGtV6k0qnRQXhKZHpvDH+6bVRaQxgu JgJrNBOO8hW9km0HW/L/c6TPZ6mt+ZjeHp3/hfH+uog8hUwY2oGSJElzFgQXFVeb iFA92Cx/wIURutLZYmGSfbaPOOe+iTpHKaYQtBCYsY24XUs9Br52NTfbf1PYlGxn ka6Rl284/XTKkg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:37 2025 by rpki-client