This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json) Hash identifier: H6a3gM9apqgmRtkrto0WzMAvDy+yh6E7KaetmzARPRo= Subject key identifier: F3:57:16:6B:49:A5:E7:3E:A3:37:14:49:2A:A7:E8:D5:02:0A:3D:50 Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Certificate serial: 019B62B011F6C37C1850B84F9A072EDF05BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft Manifest number: 17A9 Signing time: Sun 28 Dec 2025 02:01:04 +0000 Manifest this update: Sun 28 Dec 2025 02:01:04 +0000 Manifest next update: Mon 29 Dec 2025 02:01:04 +0000 Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: zZWJTnXmwRJ+Z/l2OvKAcQ/idxqey1WeQz7txo0HNz0=) 2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=) 3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:11:f6:c3:7c:18:50:b8:4f:9a:07:2e:df:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Validity Not Before: Dec 28 02:01:04 2025 GMT Not After : Dec 29 02:01:04 2025 GMT Subject: CN=f357166b49a5e73ea33714492aa7e8d5020a3d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:96:d1:7a:e3:d0:4b:8e:a4:97:e1:a9:cc: 70:98:8e:f9:23:b8:a3:3a:b0:c9:ac:90:ea:2b:b7: d3:eb:7f:89:77:33:0a:10:0a:63:84:1c:de:fb:eb: 21:d2:da:25:5f:46:5b:0c:64:38:6c:b2:39:8e:a1: 83:90:fa:51:45:b1:8d:7e:3c:34:cd:45:92:09:ce: cc:5a:91:8b:0e:e5:61:e4:d3:44:11:cc:6f:90:47: 05:5a:c2:dd:fa:e2:6a:ee:df:d7:ed:33:35:2f:5b: 14:2a:2b:51:a5:67:9d:36:ad:72:d7:d9:8c:a4:a5: 7c:b8:5e:cb:49:2c:d9:59:9a:08:99:37:a8:29:c5: 4a:de:bd:7b:a4:5c:7f:8e:fe:70:7e:59:1d:ce:b8: 0a:c8:0c:30:b8:f9:ce:93:20:2b:e0:8b:a6:82:7d: 32:4a:a2:cd:6d:32:72:fc:14:d0:da:4c:7f:f7:be: 1e:0e:a4:51:99:64:f3:b0:fb:6f:80:ef:6d:5d:64: 2d:21:45:a5:3c:b9:8e:12:00:25:a3:8f:1c:cc:55: 36:b7:24:d4:85:92:04:32:62:27:3b:97:fc:ab:2a: 10:a0:b1:7b:e3:2b:7c:8a:34:a2:7e:f8:f5:13:88: 10:76:2c:9d:7b:a1:3f:73:1a:4b:b9:1c:62:40:e8: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:16:6B:49:A5:E7:3E:A3:37:14:49:2A:A7:E8:D5:02:0A:3D:50 X509v3 Authority Key Identifier: keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d5:46:96:88:27:66:14:d7:8a:b3:80:f9:c8:17:a4:39:d7: fa:99:b1:2a:83:39:7f:3a:19:1d:50:e4:a7:42:44:83:de:ce: 0b:29:4e:70:a1:4d:b6:dc:1a:23:ff:48:11:a0:5b:f5:d8:16: 0d:1a:0a:2c:5c:11:26:67:a7:04:8d:ba:e7:7d:a7:2c:62:e4: 94:65:f5:63:e8:08:7d:fc:04:f3:5f:12:07:f5:a3:2e:88:77: 7d:1b:e4:cf:2f:95:21:6e:2d:11:23:99:09:d4:4f:87:70:4d: 7d:a8:81:a4:2e:a9:50:3c:f3:90:f3:aa:df:41:fb:35:d4:48: 82:6d:b5:a5:64:3d:44:f6:23:be:eb:a7:9a:51:83:6e:18:c5: 1a:dd:18:95:88:e3:f9:dc:b7:73:da:3b:a5:1a:70:75:a0:cf: ae:32:62:4c:76:10:15:74:2a:8e:0b:df:4b:08:8b:ba:8e:55: 6d:51:c1:f7:c1:84:5e:64:9d:4d:eb:e5:fe:1b:2e:d6:8f:43: 2b:a2:9c:59:d4:a8:2a:bd:54:e0:15:bf:03:93:3f:cc:49:76: db:bc:45:4d:85:9e:47:6a:55:b1:63:f2:90:c8:5f:5a:e6:cb: 02:02:90:fb:6d:db:f2:65:37:bb:19:6f:e3:5e:9d:b0:ab:04: 3b:00:e0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisBH2w3wYULhPmgcu3wW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4 ZDM0NGYwHhcNMjUxMjI4MDIwMTA0WhcNMjUxMjI5MDIwMTA0WjAzMTEwLwYDVQQD EyhmMzU3MTY2YjQ5YTVlNzNlYTMzNzE0NDkyYWE3ZThkNTAyMGEzZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzSW0Xrj0EuOpJfhqcxwmI75I7ij OrDJrJDqK7fT63+JdzMKEApjhBze++sh0tolX0ZbDGQ4bLI5jqGDkPpRRbGNfjw0 zUWSCc7MWpGLDuVh5NNEEcxvkEcFWsLd+uJq7t/X7TM1L1sUKitRpWedNq1y19mM pKV8uF7LSSzZWZoImTeoKcVK3r17pFx/jv5wflkdzrgKyAwwuPnOkyAr4Iumgn0y SqLNbTJy/BTQ2kx/974eDqRRmWTzsPtvgO9tXWQtIUWlPLmOEgAlo48czFU2tyTU hZIEMmInO5f8qyoQoLF74yt8ijSifvj1E4gQdiyde6E/cxpLuRxiQOhZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNXFmtJpec+ozcUSSqn6NUCCj1QMB8GA1UdIwQY MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt ZGNmYzZhOWUwZGM3LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3 LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtVGlogn ZhTXirOA+cgXpDnX+pmxKoM5fzoZHVDkp0JEg97OCylOcKFNttwaI/9IEaBb9dgW DRoKLFwRJmenBI26532nLGLklGX1Y+gIffwE818SB/WjLoh3fRvkzy+VIW4tESOZ CdRPh3BNfaiBpC6pUDzzkPOq30H7NdRIgm21pWQ9RPYjvuunmlGDbhjFGt0YlYjj +dy3c9o7pRpwdaDPrjJiTHYQFXQqjgvfSwiLuo5VbVHB98GEXmSdTevl/hsu1o9D K6KcWdSoKr1U4BW/A5M/zEl227xFTYWeR2pVsWPykMhfWubLAgKQ+23b8mU3uxlv 416dsKsEOwDgxg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:41:36 2025 by rpki-client