This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json) Hash identifier: IDRZ/9lfdrpIqLCimry8Rvqn1Gug4oMKsxw9dcvW/k8= Subject key identifier: 65:7B:6F:11:40:39:DF:35:0A:D7:E3:13:F9:32:9F:42:77:CF:50:78 Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Certificate serial: 019B5F4275EE5374C36F52215CE51F1F1D73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft Manifest number: 0CA6 Signing time: Sat 27 Dec 2025 10:02:29 +0000 Manifest this update: Sat 27 Dec 2025 10:02:29 +0000 Manifest next update: Sun 28 Dec 2025 10:02:29 +0000 Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: dAKUpV9DLeYvwqpkmZADD9dAfnhlCdRrPX28LnuNGJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:75:ee:53:74:c3:6f:52:21:5c:e5:1f:1f:1d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Validity Not Before: Dec 27 10:02:29 2025 GMT Not After : Dec 28 10:02:29 2025 GMT Subject: CN=657b6f114039df350ad7e313f9329f4277cf5078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:75:1f:74:1d:8e:41:51:db:d2:bb:c1:be:dd: cf:32:f3:a5:fc:9b:39:74:00:e0:27:a9:99:cd:f7: df:80:f1:96:e9:9a:c4:47:50:64:16:33:7e:db:eb: 2f:84:6c:8b:05:f7:bd:38:8b:da:7b:f5:4c:4c:bb: f3:a5:1f:0a:71:aa:a1:3a:b1:63:e1:5f:cf:2f:c4: c6:0d:f7:d5:d4:48:94:ce:df:69:46:8b:fb:1a:72: 43:13:79:56:28:6a:06:bc:ba:4b:ab:23:23:b2:34: fe:9b:f7:25:43:87:23:74:ac:e6:e8:ba:c3:f9:7c: 2f:f4:0b:f9:ad:24:dd:8e:dc:e6:fd:c3:df:d8:46: 20:9a:38:cd:e0:19:14:1d:6a:29:49:fd:6c:d7:26: ad:39:0d:68:21:8b:ce:89:59:34:03:64:88:08:7d: da:c0:2f:c2:41:5d:04:c4:fa:71:85:c0:ae:90:eb: ee:7f:26:e9:d3:74:cc:81:7f:ed:c9:8c:8f:5a:f3: 29:d5:d4:0a:be:c7:4a:ee:2d:7a:b8:6c:51:86:b9: 25:e0:e0:ff:2d:ae:49:fe:86:e3:ff:83:20:30:e8: e3:29:1a:dc:11:30:21:39:50:d9:a2:95:c8:b4:72: e9:a4:6b:7a:a3:b3:58:a1:3e:d9:41:47:94:8d:31: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:6F:11:40:39:DF:35:0A:D7:E3:13:F9:32:9F:42:77:CF:50:78 X509v3 Authority Key Identifier: keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:3f:bc:28:9c:75:81:45:07:9b:69:8f:6e:e7:f9:a6:e7:21: 43:68:58:8d:c9:72:e3:95:cd:d1:eb:e6:c2:36:4b:c7:ae:35: 60:a8:31:22:9b:18:26:01:c9:a6:39:ca:fd:9c:f4:1e:fb:39: ca:bb:38:72:14:2b:08:ab:8c:cf:e2:78:3b:f3:b0:9e:a4:9d: 87:35:da:05:ea:1c:34:d9:44:38:f3:f4:e3:97:81:c7:af:5f: 90:6e:aa:44:63:d9:f0:d8:4a:d1:50:4a:d3:88:9b:d1:b6:c6: e8:64:24:88:c3:f7:35:c1:96:da:18:55:1d:c8:d6:d6:d7:7a: d6:58:bb:a0:e0:3b:0a:bb:fd:67:14:2f:3b:6d:67:3d:83:dc: 29:0c:b7:9f:06:e6:d4:43:58:da:0f:28:4e:78:f7:3f:b2:0f: bb:54:d0:b1:b6:57:4b:02:79:2f:2c:14:9f:da:4f:38:20:8c: e1:24:25:af:de:71:9f:6b:14:35:a0:68:c5:fb:51:a4:7d:3a: 75:c6:77:c5:73:20:52:19:eb:1e:26:27:e5:41:ea:06:d2:cf: b2:93:de:a5:82:34:19:37:e5:8b:9b:23:5e:41:b3:94:d7:18: c9:9a:ee:b4:47:35:df:cd:ee:f1:9a:0a:33:62:94:a3:da:21: 62:80:b3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQnXuU3TDb1IhXOUfHx1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk OTZiZjkwHhcNMjUxMjI3MTAwMjI5WhcNMjUxMjI4MTAwMjI5WjAzMTEwLwYDVQQD Eyg2NTdiNmYxMTQwMzlkZjM1MGFkN2UzMTNmOTMyOWY0Mjc3Y2Y1MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nUfdB2OQVHb0rvBvt3PMvOl/Js5 dADgJ6mZzfffgPGW6ZrER1BkFjN+2+svhGyLBfe9OIvae/VMTLvzpR8KcaqhOrFj 4V/PL8TGDffV1EiUzt9pRov7GnJDE3lWKGoGvLpLqyMjsjT+m/clQ4cjdKzm6LrD +Xwv9Av5rSTdjtzm/cPf2EYgmjjN4BkUHWopSf1s1yatOQ1oIYvOiVk0A2SICH3a wC/CQV0ExPpxhcCukOvufybp03TMgX/tyYyPWvMp1dQKvsdK7i16uGxRhrkl4OD/ La5J/obj/4MgMOjjKRrcETAhOVDZopXItHLppGt6o7NYoT7ZQUeUjTHDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV7bxFAOd81CtfjE/kyn0J3z1B4MB8GA1UdIwQY MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxD+8KJx1 gUUHm2mPbuf5puchQ2hYjcly45XN0evmwjZLx641YKgxIpsYJgHJpjnK/Zz0Hvs5 yrs4chQrCKuMz+J4O/OwnqSdhzXaBeocNNlEOPP045eBx69fkG6qRGPZ8NhK0VBK 04ib0bbG6GQkiMP3NcGW2hhVHcjW1td61li7oOA7Crv9ZxQvO21nPYPcKQy3nwbm 1ENY2g8oTnj3P7IPu1TQsbZXSwJ5LywUn9pPOCCM4SQlr95xn2sUNaBoxftRpH06 dcZ3xXMgUhnrHiYn5UHqBtLPspPepYI0GTfli5sjXkGzlNcYyZrutEc1383u8ZoK M2KUo9ohYoCzQA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:57:32 2025 by rpki-client