This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json) Hash identifier: zozegeiQa5LCC7X1lzk9vIKl6JPpaImuTQgTy89obrE= Subject key identifier: 0A:46:14:B0:EA:88:7F:F0:76:3B:31:9D:CB:D0:6D:EF:BD:20:CF:C6 Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79 Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79 Certificate serial: 019B45133D828D12498459E880548C78C7D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft Manifest number: 1737 Signing time: Mon 22 Dec 2025 08:00:47 +0000 Manifest this update: Mon 22 Dec 2025 08:00:47 +0000 Manifest next update: Tue 23 Dec 2025 08:00:47 +0000 Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=) 2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: zdZs/1+6xjdciDXPaLZmJA0gNcFcZ83QGG085GBLdjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:3d:82:8d:12:49:84:59:e8:80:54:8c:78:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79 Validity Not Before: Dec 22 08:00:47 2025 GMT Not After : Dec 23 08:00:47 2025 GMT Subject: CN=0a4614b0ea887ff0763b319dcbd06defbd20cfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:9f:c9:f6:a6:09:8b:53:10:e6:1c:49:d3: 60:56:07:f2:64:f1:bb:8e:86:fd:42:9a:6c:88:e0: ab:22:1a:3b:54:1a:4b:9f:27:34:d6:54:dd:e3:e1: f0:94:af:e6:a3:2a:df:04:58:4f:fe:76:e9:75:64: 42:7a:3b:33:03:76:9b:4a:ba:a0:ff:89:1d:d6:ff: 9a:77:15:c7:62:9f:f7:e3:3b:51:0d:44:32:3e:0f: c8:65:e0:22:04:a4:34:e8:2b:52:39:b3:56:99:50: d4:b4:35:59:3e:94:25:07:71:2d:81:9d:c4:12:3e: 20:21:8a:a7:e3:f6:7b:ff:8a:03:6a:9b:8d:2f:e8: 84:a3:8b:fe:d1:4a:9b:dd:01:90:15:e0:ec:ab:67: 4f:44:b5:c1:18:24:a5:3d:2c:8c:39:44:c5:af:05: a4:7d:e9:d6:a8:b2:be:8a:9f:25:a1:59:1e:50:dc: 0e:61:39:08:6a:fb:bf:fd:3b:df:68:4d:24:35:31: 83:6e:39:87:fe:6e:76:f7:7d:d3:fb:21:37:17:fb: f0:b0:98:89:bc:0a:79:92:85:5a:5d:00:4d:c7:51: 81:dd:7a:ba:8c:96:2a:57:f9:f7:cf:6b:d5:d6:0a: 62:5d:05:fe:a7:f5:b6:7c:9a:f0:a9:95:83:2d:4c: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:46:14:B0:EA:88:7F:F0:76:3B:31:9D:CB:D0:6D:EF:BD:20:CF:C6 X509v3 Authority Key Identifier: keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:79:60:e6:b7:b1:8b:d6:33:93:42:2b:19:a8:50:23:7b:9b: ca:1a:4c:7a:df:d7:ce:16:ff:92:34:ee:50:a9:aa:ff:9f:28: c0:8c:3f:99:c8:cc:9b:ca:23:28:86:a6:c8:af:81:0e:f0:90: d2:c5:d6:6a:25:a8:67:c3:6e:d7:55:e3:9a:d9:1f:53:7e:83: 31:5b:f5:60:da:05:41:86:aa:3d:74:2a:e3:3c:3f:cb:b0:36: 63:79:f9:5d:ef:ba:4e:e3:42:f8:a3:a8:fa:e1:e6:ea:62:6f: 56:fa:33:43:d2:a1:7f:31:bc:6e:c0:0e:94:ab:f9:cf:9d:0e: 54:ab:99:3b:fa:f3:56:79:70:ec:31:70:e6:ba:f3:8e:2c:99: 7b:f1:c1:bd:c6:77:53:51:b2:1f:6c:a0:99:ac:d5:07:bd:1a: ae:75:ad:cb:80:3f:ba:37:e2:92:01:69:47:43:14:6e:b9:9f: b1:e5:19:30:4a:3d:c2:ba:4d:ea:78:ad:1f:60:e1:7c:09:7c: 9c:58:a4:35:e8:f3:8a:18:06:22:27:24:a0:e3:2f:49:03:13: 84:b5:2d:58:39:21:58:2a:f9:f6:fd:58:69:e8:1e:91:74:b4: 58:2e:fd:78:40:00:b2:4f:2e:e3:54:67:29:bb:51:d8:34:87: ac:6b:db:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEz2CjRJJhFnogFSMeMfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZTdmYTc3ZjcyNGJiNDY3MzI1YWQ1OWQ3ZGJmYzYzMzk5 YzZlNzkwHhcNMjUxMjIyMDgwMDQ3WhcNMjUxMjIzMDgwMDQ3WjAzMTEwLwYDVQQD EygwYTQ2MTRiMGVhODg3ZmYwNzYzYjMxOWRjYmQwNmRlZmJkMjBjZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8SfyfamCYtTEOYcSdNgVgfyZPG7 job9QppsiOCrIho7VBpLnyc01lTd4+HwlK/moyrfBFhP/nbpdWRCejszA3abSrqg /4kd1v+adxXHYp/34ztRDUQyPg/IZeAiBKQ06CtSObNWmVDUtDVZPpQlB3EtgZ3E Ej4gIYqn4/Z7/4oDapuNL+iEo4v+0Uqb3QGQFeDsq2dPRLXBGCSlPSyMOUTFrwWk fenWqLK+ip8loVkeUNwOYTkIavu//TvfaE0kNTGDbjmH/m52933T+yE3F/vwsJiJ vAp5koVaXQBNx1GB3Xq6jJYqV/n3z2vV1gpiXQX+p/W2fJrwqZWDLUwArQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApGFLDqiH/wdjsxncvQbe+9IM/GMB8GA1UdIwQY MBaAFLrn+nf3JLtGcyWtWdfb/GM5nG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0Zjkt MTJkYzk0ZGRlZGNkLzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0ZjktMTJkYzk0ZGRlZGNk LzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3lg5rex i9Yzk0IrGahQI3ubyhpMet/Xzhb/kjTuUKmq/58owIw/mcjMm8ojKIamyK+BDvCQ 0sXWaiWoZ8Nu11XjmtkfU36DMVv1YNoFQYaqPXQq4zw/y7A2Y3n5Xe+6TuNC+KOo +uHm6mJvVvozQ9KhfzG8bsAOlKv5z50OVKuZO/rzVnlw7DFw5rrzjiyZe/HBvcZ3 U1GyH2ygmazVB70arnWty4A/ujfikgFpR0MUbrmfseUZMEo9wrpN6nitH2DhfAl8 nFikNejzihgGIickoOMvSQMThLUtWDkhWCr59v1YaegekXS0WC79eEAAsk8u41Rn KbtR2DSHrGvbRA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:17:09 2025 by rpki-client