This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft File: uvzQImt58j3kemr95RRLGynii1w.mft (raw, json) Hash identifier: pn9kS0rnVKcdjjmO2s0KyjMwGd0xsG6xTLe0qzW3KYk= Subject key identifier: 1C:14:D1:A7:7F:50:4D:A7:FF:64:D6:1C:6F:DD:64:35:2C:90:7D:D8 Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C Certificate issuer: /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c Certificate serial: 019B337B28057A7BA5FEA4261777B35C2139 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft Manifest number: 095A Signing time: Thu 18 Dec 2025 22:01:07 +0000 Manifest this update: Thu 18 Dec 2025 22:01:07 +0000 Manifest next update: Fri 19 Dec 2025 22:01:07 +0000 Files and hashes: 1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: ZNrLy2+cAxkqTox0LA0vv0EKnDlEWe+XRdQJ28pAKxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:28:05:7a:7b:a5:fe:a4:26:17:77:b3:5c:21:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c Validity Not Before: Dec 18 22:01:07 2025 GMT Not After : Dec 19 22:01:07 2025 GMT Subject: CN=1c14d1a77f504da7ff64d61c6fdd64352c907dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5d:ac:a8:23:51:8f:48:43:da:67:9b:fe:b2: 29:6e:cb:4f:f5:6a:c4:0f:f0:c9:01:37:bd:89:28: e7:eb:2a:b5:6b:40:f8:8f:16:52:cc:9a:9e:7b:d7: 67:17:6d:61:92:31:0e:ae:54:f1:bc:ff:7b:a5:4f: cd:53:b5:53:27:5e:10:ad:71:0a:ff:b1:02:72:99: 35:0f:5f:73:e4:82:19:ed:2e:0c:c6:5b:92:bf:b9: 6f:1b:d2:d1:60:84:02:a1:97:e4:03:b1:e0:44:73: 1e:cf:f8:24:46:84:3d:4c:4e:74:4d:ec:bc:4b:07: 89:63:89:c1:60:3d:47:a8:e0:48:d7:55:bd:54:91: 96:cd:e2:68:e0:b4:05:88:14:70:da:d5:a3:ed:8c: f6:9c:3a:10:30:05:e2:bc:2b:a9:48:b6:e8:f3:c8: 1e:b4:7d:3d:b6:d4:bb:ad:20:72:3f:f4:4d:d7:ea: 8f:de:66:e2:d2:97:50:b3:5b:48:14:99:e1:62:05: b6:09:29:a8:08:84:af:91:ef:18:d2:42:9f:3c:58: db:1a:fa:e1:23:b2:28:64:8e:3a:32:81:d8:c0:6c: db:c4:d1:08:b8:e0:d5:c4:3d:aa:c1:1d:46:35:b3: 5c:f7:e1:4e:d8:07:8a:3e:c6:38:4d:71:1d:dd:4a: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:D1:A7:7F:50:4D:A7:FF:64:D6:1C:6F:DD:64:35:2C:90:7D:D8 X509v3 Authority Key Identifier: keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:db:2d:2e:09:68:30:7a:b8:10:ef:82:f0:45:a9:9e:c0:0e: 2f:f2:0e:8e:ea:34:4c:3a:fc:9d:4d:8b:7d:d5:e7:a8:b2:13: d4:0b:c8:21:5f:88:f0:5a:d6:3a:25:20:84:36:64:3c:2f:2c: 5f:1b:97:b8:f3:a7:0c:f3:91:45:37:ca:c3:59:f9:71:63:05: fc:4a:36:de:b3:b9:3a:d8:06:91:15:bd:0a:0d:13:7b:f2:6d: 9f:1e:81:f4:06:5f:72:8d:10:11:9b:4d:f5:95:59:1e:d6:52: e4:4d:21:66:53:b9:64:5a:a0:c8:72:63:b3:72:26:ed:13:98: 44:e2:ff:13:b1:14:a5:6d:5f:bf:a4:1c:cb:00:38:37:38:8c: 9c:1e:36:e6:18:6c:fa:34:0c:dd:cf:e9:df:27:49:26:1a:a8: 98:9e:60:9e:c8:f8:f4:8c:50:91:cd:5d:46:37:84:f4:54:8f: 01:2f:f2:da:56:d0:00:07:eb:5d:bd:7f:82:0d:83:c2:c1:77: ee:b5:ea:f9:52:1f:16:e6:e4:54:ab:ab:50:97:47:29:8c:d9: 9f:72:8c:24:6f:e6:94:c1:61:2d:a4:57:f0:3a:e5:bd:d1:7c: 9e:8d:0b:e2:9b:10:de:51:10:e6:57:16:b8:d4:c8:fe:2f:b5: 31:a9:22:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeygFenul/qQmF3ezXCE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmNkMDIyNmI3OWYyM2RlNDdhNmFmZGU1MTQ0YjFiMjll MjhiNWMwHhcNMjUxMjE4MjIwMTA3WhcNMjUxMjE5MjIwMTA3WjAzMTEwLwYDVQQD EygxYzE0ZDFhNzdmNTA0ZGE3ZmY2NGQ2MWM2ZmRkNjQzNTJjOTA3ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+l2sqCNRj0hD2meb/rIpbstP9WrE D/DJATe9iSjn6yq1a0D4jxZSzJqee9dnF21hkjEOrlTxvP97pU/NU7VTJ14QrXEK /7ECcpk1D19z5IIZ7S4MxluSv7lvG9LRYIQCoZfkA7HgRHMez/gkRoQ9TE50Tey8 SweJY4nBYD1HqOBI11W9VJGWzeJo4LQFiBRw2tWj7Yz2nDoQMAXivCupSLbo88ge tH09ttS7rSByP/RN1+qP3mbi0pdQs1tIFJnhYgW2CSmoCISvke8Y0kKfPFjbGvrh I7IoZI46MoHYwGzbxNEIuODVxD2qwR1GNbNc9+FO2AeKPsY4TXEd3UrzYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwU0ad/UE2n/2TWHG/dZDUskH3YMB8GA1UdIwQY MBaAFLr80CJrefI95Hpq/eUUSxsp4otcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMt YzE4MTM5NDdlMjMzLzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMtYzE4MTM5NDdlMjMz LzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNstLglo MHq4EO+C8EWpnsAOL/IOjuo0TDr8nU2LfdXnqLIT1AvIIV+I8FrWOiUghDZkPC8s XxuXuPOnDPORRTfKw1n5cWMF/Eo23rO5OtgGkRW9Cg0Te/Jtnx6B9AZfco0QEZtN 9ZVZHtZS5E0hZlO5ZFqgyHJjs3Im7ROYROL/E7EUpW1fv6QcywA4NziMnB425hhs +jQM3c/p3ydJJhqomJ5gnsj49IxQkc1dRjeE9FSPAS/y2lbQAAfrXb1/gg2DwsF3 7rXq+VIfFubkVKurUJdHKYzZn3KMJG/mlMFhLaRX8DrlvdF8no0L4psQ3lEQ5lcW uNTI/i+1MakiAA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:11:03 2025 by rpki-client