This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft File: uvzQImt58j3kemr95RRLGynii1w.mft (raw, json) Hash identifier: SN9L4CSpMXzPa7EX6ZBmoXD6EE/ui+4RHTHkLM71suU= Subject key identifier: 23:8A:55:7F:D0:DE:D8:AD:CA:43:0D:6D:89:2A:AE:5A:37:99:3E:30 Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C Certificate issuer: /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c Certificate serial: 019B714705148F703C3B8878860A52D9AAF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft Manifest number: 097A Signing time: Tue 30 Dec 2025 22:00:38 +0000 Manifest this update: Tue 30 Dec 2025 22:00:38 +0000 Manifest next update: Wed 31 Dec 2025 22:00:38 +0000 Files and hashes: 1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: y3M62gnQsIOUdcJqK+3UlSUOCxx64QDBaDwuXOMKMo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:05:14:8f:70:3c:3b:88:78:86:0a:52:d9:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c Validity Not Before: Dec 30 22:00:38 2025 GMT Not After : Dec 31 22:00:38 2025 GMT Subject: CN=238a557fd0ded8adca430d6d892aae5a37993e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:97:4b:09:f8:f9:4e:9a:cc:4d:7f:3d:5a: 61:c5:48:df:bd:25:c0:47:f7:93:1c:04:60:4f:54: da:62:52:a3:fe:74:cb:0c:1f:ec:3b:b4:c7:4f:17: d1:13:7d:07:34:77:4c:4e:ce:e1:38:c5:6b:cf:13: 27:42:29:74:e0:3b:f8:b6:49:45:e4:71:c2:68:52: 08:1d:d6:d3:22:0f:b6:a3:f4:8f:bb:bf:9f:1d:e1: b0:16:23:a8:a3:14:e6:6e:34:30:3e:5d:6a:33:13: 58:b2:10:58:60:69:7d:5a:bc:ff:19:ff:e2:2c:2a: 1e:ed:ea:8f:5e:d9:44:7f:62:61:70:9e:9f:cf:fb: 70:77:ef:5b:35:3f:25:87:54:fd:31:f3:9b:dc:9f: dc:90:1b:d9:c1:af:55:10:ca:fb:aa:7d:a3:bd:95: 9b:16:5d:0c:da:41:05:ef:51:80:e2:cc:a8:39:b8: aa:7b:88:a8:66:ca:3f:b6:6d:e2:78:d8:ab:15:d1: 30:15:45:99:2a:ae:13:63:b5:2a:03:72:92:96:04: 65:21:c1:49:5a:77:07:92:72:95:69:74:a3:5b:bc: 84:75:76:17:31:15:04:77:01:ce:ab:ca:66:12:2e: 29:34:1e:6e:bf:16:be:0d:65:53:d6:d4:64:6d:f3: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8A:55:7F:D0:DE:D8:AD:CA:43:0D:6D:89:2A:AE:5A:37:99:3E:30 X509v3 Authority Key Identifier: keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:49:98:be:80:84:16:1c:fa:a8:b4:4d:e7:b0:d6:3c:c4:94: ed:69:80:3f:88:0e:4c:47:0e:9e:b1:3a:21:9e:91:da:25:ee: bf:81:86:3a:ae:ec:7d:fe:7b:78:cc:ea:0a:40:0d:8a:1a:f6: 90:c2:40:3b:44:65:a7:ab:9a:a4:bb:e4:35:ab:11:a9:2a:3a: 1c:62:f9:66:5e:eb:5c:d8:d5:44:7f:f1:1b:7a:54:6e:42:d7: c6:5b:99:99:01:32:df:30:c3:80:0f:2c:58:61:49:00:2b:48: 17:68:d8:19:96:9b:1d:7c:2b:6c:2d:06:eb:67:ba:73:83:5b: 16:73:8c:bc:30:e4:61:7f:53:c9:f2:30:39:9f:a2:d7:c9:1a: 40:bc:8a:4c:85:63:c8:a6:69:1a:ad:21:5f:19:0b:a7:81:07: 23:21:36:97:ec:87:b5:dd:38:f1:89:26:e5:8b:1d:17:17:ee: 85:1b:3f:b2:84:c1:71:84:9e:ce:77:1b:e0:6f:cd:fe:f7:7f: af:c7:cd:f5:8f:0b:67:cc:8b:d6:98:ea:ba:92:eb:8a:8b:1c: 91:b7:3e:5f:46:8e:9c:e3:8b:56:e8:ee:f6:5a:8c:76:8d:c3: eb:cd:1a:00:d9:08:14:51:2f:bb:69:57:34:ee:82:ee:a2:ed: a3:a0:79:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRwUUj3A8O4h4hgpS2arwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmNkMDIyNmI3OWYyM2RlNDdhNmFmZGU1MTQ0YjFiMjll MjhiNWMwHhcNMjUxMjMwMjIwMDM4WhcNMjUxMjMxMjIwMDM4WjAzMTEwLwYDVQQD EygyMzhhNTU3ZmQwZGVkOGFkY2E0MzBkNmQ4OTJhYWU1YTM3OTkzZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9uXSwn4+U6azE1/PVphxUjfvSXA R/eTHARgT1TaYlKj/nTLDB/sO7THTxfRE30HNHdMTs7hOMVrzxMnQil04Dv4tklF 5HHCaFIIHdbTIg+2o/SPu7+fHeGwFiOooxTmbjQwPl1qMxNYshBYYGl9Wrz/Gf/i LCoe7eqPXtlEf2JhcJ6fz/twd+9bNT8lh1T9MfOb3J/ckBvZwa9VEMr7qn2jvZWb Fl0M2kEF71GA4syoObiqe4ioZso/tm3ieNirFdEwFUWZKq4TY7UqA3KSlgRlIcFJ WncHknKVaXSjW7yEdXYXMRUEdwHOq8pmEi4pNB5uvxa+DWVT1tRkbfNMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOKVX/Q3titykMNbYkqrlo3mT4wMB8GA1UdIwQY MBaAFLr80CJrefI95Hpq/eUUSxsp4otcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMt YzE4MTM5NDdlMjMzLzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTEyY2UtYWZiYy00NTgzLTk3NzMtYzE4MTM5NDdlMjMz LzEvdXZ6UUltdDU4ajNrZW1yOTVSUkxHeW5paTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0mYvoCE Fhz6qLRN57DWPMSU7WmAP4gOTEcOnrE6IZ6R2iXuv4GGOq7sff57eMzqCkANihr2 kMJAO0Rlp6uapLvkNasRqSo6HGL5Zl7rXNjVRH/xG3pUbkLXxluZmQEy3zDDgA8s WGFJACtIF2jYGZabHXwrbC0G62e6c4NbFnOMvDDkYX9TyfIwOZ+i18kaQLyKTIVj yKZpGq0hXxkLp4EHIyE2l+yHtd048Ykm5YsdFxfuhRs/soTBcYSezncb4G/N/vd/ r8fN9Y8LZ8yL1pjqupLriosckbc+X0aOnOOLVuju9lqMdo3D680aANkIFFEvu2lX NO6C7qLto6B5Iw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:49:10 2025 by rpki-client