This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json) Hash identifier: 5hsRGBNDpe1roXLcGBfX0ybqZyBK7UMgjoV0OISroDY= Subject key identifier: 9B:DA:17:CA:21:C8:95:EE:2B:C7:57:0C:84:02:51:54:D3:82:74:0C Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d Certificate serial: 019B54F48A62797316BEEF25D28E8E4C3231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft Manifest number: 17A7 Signing time: Thu 25 Dec 2025 10:01:10 +0000 Manifest this update: Thu 25 Dec 2025 10:01:10 +0000 Manifest next update: Fri 26 Dec 2025 10:01:10 +0000 Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=) 2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=) 3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: LYJIJgDCxXVK/sX7d7GgDgG0Bx4e1ZKgBPdyL/SWmZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:8a:62:79:73:16:be:ef:25:d2:8e:8e:4c:32:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d Validity Not Before: Dec 25 10:01:10 2025 GMT Not After : Dec 26 10:01:10 2025 GMT Subject: CN=9bda17ca21c895ee2bc7570c84025154d382740c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:46:0a:23:35:ad:ec:8e:ce:c5:3e:65:7e: e3:2d:22:39:4f:bc:f1:4b:74:73:94:33:63:f0:8f: af:3a:49:92:0c:b2:8e:9e:1c:93:4b:83:76:20:49: 37:b5:c7:d2:49:8b:ad:55:c2:ff:31:9f:58:30:0e: e4:f6:ce:e8:5b:74:0b:2f:0f:c0:c4:8d:6f:47:6e: dd:78:5b:b7:1e:e0:d3:db:fe:cb:42:d3:20:83:76: b6:a8:ae:3e:bb:f3:13:07:fa:ab:44:18:2b:5f:5c: 18:58:68:e3:7c:b1:46:2a:2c:00:d1:43:08:c8:9f: 4b:f0:77:9c:6f:e3:5f:97:6f:11:ec:79:59:c6:50: b7:87:67:b5:22:03:36:a1:f7:21:d8:dd:01:01:94: 0b:7e:f4:72:31:41:8e:7e:65:d0:ed:ed:cd:0f:ca: c2:77:fb:5d:09:0c:aa:f9:55:11:1c:cb:75:b8:7f: 6e:44:91:35:f2:d9:3f:6e:83:7c:35:80:86:2d:4e: f1:65:0b:23:22:81:3a:1a:01:21:92:6b:dd:ef:59: 33:8a:8f:95:e5:6b:0b:77:3f:26:c4:86:4c:ed:51: 12:c9:cb:18:b0:0c:6e:67:81:48:ed:cc:7c:21:2c: c4:8a:f6:fd:f2:b3:cb:ea:b6:3e:99:db:db:33:65: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:17:CA:21:C8:95:EE:2B:C7:57:0C:84:02:51:54:D3:82:74:0C X509v3 Authority Key Identifier: keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fa:ac:3d:0c:08:5b:6c:ec:30:a0:8c:79:07:17:ae:ed:5f: d7:57:e3:6d:24:bc:cd:24:11:49:30:f0:6e:b7:13:5e:19:7a: 44:c1:08:8e:68:92:cc:c9:da:98:5f:cf:c6:e0:71:cd:20:b4: 59:39:45:6f:fb:98:d1:e6:41:57:7a:a7:1a:43:aa:1c:9d:d1: 96:85:66:a3:ec:06:ea:55:e4:a7:c1:79:38:82:96:8c:1d:7a: 0c:5d:5d:4e:3f:b9:ca:fd:af:4b:35:30:2e:d5:63:63:5a:a8: 20:67:39:99:e0:36:f3:be:84:77:3e:49:9e:0a:0a:1d:b9:01: 04:d6:83:eb:5f:ca:a5:ab:04:59:45:71:62:bd:85:78:af:ca: 9f:05:55:3d:04:87:ff:4d:19:46:10:3d:17:fc:bf:80:da:54: 21:27:41:2f:bf:9c:68:a8:f1:b5:d3:5f:1c:c3:43:50:2a:02: ca:d7:5b:c8:35:28:e4:94:b8:83:9f:8c:c4:03:a6:8e:0d:95: 7d:6a:e2:98:ec:68:d8:41:17:23:6c:44:cc:00:ad:f1:f5:e1: e4:86:a1:94:95:50:57:94:12:78:35:b5:fe:63:b8:7b:08:de: e3:a1:5b:de:9d:95:ea:bb:8a:b7:ce:f5:29:e3:a8:e7:cd:48: ef:7f:2a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9IpieXMWvu8l0o6OTDIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMmI0OGY2NDM1ODAxMWM3ODQyZDNjZWM1Y2IyZDQ3MDY4 YjgzNmQwHhcNMjUxMjI1MTAwMTEwWhcNMjUxMjI2MTAwMTEwWjAzMTEwLwYDVQQD Eyg5YmRhMTdjYTIxYzg5NWVlMmJjNzU3MGM4NDAyNTE1NGQzODI3NDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqddGCiM1reyOzsU+ZX7jLSI5T7zx S3RzlDNj8I+vOkmSDLKOnhyTS4N2IEk3tcfSSYutVcL/MZ9YMA7k9s7oW3QLLw/A xI1vR27deFu3HuDT2/7LQtMgg3a2qK4+u/MTB/qrRBgrX1wYWGjjfLFGKiwA0UMI yJ9L8Hecb+Nfl28R7HlZxlC3h2e1IgM2ofch2N0BAZQLfvRyMUGOfmXQ7e3ND8rC d/tdCQyq+VURHMt1uH9uRJE18tk/boN8NYCGLU7xZQsjIoE6GgEhkmvd71kzio+V 5WsLdz8mxIZM7VESycsYsAxuZ4FI7cx8ISzEivb98rPL6rY+mdvbM2XNiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvaF8ohyJXuK8dXDIQCUVTTgnQMMB8GA1UdIwQY MBaAFLsrSPZDWAEceELTzsXLLUcGi4NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODIt YzUyMjk4NjNhZWJhLzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODItYzUyMjk4NjNhZWJh LzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPqsPQwI W2zsMKCMeQcXru1f11fjbSS8zSQRSTDwbrcTXhl6RMEIjmiSzMnamF/PxuBxzSC0 WTlFb/uY0eZBV3qnGkOqHJ3RloVmo+wG6lXkp8F5OIKWjB16DF1dTj+5yv2vSzUw LtVjY1qoIGc5meA2876Edz5JngoKHbkBBNaD61/KpasEWUVxYr2FeK/KnwVVPQSH /00ZRhA9F/y/gNpUISdBL7+caKjxtdNfHMNDUCoCytdbyDUo5JS4g5+MxAOmjg2V fWrimOxo2EEXI2xEzACt8fXh5IahlJVQV5QSeDW1/mO4ewje46Fb3p2V6ruKt871 KeOo581I738qBQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:17:45 2025 by rpki-client