This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json) Hash identifier: Jw9CF8d2wFHPqwnIYG3WxcWOe7d90Z8e8VzJDlenESs= Subject key identifier: 3F:DB:35:7F:C7:FB:D7:F8:67:E3:F4:CA:47:C4:D1:7C:C5:FC:F7:1B Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d Certificate serial: 019B36B48986B0EF71A301D60B21786E9FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft Manifest number: 1714 Signing time: Fri 19 Dec 2025 13:02:39 +0000 Manifest this update: Fri 19 Dec 2025 13:02:39 +0000 Manifest next update: Sat 20 Dec 2025 13:02:39 +0000 Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: bRtVuGQGJ0UYy4BjH76gR75MTGkDSmYv/MddxohjqwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:89:86:b0:ef:71:a3:01:d6:0b:21:78:6e:9f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d Validity Not Before: Dec 19 13:02:39 2025 GMT Not After : Dec 20 13:02:39 2025 GMT Subject: CN=3fdb357fc7fbd7f867e3f4ca47c4d17cc5fcf71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f3:35:c0:ae:7c:09:b6:2a:b2:20:a1:87:4a: c0:97:4c:6f:1e:1a:8b:61:16:4c:ab:7f:8a:b9:e2: ac:9a:01:ba:87:6d:af:1a:f2:2a:15:a5:df:e1:32: a7:78:ae:24:03:c2:6a:98:a9:ed:d8:00:e4:34:b9: d2:94:44:ea:e4:de:87:ad:f7:0b:1b:97:dd:23:e8: 72:55:4e:aa:97:e9:9d:9d:62:c8:46:28:dd:10:ad: f9:6b:eb:ef:fd:e0:b6:c9:14:cf:af:b6:81:4f:75: ab:84:46:ca:b3:f8:25:2d:f7:79:fc:55:de:0e:33: a0:2a:cf:23:71:59:26:6a:56:83:d6:14:d9:c5:a2: 77:19:a5:8b:fc:8c:ba:4b:35:05:bb:6b:b4:39:09: e2:c7:02:fd:6e:42:a3:f1:2d:f9:d8:e2:e6:82:db: 6c:81:95:91:ec:6d:34:e7:da:ae:d8:0f:4b:c4:eb: ff:58:6c:3d:41:d4:d7:42:3c:3f:4a:80:1b:55:5c: 82:4e:e3:55:8e:4e:c8:22:7d:c6:e9:aa:0b:a3:57: 91:6e:e9:d6:24:c6:ed:91:36:2d:e4:44:b4:a9:de: f7:7f:64:f7:00:42:1a:e0:2a:0e:6a:9b:a4:ab:b7: 6d:a2:d1:56:61:3f:a1:7b:fb:57:1f:5a:4b:e1:af: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:35:7F:C7:FB:D7:F8:67:E3:F4:CA:47:C4:D1:7C:C5:FC:F7:1B X509v3 Authority Key Identifier: keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:6c:ac:3e:ba:74:0d:8c:31:4b:7d:4e:41:35:5e:1c:22:10: be:27:c4:07:bd:02:1f:aa:31:18:f2:cd:1d:cc:57:86:ad:df: 47:d1:99:7a:62:c3:b3:10:fd:7f:1c:4c:9a:90:21:68:c0:df: a8:ca:8c:b5:af:62:81:5d:7d:8c:74:80:9d:85:ad:2d:95:04: b9:b8:2a:f4:ea:a6:25:e7:15:f8:e4:be:ef:d9:fe:b8:9d:fc: 43:53:e4:e7:ca:5b:a2:d2:74:46:0c:ad:46:da:bf:67:8c:1a: da:2b:c8:98:ef:c0:4c:fb:2b:42:70:ae:34:44:33:9e:19:b8: d5:35:d0:e3:45:a5:81:6e:34:b3:69:e4:37:61:2c:24:65:eb: 98:47:cf:de:79:77:1d:57:02:4a:7b:74:30:1e:9f:d7:84:eb: 97:15:bd:23:40:f5:54:f9:1f:d2:32:23:e6:8c:81:dd:23:93: 5a:a3:42:c9:22:86:9c:e1:e5:aa:58:77:42:1a:9d:66:ea:07: 51:7e:28:05:65:be:cf:fd:ed:15:7a:81:66:94:94:5a:f9:18: 47:1a:52:84:3b:d7:7f:9d:6d:ba:f0:dc:8c:37:17:06:27:a5: 24:51:e1:11:61:ad:1c:eb:5a:61:15:0a:8c:e7:e8:0a:19:78: 7c:f4:e3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tImGsO9xowHWCyF4bp/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOGQ2Nzk4YmRkMGIyYjg4MDVkNDNiMzQ1NWY3NjczOWI5 NDZmMWQwHhcNMjUxMjE5MTMwMjM5WhcNMjUxMjIwMTMwMjM5WjAzMTEwLwYDVQQD EygzZmRiMzU3ZmM3ZmJkN2Y4NjdlM2Y0Y2E0N2M0ZDE3Y2M1ZmNmNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/M1wK58CbYqsiChh0rAl0xvHhqL YRZMq3+KueKsmgG6h22vGvIqFaXf4TKneK4kA8JqmKnt2ADkNLnSlETq5N6HrfcL G5fdI+hyVU6ql+mdnWLIRijdEK35a+vv/eC2yRTPr7aBT3WrhEbKs/glLfd5/FXe DjOgKs8jcVkmalaD1hTZxaJ3GaWL/Iy6SzUFu2u0OQnixwL9bkKj8S352OLmgtts gZWR7G0059qu2A9LxOv/WGw9QdTXQjw/SoAbVVyCTuNVjk7IIn3G6aoLo1eRbunW JMbtkTYt5ES0qd73f2T3AEIa4CoOapukq7dtotFWYT+he/tXH1pL4a/fDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/bNX/H+9f4Z+P0ykfE0XzF/PcbMB8GA1UdIwQY MBaAFLqNZ5i90LK4gF1Ds0VfdnOblG8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAt ZWM1NmMwYjA4MWFlLzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy82OGI1N2ItZDE4ZC00Nzg1LTk3YjAtZWM1NmMwYjA4MWFl LzEvdW8xbm1MM1FzcmlBWFVPelJWOTJjNXVVYngwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWysPrp0 DYwxS31OQTVeHCIQvifEB70CH6oxGPLNHcxXhq3fR9GZemLDsxD9fxxMmpAhaMDf qMqMta9igV19jHSAnYWtLZUEubgq9OqmJecV+OS+79n+uJ38Q1Pk58pbotJ0Rgyt Rtq/Z4wa2ivImO/ATPsrQnCuNEQznhm41TXQ40WlgW40s2nkN2EsJGXrmEfP3nl3 HVcCSnt0MB6f14TrlxW9I0D1VPkf0jIj5oyB3SOTWqNCySKGnOHlqlh3QhqdZuoH UX4oBWW+z/3tFXqBZpSUWvkYRxpShDvXf51tuvDcjDcXBielJFHhEWGtHOtaYRUK jOfoChl4fPTjfA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:16 2025 by rpki-client