This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json) Hash identifier: L+a6fUYX6XYTYJBF/uORv8KUNI6upxtKtskAkDNEFQ8= Subject key identifier: 88:C0:1A:FC:E3:E0:22:02:3E:52:4C:B4:27:F6:6B:1F:72:40:8C:4F Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Certificate serial: 019B41A4D8D77870048550C6FA23658A0754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft Manifest number: 134C Signing time: Sun 21 Dec 2025 16:01:20 +0000 Manifest this update: Sun 21 Dec 2025 16:01:20 +0000 Manifest next update: Mon 22 Dec 2025 16:01:20 +0000 Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: 256XCI1yeCJTjo4Aq2sWTQHqVztQz9RRcnzCQetsXPo=) 2: xBgAFkKx8Hk3olxaNjWis5mQn98.roa (hash: P1KCvzISYpUAfpvA/Q/kzEUy3tIPC4wJ6UjU3FGpTJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:d8:d7:78:70:04:85:50:c6:fa:23:65:8a:07:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Validity Not Before: Dec 21 16:01:20 2025 GMT Not After : Dec 22 16:01:20 2025 GMT Subject: CN=88c01afce3e022023e524cb427f66b1f72408c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:80:6b:fa:bd:8d:78:01:eb:2e:c8:e2:d5: fb:13:b9:8b:d3:64:39:4c:b2:df:de:b6:84:60:1b: e6:f9:b8:8f:02:b4:d4:72:f9:78:fa:19:62:96:e4: 8e:b1:81:15:01:ce:5a:9c:e8:0b:c0:e6:b3:31:63: 75:3f:32:b7:62:5f:7b:2c:cb:8a:52:06:65:8a:1b: 12:ae:a8:b2:e7:13:58:81:fe:bb:14:e1:26:ba:6f: d0:03:eb:72:bb:cc:22:e6:31:72:1a:a6:bc:5a:5c: b8:44:3d:5b:00:63:ba:2e:39:f8:12:de:98:28:e6: c8:44:0f:27:88:1b:1b:1f:ce:3a:f7:e7:78:d1:a4: 19:7d:fb:77:0e:c6:0c:32:99:37:a8:9c:e1:90:08: 97:0f:76:d6:86:b3:a9:c9:18:d1:1e:86:dd:41:b9: 7b:c2:d8:b4:5b:00:d6:12:9d:a8:80:85:b6:6f:3b: 1f:dd:0c:63:05:c2:76:a6:ba:0e:60:b0:b4:1e:80: 30:f4:44:55:45:51:39:98:c8:fe:40:77:71:79:a8: 15:53:ee:48:88:41:e3:40:43:92:bd:f9:d7:fc:33: b5:fe:2a:10:1f:aa:2e:3b:0c:5e:7b:c0:86:f5:aa: a4:2d:90:ad:29:fd:a2:c2:33:71:70:6e:bb:98:fe: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C0:1A:FC:E3:E0:22:02:3E:52:4C:B4:27:F6:6B:1F:72:40:8C:4F X509v3 Authority Key Identifier: keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:62:96:58:27:34:84:b8:af:7b:f0:d2:f7:24:20:be:ab:bf: 3a:ed:ed:df:1c:90:bf:bb:e8:2c:b6:d5:55:43:de:ce:35:c1: 86:6b:5b:05:93:80:4e:0e:47:d8:ef:4e:06:b8:ad:97:de:ae: c2:87:97:f4:7e:51:d2:30:50:8c:97:15:68:53:2f:7a:7d:4a: af:48:5f:61:45:26:ba:3d:f8:db:43:d9:27:6b:fb:8b:60:e3: ba:f2:36:a3:35:f5:ac:fa:7c:2d:95:99:f6:9e:be:8e:b2:d2: 92:17:b0:23:fc:c3:55:b5:9f:a7:a4:21:4a:32:29:48:ea:5a: 6c:bd:79:83:c2:1f:12:cd:09:18:77:a3:5f:35:68:00:63:33: b7:5e:9c:e5:dd:4f:75:1b:3a:1f:8d:2e:5f:00:12:cb:85:f3: 6b:36:ce:1d:fd:64:f8:e6:89:d2:31:ab:fc:ff:bc:00:c4:f6: 0a:66:87:d6:c8:51:3c:c1:1c:7c:bf:99:89:8f:63:b6:7a:d1: cb:6d:62:27:fc:20:ce:7b:7c:9b:39:8d:96:0e:5f:c2:e8:f0: b8:67:5b:7e:66:91:ad:a7:cb:c3:88:8a:34:02:d0:b4:99:f3: 8e:a6:fc:a2:4e:80:ea:02:b6:b8:7f:bc:25:c0:ce:48:82:a8: 40:45:0a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpNjXeHAEhVDG+iNligdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5 NzFiZmIwHhcNMjUxMjIxMTYwMTIwWhcNMjUxMjIyMTYwMTIwWjAzMTEwLwYDVQQD Eyg4OGMwMWFmY2UzZTAyMjAyM2U1MjRjYjQyN2Y2NmIxZjcyNDA4YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ASAa/q9jXgB6y7I4tX7E7mL02Q5 TLLf3raEYBvm+biPArTUcvl4+hliluSOsYEVAc5anOgLwOazMWN1PzK3Yl97LMuK UgZlihsSrqiy5xNYgf67FOEmum/QA+tyu8wi5jFyGqa8Wly4RD1bAGO6Ljn4Et6Y KObIRA8niBsbH8469+d40aQZfft3DsYMMpk3qJzhkAiXD3bWhrOpyRjRHobdQbl7 wti0WwDWEp2ogIW2bzsf3QxjBcJ2proOYLC0HoAw9ERVRVE5mMj+QHdxeagVU+5I iEHjQEOSvfnX/DO1/ioQH6ouOwxee8CG9aqkLZCtKf2iwjNxcG67mP7lRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjAGvzj4CICPlJMtCf2ax9yQIxPMB8GA1UdIwQY MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmKWWCc0 hLive/DS9yQgvqu/Ou3t3xyQv7voLLbVVUPezjXBhmtbBZOATg5H2O9OBritl96u woeX9H5R0jBQjJcVaFMven1Kr0hfYUUmuj3420PZJ2v7i2DjuvI2ozX1rPp8LZWZ 9p6+jrLSkhewI/zDVbWfp6QhSjIpSOpabL15g8IfEs0JGHejXzVoAGMzt16c5d1P dRs6H40uXwASy4XzazbOHf1k+OaJ0jGr/P+8AMT2CmaH1shRPMEcfL+ZiY9jtnrR y21iJ/wgznt8mzmNlg5fwujwuGdbfmaRrafLw4iKNALQtJnzjqb8ok6A6gK2uH+8 JcDOSIKoQEUKNg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:00 2025 by rpki-client