This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json) Hash identifier: 8RSAp69DBuSIqBQSq4NXTj2jN5cZD0gqCZSo8O+If1E= Subject key identifier: 23:42:72:62:3A:D0:AB:5F:B7:79:81:39:6C:6E:4B:A0:D1:5C:50:1A Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0 Certificate serial: 019B3F11224FC5C5DAABDE17270476EC3B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft Manifest number: 02BD Signing time: Sun 21 Dec 2025 04:00:46 +0000 Manifest this update: Sun 21 Dec 2025 04:00:46 +0000 Manifest next update: Mon 22 Dec 2025 04:00:46 +0000 Files and hashes: 1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: LJuMxH3mYi4M8kvsTjy+ADa1ebQ8ki1wA9Ob0bRA/X0=) 2: wHN-DwZ2phagN24dcEs0dOWS0n4.roa (hash: PRZ4ezYR0MkLhJDk66PX2K5V2aQktdQihK+Xr7QGigU=) 3: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:22:4f:c5:c5:da:ab:de:17:27:04:76:ec:3b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0 Validity Not Before: Dec 21 04:00:46 2025 GMT Not After : Dec 22 04:00:46 2025 GMT Subject: CN=234272623ad0ab5fb77981396c6e4ba0d15c501a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:ed:46:fb:70:70:6d:a5:a3:1a:62:5d:c3: e1:95:55:1d:ff:bb:84:df:77:55:48:08:66:b3:47: 74:dd:30:75:a3:8a:40:da:1d:a8:95:a9:bf:4d:e0: a5:dc:0b:87:5b:bc:5e:9c:6e:40:60:3e:03:39:b6: 86:01:98:a8:87:69:0d:c0:83:17:1c:b1:e8:72:b6: b2:f4:74:30:b3:41:f7:0a:f9:f5:fb:74:11:1a:11: e2:b4:2f:68:a7:a0:72:7e:c2:b7:33:da:38:8b:65: 06:0c:11:a3:48:4c:64:f8:98:fb:b2:12:4e:14:55: 04:a8:3d:65:ed:38:e2:c9:8c:ad:80:9b:27:12:05: 77:67:ef:6e:9a:94:59:5d:ea:11:50:3c:64:af:56: 97:c5:15:67:48:da:65:4c:58:b8:da:fd:4a:4b:e4: 04:35:76:1f:eb:00:a1:59:f9:21:19:60:db:0e:8f: 19:62:e6:11:1c:ad:eb:fc:ca:76:b2:8d:f0:f6:1b: 24:08:b5:2f:52:a5:a3:0c:44:5a:9d:d1:3c:74:98: 5a:6b:e3:23:3e:1a:91:a9:39:e5:5e:fc:0c:c4:2b: cb:72:b1:f4:c2:4a:a5:20:a6:2b:28:cc:b7:0f:d9: b7:8b:9b:6b:7d:f8:ba:5b:04:c4:9a:8c:31:de:b4: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:72:62:3A:D0:AB:5F:B7:79:81:39:6C:6E:4B:A0:D1:5C:50:1A X509v3 Authority Key Identifier: keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b1:a2:a8:9d:69:1d:8e:54:55:a7:7e:57:19:1a:e4:cf:6f: d3:eb:81:63:28:05:ea:d9:8c:0f:77:36:dc:1c:23:98:dc:44: a2:21:99:9f:43:26:29:42:e0:ae:5b:48:25:9e:97:89:5e:02: 2b:11:0b:b8:a2:d6:d1:c0:79:e4:fa:3a:ce:ec:08:42:84:58: ec:ef:24:c6:d6:7b:4f:6b:44:9e:9e:fe:c2:48:0d:4d:cc:5d: 92:15:0a:b0:0c:52:7f:5e:9c:67:e4:4d:34:47:8f:8c:75:8f: 6a:79:07:45:6c:05:23:56:cd:51:c2:e1:b7:96:31:94:42:27: 8c:e0:f2:16:c9:14:fd:54:25:46:42:0a:b2:e3:51:b3:17:09: 99:bf:e9:a0:58:fc:be:a0:10:04:6a:99:5d:3b:c0:03:d0:6a: e9:04:d4:01:01:3d:fe:0c:5e:41:04:b4:61:ff:b5:c2:7c:81: 77:58:ad:f2:dc:5c:87:21:f0:e4:e0:4a:86:51:59:84:03:df: b7:e5:8d:a1:6a:26:ff:f3:c6:34:02:99:c4:74:5f:ac:8b:9b: d1:a6:86:8a:0d:f5:06:77:b2:4a:b7:09:79:6a:ec:5a:e2:0b: e2:d3:50:63:37:d6:5f:80:07:e6:3e:23:5b:5b:0e:55:a9:26: 7b:ae:2c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESJPxcXaq94XJwR27DsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1 Yjg4ZTAwHhcNMjUxMjIxMDQwMDQ2WhcNMjUxMjIyMDQwMDQ2WjAzMTEwLwYDVQQD EygyMzQyNzI2MjNhZDBhYjVmYjc3OTgxMzk2YzZlNGJhMGQxNWM1MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGntRvtwcG2loxpiXcPhlVUd/7uE 33dVSAhms0d03TB1o4pA2h2olam/TeCl3AuHW7xenG5AYD4DObaGAZioh2kNwIMX HLHocray9HQws0H3Cvn1+3QRGhHitC9op6ByfsK3M9o4i2UGDBGjSExk+Jj7shJO FFUEqD1l7TjiyYytgJsnEgV3Z+9umpRZXeoRUDxkr1aXxRVnSNplTFi42v1KS+QE NXYf6wChWfkhGWDbDo8ZYuYRHK3r/Mp2so3w9hskCLUvUqWjDERandE8dJhaa+Mj PhqRqTnlXvwMxCvLcrH0wkqlIKYrKMy3D9m3i5trffi6WwTEmowx3rT2CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNCcmI60Ktft3mBOWxuS6DRXFAaMB8GA1UdIwQY MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLGiqJ1p HY5UVad+Vxka5M9v0+uBYygF6tmMD3c23BwjmNxEoiGZn0MmKULgrltIJZ6XiV4C KxELuKLW0cB55Po6zuwIQoRY7O8kxtZ7T2tEnp7+wkgNTcxdkhUKsAxSf16cZ+RN NEePjHWPankHRWwFI1bNUcLht5YxlEInjODyFskU/VQlRkIKsuNRsxcJmb/poFj8 vqAQBGqZXTvAA9Bq6QTUAQE9/gxeQQS0Yf+1wnyBd1it8txchyHw5OBKhlFZhAPf t+WNoWom//PGNAKZxHRfrIub0aaGig31BneySrcJeWrsWuIL4tNQYzfWX4AH5j4j W1sOVakme64szA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:06 2025 by rpki-client