This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json) Hash identifier: 0VJMQS/cMFlEfbS3I18sb9XzC0MOZln2rm8zyk8tnUw= Subject key identifier: 94:DB:03:01:E0:04:76:C6:14:8E:22:83:12:BE:ED:15:92:C3:D3:27 Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Certificate serial: 019B42EE229ED81D06932476B268A459A483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft Manifest number: 119E Signing time: Sun 21 Dec 2025 22:01:01 +0000 Manifest this update: Sun 21 Dec 2025 22:01:01 +0000 Manifest next update: Mon 22 Dec 2025 22:01:01 +0000 Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=) 2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: Sl5Tuqplh/2GclHh4CtbS0rOp8wgQWUhRlbKUzLohaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:22:9e:d8:1d:06:93:24:76:b2:68:a4:59:a4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Validity Not Before: Dec 21 22:01:01 2025 GMT Not After : Dec 22 22:01:01 2025 GMT Subject: CN=94db0301e00476c6148e228312beed1592c3d327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:f6:a5:79:f7:f7:d2:69:c4:7d:42:59:15: 92:82:9d:19:41:63:e4:99:15:70:46:d5:33:5c:30: be:40:51:6c:ec:3b:88:2b:bf:74:82:ce:d0:00:7a: 71:6e:68:0d:e2:c0:0e:18:82:44:1a:d2:92:3e:3b: 82:18:75:ff:c0:a6:00:38:99:7b:98:90:c6:84:72: 19:46:da:15:10:70:34:5e:cb:27:45:1b:3e:c2:01: 27:63:a5:44:ed:44:43:dc:7e:da:48:94:7b:9e:5f: 1d:cf:d6:36:e8:8a:fb:98:54:d9:fd:52:df:34:10: 6b:23:f7:8b:30:ff:16:29:52:34:21:70:27:c9:15: a7:08:10:c8:e9:62:9f:5a:df:f1:47:d5:ae:2a:cf: 5b:5e:34:13:91:6b:3e:79:aa:90:e6:ee:84:85:5b: e5:23:f7:ed:6b:e6:d8:08:9e:7d:81:41:c9:bd:7e: f6:e7:ed:07:20:5a:00:94:b6:b2:73:0e:b5:f8:56: dd:c5:bb:90:ee:e1:99:30:ed:b1:1d:93:0e:86:b1: 01:4e:8a:94:d7:36:e7:e6:df:bf:64:c1:4b:bf:49: 5a:d0:f2:3c:34:a4:ae:fd:22:c6:dc:65:a6:c4:0d: 6f:ee:ba:b5:97:7c:30:7d:fa:d2:b4:64:67:ae:8b: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:03:01:E0:04:76:C6:14:8E:22:83:12:BE:ED:15:92:C3:D3:27 X509v3 Authority Key Identifier: keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:42:3e:98:61:07:b6:46:02:ac:0f:3e:88:60:36:50:8f:7e: a1:d5:0c:64:c0:2b:71:51:4f:53:3a:60:bc:45:4b:cc:e4:30: b2:52:bc:05:47:50:4e:7c:45:9e:a5:ec:08:9e:33:a3:c6:8a: 19:a1:41:21:1d:c7:e5:10:61:07:34:2c:3b:61:4e:54:0b:06: 05:88:40:cf:06:de:26:43:fb:da:1a:7c:89:68:9d:6f:9b:cf: 59:0d:b3:a7:a5:73:a7:8b:a7:ad:d1:9a:86:43:0d:a5:6b:98: 43:5a:b9:fe:62:69:24:0f:d8:d3:2e:ed:42:07:97:8d:fe:62: 2b:d4:a4:8d:5e:ed:b0:94:ac:e8:45:69:7b:55:86:e9:17:bc: a7:7d:4b:cd:20:93:fe:20:92:2d:bc:6b:29:f5:53:cc:f9:7e: fd:47:ee:5b:e4:1d:ff:a0:15:50:5e:ae:3e:40:3c:7f:bf:4d: f5:f1:63:5e:1b:eb:46:3f:82:ac:52:8f:70:43:34:72:e9:5c: 23:7f:29:74:5e:9d:96:0c:10:d0:1e:7a:74:6d:e0:8a:40:54: 4f:4d:b1:6e:77:dc:bc:b5:4d:b6:7a:d4:68:5b:72:f0:ea:ef: fa:5a:05:e3:0c:76:7b:1f:6b:91:97:dd:6a:74:fa:43:5c:8c: d9:f8:7c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7iKe2B0GkyR2smikWaSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk MDBjZWUwHhcNMjUxMjIxMjIwMTAxWhcNMjUxMjIyMjIwMTAxWjAzMTEwLwYDVQQD Eyg5NGRiMDMwMWUwMDQ3NmM2MTQ4ZTIyODMxMmJlZWQxNTkyYzNkMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKT2pXn399JpxH1CWRWSgp0ZQWPk mRVwRtUzXDC+QFFs7DuIK790gs7QAHpxbmgN4sAOGIJEGtKSPjuCGHX/wKYAOJl7 mJDGhHIZRtoVEHA0XssnRRs+wgEnY6VE7URD3H7aSJR7nl8dz9Y26Ir7mFTZ/VLf NBBrI/eLMP8WKVI0IXAnyRWnCBDI6WKfWt/xR9WuKs9bXjQTkWs+eaqQ5u6EhVvl I/fta+bYCJ59gUHJvX725+0HIFoAlLaycw61+FbdxbuQ7uGZMO2xHZMOhrEBToqU 1zbn5t+/ZMFLv0la0PI8NKSu/SLG3GWmxA1v7rq1l3wwffrStGRnroshlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTbAwHgBHbGFI4igxK+7RWSw9MnMB8GA1UdIwQY MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt ZTkwN2FmMDdmZjExLzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkI+mGEH tkYCrA8+iGA2UI9+odUMZMArcVFPUzpgvEVLzOQwslK8BUdQTnxFnqXsCJ4zo8aK GaFBIR3H5RBhBzQsO2FOVAsGBYhAzwbeJkP72hp8iWidb5vPWQ2zp6Vzp4unrdGa hkMNpWuYQ1q5/mJpJA/Y0y7tQgeXjf5iK9SkjV7tsJSs6EVpe1WG6Re8p31LzSCT /iCSLbxrKfVTzPl+/UfuW+Qd/6AVUF6uPkA8f79N9fFjXhvrRj+CrFKPcEM0culc I38pdF6dlgwQ0B56dG3gikBUT02xbnfcvLVNtnrUaFty8Orv+loF4wx2ex9rkZfd anT6Q1yM2fh8ig== -----END CERTIFICATE-----Generated at Mon Dec 22 02:47:14 2025 by rpki-client