This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json) Hash identifier: ofvjJ2dmKh3OzxEgHzSRvDR0vxtKmCv1opoT+NioBGw= Subject key identifier: 13:09:BE:F7:1F:86:42:F8:F3:32:71:91:BE:23:A8:97:2A:0D:AE:6E Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Certificate serial: 019B75239589F898B54727F8ACDCA0641FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft Manifest number: 11B8 Signing time: Wed 31 Dec 2025 16:00:24 +0000 Manifest this update: Wed 31 Dec 2025 16:00:24 +0000 Manifest next update: Thu 01 Jan 2026 16:00:24 +0000 Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=) 2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: F4kXGibxX2rzf+cS+nOAUX1vicxk90SXX+5I+TrwVwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:95:89:f8:98:b5:47:27:f8:ac:dc:a0:64:1f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Validity Not Before: Dec 31 16:00:24 2025 GMT Not After : Jan 1 16:00:24 2026 GMT Subject: CN=1309bef71f8642f8f3327191be23a8972a0dae6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:4e:0e:ab:1c:07:f5:75:e6:fb:bc:33:8a: 93:9f:24:e9:ed:78:a2:f1:67:c9:b7:3c:63:22:5b: bc:37:71:79:3e:83:fe:43:29:af:73:54:95:57:0e: d9:99:8c:01:16:b2:d9:fe:6f:b1:71:a4:ca:9d:4e: a8:10:a3:f6:54:e2:df:e5:9c:d6:79:1e:22:c2:a2: c7:f7:ca:cf:b9:e3:f8:dc:4a:8e:b6:d7:3c:6c:a9: 35:11:a6:53:ad:7a:90:6f:67:df:73:bc:47:03:9c: ef:27:4a:a4:5f:d2:6b:f6:d8:47:c5:51:f0:ce:ad: e6:90:7c:14:0a:22:f3:04:8c:d5:71:98:73:61:cd: cf:fb:49:06:09:6c:1d:60:65:0d:7e:db:1a:cf:52: fb:ed:19:3d:44:66:8e:af:b5:11:08:42:15:a0:a8: 4a:60:0f:fc:84:a6:39:9a:10:39:66:21:ed:9d:b9: d4:64:75:fa:7f:c3:48:51:b4:2c:17:13:6e:f4:34: 76:42:65:48:db:76:26:4b:c6:41:fa:b2:8d:0a:c2: 08:aa:24:f0:22:2b:cf:88:c7:96:2d:06:f3:0b:b8: 47:b8:a8:c4:cb:ed:23:61:e3:45:f3:f9:1f:6a:4f: 15:93:7d:2a:4d:05:d1:d2:25:9c:63:16:75:a9:4f: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:09:BE:F7:1F:86:42:F8:F3:32:71:91:BE:23:A8:97:2A:0D:AE:6E X509v3 Authority Key Identifier: keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:65:40:f8:d6:fc:f9:c6:60:67:8e:ee:a6:5a:48:27:0b:28: 21:04:92:fe:17:79:bd:f7:84:2b:c7:72:9f:cf:43:cf:30:8c: 85:0e:3e:18:92:e9:2d:49:cb:69:cb:63:e1:bb:26:c3:25:b9: da:d1:35:3f:b5:31:7d:16:db:f5:6f:0b:b7:53:fc:37:7f:7c: 14:4d:cf:1f:16:63:62:0b:32:7a:6a:a3:17:b1:4d:e2:d5:74: 52:1f:ae:53:3c:98:66:1c:87:5e:fd:4c:6f:68:22:68:a4:86: fe:22:44:8a:f3:fa:ef:52:67:de:40:8e:c8:f4:04:d0:43:aa: 40:b0:68:88:c0:8b:c3:9c:51:8d:c1:cb:55:5c:49:03:8c:13: cb:8a:11:a0:d7:d5:2c:92:0b:35:e7:80:ac:40:be:65:ed:cf: 50:8d:91:c5:ca:af:78:37:7a:22:b0:e2:36:b5:bf:8d:d3:15: 53:12:4f:36:85:e7:aa:bb:76:5e:31:dc:c6:f0:51:01:23:5f: 9d:8f:12:18:fd:16:52:d8:29:2c:ac:64:f3:a4:38:cb:c1:1e: b5:ec:81:bf:6f:c0:41:59:20:41:47:ff:03:56:ee:31:f5:ee: 8c:d0:ca:d8:fb:dd:1e:50:32:69:1b:62:91:6f:6e:b0:ed:96: e2:f0:8b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I5WJ+Ji1Ryf4rNygZB/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk MDBjZWUwHhcNMjUxMjMxMTYwMDI0WhcNMjYwMTAxMTYwMDI0WjAzMTEwLwYDVQQD EygxMzA5YmVmNzFmODY0MmY4ZjMzMjcxOTFiZTIzYTg5NzJhMGRhZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37VODqscB/V15vu8M4qTnyTp7Xii 8WfJtzxjIlu8N3F5PoP+Qymvc1SVVw7ZmYwBFrLZ/m+xcaTKnU6oEKP2VOLf5ZzW eR4iwqLH98rPueP43EqOttc8bKk1EaZTrXqQb2ffc7xHA5zvJ0qkX9Jr9thHxVHw zq3mkHwUCiLzBIzVcZhzYc3P+0kGCWwdYGUNftsaz1L77Rk9RGaOr7URCEIVoKhK YA/8hKY5mhA5ZiHtnbnUZHX6f8NIUbQsFxNu9DR2QmVI23YmS8ZB+rKNCsIIqiTw IivPiMeWLQbzC7hHuKjEy+0jYeNF8/kfak8Vk30qTQXR0iWcYxZ1qU/6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMJvvcfhkL48zJxkb4jqJcqDa5uMB8GA1UdIwQY MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt ZTkwN2FmMDdmZjExLzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2VA+Nb8 +cZgZ47uplpIJwsoIQSS/hd5vfeEK8dyn89DzzCMhQ4+GJLpLUnLactj4bsmwyW5 2tE1P7UxfRbb9W8Lt1P8N398FE3PHxZjYgsyemqjF7FN4tV0Uh+uUzyYZhyHXv1M b2giaKSG/iJEivP671Jn3kCOyPQE0EOqQLBoiMCLw5xRjcHLVVxJA4wTy4oRoNfV LJILNeeArEC+Ze3PUI2RxcqveDd6IrDiNrW/jdMVUxJPNoXnqrt2XjHcxvBRASNf nY8SGP0WUtgpLKxk86Q4y8EeteyBv2/AQVkgQUf/A1buMfXujNDK2PvdHlAyaRti kW9usO2W4vCLTA== -----END CERTIFICATE-----Generated at Thu Jan 1 01:02:19 2026 by rpki-client