This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json) Hash identifier: lHZAoX8cA7fSAaDM9Mk85x5VRc7Rkw6R7gDDD79MQ1E= Subject key identifier: D9:0D:27:55:F3:B3:B4:4D:4D:41:40:D6:EE:1B:A3:2A:18:E1:22:E4 Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9 Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9 Certificate serial: 019AF464AFC8E05DAA5A513CE5B1705F07CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft Manifest number: 05B9 Signing time: Sat 06 Dec 2025 16:00:30 +0000 Manifest this update: Sat 06 Dec 2025 16:00:30 +0000 Manifest next update: Sun 07 Dec 2025 16:00:30 +0000 Files and hashes: 1: 61CDtae0iEHfRxLjCGUt_ZI6-T0.roa (hash: 92EcHG9klR/kBjMtbcIjDDa9fPiiHqjMtQbWGDBFd20=) 2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: UBsZ+XTSdF1Kpn2F8M3DnnC/Skmec/e4EK3YO4bf/dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:af:c8:e0:5d:aa:5a:51:3c:e5:b1:70:5f:07:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9 Validity Not Before: Dec 6 16:00:30 2025 GMT Not After : Dec 7 16:00:30 2025 GMT Subject: CN=d90d2755f3b3b44d4d4140d6ee1ba32a18e122e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:47:db:da:bd:46:42:c2:2e:27:2e:27:40: ea:8c:8e:8a:d7:ca:be:aa:9f:92:0d:37:10:e1:bb: c7:48:ca:bf:35:3a:57:8f:0f:da:63:42:39:9e:5c: 76:f3:be:de:7c:12:94:31:0a:57:f8:f2:63:13:05: 8f:74:25:6c:f5:5a:86:03:82:67:9f:fb:86:4f:61: 6c:26:70:2e:6a:d7:ca:97:49:62:f6:0d:e2:83:1c: 1e:f2:e4:a2:75:30:ad:76:5d:05:57:8d:76:54:23: 0c:a2:8c:af:59:1c:cf:b7:b3:5d:52:37:b7:19:3d: be:ce:4b:97:fa:ad:b9:50:36:b3:b6:2e:c2:b7:05: 98:1a:88:5c:59:1d:d4:48:64:6b:f4:2d:97:b2:79: 0c:1e:00:3f:f7:e7:5b:52:04:46:08:95:ad:a7:a9: 21:c7:9c:03:1a:56:86:80:99:be:70:42:e9:88:60: 8b:49:01:88:7c:99:c0:2f:31:fc:d0:1b:4a:10:30: 09:e8:90:d9:28:6f:44:5c:14:76:5f:d4:f8:56:39: e2:50:27:eb:ba:9c:03:6f:53:eb:33:9c:11:63:c5: 8d:91:7e:41:d5:b8:d7:c7:f9:cf:41:b5:04:de:0e: d8:d9:76:67:16:65:17:a5:82:8f:15:d6:96:74:3e: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:27:55:F3:B3:B4:4D:4D:41:40:D6:EE:1B:A3:2A:18:E1:22:E4 X509v3 Authority Key Identifier: keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:8e:a7:04:12:d9:19:7f:71:e7:25:72:1b:e2:9e:70:fa:51: b4:9d:cd:36:b2:e2:70:d3:de:b5:33:df:a5:96:12:74:18:37: 86:cd:a6:fe:87:a5:f0:39:20:5b:99:d5:ca:c8:fd:d3:69:da: f3:0a:53:66:a1:9d:e1:c0:2a:46:3a:0a:07:14:fc:1e:39:49: 2c:91:34:bb:28:ec:3d:d2:62:d1:e8:e4:42:1b:c3:f9:c7:7b: c6:f9:01:47:24:fa:5d:a2:87:6c:76:68:0a:bd:f7:5e:04:20: 92:29:2d:b5:4e:05:3d:17:ce:c2:d0:f3:af:30:33:b9:80:e6: c4:ee:29:3d:ef:78:89:c4:ea:65:77:3f:d9:ce:10:fc:e9:53: c7:f9:57:32:27:49:87:94:81:af:22:25:d5:b7:28:fe:2f:06: 02:0c:f8:14:8d:d0:df:5e:a5:1f:8b:d2:45:4d:98:68:9f:63: b9:0a:df:9c:ce:e0:14:1d:23:83:f7:d6:76:48:78:99:1f:26: 4c:94:33:77:32:2d:c3:03:9b:26:9c:e7:a0:2f:bf:2a:2b:95: c9:3e:cb:00:b0:53:7b:8b:43:fc:67:d4:4c:0f:24:14:e3:fc: b6:12:ce:7a:51:04:c6:e8:71:7a:e8:97:f9:25:f0:4a:f5:ff: 5a:50:2d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZK/I4F2qWlE85bFwXwfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NmRkYWJmYzQ4OTUyYmVlMjZkNmQ1ZjgyODgzMWY1OTZh MTU0ZTkwHhcNMjUxMjA2MTYwMDMwWhcNMjUxMjA3MTYwMDMwWjAzMTEwLwYDVQQD EyhkOTBkMjc1NWYzYjNiNDRkNGQ0MTQwZDZlZTFiYTMyYTE4ZTEyMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoulH29q9RkLCLicuJ0DqjI6K18q+ qp+SDTcQ4bvHSMq/NTpXjw/aY0I5nlx2877efBKUMQpX+PJjEwWPdCVs9VqGA4Jn n/uGT2FsJnAuatfKl0li9g3igxwe8uSidTCtdl0FV412VCMMooyvWRzPt7NdUje3 GT2+zkuX+q25UDazti7CtwWYGohcWR3USGRr9C2XsnkMHgA/9+dbUgRGCJWtp6kh x5wDGlaGgJm+cELpiGCLSQGIfJnALzH80BtKEDAJ6JDZKG9EXBR2X9T4VjniUCfr upwDb1PrM5wRY8WNkX5B1bjXx/nPQbUE3g7Y2XZnFmUXpYKPFdaWdD6SgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkNJ1Xzs7RNTUFA1u4boyoY4SLkMB8GA1UdIwQY MBaAFLht2r/EiVK+4m1tX4KIMfWWoVTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTIt N2RlYThmZmYyZTA4LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTItN2RlYThmZmYyZTA4 LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxY6nBBLZ GX9x5yVyG+KecPpRtJ3NNrLicNPetTPfpZYSdBg3hs2m/oel8DkgW5nVysj902na 8wpTZqGd4cAqRjoKBxT8HjlJLJE0uyjsPdJi0ejkQhvD+cd7xvkBRyT6XaKHbHZo Cr33XgQgkikttU4FPRfOwtDzrzAzuYDmxO4pPe94icTqZXc/2c4Q/OlTx/lXMidJ h5SBryIl1bco/i8GAgz4FI3Q316lH4vSRU2YaJ9juQrfnM7gFB0jg/fWdkh4mR8m TJQzdzItwwObJpznoC+/KiuVyT7LALBTe4tD/GfUTA8kFOP8thLOelEExuhxeuiX +SXwSvX/WlAt4g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:51 2025 by rpki-client