This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json) Hash identifier: O54xilR24vCy4QleJDq9wSkVpZEUpOUo92YrLElr23U= Subject key identifier: CB:DF:B8:7D:96:92:B4:CE:21:01:C6:CF:B8:46:3D:CF:01:7C:25:B7 Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1 Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1 Certificate serial: 019AF0BF49702D5899D1B1EFDAE390A46756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft Manifest number: 0A2D Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: VLsdaGm5YcpQIdpZ6vRmKfc8fLc5RCBXeQObJtUKQ6A=) 2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:49:70:2d:58:99:d1:b1:ef:da:e3:90:a4:67:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1 Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=cbdfb87d9692b4ce2101c6cfb8463dcf017c25b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:de:8f:d3:41:ca:fb:c6:86:cb:bb:51:f9: a5:a5:8c:04:f7:da:f3:ea:14:3d:68:53:19:b2:ac: b7:3b:5c:8c:af:34:86:3e:1f:b9:f5:17:11:cd:75: 45:fc:25:51:6e:f6:72:d2:68:b7:65:f5:ac:0a:87: dc:0b:89:1a:ae:a2:70:da:57:1f:e1:56:0f:d5:b7: 8f:3d:8a:fc:34:8c:8b:42:52:69:f5:fa:15:7e:16: 48:c2:4c:5b:a5:f6:b6:ed:46:3a:63:bf:97:ef:78: 01:30:98:f9:d2:8c:c7:c3:22:7a:46:80:81:31:f2: b8:70:75:c5:c3:bf:21:87:99:3f:5e:2a:8a:4d:49: 17:36:1e:ab:42:63:9d:38:01:60:67:68:65:d6:aa: dc:db:52:03:59:81:ce:9a:90:70:a1:f0:30:33:f3: 2b:74:f7:4c:52:2f:f0:c1:f1:51:8f:3e:d8:fe:fd: 8a:83:e4:8e:aa:90:4d:5f:41:4c:64:9f:e9:28:ab: 9e:b3:6c:e6:0a:83:2c:70:9e:19:6a:00:0e:1d:33: 27:af:95:d2:2b:59:d0:9e:a8:41:42:bb:19:78:e2: b9:c5:22:77:a5:99:27:ca:a6:84:ac:60:16:f4:0e: 9a:55:ff:ac:a3:34:d1:81:91:d3:54:13:0d:c4:f9: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:B8:7D:96:92:B4:CE:21:01:C6:CF:B8:46:3D:CF:01:7C:25:B7 X509v3 Authority Key Identifier: keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:bf:36:86:0c:35:75:19:e7:78:56:a9:cf:d9:04:a9:5f: 15:30:82:33:ae:a3:f1:34:c6:7b:7c:28:f2:05:40:21:72:41: 27:16:c2:03:61:e8:6c:cd:74:52:6f:e0:9f:96:cc:e1:9e:a8: b3:68:db:49:02:08:fe:cc:05:8f:85:40:d0:3b:e3:a0:2c:eb: 69:27:fa:a9:65:42:ae:f9:d1:5a:de:de:f6:dc:34:33:b3:d2: c9:47:0f:32:4f:c6:38:6a:2b:91:22:a9:66:31:43:a0:6e:74: 70:8f:22:16:44:7b:a1:18:15:d9:66:17:5d:52:66:46:2c:ae: 7b:ba:27:f0:23:52:65:a0:e6:ab:0e:ee:bc:84:71:29:9d:29: 79:25:3e:6c:a2:3a:8f:69:f1:14:f3:91:c3:66:d6:e6:6d:88: 27:27:06:71:91:89:7d:4a:8e:69:10:0e:e4:ff:b5:c6:72:33: da:3e:22:36:df:27:68:f4:11:a2:33:d4:1a:d9:8b:04:0b:d5: bf:6a:08:0d:d5:8f:28:c5:7b:94:b1:ae:12:07:16:2b:12:45: 85:6c:72:e9:78:f0:89:0e:98:c8:58:9a:2c:83:e8:4a:00:97: 7d:06:40:e9:c4:2c:82:1f:55:7c:3a:14:b1:f8:29:5b:8f:4f: cf:cb:d6:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0lwLViZ0bHv2uOQpGdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZTFiZTQwYmQ0YzEwYTAyYzc4MzcxYWYzMTNkNGU3ZGEz ZDQ0YTEwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD EyhjYmRmYjg3ZDk2OTJiNGNlMjEwMWM2Y2ZiODQ2M2RjZjAxN2MyNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Tej9NByvvGhsu7UfmlpYwE99rz 6hQ9aFMZsqy3O1yMrzSGPh+59RcRzXVF/CVRbvZy0mi3ZfWsCofcC4karqJw2lcf 4VYP1bePPYr8NIyLQlJp9foVfhZIwkxbpfa27UY6Y7+X73gBMJj50ozHwyJ6RoCB MfK4cHXFw78hh5k/XiqKTUkXNh6rQmOdOAFgZ2hl1qrc21IDWYHOmpBwofAwM/Mr dPdMUi/wwfFRjz7Y/v2Kg+SOqpBNX0FMZJ/pKKues2zmCoMscJ4ZagAOHTMnr5XS K1nQnqhBQrsZeOK5xSJ3pZknyqaErGAW9A6aVf+sozTRgZHTVBMNxPm3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvfuH2WkrTOIQHGz7hGPc8BfCW3MB8GA1UdIwQY MBaAFP7hvkC9TBCgLHg3GvMT1OfaPUShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMt NWZkNzE2ZDY3ZTRjLzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yZDI1NzAtYWI5MS00YzI3LTljYjMtNWZkNzE2ZDY3ZTRj LzEvX3VHLVFMMU1FS0FzZURjYTh4UFU1OW85UktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwy/NoYM NXUZ53hWqc/ZBKlfFTCCM66j8TTGe3wo8gVAIXJBJxbCA2HobM10Um/gn5bM4Z6o s2jbSQII/swFj4VA0DvjoCzraSf6qWVCrvnRWt7e9tw0M7PSyUcPMk/GOGorkSKp ZjFDoG50cI8iFkR7oRgV2WYXXVJmRiyue7on8CNSZaDmqw7uvIRxKZ0peSU+bKI6 j2nxFPORw2bW5m2IJycGcZGJfUqOaRAO5P+1xnIz2j4iNt8naPQRojPUGtmLBAvV v2oIDdWPKMV7lLGuEgcWKxJFhWxy6XjwiQ6YyFiaLIPoSgCXfQZA6cQsgh9VfDoU sfgpW49Pz8vWxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:10 2025 by rpki-client