This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json) Hash identifier: HljR6fAHSll1Z5iV4F9JMmR6tbyj19Z+1i9kLmWRJ3o= Subject key identifier: 56:31:41:B3:C7:E1:BB:B3:BF:48:56:87:E5:B9:49:09:0B:9A:70:8F Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Certificate serial: 019AFB0C05AC45AD57526CE59E21D8352392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 23:01:00 +0000 Manifest this update: Sun 07 Dec 2025 23:01:00 +0000 Manifest next update: Mon 08 Dec 2025 23:01:00 +0000 Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: /tUxqXu2a8kYGwxo58LVgTb6nRI1joGALNA/Hju7QQQ=) 2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:0c:05:ac:45:ad:57:52:6c:e5:9e:21:d8:35:23:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Validity Not Before: Dec 7 23:01:00 2025 GMT Not After : Dec 8 23:01:00 2025 GMT Subject: CN=563141b3c7e1bbb3bf485687e5b949090b9a708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:6c:c8:54:0d:c1:27:6a:10:c8:45:f6:f7: d6:8f:d0:bd:a9:52:2b:df:d0:2a:92:47:70:5b:e8: 19:ed:b5:e9:f3:f4:4f:0a:ce:8f:5a:8f:c6:7a:79: 4f:27:68:c6:58:a9:b3:47:46:7a:ba:d4:5d:5d:5d: 9c:79:c9:21:ff:f8:ff:cd:49:2d:a0:60:4e:07:6f: 8c:f2:12:9a:32:15:9f:de:71:a0:52:d0:2e:aa:be: 01:05:2c:14:a3:2e:23:c2:22:33:63:23:00:56:46: a8:e1:39:c4:8c:b8:21:da:34:67:51:8f:73:30:2a: 64:5b:e6:09:6a:7e:01:54:96:1f:a4:d5:a1:86:4d: f0:a3:87:7b:b4:48:67:27:74:b9:d6:33:61:ae:98: 2f:30:1b:67:dc:52:6a:c2:45:97:51:f8:52:82:fa: 9b:e3:ad:8a:bd:48:2c:38:49:a6:85:e5:b7:53:5d: 0b:22:d6:b9:80:b5:1a:e3:8c:ff:ee:83:25:1f:be: 0d:35:b0:94:c4:b4:ec:89:02:45:e4:34:2c:83:ef: e9:45:03:e5:eb:ba:ab:17:2a:9f:2e:ee:44:8f:52: 5c:52:d4:fa:67:85:b8:74:28:70:3e:ad:2a:3e:68: ca:22:3d:5e:84:f5:42:98:d2:d9:cf:df:0a:80:7d: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:31:41:B3:C7:E1:BB:B3:BF:48:56:87:E5:B9:49:09:0B:9A:70:8F X509v3 Authority Key Identifier: keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f0:3f:ff:2b:41:5d:bf:ee:14:46:4c:cf:13:d7:80:18:17: a9:3d:b3:c8:5a:1a:45:f5:1f:52:14:d5:a4:5d:11:f3:e6:19: 54:fb:5e:19:f4:77:27:90:32:83:e1:69:3c:95:36:f0:40:54: 6b:45:13:7b:79:49:5e:e4:e5:5c:58:cf:11:67:ef:b1:69:f3: 43:d7:a2:e2:fb:09:c5:78:e6:00:d9:b5:97:8a:ba:47:67:6d: 49:d5:f5:8d:2d:f1:e9:13:a6:e7:28:2c:46:06:2b:bf:c7:17: 6f:2c:46:c4:73:88:d8:29:2e:59:90:d0:08:e6:c5:aa:1f:94: 76:43:7c:37:01:8c:7e:34:49:75:18:e5:43:ae:40:c9:c0:47: 36:f2:25:90:b2:9f:b9:07:3f:b4:cc:02:68:a8:c4:c6:93:f1: b3:33:71:0a:95:62:20:84:61:45:ff:75:56:17:f2:1b:36:2e: 0d:14:c3:31:a0:c0:7b:01:56:97:bc:f6:6d:cc:4f:1a:66:39: 6a:a1:7c:c1:52:8a:63:cb:02:b2:68:27:c6:79:47:60:a0:63: 02:06:2f:07:a1:17:01:2b:0f:d7:85:e5:77:3f:8b:4a:dc:46: 7f:9d:3c:99:de:45:eb:75:a6:46:5b:4d:c5:e1:e4:4e:13:f9: 1e:93:93:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7DAWsRa1XUmzlniHYNSOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk ZmEwNWMwHhcNMjUxMjA3MjMwMTAwWhcNMjUxMjA4MjMwMTAwWjAzMTEwLwYDVQQD Eyg1NjMxNDFiM2M3ZTFiYmIzYmY0ODU2ODdlNWI5NDkwOTBiOWE3MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55syFQNwSdqEMhF9vfWj9C9qVIr 39AqkkdwW+gZ7bXp8/RPCs6PWo/GenlPJ2jGWKmzR0Z6utRdXV2ceckh//j/zUkt oGBOB2+M8hKaMhWf3nGgUtAuqr4BBSwUoy4jwiIzYyMAVkao4TnEjLgh2jRnUY9z MCpkW+YJan4BVJYfpNWhhk3wo4d7tEhnJ3S51jNhrpgvMBtn3FJqwkWXUfhSgvqb 462KvUgsOEmmheW3U10LIta5gLUa44z/7oMlH74NNbCUxLTsiQJF5DQsg+/pRQPl 67qrFyqfLu5Ej1JcUtT6Z4W4dChwPq0qPmjKIj1ehPVCmNLZz98KgH0FowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYxQbPH4buzv0hWh+W5SQkLmnCPMB8GA1UdIwQY MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvA//ytB Xb/uFEZMzxPXgBgXqT2zyFoaRfUfUhTVpF0R8+YZVPteGfR3J5Ayg+FpPJU28EBU a0UTe3lJXuTlXFjPEWfvsWnzQ9ei4vsJxXjmANm1l4q6R2dtSdX1jS3x6ROm5ygs RgYrv8cXbyxGxHOI2CkuWZDQCObFqh+UdkN8NwGMfjRJdRjlQ65AycBHNvIlkLKf uQc/tMwCaKjExpPxszNxCpViIIRhRf91VhfyGzYuDRTDMaDAewFWl7z2bcxPGmY5 aqF8wVKKY8sCsmgnxnlHYKBjAgYvB6EXASsP14Xldz+LStxGf508md5F63WmRltN xeHkThP5HpOTRg== -----END CERTIFICATE-----Generated at Mon Dec 8 06:43:46 2025 by rpki-client