This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json) Hash identifier: RvIRhP5pCYSnXaLn6YHlGsXqqvfKYfCbzdDi7eI+d0k= Subject key identifier: F4:8A:60:3F:08:1A:23:3D:DD:F4:AC:26:DB:62:2A:FC:2C:BD:27:91 Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed Certificate serial: 019AF209604CE61286F982FA3BBB2481AB96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft Manifest number: 05A7 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=) 2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: PeLNEUGlkG3ghwjRwEtxUmBvkMHg8hVTfcN/ta7ZZew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:60:4c:e6:12:86:f9:82:fa:3b:bb:24:81:ab:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=f48a603f081a233dddf4ac26db622afc2cbd2791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:98:ec:48:27:e9:fa:51:a6:bf:06:80:62: 21:98:77:5e:df:02:67:9b:d1:f9:73:da:bc:33:87: 95:31:d7:fd:4d:e8:e0:c0:c4:7d:36:b2:03:fd:08: b8:84:08:aa:da:ac:e2:e5:ff:25:17:8b:f5:4c:5d: 27:05:02:9c:42:67:e2:9e:c3:f2:58:fd:c7:79:4f: d4:2a:95:ab:2e:b7:17:5d:bb:cb:5d:32:8d:12:32: 53:ec:cc:42:20:ba:bd:70:55:72:da:fb:08:5b:f6: f0:6c:34:80:b7:32:17:52:f4:70:60:9f:30:37:43: 7d:6f:5e:76:d1:61:e3:f7:c8:14:7d:8c:f2:92:ec: 03:71:a8:01:b4:48:67:08:21:64:37:d5:c8:64:dd: 6e:8a:03:5a:b8:15:00:ab:6c:eb:9e:b6:bd:2d:21: 71:0e:5b:9d:82:4c:c0:f9:eb:72:bb:0f:c7:b9:56: 07:72:35:d0:36:b0:fe:7b:d3:a9:2d:65:26:95:b6: 5a:e8:9d:c3:0f:b0:2d:8e:b6:4f:48:26:08:02:6a: e0:a3:6a:4b:c9:cb:6a:16:35:90:35:f7:51:af:96: db:28:15:80:61:c8:b4:e0:f2:6b:fc:cc:75:c6:f8: 1a:cb:0e:a4:ee:e3:2f:ab:d6:e8:68:23:e7:10:e0: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:60:3F:08:1A:23:3D:DD:F4:AC:26:DB:62:2A:FC:2C:BD:27:91 X509v3 Authority Key Identifier: keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:03:6b:f5:b2:52:c8:67:91:db:bb:4e:33:8c:51:fe:9f: 07:4f:4e:93:3a:15:c9:bb:e8:d1:90:cc:ff:ae:94:41:e5:d7: cb:07:6f:81:f9:a1:4d:a3:7f:29:f4:96:8a:94:61:28:63:9d: 37:7c:57:0a:1d:43:70:0a:1b:d0:89:8f:47:68:87:76:a7:34: b2:8d:ea:f3:a3:97:c8:61:08:71:33:28:0b:6a:cd:ed:2f:f9: e7:30:ae:f7:ff:02:7c:51:07:12:b7:29:d0:c2:a9:b6:49:ef: 5d:14:e1:64:ab:81:54:07:a7:5b:4b:1c:a5:60:7f:fc:90:b6: 71:20:de:7f:cf:9a:98:60:2f:a4:ca:06:c0:86:4d:eb:cf:29: e8:4e:87:26:8d:ef:1a:74:24:e5:86:7b:23:c3:24:cc:d7:08: 6f:13:05:b3:a8:03:0f:f3:c2:c8:ae:ee:2e:1c:b7:df:f2:7c: 36:fa:ea:4a:c1:2b:7d:16:e2:88:f6:4b:cf:65:b6:7d:5a:7a: dc:81:4c:d0:1e:ad:06:48:01:32:56:56:b7:10:a8:1f:57:bd: 59:a7:fc:8f:59:52:bc:9d:9b:1e:ed:80:e0:a1:2f:07:6a:79: 47:9c:bf:a5:09:10:cd:98:d1:13:98:b6:1a:04:78:c9:0e:9e: 50:9b:c3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWBM5hKG+YL6O7skgauWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTcxNWFmNjY0MDRmYmEwMzcxZWU1YjMwMzc3Njg0ZWE2 ZDQ2ZWQwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhmNDhhNjAzZjA4MWEyMzNkZGRmNGFjMjZkYjYyMmFmYzJjYmQyNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOOY7Egn6fpRpr8GgGIhmHde3wJn m9H5c9q8M4eVMdf9TejgwMR9NrID/Qi4hAiq2qzi5f8lF4v1TF0nBQKcQmfinsPy WP3HeU/UKpWrLrcXXbvLXTKNEjJT7MxCILq9cFVy2vsIW/bwbDSAtzIXUvRwYJ8w N0N9b1520WHj98gUfYzykuwDcagBtEhnCCFkN9XIZN1uigNauBUAq2zrnra9LSFx DludgkzA+etyuw/HuVYHcjXQNrD+e9OpLWUmlbZa6J3DD7AtjrZPSCYIAmrgo2pL yctqFjWQNfdRr5bbKBWAYci04PJr/Mx1xvgayw6k7uMvq9boaCPnEOAMFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSKYD8IGiM93fSsJttiKvwsvSeRMB8GA1UdIwQY MBaAFLhXFa9mQE+6A3HuWzA3doTqbUbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUt M2Y1NDE3OWQ0OWU1LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUtM2Y1NDE3OWQ0OWU1 LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtsDa/Wy Ushnkdu7TjOMUf6fB09OkzoVybvo0ZDM/66UQeXXywdvgfmhTaN/KfSWipRhKGOd N3xXCh1DcAob0ImPR2iHdqc0so3q86OXyGEIcTMoC2rN7S/55zCu9/8CfFEHErcp 0MKptknvXRThZKuBVAenW0scpWB//JC2cSDef8+amGAvpMoGwIZN688p6E6HJo3v GnQk5YZ7I8MkzNcIbxMFs6gDD/PCyK7uLhy33/J8NvrqSsErfRbiiPZLz2W2fVp6 3IFM0B6tBkgBMlZWtxCoH1e9Waf8j1lSvJ2bHu2A4KEvB2p5R5y/pQkQzZjRE5i2 GgR4yQ6eUJvDHA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:28 2025 by rpki-client