This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json) Hash identifier: 1JizLTrLkyTSa0Zc5tYLYNznexMayZA5upZhPftMlV8= Subject key identifier: 52:4B:51:EF:A1:28:D5:68:40:BB:0B:AD:B2:02:85:95:8F:20:0F:C2 Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c Certificate serial: 019AF2768BEB1DB650A42C439593EB6903EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft Manifest number: 1076 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=) 2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: m0SVT9wKQuOg+gbRjHEWCvYv6xmAUDx4YR60Ni7/cCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8b:eb:1d:b6:50:a4:2c:43:95:93:eb:69:03:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=524b51efa128d56840bb0badb20285958f200fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:fd:a4:7a:7f:0d:d6:07:fb:74:a6:53:76: b3:91:4e:50:ba:53:5e:cd:f5:6a:70:4d:cc:24:ac: 90:db:94:19:d4:14:24:9c:3a:0c:1e:dd:c6:4c:c1: 2a:d2:1d:ff:79:06:97:c7:1b:db:1c:32:05:4e:d5: d0:2d:f7:8d:62:1e:ff:a9:19:6c:7f:4a:1a:6e:6e: 76:c4:79:16:a6:e6:e7:ac:5e:05:fe:30:9a:cc:f7: 61:d8:8a:e0:33:15:4f:13:f7:ba:a4:32:56:55:b6: 91:33:01:f3:b5:28:ac:56:4f:6f:a7:59:dc:3f:15: 55:18:bc:7b:e8:6d:7b:0e:9b:bf:bb:17:1b:6c:ee: 8a:ef:da:18:ce:04:0a:52:ba:ad:05:53:8b:d7:7d: 8c:37:f1:2a:56:a2:93:ae:54:7a:c1:a7:44:c8:95: 83:32:b3:78:75:33:5c:41:48:b4:6e:51:66:ee:b6: 4b:93:76:33:3b:ef:7e:e7:b7:10:04:5a:c5:6c:27: 6c:42:4c:12:24:fd:41:ab:43:35:78:b6:a5:fd:cf: ef:30:2a:7d:b5:5e:fe:4b:a4:6a:71:b5:e9:3a:c6: 85:2e:96:85:5c:bb:e3:e8:da:d6:94:04:ce:e0:67: df:02:23:ff:2b:20:b9:af:b4:28:65:0e:c8:30:81: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4B:51:EF:A1:28:D5:68:40:BB:0B:AD:B2:02:85:95:8F:20:0F:C2 X509v3 Authority Key Identifier: keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1a:a2:82:8d:5e:00:c6:aa:5a:1d:c0:f2:ca:59:a3:b0:a1: 33:19:3d:d1:85:54:9a:38:5e:0b:18:90:7d:c2:42:41:0d:ef: 1d:c4:6a:fd:ed:75:31:6a:d6:77:06:40:38:55:d3:4a:6c:a9: ff:11:20:60:0d:61:ab:1d:0e:7b:d7:e5:a8:f7:9b:89:b1:cb: 21:96:74:4e:33:e0:d1:ac:6b:20:9f:bb:32:bb:35:48:29:1e: ba:96:86:7d:ec:3b:60:f8:de:30:19:59:2b:43:58:e3:63:75: b9:93:a2:d1:86:73:5c:b4:35:cf:84:57:c4:c5:ce:44:9c:c8: c1:87:88:b1:5e:18:34:f2:db:53:c3:3b:77:d8:33:96:9e:b1: f2:81:a8:15:fa:54:6b:8a:80:e7:ec:9c:fe:47:e0:66:03:3c: 7a:f8:92:80:f1:52:4d:8b:6d:10:de:d6:d5:0b:4a:8f:7b:03: c1:d9:f6:bd:24:73:0a:3d:ce:14:06:ce:18:84:1a:15:5b:f5: a2:40:99:bb:f2:d1:4b:74:a6:31:fb:44:7c:f2:72:97:71:e8: 7a:1f:ba:f2:1a:6b:f2:f4:c8:76:c7:95:b1:96:02:25:86:01: 24:3d:c5:35:bc:e0:07:db:60:f9:c2:ff:f2:08:ba:7d:fb:54: 1b:3e:8f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydovrHbZQpCxDlZPraQPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk MDY4MmMwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg1MjRiNTFlZmExMjhkNTY4NDBiYjBiYWRiMjAyODU5NThmMjAwZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroD9pHp/DdYH+3SmU3azkU5QulNe zfVqcE3MJKyQ25QZ1BQknDoMHt3GTMEq0h3/eQaXxxvbHDIFTtXQLfeNYh7/qRls f0oabm52xHkWpubnrF4F/jCazPdh2IrgMxVPE/e6pDJWVbaRMwHztSisVk9vp1nc PxVVGLx76G17Dpu/uxcbbO6K79oYzgQKUrqtBVOL132MN/EqVqKTrlR6wadEyJWD MrN4dTNcQUi0blFm7rZLk3YzO+9+57cQBFrFbCdsQkwSJP1Bq0M1eLal/c/vMCp9 tV7+S6RqcbXpOsaFLpaFXLvj6NrWlATO4GffAiP/KyC5r7QoZQ7IMIGUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJLUe+hKNVoQLsLrbIChZWPIA/CMB8GA1UdIwQY MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt Y2U4ZDJkZDQzMDY2LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2 LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexqigo1e AMaqWh3A8spZo7ChMxk90YVUmjheCxiQfcJCQQ3vHcRq/e11MWrWdwZAOFXTSmyp /xEgYA1hqx0Oe9flqPebibHLIZZ0TjPg0axrIJ+7Mrs1SCkeupaGfew7YPjeMBlZ K0NY42N1uZOi0YZzXLQ1z4RXxMXORJzIwYeIsV4YNPLbU8M7d9gzlp6x8oGoFfpU a4qA5+yc/kfgZgM8eviSgPFSTYttEN7W1QtKj3sDwdn2vSRzCj3OFAbOGIQaFVv1 okCZu/LRS3SmMftEfPJyl3Hoeh+68hpr8vTIdseVsZYCJYYBJD3FNbzgB9tg+cL/ 8gi6fftUGz6PsA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:20 2025 by rpki-client