This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json) Hash identifier: 0KUsyf8jXV6vyGUEqhzIF50sZg8R10rBYLwq5b6jrA4= Subject key identifier: C9:33:DA:58:ED:F1:84:A3:1B:68:CF:92:90:D7:89:F5:62:38:09:34 Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f Certificate serial: 019AF0BF377C99EF5C186FD0F9B6C1B6B218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft Manifest number: 073E Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: 4qHfo3RI3/UBArIv6IGuk5e/xZUP+aCnBMJ2OO2unN8=) 2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:37:7c:99:ef:5c:18:6f:d0:f9:b6:c1:b6:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=c933da58edf184a31b68cf9290d789f562380934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:fc:7c:8a:be:91:c2:81:b6:a2:59:4e:c4: 44:ab:20:ff:a9:31:ad:ed:2a:42:20:38:86:8b:77: 6b:44:47:05:db:ae:6e:18:f9:8f:41:ca:4c:2b:d6: 5a:88:21:0d:25:57:ea:99:23:1b:a4:35:52:32:94: 19:3e:6a:61:f9:5c:ec:84:aa:48:11:8d:8f:0c:18: 67:f8:c6:47:6a:5a:53:7a:43:28:19:da:6e:e5:94: 7b:f1:1f:8a:cd:06:bd:ae:47:86:eb:ed:39:82:70: da:9e:d9:af:e2:84:db:37:4e:9d:0d:d2:35:b3:93: ff:0d:82:ad:b5:3f:66:59:22:aa:66:63:db:c6:4f: 58:47:aa:f9:27:37:58:5a:0a:2f:df:eb:3d:db:72: bd:39:10:96:9d:1f:7f:2c:e2:c8:43:74:e4:4c:87: 10:40:55:9d:ac:7c:4a:bc:f3:7e:20:7c:1b:32:a5: f7:36:3c:86:5e:ba:7f:54:1e:ee:5e:fa:5e:61:74: 3b:de:ad:e8:05:fd:e8:90:d3:7f:ea:75:35:44:4a: 58:1b:b2:b6:38:cb:68:02:67:d3:06:06:18:0b:cc: 09:64:83:f9:cc:a8:b2:d9:1c:88:65:7e:d4:d1:a0: bf:dd:f8:61:64:5d:9b:09:00:e6:1c:61:8b:5d:a7: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:DA:58:ED:F1:84:A3:1B:68:CF:92:90:D7:89:F5:62:38:09:34 X509v3 Authority Key Identifier: keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:c4:f7:e6:ae:e2:d5:a0:bc:59:91:7d:e3:0c:91:5b:dc: 08:75:6a:ed:5c:95:91:28:71:26:6a:33:5c:09:83:bb:54:f0: 54:43:4e:68:1c:42:c5:23:42:bb:99:37:8c:c8:e1:85:f9:3a: f5:81:81:a8:0a:89:ea:3f:8b:6d:57:b3:1e:dd:f4:d7:a9:29: 7a:e0:77:75:53:46:1b:67:56:be:08:56:6c:96:ad:c2:58:d9: 09:24:65:6d:77:74:9e:ea:6b:de:65:a2:8f:5b:03:35:49:bc: d4:07:44:0c:c4:75:f0:5d:1a:7a:11:44:80:0a:9e:74:97:2a: 21:31:ed:69:e5:ac:f4:06:4a:94:3f:b9:87:c7:57:01:fc:f4: da:58:ac:79:4a:0c:9f:e5:a1:4d:f4:a6:f4:40:8d:d1:c5:5e: 50:17:7f:99:79:7b:2a:8f:5d:58:24:60:be:c0:8f:6a:f3:8f: d2:d7:d8:b7:e0:a0:8b:bd:da:5c:37:11:05:e9:d7:e4:e2:45: 43:b2:6d:9d:dc:b5:5c:c4:7c:22:92:57:c9:b7:a1:07:2c:a5: 7e:50:af:1a:28:b4:fc:79:8e:37:e7:6c:dd:59:1d:d5:8a:8c: 2c:c6:53:4f:b8:8c:5b:96:52:83:3a:ca:a0:17:c1:27:b9:7f: a0:40:de:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzd8me9cGG/Q+bbBtrIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGQxY2JhYTkwMGM5ZGFiZDJhMWY3NjgxOThhMWU1NWJj ZmI1MGYwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EyhjOTMzZGE1OGVkZjE4NGEzMWI2OGNmOTI5MGQ3ODlmNTYyMzgwOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3z8fIq+kcKBtqJZTsREqyD/qTGt 7SpCIDiGi3drREcF265uGPmPQcpMK9ZaiCENJVfqmSMbpDVSMpQZPmph+VzshKpI EY2PDBhn+MZHalpTekMoGdpu5ZR78R+KzQa9rkeG6+05gnDantmv4oTbN06dDdI1 s5P/DYKttT9mWSKqZmPbxk9YR6r5JzdYWgov3+s923K9ORCWnR9/LOLIQ3TkTIcQ QFWdrHxKvPN+IHwbMqX3NjyGXrp/VB7uXvpeYXQ73q3oBf3okNN/6nU1REpYG7K2 OMtoAmfTBgYYC8wJZIP5zKiy2RyIZX7U0aC/3fhhZF2bCQDmHGGLXadvRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkz2ljt8YSjG2jPkpDXifViOAk0MB8GA1UdIwQY MBaAFP1NHLqpAMnavSofdoGYoeVbz7UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2Et ZGI3NjkwZTQ1NzY1LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2EtZGI3NjkwZTQ1NzY1 LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL7E9+au 4tWgvFmRfeMMkVvcCHVq7VyVkShxJmozXAmDu1TwVENOaBxCxSNCu5k3jMjhhfk6 9YGBqAqJ6j+LbVezHt3016kpeuB3dVNGG2dWvghWbJatwljZCSRlbXd0nupr3mWi j1sDNUm81AdEDMR18F0aehFEgAqedJcqITHtaeWs9AZKlD+5h8dXAfz02liseUoM n+WhTfSm9ECN0cVeUBd/mXl7Ko9dWCRgvsCPavOP0tfYt+Cgi73aXDcRBenX5OJF Q7Jtndy1XMR8IpJXybehByylflCvGii0/HmON+ds3Vkd1YqMLMZTT7iMW5ZSgzrK oBfBJ7l/oEDe2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:15 2025 by rpki-client