This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json) Hash identifier: 1/Y4nSPKOW65u10FyVT909KWhmMDmGOnkA2l0Ao41nw= Subject key identifier: DF:11:1A:87:CB:74:41:C7:47:6D:6E:E0:D4:06:D1:EC:85:B2:75:12 Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37 Certificate serial: 019AF31BC29FB95ED1808B4F5A6BADDE3CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft Manifest number: 042F Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=) 2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: RbQAmQNWH7si6BsKIpDcIQy516+jJs2ujIvDfQukD/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c2:9f:b9:5e:d1:80:8b:4f:5a:6b:ad:de:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37 Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=df111a87cb7441c7476d6ee0d406d1ec85b27512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:4e:b1:3a:83:46:a2:a6:c7:a8:b4:d7:94: c5:14:bd:d0:78:72:c8:e5:f3:8c:4c:1b:ca:fa:17: d3:a3:8d:14:31:3f:b3:5a:17:3c:bb:3d:67:d8:3d: d9:e2:29:20:05:47:e1:f7:25:be:8a:28:a4:20:be: 38:39:2c:a7:fe:19:60:27:8e:c3:f4:fc:04:89:27: 13:10:7c:89:5d:aa:6d:1c:f6:d5:57:91:96:66:cc: c6:21:72:a4:c7:9e:84:73:72:1f:b6:14:61:48:57: 28:0e:90:ac:2b:ec:6d:97:b7:a3:89:c2:f3:5b:a7: 6a:02:de:e5:29:08:3b:d0:e1:04:a7:c2:30:ce:91: 7a:e5:cb:d4:7d:9e:37:98:a5:d5:c4:05:cd:68:43: 06:c5:2f:25:61:ee:ff:65:aa:0a:4f:68:03:d9:e1: b5:bf:0d:08:e1:99:1b:32:da:69:8f:09:35:5f:da: 93:7f:5a:ec:0b:5a:7a:04:64:8b:cb:c9:52:9d:8d: 25:97:fa:52:74:49:c9:de:88:82:3a:45:93:c1:ca: 2e:de:6a:4d:2c:e9:59:60:36:b0:4a:15:38:51:e6: e6:74:a9:76:d2:eb:4b:75:76:a0:12:fc:62:e0:82: 8a:15:2d:54:65:60:6a:76:71:d7:e1:27:b8:e5:28: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:1A:87:CB:74:41:C7:47:6D:6E:E0:D4:06:D1:EC:85:B2:75:12 X509v3 Authority Key Identifier: keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:84:da:e7:47:51:0e:99:fe:24:24:fc:92:13:fb:f8:cb:4e: 8e:0b:72:0b:5b:9f:e9:97:61:24:24:dd:7b:5b:08:a1:6c:92: 0e:ff:cc:d3:17:f6:6c:5c:90:22:b4:a2:cb:eb:d5:46:52:0a: 2f:13:53:ef:2d:33:bf:6f:6a:fb:28:39:14:4a:3c:36:79:0a: ac:01:5e:f3:e5:db:bd:85:67:a0:f7:18:36:b9:f8:01:b1:22: ac:b1:b7:58:52:f1:1c:77:e9:0e:29:84:62:19:76:f1:87:11: f6:13:ed:f3:92:dc:53:94:d2:1d:a0:80:7e:af:14:e4:00:a8: 04:b3:29:34:d8:62:cd:97:f7:ed:4e:a3:6a:ac:fb:df:15:ce: 73:16:17:56:3d:20:85:6e:b9:d0:72:b2:81:04:82:bf:5a:61: 33:22:0e:a2:15:9b:27:00:a9:20:94:6a:9c:3a:f2:de:2d:cc: 1d:ec:ab:21:c4:d0:12:a0:66:b6:38:f5:80:45:d9:92:79:c5: 49:eb:bf:fe:b4:2d:f9:c6:18:ad:42:d1:eb:1b:16:d4:fd:6e: 58:4a:9c:fa:2b:84:f0:11:14:25:eb:4c:3c:65:8b:c3:e0:2d: 34:42:ea:63:a2:08:ea:5f:f2:1c:b1:a9:08:43:10:ef:e3:3c: fc:e3:bf:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8KfuV7RgItPWmut3jzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1 NTFkMzcwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD EyhkZjExMWE4N2NiNzQ0MWM3NDc2ZDZlZTBkNDA2ZDFlYzg1YjI3NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLJOsTqDRqKmx6i015TFFL3QeHLI 5fOMTBvK+hfTo40UMT+zWhc8uz1n2D3Z4ikgBUfh9yW+iiikIL44OSyn/hlgJ47D 9PwEiScTEHyJXaptHPbVV5GWZszGIXKkx56Ec3IfthRhSFcoDpCsK+xtl7ejicLz W6dqAt7lKQg70OEEp8IwzpF65cvUfZ43mKXVxAXNaEMGxS8lYe7/ZaoKT2gD2eG1 vw0I4ZkbMtppjwk1X9qTf1rsC1p6BGSLy8lSnY0ll/pSdEnJ3oiCOkWTwcou3mpN LOlZYDawShU4UebmdKl20utLdXagEvxi4IKKFS1UZWBqdnHX4Se45SgMwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8RGofLdEHHR21u4NQG0eyFsnUSMB8GA1UdIwQY MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoTa50dR Dpn+JCT8khP7+MtOjgtyC1uf6ZdhJCTde1sIoWySDv/M0xf2bFyQIrSiy+vVRlIK LxNT7y0zv29q+yg5FEo8NnkKrAFe8+XbvYVnoPcYNrn4AbEirLG3WFLxHHfpDimE Yhl28YcR9hPt85LcU5TSHaCAfq8U5ACoBLMpNNhizZf37U6jaqz73xXOcxYXVj0g hW650HKygQSCv1phMyIOohWbJwCpIJRqnDry3i3MHeyrIcTQEqBmtjj1gEXZknnF Seu//rQt+cYYrULR6xsW1P1uWEqc+iuE8BEUJetMPGWLw+AtNELqY6II6l/yHLGp CEMQ7+M8/OO/WA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:42:53 2025 by rpki-client