This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json) Hash identifier: MhvD44Zp2U1IvgNRK3h8AbuPE8F9hT0GCIPocW3VjQU= Subject key identifier: 15:85:C5:C8:10:A6:00:88:7B:56:47:43:32:BE:02:CC:8A:08:7C:AE Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Certificate serial: 019AF4653AB63086233EA713335E179EB1DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft Manifest number: 14B2 Signing time: Sat 06 Dec 2025 16:01:06 +0000 Manifest this update: Sat 06 Dec 2025 16:01:06 +0000 Manifest next update: Sun 07 Dec 2025 16:01:06 +0000 Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: +HIebn6JB/O68Z+BVrWh7OuTypQHMtu0JClxWan9F7w=) 2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3a:b6:30:86:23:3e:a7:13:33:5e:17:9e:b1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Validity Not Before: Dec 6 16:01:06 2025 GMT Not After : Dec 7 16:01:06 2025 GMT Subject: CN=1585c5c810a600887b56474332be02cc8a087cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:69:94:5e:a3:c4:a0:6e:97:8c:40:bc:c0:90: 9a:1f:db:2e:1f:ad:c4:53:2c:c2:a1:7a:1e:c7:48: c2:49:ce:35:af:66:ad:29:94:36:e2:be:47:05:87: 10:1a:cd:20:31:b9:53:30:51:d3:31:ac:c5:7c:2a: e3:19:1e:19:9e:5d:09:f9:a2:92:49:60:38:66:64: 64:01:8c:28:31:9c:d4:01:cd:08:fd:3c:38:9c:32: a4:73:47:bf:19:0f:33:15:0f:9d:b3:98:cb:6c:1c: b8:76:79:a2:50:d4:1f:ca:fa:f3:02:81:3e:d0:13: dd:df:ea:5d:27:1d:66:42:13:af:46:ac:03:76:66: d4:b4:5f:64:19:c4:ad:e8:d0:8a:43:7c:03:72:5d: fb:af:16:44:34:ee:5e:a8:ad:2a:e7:5b:67:19:91: 81:52:85:5a:b6:1f:d0:30:e4:af:40:aa:3b:00:e0: 76:27:89:3f:5c:76:31:11:22:b5:43:b9:4f:26:4c: 88:fa:bd:db:b1:c8:0e:de:b4:f4:51:1f:6c:d8:fa: d8:42:7f:3d:68:8f:e2:ec:8e:85:22:5c:4e:c8:9a: f3:3f:f6:89:bc:ed:e9:d7:ba:7d:88:b9:55:12:c1: f7:43:37:d2:3a:4e:4e:cd:6b:c9:02:19:63:0f:4c: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:85:C5:C8:10:A6:00:88:7B:56:47:43:32:BE:02:CC:8A:08:7C:AE X509v3 Authority Key Identifier: keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:b6:e1:9f:40:ec:59:b8:e6:06:a9:5e:09:10:d7:cd:85: c5:d7:27:91:cf:81:1f:40:0b:4d:97:3c:9c:d1:63:d7:77:c6: 4d:d8:e3:a5:5f:7c:e0:16:40:f4:4c:a2:bd:28:e3:e7:2b:62: d1:95:46:98:81:4b:d4:5d:44:dc:7d:46:3d:87:64:1b:0e:c8: c4:48:2a:9d:a4:dc:3e:54:11:03:e8:03:10:93:cc:0d:1a:a0: 08:e7:5b:4b:e6:24:b3:42:40:68:1a:17:d4:3a:ea:c1:e2:2e: fc:e0:35:a3:69:28:ae:9b:e2:d8:81:ab:bf:d3:5d:23:e3:7b: 66:33:64:1c:81:bf:19:47:29:fe:62:9d:9b:62:eb:93:e4:82: 28:85:83:3d:15:b9:7f:7c:9a:0d:fe:fc:a2:73:03:6e:8c:cc: 2b:de:be:7d:c6:b0:23:7a:33:d8:85:bf:3c:d8:bf:b6:33:b5: 54:4c:31:53:73:66:5d:56:f8:8b:96:79:30:32:c4:e0:ce:a7: 0b:24:a9:7f:32:5e:f1:70:b1:17:66:a2:78:b4:1b:9f:77:28: f4:e7:2a:75:87:d9:88:94:6d:57:ec:4a:49:e5:1f:96:da:0b: ed:cf:62:cf:56:4b:96:14:69:f3:9a:e4:ff:a1:ef:ab:ea:12: 1a:84:26:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTq2MIYjPqcTM14XnrHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz MjY1OGIwHhcNMjUxMjA2MTYwMTA2WhcNMjUxMjA3MTYwMTA2WjAzMTEwLwYDVQQD EygxNTg1YzVjODEwYTYwMDg4N2I1NjQ3NDMzMmJlMDJjYzhhMDg3Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72mUXqPEoG6XjEC8wJCaH9suH63E UyzCoXoex0jCSc41r2atKZQ24r5HBYcQGs0gMblTMFHTMazFfCrjGR4Znl0J+aKS SWA4ZmRkAYwoMZzUAc0I/Tw4nDKkc0e/GQ8zFQ+ds5jLbBy4dnmiUNQfyvrzAoE+ 0BPd3+pdJx1mQhOvRqwDdmbUtF9kGcSt6NCKQ3wDcl37rxZENO5eqK0q51tnGZGB UoVath/QMOSvQKo7AOB2J4k/XHYxESK1Q7lPJkyI+r3bscgO3rT0UR9s2PrYQn89 aI/i7I6FIlxOyJrzP/aJvO3p17p9iLlVEsH3QzfSOk5OzWvJAhljD0zUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWFxcgQpgCIe1ZHQzK+AsyKCHyuMB8GA1UdIwQY MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuS24Z9A 7Fm45gapXgkQ182Fxdcnkc+BH0ALTZc8nNFj13fGTdjjpV984BZA9EyivSjj5yti 0ZVGmIFL1F1E3H1GPYdkGw7IxEgqnaTcPlQRA+gDEJPMDRqgCOdbS+Yks0JAaBoX 1DrqweIu/OA1o2korpvi2IGrv9NdI+N7ZjNkHIG/GUcp/mKdm2Lrk+SCKIWDPRW5 f3yaDf78onMDbozMK96+fcawI3oz2IW/PNi/tjO1VEwxU3NmXVb4i5Z5MDLE4M6n CySpfzJe8XCxF2aieLQbn3co9OcqdYfZiJRtV+xKSeUfltoL7c9iz1ZLlhRp85rk /6Hvq+oSGoQmhw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:50 2025 by rpki-client