This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json) Hash identifier: rT5Orl5MklBy3WUAFVVECEhF6cY2LFALZPfn/RczcGQ= Subject key identifier: B9:18:E9:11:CC:7E:AA:F7:4D:3A:98:A0:B2:E9:B0:F0:67:74:38:38 Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Certificate serial: 019AF209414A4577281935455885075D90CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: 1y5ZSm3kaG5tlREsZCnUz/LsIcDNeH/bBdAJ5s9f8yI=) 2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:4a:45:77:28:19:35:45:58:85:07:5d:90:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=b918e911cc7eaaf74d3a98a0b2e9b0f067743838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:ac:b7:8f:fd:d0:07:18:d3:7b:d4:29:f1: 99:70:0b:d7:45:d5:2a:49:ae:d9:f2:a1:d1:ff:31: d0:1d:82:68:4e:d1:17:8a:bd:29:82:66:1f:f2:a1: 2d:5f:b9:51:de:9b:d9:7d:26:7f:a9:95:ad:c8:d2: b4:10:80:bb:ec:f4:8a:d9:b7:1c:6b:22:d7:eb:00: 4a:7e:f9:70:aa:f9:61:3b:47:d7:f5:9d:88:6e:f9: 2b:96:2c:94:b8:3e:3f:a7:ac:42:41:fb:4f:f8:d2: d5:2c:68:9c:91:84:01:95:01:88:74:5f:82:00:df: 7e:cb:38:3f:b7:5f:3a:dd:bf:a1:1b:f6:1f:0e:e4: 2e:4f:4c:c1:36:04:cd:b8:b6:c7:95:1c:17:fc:b4: 96:d6:ec:51:87:a4:2e:10:8d:a7:f3:02:b5:8f:f2: 95:6f:e8:a6:fd:7e:a4:8c:47:10:f6:58:88:97:02: 98:62:a0:27:84:2e:5b:03:03:53:54:da:2c:d5:6c: 3e:b5:53:01:1d:bf:24:59:1e:b4:fe:c3:ca:92:81: e5:8e:ef:18:35:e9:6d:01:55:17:92:32:c3:67:a6: 71:b8:ce:52:39:b5:6f:71:c9:08:56:91:cf:b1:27: 94:fa:ed:bf:53:a6:42:c3:68:df:f9:3b:17:39:21: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:E9:11:CC:7E:AA:F7:4D:3A:98:A0:B2:E9:B0:F0:67:74:38:38 X509v3 Authority Key Identifier: keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:57:bb:b0:f5:b2:c3:9a:9d:aa:9e:4f:84:d7:42:db:a9:17: 15:68:0a:37:19:c1:64:84:f4:41:b0:07:be:47:eb:14:f1:90: 77:3c:02:38:f0:85:ce:7f:bf:da:6b:0e:92:ad:50:e8:30:cb: 49:94:be:3a:8d:7e:eb:85:a0:49:48:86:98:54:41:d1:45:58: 86:75:09:74:b8:ad:50:d5:5d:67:c7:08:e5:52:80:c9:61:17: 78:90:29:d5:cf:ad:0a:d5:ec:86:d6:fd:90:cd:9d:58:cc:d0: 33:e6:50:d7:c9:ac:49:37:d9:0a:d2:cb:fc:66:45:b3:fa:62: fa:9e:e9:a2:33:73:51:ef:d6:ea:27:a3:d7:24:8f:f2:67:0b: 7c:07:dd:2c:49:67:37:65:07:48:87:1c:15:24:ec:78:10:1a: 9a:8e:62:da:36:a3:09:9b:37:3e:14:d5:4c:d1:dc:d2:e0:62: 41:47:6e:71:58:a3:4b:91:a1:be:a2:38:ad:92:d7:09:48:f6: fa:00:d4:3a:66:4f:6d:c6:c7:1d:af:da:fb:f4:8c:c7:d4:d4: f5:54:54:41:bd:4b:c4:fa:2d:22:bc:43:28:37:be:ab:68:61: 5c:72:7e:4e:c5:1f:74:bc:c9:8f:e0:ef:10:e4:bd:09:37:7d: a8:2e:82:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUFKRXcoGTVFWIUHXZDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4 ZTQwZTMwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhiOTE4ZTkxMWNjN2VhYWY3NGQzYTk4YTBiMmU5YjBmMDY3NzQzODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6st4/90AcY03vUKfGZcAvXRdUq Sa7Z8qHR/zHQHYJoTtEXir0pgmYf8qEtX7lR3pvZfSZ/qZWtyNK0EIC77PSK2bcc ayLX6wBKfvlwqvlhO0fX9Z2IbvkrliyUuD4/p6xCQftP+NLVLGickYQBlQGIdF+C AN9+yzg/t1863b+hG/YfDuQuT0zBNgTNuLbHlRwX/LSW1uxRh6QuEI2n8wK1j/KV b+im/X6kjEcQ9liIlwKYYqAnhC5bAwNTVNos1Ww+tVMBHb8kWR60/sPKkoHlju8Y NeltAVUXkjLDZ6ZxuM5SObVvcckIVpHPsSeU+u2/U6ZCw2jf+TsXOSGuRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkY6RHMfqr3TTqYoLLpsPBndDg4MB8GA1UdIwQY MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt NWNhOGFjMTgwOTZkLzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPle7sPWy w5qdqp5PhNdC26kXFWgKNxnBZIT0QbAHvkfrFPGQdzwCOPCFzn+/2msOkq1Q6DDL SZS+Oo1+64WgSUiGmFRB0UVYhnUJdLitUNVdZ8cI5VKAyWEXeJAp1c+tCtXshtb9 kM2dWMzQM+ZQ18msSTfZCtLL/GZFs/pi+p7pojNzUe/W6iej1ySP8mcLfAfdLEln N2UHSIccFSTseBAamo5i2jajCZs3PhTVTNHc0uBiQUducVijS5GhvqI4rZLXCUj2 +gDUOmZPbcbHHa/a+/SMx9TU9VRUQb1LxPotIrxDKDe+q2hhXHJ+TsUfdLzJj+Dv EOS9CTd9qC6CWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:12 2025 by rpki-client