This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json) Hash identifier: 90iOh0TC7IVJU0vrmu4heUimEwrJ6zzDpl5fGxFY5/k= Subject key identifier: 5F:E6:E9:80:F4:56:B0:AE:44:C6:F0:79:03:5A:CF:12:A7:47:19:09 Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8 Certificate serial: 019AF208FD446E3F70FA93CF02AC15D53F3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=) 2: ft2mxf9aaNoul-AnIThMbBr-lps.roa (hash: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=) 3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: EBJmF7fZBlVvfcrYCBGcL0/TWcoR2e9rb9Lsi9Xfn68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fd:44:6e:3f:70:fa:93:cf:02:ac:15:d5:3f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=5fe6e980f456b0ae44c6f079035acf12a7471909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3f:b5:3e:be:00:75:6f:ff:ca:bf:ad:56:b2: f2:2b:cd:df:8c:cd:19:d6:2c:ab:87:cb:43:bf:ea: c4:bf:18:65:fb:fe:d5:f9:b6:21:6e:bc:aa:3b:c4: d5:89:bf:7d:fd:bb:c5:9e:96:f5:de:45:f9:01:44: d1:fb:2f:73:6b:53:a5:a7:a8:6c:1c:a3:08:4b:8d: 1a:50:40:2f:c6:5a:92:78:67:11:98:b9:1f:28:93: ad:1f:d2:f5:61:01:3c:95:e9:08:e8:b5:06:47:13: b1:17:f2:d1:56:95:aa:62:73:d7:1e:51:f9:7b:4d: f6:0e:22:3c:87:72:f1:0e:ab:c8:d1:ef:24:4b:0b: e5:a6:9e:72:e8:ff:64:7d:05:f2:4a:4d:48:64:0f: 33:2e:07:79:d9:6a:8e:bc:d6:7c:96:57:d6:b7:d5: 04:52:c2:50:00:f0:05:23:d6:28:3a:f3:0f:58:8d: 44:1e:e7:ca:2c:78:6a:5a:c7:30:dd:24:b0:ad:69: d4:9e:48:21:b3:a3:07:99:92:19:85:b0:12:f9:a7: 50:35:08:45:09:9d:4c:bb:8d:ea:c2:dc:cb:23:af: cf:1a:ac:b1:41:6a:ed:c8:b5:e3:e9:30:7f:65:aa: de:dd:7f:89:fa:12:53:e9:5a:e1:03:6a:b2:ef:de: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E6:E9:80:F4:56:B0:AE:44:C6:F0:79:03:5A:CF:12:A7:47:19:09 X509v3 Authority Key Identifier: keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:94:70:90:79:ed:eb:1a:67:0d:ac:06:09:78:99:a4:43:df: 48:a6:83:fe:7d:51:55:7e:ca:7a:dd:36:f3:19:ee:87:58:6d: 7d:c4:4e:51:f6:5a:1b:23:ac:2c:9f:0e:33:01:cb:7d:ba:91: 75:36:b4:f5:23:0c:ce:55:f3:96:52:21:ec:ff:c8:02:d4:d3: 97:f2:20:03:7e:f2:78:96:a9:92:b1:44:59:3f:cf:56:96:d1: 59:f7:c0:9f:1f:31:45:cf:1a:16:cc:36:0c:d4:56:94:d5:0c: 05:e7:d1:36:e2:da:74:7e:b9:0e:e8:17:c0:e2:a3:4d:3d:4d: d9:58:c5:24:f3:06:2d:25:1c:37:d6:fc:63:5d:44:14:b6:3c: 65:a0:f8:09:02:86:cb:07:79:dd:35:e6:3c:32:f9:e8:82:77: 24:7a:ec:99:23:81:05:6f:52:bd:b9:f8:f9:49:a3:ac:da:5b: 60:37:ae:7e:0a:e7:db:b6:48:12:26:b1:12:9e:71:7a:72:c0: 3a:34:fc:35:ec:79:44:7a:aa:46:85:e4:6c:0e:cd:af:9b:29: 74:8a:9d:82:3d:21:1c:b4:27:38:d2:b7:7e:23:01:cc:69:6c: ad:a9:de:76:09:e7:03:04:af:d2:8d:61:fb:a7:8c:f1:63:d8: 4c:0f:23:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP1Ebj9w+pPPAqwV1T86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2I3NjY5Njg3MTYyOTZlNWJiYTBiY2U4Mzg1NmFlNzE2 NWI4YjgwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD Eyg1ZmU2ZTk4MGY0NTZiMGFlNDRjNmYwNzkwMzVhY2YxMmE3NDcxOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD+1Pr4AdW//yr+tVrLyK83fjM0Z 1iyrh8tDv+rEvxhl+/7V+bYhbryqO8TVib99/bvFnpb13kX5AUTR+y9za1Olp6hs HKMIS40aUEAvxlqSeGcRmLkfKJOtH9L1YQE8lekI6LUGRxOxF/LRVpWqYnPXHlH5 e032DiI8h3LxDqvI0e8kSwvlpp5y6P9kfQXySk1IZA8zLgd52WqOvNZ8llfWt9UE UsJQAPAFI9YoOvMPWI1EHufKLHhqWscw3SSwrWnUnkghs6MHmZIZhbAS+adQNQhF CZ1Mu43qwtzLI6/PGqyxQWrtyLXj6TB/Zare3X+J+hJT6VrhA2qy794HOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/m6YD0VrCuRMbweQNazxKnRxkJMB8GA1UdIwQY MBaAFLh7dmlocWKW5bugvOg4Vq5xZbi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMt M2Q2MTJmMzI0OTk2LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMtM2Q2MTJmMzI0OTk2 LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZRwkHnt 6xpnDawGCXiZpEPfSKaD/n1RVX7Ket028xnuh1htfcROUfZaGyOsLJ8OMwHLfbqR dTa09SMMzlXzllIh7P/IAtTTl/IgA37yeJapkrFEWT/PVpbRWffAnx8xRc8aFsw2 DNRWlNUMBefRNuLadH65DugXwOKjTT1N2VjFJPMGLSUcN9b8Y11EFLY8ZaD4CQKG ywd53TXmPDL56IJ3JHrsmSOBBW9Svbn4+UmjrNpbYDeufgrn27ZIEiaxEp5xenLA OjT8Nex5RHqqRoXkbA7Nr5spdIqdgj0hHLQnONK3fiMBzGlsranedgnnAwSv0o1h +6eM8WPYTA8jKg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:11 2025 by rpki-client