This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json) Hash identifier: SJnyeJnDL1uZcVdmosdkB5vEGx5jaVtUhAsll9d2Zm4= Subject key identifier: E4:FD:62:7E:17:F4:C6:72:88:ED:48:4A:FD:23:7C:D5:03:BF:2A:5A Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Certificate serial: 019B35A0BAECD4AC42839F363E2132314000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft Manifest number: 0A35 Signing time: Fri 19 Dec 2025 08:01:24 +0000 Manifest this update: Fri 19 Dec 2025 08:01:24 +0000 Manifest next update: Sat 20 Dec 2025 08:01:24 +0000 Files and hashes: 1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=) 2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: WZ/NR3AwcoBOQMiK0PAL7BodfY8HSAHxdw/QPRa+/70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:ba:ec:d4:ac:42:83:9f:36:3e:21:32:31:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Validity Not Before: Dec 19 08:01:24 2025 GMT Not After : Dec 20 08:01:24 2025 GMT Subject: CN=e4fd627e17f4c67288ed484afd237cd503bf2a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:22:c4:d7:52:81:54:67:30:66:44:6b:bc: 23:41:78:4f:9b:6a:a4:42:71:7e:b5:02:c2:97:7e: 6e:01:f4:6c:fd:16:69:9d:9f:3c:4c:bf:4c:58:1e: 78:c1:dd:08:a5:2b:07:56:21:b9:30:dc:e8:73:9e: 8e:cf:ff:a9:7b:e5:21:50:35:57:de:39:21:9f:6e: e2:24:23:06:01:56:e6:a3:0a:d0:44:23:87:fd:c7: cf:41:2b:5f:54:86:05:78:4e:e1:5c:9d:b7:cc:03: 34:97:18:80:c8:b9:62:98:01:e2:af:55:78:c2:9e: a8:8e:4b:e3:dd:3c:89:de:20:19:56:ae:1e:a8:79: 66:3c:df:34:2f:7e:83:ee:51:27:ba:59:86:6c:e8: 3b:9f:48:52:70:42:52:37:46:3b:ec:c7:47:ed:0c: 53:11:2e:c5:4c:f1:e1:36:1d:7c:a8:c8:84:f5:ab: da:8e:64:ac:9d:49:20:d3:71:96:83:9e:dc:2a:1c: d4:65:f2:82:74:50:bf:4b:f3:84:53:0d:cb:bd:b1: 7b:97:78:af:02:db:18:2b:96:6c:43:e2:0f:a3:83: 3e:19:14:87:af:77:66:ab:79:12:82:8c:f8:90:88: a0:0e:cf:d4:14:cb:81:55:18:58:f5:d2:0d:38:73: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FD:62:7E:17:F4:C6:72:88:ED:48:4A:FD:23:7C:D5:03:BF:2A:5A X509v3 Authority Key Identifier: keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:bb:0a:b1:de:1e:ac:59:fe:72:a1:bf:b2:45:eb:5b:fb: a3:ea:31:6c:b1:78:12:4c:e5:f6:f1:cf:25:aa:c1:07:a2:8e: ca:ea:6c:11:c6:e3:10:d0:a6:86:ed:23:6d:e2:5f:3e:97:98: a3:c9:f5:3b:cc:83:5d:e1:d0:d7:e5:4f:a0:81:06:53:3c:86: 36:58:e7:e1:8b:8e:66:37:7e:ad:95:de:49:41:89:59:9b:e0: 5c:b3:ba:7a:c6:3c:9c:eb:ae:9f:fc:29:47:c5:0c:9d:41:31: c6:a7:fd:c9:f8:a3:57:d2:2d:a4:61:33:ee:87:de:95:53:35: e2:6f:bf:50:c6:46:02:d0:1c:c7:0f:e9:25:dd:aa:e7:dd:1e: 29:b3:02:2c:b5:e9:08:81:08:2e:e8:25:61:82:5f:61:e3:39: a1:b6:eb:1f:5a:24:3b:eb:f7:27:e7:b9:8b:17:be:0c:73:da: 24:f6:92:76:92:01:42:33:ab:65:81:e6:d5:c3:a2:b6:70:07: f3:f6:b2:c7:01:79:2c:da:a8:4d:1b:ad:9c:43:15:3d:f4:12: 57:6a:64:6b:24:2a:a6:a4:b9:e7:23:48:42:7e:15:ea:5e:a7: cd:86:21:85:36:43:e9:bc:59:3e:59:0a:12:70:ae:dc:e9:2b: e0:fb:c5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLrs1KxCg582PiEyMUAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi NGU3NDMwHhcNMjUxMjE5MDgwMTI0WhcNMjUxMjIwMDgwMTI0WjAzMTEwLwYDVQQD EyhlNGZkNjI3ZTE3ZjRjNjcyODhlZDQ4NGFmZDIzN2NkNTAzYmYyYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRgixNdSgVRnMGZEa7wjQXhPm2qk QnF+tQLCl35uAfRs/RZpnZ88TL9MWB54wd0IpSsHViG5MNzoc56Oz/+pe+UhUDVX 3jkhn27iJCMGAVbmowrQRCOH/cfPQStfVIYFeE7hXJ23zAM0lxiAyLlimAHir1V4 wp6ojkvj3TyJ3iAZVq4eqHlmPN80L36D7lEnulmGbOg7n0hScEJSN0Y77MdH7QxT ES7FTPHhNh18qMiE9avajmSsnUkg03GWg57cKhzUZfKCdFC/S/OEUw3LvbF7l3iv AtsYK5ZsQ+IPo4M+GRSHr3dmq3kSgoz4kIigDs/UFMuBVRhY9dINOHPqGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT9Yn4X9MZyiO1ISv0jfNUDvypaMB8GA1UdIwQY MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpa7CrHe HqxZ/nKhv7JF61v7o+oxbLF4Ekzl9vHPJarBB6KOyupsEcbjENCmhu0jbeJfPpeY o8n1O8yDXeHQ1+VPoIEGUzyGNljn4YuOZjd+rZXeSUGJWZvgXLO6esY8nOuun/wp R8UMnUExxqf9yfijV9ItpGEz7ofelVM14m+/UMZGAtAcxw/pJd2q590eKbMCLLXp CIEILuglYYJfYeM5obbrH1okO+v3J+e5ixe+DHPaJPaSdpIBQjOrZYHm1cOitnAH 8/ayxwF5LNqoTRutnEMVPfQSV2pkayQqpqS55yNIQn4V6l6nzYYhhTZD6bxZPlkK EnCu3Okr4PvFeA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:51:37 2025 by rpki-client