This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json) Hash identifier: A140W//8n62PaeKwilyFx+bP5rJFrYKRBXlMYKfBI6Y= Subject key identifier: 0D:3A:36:E4:23:B3:26:4A:68:97:87:EB:62:CA:08:48:0F:BA:27:00 Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Certificate serial: 019AF2770126CA6871E3C7EC30D287B42AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft Manifest number: 1102 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=) 2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: 6HadVE3SZHbMlXrqzGEXebSokNIbcu71heywNdGdwec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:01:26:ca:68:71:e3:c7:ec:30:d2:87:b4:2a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=0d3a36e423b3264a689787eb62ca08480fba2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:10:9e:4d:88:6e:a5:98:e0:8d:48:ad:49: 97:dd:66:69:c4:41:da:a7:30:b3:ae:71:20:44:2b: e2:2c:30:36:ad:0a:cc:9e:c2:eb:44:da:d9:18:f9: e5:f9:4a:6d:c1:0c:f6:21:63:a9:14:52:c3:4c:51: a8:13:46:25:c8:fa:71:71:ab:3e:e1:36:50:76:32: 37:c7:41:09:39:3d:f4:bd:c6:48:f9:f3:5a:5e:29: 52:ac:2a:11:ba:c6:0b:e4:c4:59:bd:3f:76:87:43: 83:c0:91:d5:7c:7e:9e:06:11:75:d4:84:09:0d:ae: d9:c0:cf:2e:e5:c1:19:6c:7c:a1:d0:9b:aa:81:c8: 6d:65:c8:ca:ef:b0:89:ea:ec:7b:f8:f7:17:e8:85: 5c:ea:8a:e0:d2:08:e6:43:ff:a8:8a:1e:27:14:14: ef:c5:4d:01:10:63:40:b3:20:df:63:44:dc:b8:87: 5d:1f:ce:54:0a:b5:e5:c7:8b:f8:a8:5a:cc:93:1b: 4e:e1:99:19:48:89:1a:47:66:a1:8a:0e:3e:78:2d: c8:43:73:77:f1:b2:bd:6e:b7:62:b9:2d:59:84:08: 2f:ad:b9:62:2d:e3:55:7b:86:2b:a3:3d:78:f5:7a: 11:25:55:f9:ff:2c:ff:66:8f:09:31:64:c0:84:4d: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3A:36:E4:23:B3:26:4A:68:97:87:EB:62:CA:08:48:0F:BA:27:00 X509v3 Authority Key Identifier: keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:90:f6:9f:e5:e8:2b:c4:21:7a:23:30:e2:1c:31:80:09:61: 76:8e:cf:2b:4a:46:7d:78:c5:67:48:01:43:8b:1c:cf:4c:68: 40:fa:cf:2f:f1:06:c1:9b:d1:38:e5:8b:ca:a7:f3:26:17:12: 93:cd:dd:aa:e8:f1:2e:a3:ba:17:8c:35:4c:90:ef:23:70:6a: 91:b1:6e:b2:92:a8:d5:e2:c3:57:21:f3:ef:0a:fd:ba:fd:a3: ab:42:d6:bc:0d:54:ce:11:8c:34:f3:fb:e1:5f:34:a5:57:63: f6:ff:d2:04:d7:b6:6f:4d:0f:b4:0e:7c:36:8c:48:bc:8f:fa: 5e:e5:80:1f:8d:3d:7c:17:95:d3:87:cb:c7:1d:bf:4f:c4:fe: 8b:a9:1d:cf:f0:3c:99:62:b8:8f:18:6f:68:fb:37:5a:cf:00: 96:bd:d0:f7:20:33:18:7b:6c:c0:d8:ca:0d:f0:d6:d4:21:a3: e8:09:e3:14:a2:e2:77:b6:d8:d1:5a:e6:b8:3b:17:ad:9b:f0: e7:1a:d7:a0:8b:5a:08:bf:4c:da:53:a7:d0:fa:11:f8:55:ba: ba:23:2c:f6:53:b5:35:db:de:b6:8e:c0:31:73:55:43:2c:35: e2:54:bd:4c:cb:49:ef:92:cc:eb:d6:d6:a9:77:9f:dc:bb:2a: 8c:8b:fe:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwEmymhx48fsMNKHtCrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh OWFhYjQwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EygwZDNhMzZlNDIzYjMyNjRhNjg5Nzg3ZWI2MmNhMDg0ODBmYmEyNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vsQnk2IbqWY4I1IrUmX3WZpxEHa pzCzrnEgRCviLDA2rQrMnsLrRNrZGPnl+UptwQz2IWOpFFLDTFGoE0YlyPpxcas+ 4TZQdjI3x0EJOT30vcZI+fNaXilSrCoRusYL5MRZvT92h0ODwJHVfH6eBhF11IQJ Da7ZwM8u5cEZbHyh0JuqgchtZcjK77CJ6ux7+PcX6IVc6org0gjmQ/+oih4nFBTv xU0BEGNAsyDfY0TcuIddH85UCrXlx4v4qFrMkxtO4ZkZSIkaR2ahig4+eC3IQ3N3 8bK9brdiuS1ZhAgvrbliLeNVe4Yroz149XoRJVX5/yz/Zo8JMWTAhE2WYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA06NuQjsyZKaJeH62LKCEgPuicAMB8GA1UdIwQY MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZD2n+Xo K8QheiMw4hwxgAlhdo7PK0pGfXjFZ0gBQ4scz0xoQPrPL/EGwZvROOWLyqfzJhcS k83dqujxLqO6F4w1TJDvI3BqkbFuspKo1eLDVyHz7wr9uv2jq0LWvA1UzhGMNPP7 4V80pVdj9v/SBNe2b00PtA58NoxIvI/6XuWAH409fBeV04fLxx2/T8T+i6kdz/A8 mWK4jxhvaPs3Ws8Alr3Q9yAzGHtswNjKDfDW1CGj6AnjFKLid7bY0VrmuDsXrZvw 5xrXoItaCL9M2lOn0PoR+FW6uiMs9lO1Ndveto7AMXNVQyw14lS9TMtJ75LM69bW qXef3LsqjIv+bA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:45 2025 by rpki-client