This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json) Hash identifier: PCZ09GIW3JKwjig6hiLkc3RQ23i+yhDBwWkjtiyWUZg= Subject key identifier: 30:97:3B:81:8F:91:A3:92:87:61:1F:88:62:75:90:E8:0B:30:C6:04 Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Certificate serial: 019AF49C4D34463C91F5DBDC95540270A8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft Manifest number: 048D Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=) 2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=) 3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=) 4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=) 5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: qtFLcpW9+FXcxkR3WLIN6xrp3Uj+6aQFmII09USYkQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4d:34:46:3c:91:f5:db:dc:95:54:02:70:a8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=30973b818f91a39287611f88627590e80b30c604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fc:66:25:0a:46:1b:9a:c9:e1:93:16:85:58: 4c:b5:4f:27:b1:99:1a:db:04:2c:8c:cd:d6:79:d9: 58:19:ca:87:da:1f:77:ed:73:dd:cf:22:c1:1d:9d: 9c:61:f4:d0:f8:4e:6b:9f:24:d0:ec:5d:e5:91:23: 11:71:3c:b4:64:d5:31:a7:15:04:f0:b6:9c:df:a8: f5:92:d1:54:1d:8f:a6:89:14:0c:fe:b0:9d:81:e5: 6e:d8:8f:a2:a0:a2:9a:b1:33:b3:67:39:2f:da:d8: 75:b0:9a:44:80:06:87:03:8c:df:b9:ac:90:d4:32: 2b:66:ac:13:c7:be:0b:75:ab:e5:e6:b1:8e:01:e2: 65:12:d5:3a:9a:a7:d9:7e:df:fb:f9:f2:6d:7f:54: 90:b8:34:c3:9b:f8:f1:20:69:04:b7:41:e2:53:90: ad:20:f6:8e:52:fb:ea:37:2a:d6:b1:b3:6e:be:c5: f9:e0:fc:02:8f:05:83:43:73:37:f4:69:0b:d8:9b: 04:73:49:ae:27:52:70:0e:1b:42:f2:3d:1a:db:bf: 3f:36:98:4f:08:40:b0:09:f1:28:5f:21:2a:a5:25: 81:58:55:ca:85:a9:a8:42:1c:14:9e:7d:ad:72:b9: db:65:55:aa:b9:f1:74:32:21:c7:ad:99:e6:9a:91: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:97:3B:81:8F:91:A3:92:87:61:1F:88:62:75:90:E8:0B:30:C6:04 X509v3 Authority Key Identifier: keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f7:28:fe:6b:5f:56:cc:e7:f3:b4:a1:c6:e8:e3:6c:ca:58: dc:2a:47:40:02:d4:67:61:42:fe:61:0a:e3:6f:ae:b5:32:54: d5:d6:51:fd:09:b5:b0:25:19:47:67:ce:9b:d2:94:e8:39:b5: 28:55:da:4e:c4:8a:94:17:9b:5b:6c:af:83:00:d8:74:31:60: ae:e1:38:eb:3a:fe:5e:70:e5:9e:5d:60:fc:04:e6:2c:a9:50: d2:11:ff:3a:1a:88:54:2f:02:b5:4c:93:0c:35:f2:ce:e1:f5: 48:8e:3e:c2:93:99:22:9c:aa:f4:08:4c:b9:7c:3e:ed:9a:33: ae:30:c1:82:a3:d8:b6:d5:14:db:c3:b0:4e:69:ac:d8:d5:65: 41:ce:5e:3b:81:6d:38:79:8f:9e:61:41:56:1c:f7:ab:75:2a: 66:86:c5:69:86:c5:0c:e5:45:54:81:55:b9:e3:48:a4:da:0c: 2d:b0:62:fa:4a:b0:7d:51:0a:11:a7:81:fe:30:31:c7:dd:70: 0d:e3:df:e7:32:1d:0f:aa:87:c2:9d:ea:78:dd:0b:92:f1:6d: 03:4a:b9:23:fa:7d:f0:f9:bc:a1:ba:c1:16:36:9e:5c:72:c4: 20:91:cc:65:a8:60:d7:2e:d0:81:11:af:23:12:49:03:d2:95: d4:96:8e:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE00RjyR9dvclVQCcKj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz ODg1ZTcwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD EygzMDk3M2I4MThmOTFhMzkyODc2MTFmODg2Mjc1OTBlODBiMzBjNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/xmJQpGG5rJ4ZMWhVhMtU8nsZka 2wQsjM3WedlYGcqH2h937XPdzyLBHZ2cYfTQ+E5rnyTQ7F3lkSMRcTy0ZNUxpxUE 8Lac36j1ktFUHY+miRQM/rCdgeVu2I+ioKKasTOzZzkv2th1sJpEgAaHA4zfuayQ 1DIrZqwTx74Ldavl5rGOAeJlEtU6mqfZft/7+fJtf1SQuDTDm/jxIGkEt0HiU5Ct IPaOUvvqNyrWsbNuvsX54PwCjwWDQ3M39GkL2JsEc0muJ1JwDhtC8j0a278/NphP CECwCfEoXyEqpSWBWFXKhamoQhwUnn2tcrnbZVWqufF0MiHHrZnmmpFJyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCXO4GPkaOSh2EfiGJ1kOgLMMYEMB8GA1UdIwQY MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3 LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvco/mtf Vszn87ShxujjbMpY3CpHQALUZ2FC/mEK42+utTJU1dZR/Qm1sCUZR2fOm9KU6Dm1 KFXaTsSKlBebW2yvgwDYdDFgruE46zr+XnDlnl1g/ATmLKlQ0hH/OhqIVC8CtUyT DDXyzuH1SI4+wpOZIpyq9AhMuXw+7ZozrjDBgqPYttUU28OwTmms2NVlQc5eO4Ft OHmPnmFBVhz3q3UqZobFaYbFDOVFVIFVueNIpNoMLbBi+kqwfVEKEaeB/jAxx91w DePf5zIdD6qHwp3qeN0LkvFtA0q5I/p98Pm8obrBFjaeXHLEIJHMZahg1y7QgRGv IxJJA9KV1JaOmg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:23 2025 by rpki-client