This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft File: uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json) Hash identifier: fAX4O5pag1uvp6ynD71YlUPL58i7iKa+MqjsmynlrMQ= Subject key identifier: F0:92:75:CC:3D:F3:F3:93:FC:7C:AC:77:DD:BB:37:86:53:1B:8B:91 Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5 Certificate issuer: /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5 Certificate serial: 019AF19AA51E34F4D639723EDA1C8D8C35AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (hash: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=) 2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: uWxxwtZOZZDHSX0IBDkkDqciEblF9Kzo1ZyAQraM9Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a5:1e:34:f4:d6:39:72:3e:da:1c:8d:8c:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=f09275cc3df3f393fc7cac77ddbb3786531b8b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:1d:83:5f:d1:a6:b2:d0:be:22:63:bf:7a: 3a:51:63:1b:f9:6d:c0:23:a1:40:5a:55:4d:30:c0: 80:23:82:af:b4:dd:9e:e9:bf:b5:51:9d:16:11:8b: 6d:cc:84:b8:1b:24:53:78:c3:b9:09:d3:c8:61:72: bd:9a:48:38:a9:44:ce:20:d2:aa:93:15:d4:5c:96: cd:de:44:5f:b9:60:a2:8e:d5:d8:13:45:f2:02:5e: 01:9f:5d:a0:14:38:ff:55:06:3e:b6:67:83:68:fa: 08:b1:a1:ec:3b:8b:3e:ac:32:44:71:30:11:7f:5f: 1b:30:f8:8b:39:e9:65:77:12:e4:13:7f:0b:80:f0: 1f:5b:ed:1f:5c:a1:28:ce:64:d7:7d:a5:66:43:c1: 31:ea:9a:44:47:5d:88:bf:8a:f6:89:70:97:ad:a2: fc:ce:6d:35:bd:f9:9a:98:41:22:ab:69:d5:df:b9: f5:9a:15:15:c3:a1:20:40:87:4e:be:bd:23:69:c4: d4:6d:51:26:b8:f0:23:56:ef:e7:b3:ce:28:c9:88: 93:e4:3a:2d:60:f2:af:39:6a:78:5a:e4:4c:fa:c3: bf:4d:9a:72:cd:75:8b:33:24:8f:16:c0:b2:3a:13: 00:f0:ae:23:86:c9:ab:07:64:b0:85:5e:fc:3c:0a: 9e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:92:75:CC:3D:F3:F3:93:FC:7C:AC:77:DD:BB:37:86:53:1B:8B:91 X509v3 Authority Key Identifier: keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:de:9e:35:18:d6:f8:a6:a9:11:5b:07:a5:b4:c3:96:31:15: e6:5d:fe:8c:eb:c7:71:9e:72:50:09:1a:59:c0:2c:72:63:bd: a3:08:f5:d4:f1:9d:a3:32:3a:ab:d1:55:be:9b:f8:d9:d7:2c: 67:c9:06:16:a5:af:ce:01:23:81:89:54:2f:62:9e:3c:12:10: 12:43:f5:a1:cb:12:38:04:55:be:6d:11:99:85:99:80:13:11: cb:d0:8c:2c:0a:2f:0d:98:02:4e:60:0c:6e:dc:35:bb:80:7a: 71:e9:e0:5b:1d:9e:de:5d:ee:56:6f:e8:7b:83:fb:3b:de:89: e5:7d:22:f2:ba:3c:b3:af:05:c0:a2:69:98:68:7a:7c:08:f6: 79:d1:43:df:b7:d4:05:80:67:74:ea:8e:09:4d:e9:30:0e:25: 85:dd:cb:23:57:e6:32:df:f5:39:de:bd:18:fc:49:f7:8e:36: ff:98:e5:ef:d0:f8:f6:ba:45:de:08:6c:b7:c4:04:b4:94:88: d3:a8:d3:e2:75:08:61:fc:91:05:dd:a0:40:39:ca:88:16:17: b1:eb:8a:be:18:65:f5:e1:ae:e4:7f:df:7d:9b:6f:08:4e:6c: 51:e3:09:c4:2f:d8:06:ae:2d:98:6d:fe:bf:17:a0:b6:c9:08: ae:fc:c5:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqUeNPTWOXI+2hyNjDWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzUxNTVkYjdmOTg1OWUwODRjMmVlOWJmOTZlODY4OTIw OWQzZDUwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EyhmMDkyNzVjYzNkZjNmMzkzZmM3Y2FjNzdkZGJiMzc4NjUzMWI4YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBkdg1/RprLQviJjv3o6UWMb+W3A I6FAWlVNMMCAI4KvtN2e6b+1UZ0WEYttzIS4GyRTeMO5CdPIYXK9mkg4qUTOINKq kxXUXJbN3kRfuWCijtXYE0XyAl4Bn12gFDj/VQY+tmeDaPoIsaHsO4s+rDJEcTAR f18bMPiLOelldxLkE38LgPAfW+0fXKEozmTXfaVmQ8Ex6ppER12Iv4r2iXCXraL8 zm01vfmamEEiq2nV37n1mhUVw6EgQIdOvr0jacTUbVEmuPAjVu/ns84oyYiT5Dot YPKvOWp4WuRM+sO/TZpyzXWLMySPFsCyOhMA8K4jhsmrB2SwhV78PAqevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCSdcw98/OT/Hysd927N4ZTG4uRMB8GA1UdIwQY MBaAFLjFFV23+YWeCEwu6b+W6GiSCdPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjkt YzY4YTY4ZThhMjM0LzEvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjktYzY4YTY4ZThhMjM0 LzEvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN6eNRjW +KapEVsHpbTDljEV5l3+jOvHcZ5yUAkaWcAscmO9owj11PGdozI6q9FVvpv42dcs Z8kGFqWvzgEjgYlUL2KePBIQEkP1ocsSOARVvm0RmYWZgBMRy9CMLAovDZgCTmAM btw1u4B6cengWx2e3l3uVm/oe4P7O96J5X0i8ro8s68FwKJpmGh6fAj2edFD37fU BYBndOqOCU3pMA4lhd3LI1fmMt/1Od69GPxJ9442/5jl79D49rpF3ghst8QEtJSI 06jT4nUIYfyRBd2gQDnKiBYXseuKvhhl9eGu5H/ffZtvCE5sUeMJxC/YBq4tmG3+ vxegtskIrvzFEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:24 2025 by rpki-client