This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json) Hash identifier: zPGyy3bIU6jUOA7uzKsui0qn5Y8PutK/U5hSOmm25AA= Subject key identifier: 86:C4:07:29:99:CA:EB:3D:53:9A:43:5A:04:BC:97:16:18:86:93:6A Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Certificate serial: 019AF12EE221083EB3D5BB68EA5A28FECDC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft Manifest number: 1440 Signing time: Sat 06 Dec 2025 01:02:52 +0000 Manifest this update: Sat 06 Dec 2025 01:02:52 +0000 Manifest next update: Sun 07 Dec 2025 01:02:52 +0000 Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: lTCQgJsnPCEAbwbYjngKLC15KniUQOXbbOvcRz3ER2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e2:21:08:3e:b3:d5:bb:68:ea:5a:28:fe:cd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Validity Not Before: Dec 6 01:02:52 2025 GMT Not After : Dec 7 01:02:52 2025 GMT Subject: CN=86c4072999caeb3d539a435a04bc97161886936a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:4c:ce:ed:29:0e:42:cc:2f:51:83:68:3c: 7a:c4:29:1a:5c:84:06:76:58:52:13:bd:5c:1f:66: b4:1f:24:58:12:34:2a:1e:16:fd:82:38:21:f3:10: a5:80:12:94:0c:c3:20:8e:ae:ed:95:a0:29:92:fa: 29:95:18:14:dd:58:22:dd:30:4c:d2:80:35:09:a9: 55:48:7a:2c:2b:34:a5:6f:5b:e3:33:b2:0b:02:22: 2d:eb:e3:81:27:e0:d8:61:85:a3:31:52:8b:80:47: d0:60:b2:69:b0:fc:83:8b:09:d3:5e:70:e7:ce:bb: cd:d0:07:29:ed:41:39:57:2f:46:2e:f8:1f:69:14: 4b:ee:3f:d9:1f:45:82:f8:28:f9:a0:96:a7:01:1d: a2:67:da:1e:98:8d:f5:c5:5f:17:4b:b6:82:0e:f5: f7:6c:64:0d:58:2f:97:92:15:34:e0:bc:06:8f:40: e2:70:83:e4:78:53:42:23:e7:0e:2c:6d:01:65:e8: d7:ad:e1:0d:62:4f:8c:9f:b5:98:30:af:cf:b0:92: c2:2d:8e:e8:37:9a:24:a8:9a:5f:4e:a7:a4:f7:4e: 08:da:90:4e:ee:f4:1b:2b:9d:d7:43:d4:f9:12:07: bb:4c:8a:be:ab:0b:db:87:05:bd:1a:c8:ec:1f:f8: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:07:29:99:CA:EB:3D:53:9A:43:5A:04:BC:97:16:18:86:93:6A X509v3 Authority Key Identifier: keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6b:59:00:f0:4f:c3:8d:99:56:f3:01:94:86:84:3b:a5:88: 92:f3:91:26:c6:da:be:74:f9:03:ee:a5:35:0b:f4:44:5a:31: 05:65:3c:db:7a:ee:e9:bc:14:5f:e1:e6:4d:d4:4c:ac:5a:59: 30:52:fb:39:74:98:62:f8:c5:f1:bb:25:a1:81:c1:14:d1:79: 75:1a:1e:3e:a0:d5:f6:8a:39:5e:a3:ac:70:5c:c1:ec:93:d4: 34:3a:e0:b4:31:6c:10:bd:2f:3f:54:95:a2:2a:a6:08:a3:fc: eb:a4:fa:18:33:98:01:11:f6:14:bd:df:1a:b1:e0:f5:6d:08: 4c:d7:77:4d:23:84:e1:c1:e1:70:b4:ea:d7:35:56:0b:3a:66: 24:04:11:7a:5f:85:29:60:87:c0:9c:58:6d:39:03:d4:5f:0f: 65:c9:ed:34:3d:6e:1e:a5:72:8c:f8:10:09:b0:e1:21:fa:43: 34:c7:75:87:48:d8:c5:b9:9e:9a:9f:52:4a:4d:c2:08:e8:54: 2a:bc:45:65:20:dd:0b:09:b3:05:42:46:71:8a:f4:de:54:c3: b2:ac:f3:a0:3b:94:68:c4:1a:df:1e:80:20:d7:18:88:ca:20: 2f:ae:d9:54:c2:79:5c:12:0e:d3:1f:c4:3b:90:6e:fc:15:40: 7a:04:0d:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuIhCD6z1bto6loo/s3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy Y2I3ZmIwHhcNMjUxMjA2MDEwMjUyWhcNMjUxMjA3MDEwMjUyWjAzMTEwLwYDVQQD Eyg4NmM0MDcyOTk5Y2FlYjNkNTM5YTQzNWEwNGJjOTcxNjE4ODY5MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjhMzu0pDkLML1GDaDx6xCkaXIQG dlhSE71cH2a0HyRYEjQqHhb9gjgh8xClgBKUDMMgjq7tlaApkvoplRgU3Vgi3TBM 0oA1CalVSHosKzSlb1vjM7ILAiIt6+OBJ+DYYYWjMVKLgEfQYLJpsPyDiwnTXnDn zrvN0Acp7UE5Vy9GLvgfaRRL7j/ZH0WC+Cj5oJanAR2iZ9oemI31xV8XS7aCDvX3 bGQNWC+XkhU04LwGj0DicIPkeFNCI+cOLG0BZejXreENYk+Mn7WYMK/PsJLCLY7o N5okqJpfTqek904I2pBO7vQbK53XQ9T5Ege7TIq+qwvbhwW9GsjsH/jshQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbEBymZyus9U5pDWgS8lxYYhpNqMB8GA1UdIwQY MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWtZAPBP w42ZVvMBlIaEO6WIkvORJsbavnT5A+6lNQv0RFoxBWU823ru6bwUX+HmTdRMrFpZ MFL7OXSYYvjF8bsloYHBFNF5dRoePqDV9oo5XqOscFzB7JPUNDrgtDFsEL0vP1SV oiqmCKP866T6GDOYARH2FL3fGrHg9W0ITNd3TSOE4cHhcLTq1zVWCzpmJAQRel+F KWCHwJxYbTkD1F8PZcntND1uHqVyjPgQCbDhIfpDNMd1h0jYxbmemp9SSk3CCOhU KrxFZSDdCwmzBUJGcYr03lTDsqzzoDuUaMQa3x6AINcYiMogL67ZVMJ5XBIO0x/E O5Bu/BVAegQNdw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:07 2025 by rpki-client