This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json) Hash identifier: a/VH0M1DBrkuK8aeQfJCHVExQmNdxz501e9K+45/TX8= Subject key identifier: 43:EC:C6:E5:7D:E3:9F:35:43:29:22:29:21:7A:37:A4:7B:B5:65:03 Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a Certificate serial: 019AF1D256CBD2F717372C806F19D8C69B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft Manifest number: 0F55 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=) 2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: wmbGHI9cxcuXCTgnYtMg4ZcsxRdj9mDsZA38uX3qgWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:cb:d2:f7:17:37:2c:80:6f:19:d8:c6:9b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=43ecc6e57de39f3543292229217a37a47bb56503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:98:c4:1e:71:d0:bb:5e:7f:1a:0c:a1:0f: f5:56:f5:e0:0c:d5:fd:b0:74:60:64:e2:d8:06:6a: 88:8b:4a:e8:3e:81:68:12:37:f2:67:92:2a:2d:b8: bd:1e:5b:ae:a7:c3:16:38:99:42:c6:18:df:d1:88: 97:5e:28:0e:47:f9:aa:01:95:43:c8:4e:29:b7:2b: f3:25:b8:63:9d:9e:06:4f:d9:40:d8:a9:d2:87:e3: 89:28:9b:65:df:e9:78:1a:00:a5:34:12:f5:3f:14: 69:2e:ad:96:97:43:cc:0d:98:41:dd:13:30:96:b3: 65:a0:74:8b:eb:4b:95:05:ff:02:32:f5:88:e0:2f: 64:d5:82:f9:27:d0:e3:9c:c1:0d:fc:39:38:83:e7: dd:63:fc:33:cb:d4:ec:d2:18:87:54:2b:a0:83:b2: e4:25:0a:92:26:e1:eb:77:0c:87:1f:d8:62:f3:42: 55:36:50:61:bc:fb:44:bf:76:83:1e:5c:a8:ab:c7: 5d:cc:7c:1e:c3:28:0c:98:25:cf:af:15:e5:bf:7f: 90:b3:02:94:55:d6:94:26:04:44:17:0b:74:1c:c9: c7:17:c7:0b:c9:d3:90:2c:a6:db:26:11:3a:34:e9: 63:b0:5b:3a:a2:00:b4:c3:aa:c1:ae:d6:37:49:c9: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:C6:E5:7D:E3:9F:35:43:29:22:29:21:7A:37:A4:7B:B5:65:03 X509v3 Authority Key Identifier: keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3c:be:1e:37:7e:b3:33:46:dd:e2:0a:88:16:d1:d6:d2:cd: 9d:2e:ac:7a:b3:27:0a:e8:de:d9:b2:10:df:31:3e:87:37:09: a7:cc:8d:5a:1b:7c:84:8d:9d:50:1a:61:d4:36:ca:08:9c:d1: 73:2f:6f:53:76:ed:0c:b3:70:45:f8:fc:a9:c0:c7:e9:2c:04: 05:d2:a0:fb:5d:b5:3c:07:9b:ec:8d:df:83:65:2a:1e:c3:05: 95:53:84:54:e2:23:b7:49:f8:03:c5:91:10:5e:8c:b3:d6:00: 01:14:10:2b:fd:ee:3a:18:2e:c8:9a:ad:8e:51:b5:fb:9b:ae: dd:eb:af:ad:52:5c:c3:36:00:42:b5:f4:c6:83:62:20:20:21: 49:57:a6:65:03:9a:a4:94:99:8c:e4:d0:28:cd:1b:89:4b:79: 17:78:9c:e5:7f:16:18:ca:28:0b:ed:98:94:35:3b:21:5c:ea: dd:ea:ce:cd:c3:69:ad:cf:85:51:b5:2a:82:a8:08:42:02:18: b9:d5:ae:3e:2f:03:47:a1:38:9e:6e:e5:dc:47:06:12:8c:3a: 84:73:07:b5:90:d1:61:33:bf:2a:ee:c3:d5:6f:5e:b3:27:0a: 4a:d7:31:e1:a9:b5:11:49:0b:f3:72:39:c8:ee:5c:23:fe:76: 0f:8c:35:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lbL0vcXNyyAbxnYxpt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTVhZWE2ZjE4MGE5YThhZDk4NDUzNWVkMmU2NGJjZmNi M2ZlMWEwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD Eyg0M2VjYzZlNTdkZTM5ZjM1NDMyOTIyMjkyMTdhMzdhNDdiYjU2NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKCYxB5x0LtefxoMoQ/1VvXgDNX9 sHRgZOLYBmqIi0roPoFoEjfyZ5IqLbi9Hluup8MWOJlCxhjf0YiXXigOR/mqAZVD yE4ptyvzJbhjnZ4GT9lA2KnSh+OJKJtl3+l4GgClNBL1PxRpLq2Wl0PMDZhB3RMw lrNloHSL60uVBf8CMvWI4C9k1YL5J9DjnMEN/Dk4g+fdY/wzy9Ts0hiHVCugg7Lk JQqSJuHrdwyHH9hi80JVNlBhvPtEv3aDHlyoq8ddzHwewygMmCXPrxXlv3+QswKU VdaUJgREFwt0HMnHF8cLydOQLKbbJhE6NOljsFs6ogC0w6rBrtY3ScnJ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPsxuV94581QykiKSF6N6R7tWUDMB8GA1UdIwQY MBaAFLqlrqbxgKmorZhFNe0uZLz8s/4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZjhmNzYtMGQ5ZC00NmFmLTliZWEt NDdlNGUyNzRjZjY0LzEvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83ZjhmNzYtMGQ5ZC00NmFmLTliZWEtNDdlNGUyNzRjZjY0 LzEvdXFXdXB2R0FxYWl0bUVVMTdTNWt2UHl6X2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjy+Hjd+ szNG3eIKiBbR1tLNnS6serMnCuje2bIQ3zE+hzcJp8yNWht8hI2dUBph1DbKCJzR cy9vU3btDLNwRfj8qcDH6SwEBdKg+121PAeb7I3fg2UqHsMFlVOEVOIjt0n4A8WR EF6Ms9YAARQQK/3uOhguyJqtjlG1+5uu3euvrVJcwzYAQrX0xoNiICAhSVemZQOa pJSZjOTQKM0biUt5F3ic5X8WGMooC+2YlDU7IVzq3erOzcNprc+FUbUqgqgIQgIY udWuPi8DR6E4nm7l3EcGEow6hHMHtZDRYTO/Ku7D1W9esycKStcx4am1EUkL83I5 yO5cI/52D4w1Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:34 2025 by rpki-client