This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json) Hash identifier: vutNnGw9yKSneGPaSjPIH+Ak0vNrG4hRQdnokdLhOZY= Subject key identifier: 25:C1:E8:89:69:3B:20:40:E8:F3:10:45:F8:ED:47:14:5C:1D:54:2F Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Certificate serial: 019AF46565069D96504ECEBDF21E2193E56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft Manifest number: 0A18 Signing time: Sat 06 Dec 2025 16:01:16 +0000 Manifest this update: Sat 06 Dec 2025 16:01:16 +0000 Manifest next update: Sun 07 Dec 2025 16:01:16 +0000 Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=) 2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: 15KHZiMjMTpauu4imfjCQj/69qP0pdmSNsNMyyAw618=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:65:06:9d:96:50:4e:ce:bd:f2:1e:21:93:e5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Validity Not Before: Dec 6 16:01:16 2025 GMT Not After : Dec 7 16:01:16 2025 GMT Subject: CN=25c1e889693b2040e8f31045f8ed47145c1d542f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:69:10:1f:87:25:1f:6b:81:a2:23:04:f3: ce:fe:df:39:e7:7b:56:e9:c3:3e:f9:af:3f:88:2f: 42:7e:c5:ec:12:9e:aa:48:2e:6f:3e:1f:75:e4:af: 53:e9:f4:8b:a1:1c:a8:d1:b9:4b:e0:82:23:77:c2: dd:3e:7c:2e:8d:e6:98:05:dc:f1:d0:a8:33:ad:bb: a5:28:1e:68:bd:2d:82:41:e3:e9:29:2d:ad:95:6b: 75:f5:c8:1d:b9:a1:87:87:08:31:e2:24:0a:c2:b6: a2:56:20:56:94:04:f6:6b:d3:4d:1b:e2:19:16:00: 8a:69:44:b3:25:86:86:cd:f7:ae:c5:e6:f9:23:b2: 50:5b:32:a4:d0:82:ba:4d:9d:b1:f6:20:29:a2:b2: 65:02:31:ca:0b:86:bc:36:a1:92:f7:c6:2b:32:46: 71:de:d0:78:16:42:af:7b:53:de:72:65:45:e6:31: d3:06:76:9d:4a:ca:d3:69:d7:6d:b7:05:b5:66:4a: 29:c9:a8:9a:b4:ba:33:f2:93:13:e4:2e:c5:92:55: 7c:db:d3:28:a5:40:d4:43:32:9c:0e:6a:80:15:1b: f2:c7:46:48:4c:3d:b9:5c:94:33:fd:11:96:ce:99: 2b:7d:07:1f:3a:34:c5:c7:90:69:7d:d2:27:78:46: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:E8:89:69:3B:20:40:E8:F3:10:45:F8:ED:47:14:5C:1D:54:2F X509v3 Authority Key Identifier: keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:ae:42:29:63:3a:80:3a:bd:15:c2:27:a5:93:9b:bf:81: 5b:10:4d:f2:56:62:54:8e:df:61:a7:ea:d8:07:69:fd:c0:42: 24:43:46:9b:ab:16:ee:dd:e0:8d:a5:2f:a7:c3:15:15:2a:3e: f6:9d:df:03:18:0d:fd:32:4c:bc:38:49:70:4e:a9:8b:18:46: a2:6b:98:a5:63:b0:d1:fd:eb:f3:28:f5:02:28:31:42:a6:d6: 13:e7:df:7c:b1:fd:82:d8:a2:8f:57:3a:29:54:21:04:a8:9c: 99:e9:f5:28:c4:4b:45:99:c9:2b:6d:21:bb:3c:15:82:1f:d4: ba:62:2f:be:75:4f:75:92:9f:94:00:96:61:bd:4a:b6:46:a3: eb:db:c9:99:96:8e:5c:13:e4:1f:f4:5c:64:75:f5:b9:70:2a: c7:19:c2:7e:83:f7:5a:ee:ad:b8:8c:aa:5d:70:79:ee:04:34: 89:3f:eb:67:be:e4:ea:ac:32:cb:25:85:54:aa:dd:8b:90:83: b1:6e:63:00:e4:04:69:75:a8:db:c8:6a:ee:20:76:f0:24:c2: 9a:f4:2a:12:f0:8d:c6:b0:e8:1c:c2:7c:cb:e4:1f:46:7d:0e: c9:93:6e:9e:c1:23:99:80:e9:96:4f:02:7c:41:90:7b:0f:80: 16:8a:13:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWUGnZZQTs698h4hk+VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi Y2Y5Y2EwHhcNMjUxMjA2MTYwMTE2WhcNMjUxMjA3MTYwMTE2WjAzMTEwLwYDVQQD EygyNWMxZTg4OTY5M2IyMDQwZThmMzEwNDVmOGVkNDcxNDVjMWQ1NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJpEB+HJR9rgaIjBPPO/t8553tW 6cM++a8/iC9CfsXsEp6qSC5vPh915K9T6fSLoRyo0blL4IIjd8LdPnwujeaYBdzx 0KgzrbulKB5ovS2CQePpKS2tlWt19cgduaGHhwgx4iQKwraiViBWlAT2a9NNG+IZ FgCKaUSzJYaGzfeuxeb5I7JQWzKk0IK6TZ2x9iAporJlAjHKC4a8NqGS98YrMkZx 3tB4FkKve1PecmVF5jHTBnadSsrTaddttwW1ZkopyaiatLoz8pMT5C7FklV829Mo pUDUQzKcDmqAFRvyx0ZITD25XJQz/RGWzpkrfQcfOjTFx5BpfdIneEZ4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXB6IlpOyBA6PMQRfjtRxRcHVQvMB8GA1UdIwQY MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt NmI4OWZhNDY3NTdjLzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0WuQilj OoA6vRXCJ6WTm7+BWxBN8lZiVI7fYafq2Adp/cBCJENGm6sW7t3gjaUvp8MVFSo+ 9p3fAxgN/TJMvDhJcE6pixhGomuYpWOw0f3r8yj1AigxQqbWE+fffLH9gtiij1c6 KVQhBKicmen1KMRLRZnJK20huzwVgh/UumIvvnVPdZKflACWYb1Ktkaj69vJmZaO XBPkH/RcZHX1uXAqxxnCfoP3Wu6tuIyqXXB57gQ0iT/rZ77k6qwyyyWFVKrdi5CD sW5jAOQEaXWo28hq7iB28CTCmvQqEvCNxrDoHMJ8y+QfRn0OyZNunsEjmYDplk8C fEGQew+AFooTjw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:03:08 2025 by rpki-client