This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json) Hash identifier: 3eRiBhcPYrfZ31aPsW0WRsAnukbarr4n4vrLf+fvKuQ= Subject key identifier: F2:F5:6F:5F:D4:1B:2A:54:DB:38:91:0B:FC:9A:DA:09:C6:54:99:A6 Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Certificate serial: 019AF19B7E44799BE01C437C7CF6607D2BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=) 2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: 7Lf6qNVXFPRN+lgXqJxlKHpwk3hTRorrm5L4B6sxx10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:44:79:9b:e0:1c:43:7c:7c:f6:60:7d:2b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=f2f56f5fd41b2a54db38910bfc9ada09c65499a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:f4:47:fd:f3:76:eb:c3:f4:c8:48:6c:6a: 9a:73:91:ca:51:3d:c7:a5:e3:00:dd:d4:e6:64:a1: 25:3c:c1:12:82:fe:c0:00:85:e1:5e:05:33:2e:d3: 2a:83:ac:70:14:89:71:ff:aa:e6:fa:2c:ff:a4:6b: e1:63:d6:23:cb:78:cf:4a:61:80:6f:b3:03:61:d9: cc:2d:34:cf:65:dd:3a:ef:44:3e:3a:45:2b:c0:33: 49:c8:19:36:97:3e:5e:64:5c:d9:7c:54:b8:38:54: 8d:3a:83:bf:cc:1c:92:36:30:4c:ea:34:04:07:a1: d6:22:d8:8f:2c:f8:25:64:47:b8:c6:73:38:13:34: 24:56:ab:12:5f:1d:ed:4a:c8:0a:45:3b:29:d2:42: 96:91:a1:59:e4:ef:f3:51:35:01:df:d9:98:ce:81: 19:ea:89:bd:d4:7c:2e:e6:31:5c:04:bc:db:c4:37: 4c:4e:90:19:b0:16:eb:c0:bc:24:62:5a:cd:32:c3: be:51:af:8d:85:55:8a:ae:23:27:4f:d8:11:28:56: 98:64:4a:ca:43:1e:bc:b4:f3:94:68:68:77:e9:6d: f2:8d:7f:60:4e:4c:4d:e1:73:63:f5:11:5d:21:bb: ed:2c:16:26:c9:62:5d:f5:43:bf:c4:ca:da:de:ab: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:6F:5F:D4:1B:2A:54:DB:38:91:0B:FC:9A:DA:09:C6:54:99:A6 X509v3 Authority Key Identifier: keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:29:a8:2f:53:dc:43:9f:e9:fe:90:52:17:0e:20:f6:d0: 44:43:29:38:f9:6c:7b:fa:56:b5:0f:42:12:8c:39:2d:7c:81: 7a:06:59:b4:2d:ec:5b:8b:56:87:bf:0e:d1:32:4e:4b:fd:4b: 9d:88:52:de:01:c1:e0:da:a7:f2:71:02:a8:4e:20:62:3f:86: 46:f3:ec:47:0c:81:db:58:53:74:f9:2c:3c:19:a2:e5:ef:fb: 82:a6:ad:99:1a:cc:cf:a7:17:c6:87:2d:e4:4d:11:3e:eb:6c: d5:77:48:4e:73:68:1e:5b:d9:7d:5c:dd:3d:e7:36:09:be:68: 29:01:37:8d:22:42:62:49:dd:e5:50:30:56:2e:ef:42:be:a1: 8e:e3:d9:b0:8a:51:5b:e4:b4:65:1d:f4:9e:17:b1:6c:9b:dc: c2:8d:ae:6e:c9:16:76:b7:13:ec:df:95:1e:cc:e4:c7:d9:2e: 3e:2d:d1:94:07:c6:13:64:ef:c4:c6:20:3c:7d:46:6f:c6:77: 7c:6e:1e:a3:a2:e2:2f:6d:90:c8:03:93:3a:3b:05:9b:77:48: ae:f2:63:96:ad:c4:cd:b9:a7:fb:60:d1:76:0b:1d:4b:ec:84: 41:d7:a1:72:71:81:cc:8a:ea:7b:c4:17:a9:46:73:9f:27:31: ac:1e:be:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm35EeZvgHEN8fPZgfSvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjdmMjRkZTNhOWU1MmM5NGM2Y2E2ODAzMTI0NDFkZDlj MDg4MDQwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EyhmMmY1NmY1ZmQ0MWIyYTU0ZGIzODkxMGJmYzlhZGEwOWM2NTQ5OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/0R/3zduvD9MhIbGqac5HKUT3H peMA3dTmZKElPMESgv7AAIXhXgUzLtMqg6xwFIlx/6rm+iz/pGvhY9Yjy3jPSmGA b7MDYdnMLTTPZd0670Q+OkUrwDNJyBk2lz5eZFzZfFS4OFSNOoO/zBySNjBM6jQE B6HWItiPLPglZEe4xnM4EzQkVqsSXx3tSsgKRTsp0kKWkaFZ5O/zUTUB39mYzoEZ 6om91Hwu5jFcBLzbxDdMTpAZsBbrwLwkYlrNMsO+Ua+NhVWKriMnT9gRKFaYZErK Qx68tPOUaGh36W3yjX9gTkxN4XNj9RFdIbvtLBYmyWJd9UO/xMra3qsgrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL1b1/UGypU2ziRC/ya2gnGVJmmMB8GA1UdIwQY MBaAFLj38k3jqeUslMbKaAMSRB3ZwIgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYt ODNmMTU2YzdlZjkyLzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYtODNmMTU2YzdlZjky LzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoQpqC9T 3EOf6f6QUhcOIPbQREMpOPlse/pWtQ9CEow5LXyBegZZtC3sW4tWh78O0TJOS/1L nYhS3gHB4Nqn8nECqE4gYj+GRvPsRwyB21hTdPksPBmi5e/7gqatmRrMz6cXxoct 5E0RPuts1XdITnNoHlvZfVzdPec2Cb5oKQE3jSJCYknd5VAwVi7vQr6hjuPZsIpR W+S0ZR30nhexbJvcwo2ubskWdrcT7N+VHszkx9kuPi3RlAfGE2TvxMYgPH1Gb8Z3 fG4eo6LiL22QyAOTOjsFm3dIrvJjlq3Ezbmn+2DRdgsdS+yEQdehcnGBzIrqe8QX qUZznycxrB6+aw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:31 2025 by rpki-client