This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json) Hash identifier: +T6psuXgBGhQvh4zF35M7HZAZyw5h0qQUk5pcAJPH0M= Subject key identifier: CC:7F:AB:F2:1D:46:4A:62:23:ED:01:7F:7B:D6:B0:59:00:7B:60:CA Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Certificate serial: 019AF49C0483256FE4E05C200A9662DF0CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 17:00:56 +0000 Manifest this update: Sat 06 Dec 2025 17:00:56 +0000 Manifest next update: Sun 07 Dec 2025 17:00:56 +0000 Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=) 2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=) 3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: sPokhyQbyO5k2BwEVKRJUQpcCC0ldgVD230cuCIktf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:04:83:25:6f:e4:e0:5c:20:0a:96:62:df:0c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Validity Not Before: Dec 6 17:00:56 2025 GMT Not After : Dec 7 17:00:56 2025 GMT Subject: CN=cc7fabf21d464a6223ed017f7bd6b059007b60ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:fb:89:a5:49:cb:8f:27:f2:27:39:38:50: 69:37:5a:af:d1:e2:45:0f:cc:24:88:d7:ae:e7:ed: 39:83:a4:ea:a7:85:64:c8:10:fd:c5:90:37:d5:6d: 19:3e:c0:45:1c:67:53:2f:4e:9b:a3:26:cc:00:93: 4f:91:51:bb:26:e3:8b:a1:ca:bc:0d:84:64:83:d8: a5:20:e6:02:8d:33:37:14:b4:5a:27:26:42:78:6e: 8d:0d:19:5f:24:87:99:fe:f5:a6:8e:c0:b1:d2:68: 3c:2f:f3:c5:8a:94:f1:95:ca:25:bd:45:90:96:b1: 3a:fd:8d:22:df:4e:25:5a:35:6f:c5:e3:b9:f4:89: 89:06:c9:18:7c:da:9e:d0:f7:bb:68:fd:5d:99:f2: 3f:27:f6:28:3a:4e:03:24:ae:86:c5:23:35:19:56: 57:ad:9a:ae:e2:af:a3:19:01:58:cd:f0:a1:5e:3b: d3:e0:9b:55:3b:8d:29:3c:d9:77:d1:49:d2:6e:50: ff:a7:d0:57:fd:be:8a:91:2d:2c:6f:d9:80:65:e8: 73:d7:78:0a:08:2a:5f:54:9a:bc:c6:0c:95:e0:b2: 60:4c:f6:fd:8f:11:0d:95:0b:a1:78:19:a0:29:e0: b0:93:f8:3e:aa:09:64:ea:1a:08:4b:92:96:2f:ff: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7F:AB:F2:1D:46:4A:62:23:ED:01:7F:7B:D6:B0:59:00:7B:60:CA X509v3 Authority Key Identifier: keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4d:ec:f0:9a:eb:da:25:23:95:fc:4a:15:01:53:ba:2e:5c: 9a:22:f5:f8:13:51:64:94:a6:df:57:8a:18:65:10:1c:17:f5: ef:8b:0a:cc:f2:66:62:74:6d:ed:f3:40:ad:66:d5:38:d7:1b: 3c:8f:5d:c2:f9:39:bb:d2:ff:05:fa:bb:75:e1:a0:76:de:06: 24:57:7c:73:3c:fa:d5:91:ed:d0:54:83:0e:b3:36:9b:ce:08: ba:21:13:bd:7b:86:40:40:10:a9:76:0a:fd:bc:c9:3c:25:9b: 2d:cd:ef:70:0d:69:d1:52:b9:2b:92:89:9b:49:14:a2:e0:53: d6:c0:97:19:fe:bd:5e:f1:c5:08:de:16:d1:a0:0a:d1:be:a0: 9d:3c:28:5a:11:61:9b:75:25:05:73:ea:ee:2a:82:7c:72:8e: 99:88:fb:43:35:22:33:79:7f:c5:f4:68:78:6f:8c:a2:22:fd: d0:5a:8a:12:03:bd:73:1e:76:b4:b0:ff:d1:59:1f:56:a2:14: 58:8c:ac:ce:84:af:55:16:cd:62:c4:59:44:56:d0:66:c8:82: 7b:af:2b:ba:07:6f:01:7f:4b:3d:f3:c2:83:8b:16:f6:11:cc: 25:24:24:2b:04:68:71:a2:54:71:aa:d2:bf:ed:33:16:6c:d4: 36:d8:58:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nASDJW/k4FwgCpZi3wywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4 NzI4NWQwHhcNMjUxMjA2MTcwMDU2WhcNMjUxMjA3MTcwMDU2WjAzMTEwLwYDVQQD EyhjYzdmYWJmMjFkNDY0YTYyMjNlZDAxN2Y3YmQ2YjA1OTAwN2I2MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqf7iaVJy48n8ic5OFBpN1qv0eJF D8wkiNeu5+05g6Tqp4VkyBD9xZA31W0ZPsBFHGdTL06boybMAJNPkVG7JuOLocq8 DYRkg9ilIOYCjTM3FLRaJyZCeG6NDRlfJIeZ/vWmjsCx0mg8L/PFipTxlcolvUWQ lrE6/Y0i304lWjVvxeO59ImJBskYfNqe0Pe7aP1dmfI/J/YoOk4DJK6GxSM1GVZX rZqu4q+jGQFYzfChXjvT4JtVO40pPNl30UnSblD/p9BX/b6KkS0sb9mAZehz13gK CCpfVJq8xgyV4LJgTPb9jxENlQuheBmgKeCwk/g+qglk6hoIS5KWL//X9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx/q/IdRkpiI+0Bf3vWsFkAe2DKMB8GA1UdIwQY MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk3s8Jrr 2iUjlfxKFQFTui5cmiL1+BNRZJSm31eKGGUQHBf174sKzPJmYnRt7fNArWbVONcb PI9dwvk5u9L/Bfq7deGgdt4GJFd8czz61ZHt0FSDDrM2m84IuiETvXuGQEAQqXYK /bzJPCWbLc3vcA1p0VK5K5KJm0kUouBT1sCXGf69XvHFCN4W0aAK0b6gnTwoWhFh m3UlBXPq7iqCfHKOmYj7QzUiM3l/xfRoeG+MoiL90FqKEgO9cx52tLD/0VkfVqIU WIyszoSvVRbNYsRZRFbQZsiCe68rugdvAX9LPfPCg4sW9hHMJSQkKwRocaJUcarS v+0zFmzUNthY2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:35 2025 by rpki-client