This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json) Hash identifier: h48BUyjo4/kyPXlUww4PD+Vp8hZ+wu7yPQQKGldTP4U= Subject key identifier: 6B:9B:15:1E:33:48:48:B9:1D:2A:A8:90:68:ED:1C:E1:EA:6B:AF:10 Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050 Certificate serial: 019AF240028575C8EFD1CD1816A4002033A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft Manifest number: 07BA Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: SS2CXlahSk9By0fRlVm-SmedwzE.roa (hash: aUQz3cYQAl8T2KPX+MNKNABDFzPqs6nBTTE1ZfNC7QE=) 2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: 6en7keTksYm3Irc3vsW8TPytnMGivrnf+oA4tGuTuRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:02:85:75:c8:ef:d1:cd:18:16:a4:00:20:33:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=6b9b151e334848b91d2aa89068ed1ce1ea6baf10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:e3:52:79:db:e3:a6:b2:d8:df:3c:09:25: 9d:eb:8d:1a:c1:e7:a1:6a:b1:d4:df:23:9f:4d:2c: b1:a7:a8:db:6e:07:b3:81:6d:cb:6e:10:13:f0:1a: 7e:47:c5:fc:e9:e9:d0:31:48:e7:c8:96:7b:49:35: 44:45:c6:8c:58:33:79:5b:f5:1c:cc:84:5a:42:3f: 3b:65:26:fd:16:9b:b9:fc:a1:c8:e5:41:75:08:4b: fe:09:b0:7f:72:74:b9:00:e4:76:05:60:4c:01:1b: 89:ac:29:bf:bd:d8:66:c9:da:6b:f4:d8:9e:10:17: f4:8a:cc:45:9d:ab:93:7a:c6:1a:c6:76:95:79:4f: 9a:08:2a:1c:00:31:53:91:4f:c7:f9:50:37:e0:15: 7f:27:e4:47:0c:6c:95:62:8d:ef:30:7d:6e:90:30: 4e:db:5f:d2:bc:0a:5f:4b:c2:2a:0a:45:b0:e9:42: 67:7e:f0:79:72:03:db:a6:a4:a5:d1:b0:b6:e7:a1: 61:0b:62:e5:6f:79:76:f6:81:03:04:31:fc:38:50: ef:45:46:96:77:83:7d:ba:fb:6c:42:14:7f:1b:34: f1:6b:73:1a:d1:c6:7f:92:de:7f:bc:14:ea:48:08: 39:d8:98:fb:fb:fd:99:6d:58:56:a6:68:bf:fe:6e: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9B:15:1E:33:48:48:B9:1D:2A:A8:90:68:ED:1C:E1:EA:6B:AF:10 X509v3 Authority Key Identifier: keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c8:b0:c0:ec:34:02:a7:7e:5e:fc:a2:ca:85:59:eb:f1:d1: 3a:2d:55:02:93:c2:33:c8:92:5e:6d:60:6b:84:65:5d:3a:a4: cb:b3:e9:e2:f7:94:e4:10:c7:ad:61:08:cd:ba:d7:c5:91:ca: a2:c9:e0:90:c3:60:f5:09:fd:6b:22:b1:93:c7:91:2e:15:59: 37:3b:94:14:1a:fa:b5:1d:e0:f6:36:56:75:11:02:e6:33:88: 11:32:4a:23:fd:2b:4b:b4:59:9b:d7:1a:60:2e:cc:0f:06:07: 6c:29:be:d9:de:47:3e:88:36:c5:c4:29:6a:f4:24:11:07:e8: a6:ac:78:05:9d:3f:d8:b8:11:ae:65:0c:22:b7:6d:03:19:ca: 05:3a:4a:be:9a:52:d8:19:0d:53:f9:ae:ed:5d:89:df:23:d9: 4e:eb:0a:24:d5:70:87:dc:6b:65:5b:35:55:67:87:32:84:f4: ff:2c:c0:04:86:f9:7b:00:fb:e8:15:42:f2:3b:34:90:78:b2: 48:a1:70:0b:62:b6:9e:10:08:39:60:07:4a:95:a4:b6:d7:9b: fb:f5:3d:08:c7:c4:0c:3c:f0:2c:3b:ba:63:fd:62:c9:da:2a: f6:46:ef:9c:80:b5:23:4d:51:db:bf:a8:ea:ef:15:1a:0e:82: 9e:83:b9:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAKFdcjv0c0YFqQAIDOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE2NGNkMjljOTRjY2RlMTQ0NDhmNjFhMTcyYzc2M2Ix ZTQwNTAwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD Eyg2YjliMTUxZTMzNDg0OGI5MWQyYWE4OTA2OGVkMWNlMWVhNmJhZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzbjUnnb46ay2N88CSWd640aweeh arHU3yOfTSyxp6jbbgezgW3LbhAT8Bp+R8X86enQMUjnyJZ7STVERcaMWDN5W/Uc zIRaQj87ZSb9Fpu5/KHI5UF1CEv+CbB/cnS5AOR2BWBMARuJrCm/vdhmydpr9Nie EBf0isxFnauTesYaxnaVeU+aCCocADFTkU/H+VA34BV/J+RHDGyVYo3vMH1ukDBO 21/SvApfS8IqCkWw6UJnfvB5cgPbpqSl0bC256FhC2Llb3l29oEDBDH8OFDvRUaW d4N9uvtsQhR/GzTxa3Ma0cZ/kt5/vBTqSAg52Jj7+/2ZbVhWpmi//m4X7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGubFR4zSEi5HSqokGjtHOHqa68QMB8GA1UdIwQY MBaAFLqqZM0pyUzN4URI9hoXLHY7HkBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUt OGZjYWE2OTM2YzZjLzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUtOGZjYWE2OTM2YzZj LzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksiwwOw0 Aqd+XvyiyoVZ6/HROi1VApPCM8iSXm1ga4RlXTqky7Pp4veU5BDHrWEIzbrXxZHK osngkMNg9Qn9ayKxk8eRLhVZNzuUFBr6tR3g9jZWdREC5jOIETJKI/0rS7RZm9ca YC7MDwYHbCm+2d5HPog2xcQpavQkEQfopqx4BZ0/2LgRrmUMIrdtAxnKBTpKvppS 2BkNU/mu7V2J3yPZTusKJNVwh9xrZVs1VWeHMoT0/yzABIb5ewD76BVC8js0kHiy SKFwC2K2nhAIOWAHSpWktteb+/U9CMfEDDzwLDu6Y/1iydoq9kbvnIC1I01R27+o 6u8VGg6CnoO5Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:16 2025 by rpki-client