This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json) Hash identifier: mcfaP541w4/WFJHJ/dnvMXr3RTaLZocSDThp8ULgsy8= Subject key identifier: 64:B1:54:D5:F2:F9:60:C8:C6:01:B7:38:24:1F:39:C2:56:27:6F:62 Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1 Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1 Certificate serial: 019AF163E458648A0757875329E40BA34301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=) 2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=) 3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=) 4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: F3ZLNR8FXjwQRyyDfO2og8+V7G4IXu93/9+r5CkpYgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e4:58:64:8a:07:57:87:53:29:e4:0b:a3:43:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=64b154d5f2f960c8c601b738241f39c256276f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:16:5a:95:a9:89:99:14:37:81:55:58:32: da:87:e9:f5:f9:63:cc:df:4e:14:d0:d7:a4:77:f9: f5:c4:c7:2a:90:3d:44:34:9e:5a:10:5d:53:cd:1d: 0f:86:19:dd:5b:d4:3b:af:f4:e9:18:79:d0:79:95: e3:9d:a1:f4:ce:af:39:1b:5f:5f:ec:f6:f7:7d:22: b9:64:2e:b7:00:70:22:60:8b:12:c5:b4:4e:ad:34: ce:fd:31:6a:1f:b5:37:42:19:42:58:f4:6e:88:9c: 7d:bf:51:48:29:0f:3e:92:89:58:43:3c:f0:62:3c: f6:d9:08:f5:d8:48:09:b7:f0:ea:91:21:78:06:60: 68:eb:12:1d:37:a7:f6:ab:59:ba:9f:5a:84:3e:40: 4f:cf:a3:1f:54:18:b5:c7:62:6d:b4:41:47:13:e2: 14:4a:82:de:c5:64:16:6d:12:55:3d:46:02:05:a7: cb:39:db:24:b3:8e:e8:f9:29:59:9c:10:92:c9:69: 72:c7:9c:74:b8:7f:10:29:c4:9f:3a:82:7b:fe:56: 3d:f3:02:1d:65:a8:57:d8:fb:24:2a:7d:d2:91:2a: c4:06:a7:67:51:e4:d4:d0:30:74:b2:14:8d:cb:48: c5:9b:e8:dd:8e:a1:78:cc:72:00:4d:85:3c:46:7c: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:54:D5:F2:F9:60:C8:C6:01:B7:38:24:1F:39:C2:56:27:6F:62 X509v3 Authority Key Identifier: keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fb:a4:52:10:bf:fd:c8:05:3a:8c:44:74:79:ff:e0:7a:22: cf:ff:e0:d9:a1:e8:e5:e9:66:0a:7d:8b:a4:af:80:0b:50:f7: e9:f4:fb:4b:44:d2:09:92:d6:73:9e:97:55:3e:29:4d:f1:3d: 6d:02:9e:63:1d:ec:70:28:4f:dc:71:61:1a:a5:ed:e0:cb:aa: a0:a7:79:3c:ed:ad:ec:df:51:fc:dd:c5:3c:4f:7c:29:b6:f7: 7a:69:b4:2f:55:73:dd:d7:bd:b2:a3:11:70:5c:73:8b:6f:78: 61:e8:52:d8:21:f2:f9:3a:be:e3:57:bf:80:3a:fc:4f:81:da: f5:59:eb:10:1a:9c:a0:3f:b2:fb:cc:2f:14:bb:42:f6:bf:05: ac:0e:6e:53:82:f3:9f:7e:52:e5:3d:f2:6b:5d:b9:4d:0b:71: 00:c9:c8:ab:a6:38:dd:60:82:5c:42:1b:fb:46:81:92:ad:20: 95:38:ab:7f:12:25:17:6e:b1:23:88:18:50:3a:38:97:31:b7: 27:12:17:e1:a8:95:24:c9:28:6c:a5:2a:06:a5:0d:07:e8:cb: 9d:9e:ad:d3:a3:ec:d4:1f:a6:44:20:8f:57:1b:84:45:13:ca: e7:b0:96:b3:d0:47:1b:dd:e3:5e:f5:02:e5:1e:63:75:22:2d: b6:cf:d4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+RYZIoHV4dTKeQLo0MBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzFiY2Y5MjNjNWYyNWNhZmJkYWJkZmRkNDZlNTExZjk1 ZGYwZDEwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD Eyg2NGIxNTRkNWYyZjk2MGM4YzYwMWI3MzgyNDFmMzljMjU2Mjc2ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2gWWpWpiZkUN4FVWDLah+n1+WPM 304U0Nekd/n1xMcqkD1ENJ5aEF1TzR0PhhndW9Q7r/TpGHnQeZXjnaH0zq85G19f 7Pb3fSK5ZC63AHAiYIsSxbROrTTO/TFqH7U3QhlCWPRuiJx9v1FIKQ8+kolYQzzw Yjz22Qj12EgJt/DqkSF4BmBo6xIdN6f2q1m6n1qEPkBPz6MfVBi1x2JttEFHE+IU SoLexWQWbRJVPUYCBafLOdsks47o+SlZnBCSyWlyx5x0uH8QKcSfOoJ7/lY98wId ZahX2PskKn3SkSrEBqdnUeTU0DB0shSNy0jFm+jdjqF4zHIATYU8Rnz0wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSxVNXy+WDIxgG3OCQfOcJWJ29iMB8GA1UdIwQY MBaAFLoxvPkjxfJcr72r391G5RH5XfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYt MWJhMzQzZjE3ZWMyLzEvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYtMWJhMzQzZjE3ZWMy LzEvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfukUhC/ /cgFOoxEdHn/4Hoiz//g2aHo5elmCn2LpK+AC1D36fT7S0TSCZLWc56XVT4pTfE9 bQKeYx3scChP3HFhGqXt4MuqoKd5PO2t7N9R/N3FPE98Kbb3emm0L1Vz3de9sqMR cFxzi294YehS2CHy+Tq+41e/gDr8T4Ha9VnrEBqcoD+y+8wvFLtC9r8FrA5uU4Lz n35S5T3ya125TQtxAMnIq6Y43WCCXEIb+0aBkq0glTirfxIlF26xI4gYUDo4lzG3 JxIX4aiVJMkobKUqBqUNB+jLnZ6t06Ps1B+mRCCPVxuERRPK57CWs9BHG93jXvUC 5R5jdSItts/UjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:43:53 2025 by rpki-client