This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft File: UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json) Hash identifier: aGMvogPbDFTpaJVGDs0OYaQCTqy1R10Je0HmyqWn+wk= Subject key identifier: A8:FF:36:14:CA:E6:F5:A6:4A:7F:FA:05:77:5A:54:D5:CF:63:3A:7D Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76 Certificate serial: 019AF31CC9B49A0825FFC7D90E5EA10AAE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft Manifest number: 154B Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: TaH+KPXAGdDgSIuBDnkIaBMLC+ZsKHohhTO1vTc1SC0=) 2: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (hash: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=) 3: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (hash: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=) 4: hhpnOw16P4QOaI6Yj27PCQwfLVA.roa (hash: ig3aG6IluBzRhUfWEo3gM6opkDOech5g/k8SP7esT2A=) 5: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (hash: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c9:b4:9a:08:25:ff:c7:d9:0e:5e:a1:0a:ae:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76 Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=a8ff3614cae6f5a64a7ffa05775a54d5cf633a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:4d:83:e1:3c:64:68:d1:d4:da:9b:b6:56: 8c:27:56:31:79:ed:39:2e:e4:e0:6d:c3:eb:36:c0: b4:4b:a6:c3:95:3b:4a:0a:b4:ed:a2:2f:78:5b:4e: fd:28:b9:c4:1e:96:5a:d6:3b:ce:f9:2d:d6:39:7f: cd:df:4d:60:a7:68:f5:f2:65:58:59:94:fd:c2:00: bf:36:18:2e:40:1b:24:63:64:50:e1:1f:0c:22:00: c0:4a:b3:b4:0a:06:ca:3c:04:ed:4f:b4:50:7e:b5: cc:5d:23:10:15:07:20:8f:c1:43:10:8b:65:26:3d: 1c:94:f5:3e:8f:bb:21:37:cc:a7:b3:b0:25:52:85: 37:db:f3:d5:9f:f7:34:ad:4f:00:57:7d:1a:f8:72: 1e:52:cd:07:16:9b:ad:fa:94:cb:9a:a3:6c:1a:6c: 83:74:06:b5:71:64:e6:e3:86:73:1b:be:0b:4c:30: cd:7f:e6:f3:29:84:0e:48:b6:33:6d:37:62:15:f2: e0:d6:67:26:09:89:47:1a:9d:df:13:9f:c5:75:ae: b0:00:e2:95:c6:80:89:d9:c6:dc:a0:07:20:e7:14: 39:96:4e:42:47:0d:53:e4:1b:da:5e:c0:52:03:67: 6d:d4:b8:77:f0:a0:e4:de:d2:b8:0c:ce:7b:2a:21: 97:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FF:36:14:CA:E6:F5:A6:4A:7F:FA:05:77:5A:54:D5:CF:63:3A:7D X509v3 Authority Key Identifier: keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2f:13:a1:19:4c:39:47:ac:3a:e9:37:52:25:eb:c3:67:f6: e7:dd:64:bb:e2:e5:c0:52:58:8b:3b:9c:0b:12:a9:de:6e:1b: d6:87:2a:0b:73:a3:e3:08:fc:d5:27:c8:88:e2:7f:62:69:42: 0f:7e:fd:7e:77:8d:89:31:86:61:c4:7b:c3:93:28:f6:a5:cb: 92:ef:9b:b8:3f:5f:1a:fb:e9:0c:88:b3:02:8b:bd:3d:9e:7c: f5:37:55:5a:a7:22:c5:cb:44:ff:61:bb:5b:d4:d2:41:4c:9e: 8e:3b:5a:d7:56:7e:23:34:72:3e:a4:cf:7d:6f:b9:94:40:0d: a1:cc:c9:98:93:0d:c2:66:07:5b:bf:79:fd:66:a3:65:44:e0: e3:60:da:7f:8c:be:91:ef:f3:0f:44:5d:3e:15:10:f4:31:5b: 4e:6f:4d:cc:87:43:e4:52:7a:bd:a5:14:60:4d:7d:b0:dd:f9: a0:35:d7:2f:5d:35:75:1a:46:6f:08:b3:d7:b2:a5:f5:45:87: b2:b9:25:90:09:aa:98:89:b6:a0:51:4d:8b:97:af:f2:4d:19: ee:72:21:7a:67:03:2b:6b:4f:09:ce:cf:2c:05:d4:eb:0a:da: ec:cc:31:fe:2b:20:88:e1:5f:cc:43:96:b7:8a:fc:1b:59:56: 51:31:01:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMm0mggl/8fZDl6hCq6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1 MjJjNzYwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EyhhOGZmMzYxNGNhZTZmNWE2NGE3ZmZhMDU3NzVhNTRkNWNmNjMzYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7FNg+E8ZGjR1NqbtlaMJ1Yxee05 LuTgbcPrNsC0S6bDlTtKCrTtoi94W079KLnEHpZa1jvO+S3WOX/N301gp2j18mVY WZT9wgC/NhguQBskY2RQ4R8MIgDASrO0CgbKPATtT7RQfrXMXSMQFQcgj8FDEItl Jj0clPU+j7shN8yns7AlUoU32/PVn/c0rU8AV30a+HIeUs0HFput+pTLmqNsGmyD dAa1cWTm44ZzG74LTDDNf+bzKYQOSLYzbTdiFfLg1mcmCYlHGp3fE5/Fda6wAOKV xoCJ2cbcoAcg5xQ5lk5CRw1T5BvaXsBSA2dt1Lh38KDk3tK4DM57KiGXbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj/NhTK5vWmSn/6BXdaVNXPYzp9MB8GA1UdIwQY MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It MmY1MWVjZDFhYTBlLzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy8ToRlM OUesOuk3UiXrw2f2591ku+LlwFJYizucCxKp3m4b1ocqC3Oj4wj81SfIiOJ/YmlC D379fneNiTGGYcR7w5Mo9qXLku+buD9fGvvpDIizAou9PZ589TdVWqcixctE/2G7 W9TSQUyejjta11Z+IzRyPqTPfW+5lEANoczJmJMNwmYHW795/WajZUTg42Daf4y+ ke/zD0RdPhUQ9DFbTm9NzIdD5FJ6vaUUYE19sN35oDXXL101dRpGbwiz17Kl9UWH srklkAmqmIm2oFFNi5ev8k0Z7nIhemcDK2tPCc7PLAXU6wra7Mwx/isgiOFfzEOW t4r8G1lWUTEBpw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:57 2025 by rpki-client