This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json) Hash identifier: qu0tkWOLiTtJ5AtfnM33eURV4MOvrXr3YLPpIQLj5GI= Subject key identifier: DE:AF:9C:3C:3B:BF:F0:9D:E3:DE:ED:E6:53:89:16:D2:1A:C3:39:69 Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5 Certificate serial: 019AF2ADF9A20A66703ED966E96DB3C408E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft Manifest number: 0676 Signing time: Sat 06 Dec 2025 08:01:19 +0000 Manifest this update: Sat 06 Dec 2025 08:01:19 +0000 Manifest next update: Sun 07 Dec 2025 08:01:19 +0000 Files and hashes: 1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=) 2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: eqFrlKmO3tHJzu5zUeW4fB7RDYXUbecLMhAC9D/oDqQ=) 3: vEKxlZm9BMv8luzA6xaMwOGyVhU.roa (hash: w0Q5uP6YrITzOZM5siWpGHCDa6znCci6B1ar9OYwLJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f9:a2:0a:66:70:3e:d9:66:e9:6d:b3:c4:08:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5 Validity Not Before: Dec 6 08:01:19 2025 GMT Not After : Dec 7 08:01:19 2025 GMT Subject: CN=deaf9c3c3bbff09de3deede6538916d21ac33969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:2d:5b:69:36:dc:3d:9b:2a:d5:c5:a0:92: ce:6c:60:e5:b6:5d:ee:e2:e0:31:b7:fd:13:e9:41: d2:9a:74:3f:99:6c:9d:de:3e:16:b9:e7:0b:09:55: 1b:6a:b3:b1:03:21:b2:17:77:67:cc:f7:13:3f:d2: c9:93:50:30:6e:9a:c3:48:9d:3d:72:70:17:98:00: 21:0e:5a:c5:27:9d:b5:e8:35:ea:45:a6:7c:8f:3b: 72:a5:ea:ff:81:13:e9:db:13:1b:ef:ac:58:9b:14: d7:07:f1:55:c7:1f:ae:6b:70:f7:25:1b:f0:47:9e: 5e:e2:7c:a1:24:24:91:72:90:d3:bc:86:a5:14:a8: 32:09:84:ac:9f:38:7f:05:24:32:f6:37:c2:b4:eb: 57:83:6b:3f:fb:09:ad:f7:42:27:44:3f:21:f4:58: 2e:3a:08:fd:c0:22:ce:86:30:11:23:b8:a9:75:11: 66:a2:83:13:76:e0:e2:0c:b4:8e:94:72:6f:7e:c3: 86:07:0b:07:07:46:1b:21:ba:b6:60:da:bc:b5:fd: b9:c9:7d:13:0d:5b:17:11:54:23:3c:4a:40:4f:ea: 07:1c:6c:ea:8f:da:b8:cd:0e:67:1a:f6:1c:b5:41: b5:64:94:b4:d0:c5:04:3c:86:77:44:36:a3:74:3e: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:9C:3C:3B:BF:F0:9D:E3:DE:ED:E6:53:89:16:D2:1A:C3:39:69 X509v3 Authority Key Identifier: keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:57:71:c4:18:57:95:50:d7:ea:8b:bd:8b:6f:ab:58:67:69: b5:46:78:1a:d1:01:91:46:33:51:80:71:7e:b3:9e:02:9b:27: b2:07:ab:7e:ea:43:ee:f8:18:d8:86:60:15:cf:7d:72:a4:3f: a9:1b:b2:97:f7:92:00:db:71:a8:d4:67:a1:cf:d3:d5:21:f1: 8c:4d:c1:6e:7a:31:1b:bf:22:aa:c3:2d:c5:41:a4:87:58:5e: 5f:c7:94:66:51:67:99:44:e9:1b:93:5f:21:89:e1:33:24:ef: 5a:93:55:d7:2f:5c:fb:9d:1c:1e:25:7c:74:7a:a3:55:c8:bf: f5:34:7c:49:56:b1:25:f8:2a:cb:42:6f:36:cc:b9:2e:50:8a: e4:9f:2c:b2:67:b1:d9:02:5e:bc:91:f4:75:f8:dd:b5:b1:de: 85:23:2d:4c:e6:f6:07:3c:d7:c6:66:ac:42:03:89:9b:32:2b: 5c:30:e2:7c:9c:2d:12:e7:ad:05:03:9e:cf:fb:72:d6:65:51: d9:2a:8a:61:5c:c8:d3:42:17:9e:79:0c:49:5c:90:2c:c0:c1: e0:d9:8d:91:b1:01:8d:b1:a0:15:43:86:bf:81:8f:95:d4:c5: 06:e4:8e:5b:e1:3e:a2:2d:bd:fb:44:80:b3:cc:5c:8b:06:39: 80:5f:25:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfmiCmZwPtlm6W2zxAjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmVkMTM5ZGYwZmFkNmZkZTBkODI4NjkxNDQxMDRkMjA0 YjkyYjUwHhcNMjUxMjA2MDgwMTE5WhcNMjUxMjA3MDgwMTE5WjAzMTEwLwYDVQQD EyhkZWFmOWMzYzNiYmZmMDlkZTNkZWVkZTY1Mzg5MTZkMjFhYzMzOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UktW2k23D2bKtXFoJLObGDltl3u 4uAxt/0T6UHSmnQ/mWyd3j4WuecLCVUbarOxAyGyF3dnzPcTP9LJk1AwbprDSJ09 cnAXmAAhDlrFJ5216DXqRaZ8jztyper/gRPp2xMb76xYmxTXB/FVxx+ua3D3JRvw R55e4nyhJCSRcpDTvIalFKgyCYSsnzh/BSQy9jfCtOtXg2s/+wmt90InRD8h9Fgu Ogj9wCLOhjARI7ipdRFmooMTduDiDLSOlHJvfsOGBwsHB0YbIbq2YNq8tf25yX0T DVsXEVQjPEpAT+oHHGzqj9q4zQ5nGvYctUG1ZJS00MUEPIZ3RDajdD4msQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6vnDw7v/Cd497t5lOJFtIawzlpMB8GA1UdIwQY MBaAFLr+0TnfD61v3g2ChpFEEE0gS5K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMt ZDgyYTkwZTM0YzJkLzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMtZDgyYTkwZTM0YzJk LzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnldxxBhX lVDX6ou9i2+rWGdptUZ4GtEBkUYzUYBxfrOeApsnsgerfupD7vgY2IZgFc99cqQ/ qRuyl/eSANtxqNRnoc/T1SHxjE3BbnoxG78iqsMtxUGkh1heX8eUZlFnmUTpG5Nf IYnhMyTvWpNV1y9c+50cHiV8dHqjVci/9TR8SVaxJfgqy0JvNsy5LlCK5J8ssmex 2QJevJH0dfjdtbHehSMtTOb2BzzXxmasQgOJmzIrXDDifJwtEuetBQOez/ty1mVR 2SqKYVzI00IXnnkMSVyQLMDB4NmNkbEBjbGgFUOGv4GPldTFBuSOW+E+oi29+0SA s8xciwY5gF8lRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:57 2025 by rpki-client