This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json) Hash identifier: voB5DcjwN9rPSROeqjL9W9EZ8GfVLTlu96kkeUVoWMo= Subject key identifier: 0E:FE:44:25:7C:6E:33:CB:5B:40:B8:1E:76:35:B5:26:50:EF:D2:19 Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Certificate serial: 019AF1D23B6FF8A5B2D8DF3CBE18FEEC1FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft Manifest number: 03AA Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: 2CQcP2peBvWv5O0r1PZDcTdp1VDljgR4oVXds+/SKEM=) 2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3b:6f:f8:a5:b2:d8:df:3c:be:18:fe:ec:1f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=0efe44257c6e33cb5b40b81e7635b52650efd219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:1e:9b:da:43:f3:87:23:28:ea:7e:65:ba: f4:88:5f:97:cd:b5:91:c4:7e:fc:20:87:a0:30:95: 4b:0c:54:c6:08:40:f5:b6:cd:30:19:09:d8:ce:b4: 5e:7c:a0:4b:c5:94:c1:3a:39:2b:5d:15:a7:56:7e: 56:47:86:6c:65:dd:de:36:c7:de:2c:c3:3a:ef:47: 8d:f4:bf:e2:af:f0:89:c1:65:b2:90:9e:6f:2c:b9: 5e:26:30:13:7c:d2:3d:4c:99:dc:5b:2c:cb:8b:18: d3:04:db:38:f7:ba:14:0b:52:21:1c:44:8d:62:22: 85:ea:1f:a7:99:6e:b3:b9:4b:90:d1:d3:b7:f2:34: 4c:b3:20:09:58:59:82:ba:07:a8:b1:48:67:47:39: c4:35:ca:c8:3c:67:2a:af:64:16:52:50:8e:01:d5: 57:1f:60:21:89:9e:2f:5a:a4:d3:38:fd:1a:61:d0: a5:62:29:08:0d:1c:b8:5b:8f:09:d4:85:b8:2f:e8: f0:e6:c6:2d:e3:39:ac:db:21:6d:aa:ff:e1:3a:5d: 9f:cb:e5:a3:51:1d:b4:04:23:b3:f3:e6:e4:f2:ef: 72:7b:69:e3:ad:d0:8c:31:c4:c0:31:cc:9f:9c:ab: 76:0e:76:5c:19:23:fc:a9:be:36:d8:d4:2a:0e:a1: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FE:44:25:7C:6E:33:CB:5B:40:B8:1E:76:35:B5:26:50:EF:D2:19 X509v3 Authority Key Identifier: keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bf:1b:53:c7:c7:90:98:62:53:6e:e3:bd:b5:ea:37:36:da: 92:54:03:62:50:ab:e0:0f:e8:d5:56:1a:8a:4b:95:e5:83:56: ee:40:ba:7e:1a:12:06:1b:d4:de:92:f8:71:ed:43:87:02:6b: 45:7d:11:f6:03:7a:64:f8:1f:2f:ff:fe:e9:c6:e6:fc:9c:00: 60:6e:19:da:9b:d4:a0:81:e9:b9:8d:f7:dd:56:60:d7:7d:f7: b5:7e:b8:bf:b5:b5:0a:93:4d:c9:06:a7:b1:0c:fd:ff:81:45: b8:f8:db:8e:68:ce:95:ea:79:03:01:47:2e:dc:cd:67:94:16: 09:1f:80:32:21:8f:0b:8a:a4:c0:2f:04:1a:54:3a:02:b2:99: 67:86:96:64:a5:67:b2:1e:26:0d:44:9d:26:46:03:e7:aa:a2: 74:b4:59:1c:de:cc:72:3f:27:0f:23:18:f5:a2:bf:40:b5:24: 3d:02:9b:4d:22:43:73:ab:96:eb:d9:7c:d8:61:81:30:7a:28: d3:38:9d:e0:96:02:5b:20:6a:f2:1d:45:af:5c:b1:36:fb:83: 79:fc:98:cd:ad:e9:7f:58:f7:c1:13:fa:ce:ab:7f:6e:55:4f: 12:eb:33:6d:42:c0:e3:37:5b:e6:55:0e:d4:53:57:e6:91:c1: d6:c1:19:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jtv+KWy2N88vhj+7B/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz ZDk4OGMwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygwZWZlNDQyNTdjNmUzM2NiNWI0MGI4MWU3NjM1YjUyNjUwZWZkMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3cem9pD84cjKOp+Zbr0iF+XzbWR xH78IIegMJVLDFTGCED1ts0wGQnYzrRefKBLxZTBOjkrXRWnVn5WR4ZsZd3eNsfe LMM670eN9L/ir/CJwWWykJ5vLLleJjATfNI9TJncWyzLixjTBNs497oUC1IhHESN YiKF6h+nmW6zuUuQ0dO38jRMsyAJWFmCugeosUhnRznENcrIPGcqr2QWUlCOAdVX H2AhiZ4vWqTTOP0aYdClYikIDRy4W48J1IW4L+jw5sYt4zms2yFtqv/hOl2fy+Wj UR20BCOz8+bk8u9ye2njrdCMMcTAMcyfnKt2DnZcGSP8qb422NQqDqGDJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7+RCV8bjPLW0C4HnY1tSZQ79IZMB8GA1UdIwQY MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0 LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqr8bU8fH kJhiU27jvbXqNzbaklQDYlCr4A/o1VYaikuV5YNW7kC6fhoSBhvU3pL4ce1DhwJr RX0R9gN6ZPgfL//+6cbm/JwAYG4Z2pvUoIHpuY333VZg1333tX64v7W1CpNNyQan sQz9/4FFuPjbjmjOlep5AwFHLtzNZ5QWCR+AMiGPC4qkwC8EGlQ6ArKZZ4aWZKVn sh4mDUSdJkYD56qidLRZHN7Mcj8nDyMY9aK/QLUkPQKbTSJDc6uW69l82GGBMHoo 0zid4JYCWyBq8h1Fr1yxNvuDefyYza3pf1j3wRP6zqt/blVPEuszbULA4zdb5lUO 1FNX5pHB1sEZpg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:04 2025 by rpki-client