This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json) Hash identifier: wGGCBNVoQ5qsj6tZLzOzNfxoKaKGdAaQNeXfW/bFeJ4= Subject key identifier: C8:18:14:0E:B5:49:0F:8C:07:14:64:F7:25:26:F8:24:D0:37:E3:AE Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2 Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2 Certificate serial: 019AF163F3A88EC8DD67B5C02A483ACA6B00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft Manifest number: 0B7A Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=) 2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: IqngRstCeao2e97c/RwdYcznWvV9Y0uA8fPJ9iUC8+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f3:a8:8e:c8:dd:67:b5:c0:2a:48:3a:ca:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=c818140eb5490f8c071464f72526f824d037e3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:95:63:70:8b:f1:a7:f1:1a:a9:dc:7e:75:07: dc:7c:4d:95:56:3c:f0:3a:0f:2b:b9:5a:18:83:78: bb:31:9b:5a:30:e7:93:7f:1c:91:0a:48:22:a7:7d: 67:23:50:a8:fe:07:d4:eb:c6:f7:7c:0a:c7:33:02: 46:06:62:9e:ad:c4:92:86:1a:52:ed:24:96:70:b3: ce:e4:50:33:11:c7:ca:07:c2:7f:9e:be:03:1d:75: a0:76:54:a3:1b:47:84:cb:a0:74:db:d6:c6:99:a0: 43:4e:61:34:11:b1:70:96:22:cb:3b:86:e2:46:ed: 7f:d7:85:d8:cf:e3:5c:32:69:3e:3d:40:d0:99:9d: 80:02:79:43:19:7c:97:25:be:b1:b9:64:34:6c:4c: 80:ac:57:3e:99:c5:45:9b:f3:f4:9d:14:10:61:13: 1e:c1:61:dd:bf:99:b8:ff:71:c5:3e:62:75:8c:b8: 6d:11:c6:80:76:58:76:9d:50:df:91:18:5f:c8:c8: 1a:c2:0a:5a:f8:de:b9:48:fe:1c:e9:ad:e4:14:10: 76:05:1b:df:74:d8:a1:57:15:eb:49:e0:4b:4c:e4: dc:d5:5c:6b:d9:08:90:20:d2:38:79:2a:7d:5b:41: c4:34:35:74:0a:0e:67:45:09:84:3a:14:ea:1c:1a: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:14:0E:B5:49:0F:8C:07:14:64:F7:25:26:F8:24:D0:37:E3:AE X509v3 Authority Key Identifier: keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:20:b4:45:47:90:59:bd:ab:bd:b5:cc:35:cf:32:61:a5:3e: 90:48:63:8c:93:6f:1e:d1:c0:d0:e3:fc:8a:0a:2a:bb:fa:ff: 6e:65:fe:61:c0:10:84:74:9f:48:1b:fa:de:cd:96:07:1a:ca: 1f:e3:8a:d0:62:2f:8d:20:dd:96:99:11:25:48:78:31:cc:6e: 63:b1:ab:b8:44:8a:0f:70:2b:ea:28:5d:28:1b:23:51:c4:5a: 70:90:36:82:6b:a8:44:d2:62:3d:70:b2:dd:9c:6a:0d:5c:cf: b4:41:e0:ef:4f:14:af:6b:05:ba:16:92:18:4e:00:75:68:ed: 5a:ce:d8:a3:2a:cf:25:40:95:83:c6:e7:31:13:d0:c6:f7:69: 1c:76:3a:4a:fc:a6:91:a5:89:57:ab:b3:23:fb:09:a5:59:81: d5:eb:9e:15:6a:84:d7:e1:31:87:98:1f:bf:9b:29:80:41:d5: 78:a3:c4:5f:06:a4:e5:2e:10:06:c3:fa:61:99:2a:bd:27:6f: 42:51:8e:06:f7:93:76:a1:9a:b8:36:16:3b:74:30:55:87:62: 21:0e:d8:72:b1:11:d5:3c:e7:0f:2d:86:ed:8f:6a:45:8d:16: a9:14:f6:1c:20:16:d1:cd:58:a2:01:b3:23:0b:8d:f0:fd:1c: c3:6b:40:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/OojsjdZ7XAKkg6ymsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZjc5MTI3ZWUzNGEzYWVlOTA3OWM4ZTk3OTljNDBmMGRj OGRjYTIwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EyhjODE4MTQwZWI1NDkwZjhjMDcxNDY0ZjcyNTI2ZjgyNGQwMzdlM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JVjcIvxp/Eaqdx+dQfcfE2VVjzw Og8ruVoYg3i7MZtaMOeTfxyRCkgip31nI1Co/gfU68b3fArHMwJGBmKercSShhpS 7SSWcLPO5FAzEcfKB8J/nr4DHXWgdlSjG0eEy6B029bGmaBDTmE0EbFwliLLO4bi Ru1/14XYz+NcMmk+PUDQmZ2AAnlDGXyXJb6xuWQ0bEyArFc+mcVFm/P0nRQQYRMe wWHdv5m4/3HFPmJ1jLhtEcaAdlh2nVDfkRhfyMgawgpa+N65SP4c6a3kFBB2BRvf dNihVxXrSeBLTOTc1Vxr2QiQINI4eSp9W0HENDV0Cg5nRQmEOhTqHBr0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgYFA61SQ+MBxRk9yUm+CTQN+OuMB8GA1UdIwQY MBaAFLr3kSfuNKOu6QecjpeZxA8NyNyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUt YTJhNWE4ZDk5ZGI4LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hNWZjMTEtNzJiNC00ZjlkLWFhNDUtYTJhNWE4ZDk5ZGI4 LzEvdXZlUkotNDBvNjdwQjV5T2w1bkVEdzNJM0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyC0RUeQ Wb2rvbXMNc8yYaU+kEhjjJNvHtHA0OP8igoqu/r/bmX+YcAQhHSfSBv63s2WBxrK H+OK0GIvjSDdlpkRJUh4McxuY7GruESKD3Ar6ihdKBsjUcRacJA2gmuoRNJiPXCy 3ZxqDVzPtEHg708Ur2sFuhaSGE4AdWjtWs7YoyrPJUCVg8bnMRPQxvdpHHY6Svym kaWJV6uzI/sJpVmB1eueFWqE1+Exh5gfv5spgEHVeKPEXwak5S4QBsP6YZkqvSdv QlGOBveTdqGauDYWO3QwVYdiIQ7YcrER1TznDy2G7Y9qRY0WqRT2HCAW0c1YogGz IwuN8P0cw2tA1w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:02 2025 by rpki-client