This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json) Hash identifier: sMmSfbKIutVWbBVuK+4oXR7qXfB5ZS76AuoShpfZxGY= Subject key identifier: 22:92:9B:C7:57:05:05:64:1F:54:55:8C:30:C6:C0:E8:DA:34:03:1C Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb Certificate serial: 019AF5AE83FAD3669FBD66D298255D127A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft Manifest number: 0DF4 Signing time: Sat 06 Dec 2025 22:00:46 +0000 Manifest this update: Sat 06 Dec 2025 22:00:46 +0000 Manifest next update: Sun 07 Dec 2025 22:00:46 +0000 Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: CCg5ONlt8updCsg0/nMnQ9EmAp4vBjPOi0t4rt2/6B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:83:fa:d3:66:9f:bd:66:d2:98:25:5d:12:7a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb Validity Not Before: Dec 6 22:00:46 2025 GMT Not After : Dec 7 22:00:46 2025 GMT Subject: CN=22929bc7570505641f54558c30c6c0e8da34031c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:f6:d3:a9:aa:74:07:be:bc:76:11:50:93: 0b:76:57:ef:19:20:12:fd:66:50:a7:46:48:6a:3e: ba:cc:5d:df:9c:3a:bf:49:af:0a:e0:c5:a9:df:48: 8c:bc:96:d0:ad:73:f4:b4:95:fb:8d:83:cd:8d:b4: 8f:58:81:45:6e:10:c4:59:58:ae:28:f7:20:08:21: 14:a4:f1:16:8f:d0:1c:bb:3d:2a:af:1b:84:9e:2e: d9:8c:ed:59:17:e4:8f:23:84:1a:54:fe:50:d4:7d: 65:74:69:9e:dd:23:4f:6b:f7:06:50:67:d8:3c:0f: af:b0:c5:3e:d8:01:53:52:ab:c6:03:c4:f4:99:65: 65:32:69:ed:e4:f5:61:73:33:ff:1f:b3:2d:91:1a: 40:9e:db:41:cd:88:b0:23:71:b8:d8:b6:ca:57:e5: 99:81:35:01:4d:4a:d1:75:d8:93:1d:ec:db:14:21: 3d:05:a8:18:6f:5e:36:ab:5b:90:43:07:c2:1f:fa: 51:8e:03:f6:1e:35:5a:f2:85:bb:74:44:20:82:ad: d3:97:15:8b:af:88:84:a0:a1:72:af:7d:0d:fb:92: 56:92:19:8d:a4:d3:6f:81:8b:88:03:59:82:93:4f: 76:c4:61:8a:de:d9:11:8b:65:97:17:d4:11:87:d8: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:9B:C7:57:05:05:64:1F:54:55:8C:30:C6:C0:E8:DA:34:03:1C X509v3 Authority Key Identifier: keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:59:16:9c:b2:32:bd:3c:86:91:00:10:24:7f:c9:8f:7b:01: 71:85:f6:35:56:78:3a:7c:4b:f5:00:bc:7d:b2:f3:6d:45:c2: da:e5:48:1e:59:9b:60:41:f4:9b:f5:d3:e8:6c:dd:d2:30:b8: f9:11:2d:3f:95:1f:87:23:f3:b1:9b:68:4a:47:da:d3:84:bb: cc:a9:85:c1:fa:22:e3:da:38:b9:da:ca:dc:b5:0f:1c:4b:48: 0c:c9:2a:db:8b:91:05:00:ca:2a:66:e2:2c:75:2b:a1:c9:38: fa:6c:05:d9:69:1e:db:5a:75:bc:92:0a:ea:e2:26:07:b6:de: 5d:95:c5:1d:af:3e:a2:79:c3:b2:2a:a8:39:0c:3e:72:80:8b: 36:c0:22:ea:d1:b8:9f:25:97:67:a7:a4:ec:96:44:0c:94:d0: ea:c9:71:1c:29:2d:59:f0:e8:b6:b9:ef:bd:44:d9:f3:d7:99: 24:a3:82:61:e5:6f:62:6b:5e:22:e5:e0:70:3e:b0:99:c5:e6: 05:02:5c:1c:02:81:5e:87:44:03:aa:d8:11:bd:4d:15:0a:74: 37:90:0b:3a:ce:5e:e1:d3:e6:4c:13:cb:f1:f1:87:3d:14:8a: 8b:2b:80:70:f7:04:16:cb:1e:ef:6f:af:2e:ee:95:37:f9:03: bb:45:4d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roP602afvWbSmCVdEnoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4Yjg2Y2M4NDc4MmVhNDEwYzZkODdjMmNkM2JmODZhMDZh YTE3YmIwHhcNMjUxMjA2MjIwMDQ2WhcNMjUxMjA3MjIwMDQ2WjAzMTEwLwYDVQQD EygyMjkyOWJjNzU3MDUwNTY0MWY1NDU1OGMzMGM2YzBlOGRhMzQwMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvff206mqdAe+vHYRUJMLdlfvGSAS /WZQp0ZIaj66zF3fnDq/Sa8K4MWp30iMvJbQrXP0tJX7jYPNjbSPWIFFbhDEWViu KPcgCCEUpPEWj9Acuz0qrxuEni7ZjO1ZF+SPI4QaVP5Q1H1ldGme3SNPa/cGUGfY PA+vsMU+2AFTUqvGA8T0mWVlMmnt5PVhczP/H7MtkRpAnttBzYiwI3G42LbKV+WZ gTUBTUrRddiTHezbFCE9BagYb142q1uQQwfCH/pRjgP2HjVa8oW7dEQggq3TlxWL r4iEoKFyr30N+5JWkhmNpNNvgYuIA1mCk092xGGK3tkRi2WXF9QRh9iulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKSm8dXBQVkH1RVjDDGwOjaNAMcMB8GA1UdIwQY MBaAFLi4bMhHgupBDG2Hws07+GoGqhe7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTct Y2Y1MzFlYzIzMGQ4LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS82MmFkMTktM2U5Zi00N2VjLTllZTctY2Y1MzFlYzIzMGQ4 LzEvdUxoc3lFZUM2a0VNYllmQ3pUdjRhZ2FxRjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFkWnLIy vTyGkQAQJH/Jj3sBcYX2NVZ4OnxL9QC8fbLzbUXC2uVIHlmbYEH0m/XT6Gzd0jC4 +REtP5UfhyPzsZtoSkfa04S7zKmFwfoi49o4udrK3LUPHEtIDMkq24uRBQDKKmbi LHUrock4+mwF2Wke21p1vJIK6uImB7beXZXFHa8+onnDsiqoOQw+coCLNsAi6tG4 nyWXZ6ek7JZEDJTQ6slxHCktWfDotrnvvUTZ89eZJKOCYeVvYmteIuXgcD6wmcXm BQJcHAKBXodEA6rYEb1NFQp0N5ALOs5e4dPmTBPL8fGHPRSKiyuAcPcEFsse72+v Lu6VN/kDu0VN3w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:11 2025 by rpki-client