This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json) Hash identifier: 1P2crGXHQ+eyDma9ZSF+aVXY2uvK74UXvlQ1c/v5miY= Subject key identifier: 72:E3:5E:EB:08:DC:DD:98:C7:F5:01:3D:75:1B:AA:9E:27:3C:B8:A9 Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c Certificate serial: 019B3D2320998BC3DECCF9927AE63821FCD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft Manifest number: 0944 Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=) 2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: ZWAwCNre/ZHKLlIuZp1Mq+KLwx4c+Kr19FNnJRNzVCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:20:99:8b:c3:de:cc:f9:92:7a:e6:38:21:fc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=72e35eeb08dcdd98c7f5013d751baa9e273cb8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:c9:7a:cd:31:78:0a:50:09:ec:82:1f:86: c4:60:4e:ae:ce:93:4b:92:b8:38:95:4c:5f:38:f8: 57:19:00:5a:0e:de:c5:52:a6:cd:e1:5f:b6:f5:d0: 04:2f:e7:e6:05:db:f1:24:a7:7d:38:56:c0:cc:05: f3:ab:84:23:48:c2:44:c1:0c:9a:4d:f9:b7:d3:ef: 03:ae:01:ea:5d:7b:0f:b7:c3:73:5c:f2:2b:00:2d: 1a:8e:78:ac:28:a4:4d:19:d2:01:84:38:26:0d:6b: 81:f9:3d:78:92:e0:b2:13:5e:c6:32:fd:a3:9e:27: 38:45:76:45:d4:91:9a:73:d1:ad:05:bf:72:53:e8: ce:77:c7:64:f6:70:66:5f:24:47:1c:bb:49:c6:22: 61:96:87:88:e6:98:b7:6c:fd:f9:fb:e7:09:c2:b0: 66:62:02:78:96:b0:ea:7e:86:fc:ad:31:2f:3a:72: b8:85:c7:b9:51:1f:a3:8b:a4:15:19:27:62:a9:7d: 02:ed:10:a2:ec:18:f9:c3:98:7c:c3:f7:84:13:e0: 17:ac:36:04:21:81:b7:c1:7e:04:48:54:cd:fe:9b: 4d:25:a2:f9:41:b9:f7:d5:0d:16:cb:b4:78:1c:21: 5d:0b:97:dd:b3:12:ce:a9:46:9a:fb:30:6c:f9:99: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E3:5E:EB:08:DC:DD:98:C7:F5:01:3D:75:1B:AA:9E:27:3C:B8:A9 X509v3 Authority Key Identifier: keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:71:69:f3:d0:93:77:d1:30:e5:b7:3e:b2:2a:d9:d2:c0:0f: cb:2b:d8:e6:53:88:c6:a8:0c:8a:fb:3a:b5:60:c1:f0:94:52: 1b:a2:fa:08:5e:5a:49:9c:68:7a:e3:a8:4f:6b:f7:b5:29:de: 81:0f:a1:ec:44:40:3f:6b:d2:49:60:99:ac:6c:57:5e:08:13: 65:3f:17:3c:60:86:a2:5a:f8:52:0f:30:fd:1d:19:ba:f5:48: f4:18:4e:ff:3f:49:a2:d5:70:07:ca:a0:f7:e2:7f:c0:cc:2c: 5c:20:92:1e:54:bb:46:d4:db:14:49:28:53:7d:ce:62:f3:25: 6d:d2:51:3d:b8:42:91:62:d7:f2:8a:a7:29:8f:f8:4d:21:3d: b5:9a:99:88:93:89:de:85:1a:39:c1:0e:b0:2e:7d:84:16:ee: a6:ad:02:8b:5f:56:52:74:77:fc:1d:35:85:16:5a:24:ca:04: 19:63:a3:ca:34:4b:30:ba:7a:ea:6e:36:97:55:b6:2d:a0:e2: bd:bb:cc:f9:2c:3b:e5:7a:5d:86:2c:52:15:73:2f:79:30:5b: 53:26:65:5e:4f:76:67:c8:bc:83:cf:a8:4e:10:bf:3d:7f:c9: 49:43:f3:34:36:9c:a9:83:d5:b3:fb:8c:3f:a4:19:a3:1d:55: e1:bc:d0:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyCZi8PezPmSeuY4IfzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTRmNzM0ZmRlNzFhYzQyMTk1N2YyN2M4NDk5NDk2ZjQ0 NDBkN2MwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD Eyg3MmUzNWVlYjA4ZGNkZDk4YzdmNTAxM2Q3NTFiYWE5ZTI3M2NiOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvPJes0xeApQCeyCH4bEYE6uzpNL krg4lUxfOPhXGQBaDt7FUqbN4V+29dAEL+fmBdvxJKd9OFbAzAXzq4QjSMJEwQya Tfm30+8DrgHqXXsPt8NzXPIrAC0ajnisKKRNGdIBhDgmDWuB+T14kuCyE17GMv2j nic4RXZF1JGac9GtBb9yU+jOd8dk9nBmXyRHHLtJxiJhloeI5pi3bP35++cJwrBm YgJ4lrDqfob8rTEvOnK4hce5UR+ji6QVGSdiqX0C7RCi7Bj5w5h8w/eEE+AXrDYE IYG3wX4ESFTN/ptNJaL5Qbn31Q0Wy7R4HCFdC5fdsxLOqUaa+zBs+Zk+mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLjXusI3N2Yx/UBPXUbqp4nPLipMB8GA1UdIwQY MBaAFLjk9zT95xrEIZV/J8hJlJb0RA18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEt YmNmZTNhZDM4N2NlLzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEtYmNmZTNhZDM4N2Nl LzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHFp89CT d9Ew5bc+sirZ0sAPyyvY5lOIxqgMivs6tWDB8JRSG6L6CF5aSZxoeuOoT2v3tSne gQ+h7ERAP2vSSWCZrGxXXggTZT8XPGCGolr4Ug8w/R0ZuvVI9BhO/z9JotVwB8qg 9+J/wMwsXCCSHlS7RtTbFEkoU33OYvMlbdJRPbhCkWLX8oqnKY/4TSE9tZqZiJOJ 3oUaOcEOsC59hBbupq0Ci19WUnR3/B01hRZaJMoEGWOjyjRLMLp66m42l1W2LaDi vbvM+Sw75XpdhixSFXMveTBbUyZlXk92Z8i8g8+oThC/PX/JSUPzNDacqYPVs/uM P6QZox1V4bzQuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:51:02 2025 by rpki-client