This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json) Hash identifier: tooeoD/mO3mKBwK+LmC9OvS58XGl4ftFi5svZnblavg= Subject key identifier: 35:62:21:4B:1F:A6:50:41:73:DE:FE:04:02:26:CA:DD:5F:B4:D6:B4 Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Certificate serial: 019AF1D188E07310341F0C351BE88136093A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft Manifest number: 0F57 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: dsUTvgn53Na7cdkU6sIBbDIYg2V1QoI7FWk98NTOJyg=) 2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:88:e0:73:10:34:1f:0c:35:1b:e8:81:36:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=3562214b1fa6504173defe040226cadd5fb4d6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:dc:44:41:c7:c9:b3:e1:24:94:61:73:52: dd:a5:39:19:d2:08:ef:69:48:ac:be:d5:2e:16:0c: c8:8e:ad:46:63:fc:16:2e:f1:f7:f4:c4:12:55:aa: 2f:08:b3:2e:12:72:27:98:c3:66:6d:3c:79:2c:02: 75:92:de:36:22:7b:0b:84:e1:7c:2d:a0:2d:8d:84: e9:bb:b8:fc:30:a9:41:06:1e:f3:bc:2a:b0:67:2f: ef:1d:05:6a:ea:84:d3:c9:84:ce:a2:28:eb:fc:dd: ea:7f:b2:86:79:a5:bf:f1:a0:c6:7d:99:c1:11:ab: df:97:a1:d4:a7:1e:88:29:e0:0e:dd:3c:b0:11:2e: 66:03:74:ba:c5:2d:69:43:55:24:7f:50:5b:78:77: d6:75:c9:86:aa:1d:e9:f7:bd:33:60:0b:51:e8:5b: 56:66:e9:0c:48:4f:83:62:3e:50:5d:9e:11:dc:d9: 44:fc:f5:07:b2:a3:d7:8f:ad:7b:d6:9c:2e:3c:21: 87:8e:25:bc:23:6a:a9:04:6c:e3:38:44:20:f7:c1: 9a:b3:4e:78:d1:9b:4a:66:90:91:5d:87:55:44:e4: 98:d7:b0:30:f7:3c:fe:e6:2e:9d:7f:4b:97:24:43: 69:8e:32:03:d5:46:5f:05:76:0a:f5:6f:bb:a3:30: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:21:4B:1F:A6:50:41:73:DE:FE:04:02:26:CA:DD:5F:B4:D6:B4 X509v3 Authority Key Identifier: keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:01:a2:38:cc:40:b1:b5:c8:c5:ab:53:91:9f:6b:c6:10: 20:b7:5b:a0:4b:c3:2f:ce:39:9a:e9:44:84:b2:06:51:04:e6: 6b:27:a9:b0:13:85:9b:1c:3e:d4:a4:32:f9:f1:20:16:6d:6f: b2:e1:68:bb:43:07:0e:5e:57:10:01:03:e3:6b:35:a8:57:b7: 48:a0:12:78:f2:a5:f8:41:9b:71:37:a3:91:b1:48:05:a9:31: be:73:84:7e:df:03:41:22:82:be:6f:70:bc:70:a3:9c:ff:ce: a9:81:66:eb:d8:04:6d:c0:6c:8e:34:20:4f:b4:6d:80:d7:3a: 28:85:0f:49:3e:2b:94:fe:05:14:d4:39:f8:5b:86:9a:77:50: 8f:54:4d:e9:26:66:7a:ec:c1:51:d5:40:8a:fd:ea:1e:0a:ec: aa:e4:b5:fa:2e:a2:3a:e2:8b:26:82:c0:0e:ac:3e:64:80:af: 5b:79:d8:cb:f8:1c:a3:99:ab:3a:c9:f6:6d:5d:ca:d5:51:71: 90:c6:39:1f:5d:e7:af:7e:e2:06:5e:19:90:ca:aa:d2:a7:4a: 72:57:69:53:8e:5b:d0:d4:8c:48:da:3c:ec:5f:6e:5b:be:2f: d0:24:f5:a2:5c:5a:ee:39:31:fe:28:16:87:f4:a1:ec:06:3e: dd:a8:07:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YjgcxA0Hww1G+iBNgk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx MTM2MGUwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD EygzNTYyMjE0YjFmYTY1MDQxNzNkZWZlMDQwMjI2Y2FkZDVmYjRkNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/cREHHybPhJJRhc1LdpTkZ0gjv aUisvtUuFgzIjq1GY/wWLvH39MQSVaovCLMuEnInmMNmbTx5LAJ1kt42InsLhOF8 LaAtjYTpu7j8MKlBBh7zvCqwZy/vHQVq6oTTyYTOoijr/N3qf7KGeaW/8aDGfZnB Eavfl6HUpx6IKeAO3TywES5mA3S6xS1pQ1Ukf1BbeHfWdcmGqh3p970zYAtR6FtW ZukMSE+DYj5QXZ4R3NlE/PUHsqPXj6171pwuPCGHjiW8I2qpBGzjOEQg98Gas054 0ZtKZpCRXYdVROSY17Aw9zz+5i6df0uXJENpjjID1UZfBXYK9W+7ozBfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDViIUsfplBBc97+BAImyt1ftNa0MB8GA1UdIwQY MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt ZDBjZmU0MzAxNmRlLzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGwBojjM QLG1yMWrU5Gfa8YQILdboEvDL845mulEhLIGUQTmayepsBOFmxw+1KQy+fEgFm1v suFou0MHDl5XEAED42s1qFe3SKASePKl+EGbcTejkbFIBakxvnOEft8DQSKCvm9w vHCjnP/OqYFm69gEbcBsjjQgT7RtgNc6KIUPST4rlP4FFNQ5+FuGmndQj1RN6SZm euzBUdVAiv3qHgrsquS1+i6iOuKLJoLADqw+ZICvW3nYy/gco5mrOsn2bV3K1VFx kMY5H13nr37iBl4ZkMqq0qdKcldpU45b0NSMSNo87F9uW74v0CT1olxa7jkx/igW h/Sh7AY+3agHEw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:37 2025 by rpki-client