This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json) Hash identifier: 4n68CD+XvWmACY8NIM+Kj0PcgSri7FOKgYZzjwitl8s= Subject key identifier: 6C:F6:AC:6D:8D:EA:E0:DA:8B:0D:33:67:C5:58:5A:25:28:9C:1D:2B Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb Certificate serial: 019AF509B8FC2D7C92DEEBA7C195416068DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft Manifest number: 0E82 Signing time: Sat 06 Dec 2025 19:00:46 +0000 Manifest this update: Sat 06 Dec 2025 19:00:46 +0000 Manifest next update: Sun 07 Dec 2025 19:00:46 +0000 Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=) 2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: tKHc4U2Ik4c3WlzI9ASt4kLSr3eedn5F5bG0nqbKVQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b8:fc:2d:7c:92:de:eb:a7:c1:95:41:60:68:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb Validity Not Before: Dec 6 19:00:46 2025 GMT Not After : Dec 7 19:00:46 2025 GMT Subject: CN=6cf6ac6d8deae0da8b0d3367c5585a25289c1d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:0a:db:25:4f:63:9c:5a:63:bf:cc:58:46: 60:3b:0a:ff:9b:86:93:b3:02:b7:d2:e6:e4:f8:68: 16:a7:fb:dc:3c:7f:ee:b3:89:84:7a:18:37:ad:a2: 9f:0c:d5:12:d8:ef:62:0f:75:a2:a7:42:bc:aa:33: d7:74:b4:3e:05:45:26:32:dd:34:de:ce:c5:ea:93: a1:10:b5:59:d3:20:df:a9:82:9c:97:d2:5f:42:b5: 02:cb:1c:ee:22:d3:62:44:83:97:52:70:cf:51:d4: 86:1e:a5:e8:1d:03:5d:1a:25:23:34:6f:7c:8c:c4: 21:21:fc:b1:8e:ec:c9:2c:6b:84:70:a9:f8:02:a9: bd:c2:ec:92:5e:e3:fa:58:2f:66:d2:96:ff:76:c0: f1:fc:7a:e4:87:0c:f6:e5:d3:e3:73:e8:16:54:f9: ab:87:c0:f3:c4:b5:f0:5f:3f:a0:8c:6d:db:3f:e0: 11:10:4f:74:be:17:49:fb:28:b1:30:5d:9a:43:6c: 5a:b6:f1:b3:cc:c1:b0:2a:b8:27:e0:35:57:51:ac: 7b:68:45:b8:9b:28:6a:8e:23:d5:ee:bc:09:6a:86: 6c:95:06:f4:14:8c:b2:95:07:8d:e3:98:0e:aa:4b: ef:8d:6c:58:bd:c2:2f:c0:fc:76:90:35:d7:b3:ba: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F6:AC:6D:8D:EA:E0:DA:8B:0D:33:67:C5:58:5A:25:28:9C:1D:2B X509v3 Authority Key Identifier: keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fe:d1:d9:0e:3d:ea:42:44:98:da:5c:ca:4e:98:c7:83:bf: 06:a3:ee:88:15:e5:cb:e6:f9:bd:da:95:f8:be:41:7b:b5:c2: 68:20:c0:f4:4b:f2:9c:b3:74:9f:4d:dd:aa:d9:ec:80:e1:37: c0:7d:46:19:79:8e:20:58:65:f5:21:35:4b:3f:ca:1a:03:88: 64:16:77:46:ba:20:db:67:5a:d1:87:95:ea:fa:ae:ef:6d:17: 6d:2e:f4:dc:2a:de:a8:f0:dd:6d:65:27:ab:d9:8a:4a:1d:da: 17:29:11:f8:b0:45:cc:58:4d:4f:dc:ef:3d:36:23:10:28:00: e2:16:30:b1:de:3b:f5:63:c8:eb:0c:61:07:27:5f:ea:7a:e0: 22:06:2a:8d:cb:e1:89:80:31:b2:3c:7d:e4:b5:10:75:71:1d: 7c:ba:d4:4b:86:82:22:8c:6e:d8:a9:27:38:15:bd:31:97:47: ce:43:83:ca:cc:d4:ed:58:fe:88:b5:98:10:b4:e7:92:83:a7: 34:e4:a3:62:04:9b:54:c8:ad:83:e0:e7:ad:f5:71:ec:2d:a1: e1:87:fb:20:5e:54:ad:1e:1f:ee:22:c0:86:23:60:e8:90:b6: ff:f3:b6:4f:95:61:ad:3e:d3:b8:52:15:e6:54:a8:95:83:3c: 18:08:26:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cbj8LXyS3uunwZVBYGjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAx ZGEzYmIwHhcNMjUxMjA2MTkwMDQ2WhcNMjUxMjA3MTkwMDQ2WjAzMTEwLwYDVQQD Eyg2Y2Y2YWM2ZDhkZWFlMGRhOGIwZDMzNjdjNTU4NWEyNTI4OWMxZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA004K2yVPY5xaY7/MWEZgOwr/m4aT swK30ubk+GgWp/vcPH/us4mEehg3raKfDNUS2O9iD3Wip0K8qjPXdLQ+BUUmMt00 3s7F6pOhELVZ0yDfqYKcl9JfQrUCyxzuItNiRIOXUnDPUdSGHqXoHQNdGiUjNG98 jMQhIfyxjuzJLGuEcKn4Aqm9wuySXuP6WC9m0pb/dsDx/Hrkhwz25dPjc+gWVPmr h8DzxLXwXz+gjG3bP+AREE90vhdJ+yixMF2aQ2xatvGzzMGwKrgn4DVXUax7aEW4 myhqjiPV7rwJaoZslQb0FIyylQeN45gOqkvvjWxYvcIvwPx2kDXXs7qvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz2rG2N6uDaiw0zZ8VYWiUonB0rMB8GA1UdIwQY MBaAFLgcllJVeYeioFgMxcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUt ZmEwZDJlNDdlNmYxLzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYx LzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv7R2Q49 6kJEmNpcyk6Yx4O/BqPuiBXly+b5vdqV+L5Be7XCaCDA9EvynLN0n03dqtnsgOE3 wH1GGXmOIFhl9SE1Sz/KGgOIZBZ3Rrog22da0YeV6vqu720XbS703CreqPDdbWUn q9mKSh3aFykR+LBFzFhNT9zvPTYjECgA4hYwsd479WPI6wxhBydf6nrgIgYqjcvh iYAxsjx95LUQdXEdfLrUS4aCIoxu2KknOBW9MZdHzkODyszU7Vj+iLWYELTnkoOn NOSjYgSbVMitg+DnrfVx7C2h4Yf7IF5UrR4f7iLAhiNg6JC2//O2T5VhrT7TuFIV 5lSolYM8GAgmfA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:19 2025 by rpki-client