This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json) Hash identifier: 5SQANaMoV2gG+JAEwmRFxVFQcD6jHDamdSeUH9wPU08= Subject key identifier: 81:D6:12:E4:0E:FE:C6:74:FB:13:C3:79:8E:42:1E:F3:08:CD:5B:ED Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019AF12CE225CA557DACC8E80C628A1D6B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft Manifest number: 123B Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=) 2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: 8kPYAFlaJEwv6j6X5bbLlqfpqnazJEjc7cXQMTTecA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e2:25:ca:55:7d:ac:c8:e8:0c:62:8a:1d:6b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=81d612e40efec674fb13c3798e421ef308cd5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:b1:d1:a2:d3:b9:52:5c:8d:c3:81:5f:70: e3:31:1c:89:27:c2:6c:ac:6f:a3:34:f3:eb:a9:61: ef:25:e2:ec:05:8a:f4:6c:36:0b:f1:17:99:dc:e5: 17:ea:ea:32:24:d7:d8:5c:de:0c:77:14:d3:0c:f1: 8e:d9:33:6e:1a:46:0e:9e:d7:f1:c3:a4:3a:f1:8d: 65:41:ec:bc:21:31:82:d3:b3:7c:25:2c:81:12:d6: 7d:30:5a:7b:e0:5e:8f:43:6a:3e:6c:1f:12:81:35: b3:94:45:10:a4:14:47:8a:1f:bf:5c:b1:18:d0:a1: 5f:5e:9a:e7:3d:97:30:2f:c9:69:40:d0:c4:aa:9e: d4:4a:d4:e0:9f:76:5c:51:18:ea:e4:7f:a8:35:2e: 3e:0b:c8:a9:68:7b:85:14:80:4d:5d:6d:d3:1d:e0: 77:09:a4:d3:78:ce:d6:cc:d3:18:cf:47:ce:71:fa: 77:59:1e:e8:38:29:f9:59:fc:06:bd:ac:2a:70:78: 2a:da:d9:ae:7f:d3:6a:de:89:0d:ea:9e:f7:94:d1: 25:68:ae:1c:78:3a:3f:c1:ec:a9:cc:6c:6b:27:e4: 91:02:b9:11:46:55:4d:bc:33:05:20:ed:0a:22:cd: cf:1f:31:97:9c:2d:05:d7:50:35:c6:70:c0:17:95: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:12:E4:0E:FE:C6:74:FB:13:C3:79:8E:42:1E:F3:08:CD:5B:ED X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:17:be:54:a8:c4:10:ba:69:60:50:30:5e:9a:e4:66:a1:84: b5:c8:49:7c:72:14:a0:09:07:c8:3b:31:a1:01:36:ce:36:cc: 24:10:e3:75:91:49:ef:04:9c:d9:31:e2:2e:54:e3:1d:d9:33: 80:80:1c:da:2f:89:50:80:bd:e8:1c:04:f9:c2:84:ed:cb:01: 08:7b:eb:8a:97:1b:f2:8b:99:0b:61:1b:88:78:ce:24:ab:39: 6d:9c:69:5a:18:c2:87:76:f0:e3:ab:66:ba:d5:a0:fc:67:5c: ff:3d:63:2d:be:87:cb:af:8c:ac:17:b5:d4:34:0d:cd:34:a3: 5e:80:9d:bd:74:da:d6:80:ff:6b:df:11:a2:f2:87:ad:44:17: 10:3e:c2:f7:cd:11:60:c3:d4:da:86:b9:d2:b6:9e:c5:d7:54: 85:12:d5:6a:81:c7:30:6a:51:4f:18:d6:67:a4:39:99:70:4c: 23:cb:21:7b:f7:75:3a:a5:37:27:b3:d4:5f:d7:f7:86:2a:e6: 3e:77:86:da:03:fa:d5:0f:40:7c:99:d2:3b:bd:f0:b4:bf:b8: 1a:70:44:f3:03:21:c1:c8:8a:12:01:d8:ef:19:09:71:a9:04: 9c:48:63:c0:9f:76:2b:7f:78:1e:44:53:7f:cc:d8:59:d0:79: b1:04:87:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOIlylV9rMjoDGKKHWsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD Eyg4MWQ2MTJlNDBlZmVjNjc0ZmIxM2MzNzk4ZTQyMWVmMzA4Y2Q1YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrix0aLTuVJcjcOBX3DjMRyJJ8Js rG+jNPPrqWHvJeLsBYr0bDYL8ReZ3OUX6uoyJNfYXN4MdxTTDPGO2TNuGkYOntfx w6Q68Y1lQey8ITGC07N8JSyBEtZ9MFp74F6PQ2o+bB8SgTWzlEUQpBRHih+/XLEY 0KFfXprnPZcwL8lpQNDEqp7UStTgn3ZcURjq5H+oNS4+C8ipaHuFFIBNXW3THeB3 CaTTeM7WzNMYz0fOcfp3WR7oOCn5WfwGvawqcHgq2tmuf9Nq3okN6p73lNElaK4c eDo/weypzGxrJ+SRArkRRlVNvDMFIO0KIs3PHzGXnC0F11A1xnDAF5VIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHWEuQO/sZ0+xPDeY5CHvMIzVvtMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxe+VKjE ELppYFAwXprkZqGEtchJfHIUoAkHyDsxoQE2zjbMJBDjdZFJ7wSc2THiLlTjHdkz gIAc2i+JUIC96BwE+cKE7csBCHvripcb8ouZC2EbiHjOJKs5bZxpWhjCh3bw46tm utWg/Gdc/z1jLb6Hy6+MrBe11DQNzTSjXoCdvXTa1oD/a98RovKHrUQXED7C980R YMPU2oa50raexddUhRLVaoHHMGpRTxjWZ6Q5mXBMI8she/d1OqU3J7PUX9f3hirm PneG2gP61Q9AfJnSO73wtL+4GnBE8wMhwciKEgHY7xkJcakEnEhjwJ92K394HkRT f8zYWdB5sQSH0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:57 2025 by rpki-client