This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json) Hash identifier: x/6ONJSt8yJL2w09YzDkTZBfNM/NCXJuThZJnGcABHo= Subject key identifier: 75:38:D7:2E:2F:CF:85:E7:81:7E:57:E9:79:EE:38:BF:2A:BB:B1:F4 Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a Certificate serial: 019AF3526A7AB8230E96BD21F797A9A22D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:00:55 +0000 Manifest this update: Sat 06 Dec 2025 11:00:55 +0000 Manifest next update: Sun 07 Dec 2025 11:00:55 +0000 Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=) 2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 1l0tjMt+C4+97H6btgCP5XEqI5P/btjg4dzx0ReXGXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6a:7a:b8:23:0e:96:bd:21:f7:97:a9:a2:2d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a Validity Not Before: Dec 6 11:00:55 2025 GMT Not After : Dec 7 11:00:55 2025 GMT Subject: CN=7538d72e2fcf85e7817e57e979ee38bf2abbb1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:4a:27:5b:00:f5:08:fe:71:ce:0c:9e:e6: d6:0d:12:54:55:63:a0:cc:36:bf:a0:1f:ce:05:7d: a0:3f:a8:ba:d1:26:34:d1:4e:36:1d:39:fe:65:81: 4a:76:5f:27:14:8b:b3:d9:3b:10:57:08:8d:0b:19: c4:f0:bd:9a:b9:be:ba:29:79:0a:e8:ae:ad:09:eb: d0:78:06:a7:9c:49:09:9a:08:f3:1d:34:db:c8:49: 97:1b:7c:60:9b:28:79:ce:28:5c:5c:74:8d:4f:2a: af:06:d3:13:1b:ef:ee:0c:95:be:3b:da:13:c3:10: 89:96:33:36:9a:7f:c1:48:8e:77:37:a7:42:41:57: 22:40:9e:17:2e:23:1d:89:28:f5:de:d3:1a:9d:a2: b3:e5:fa:b5:9a:3d:c8:3b:5f:64:4a:6e:27:9f:cd: f3:b4:88:9e:68:e3:48:b8:79:47:65:09:29:c2:f7: 4d:f2:7b:ef:d2:5f:61:a8:d1:80:f1:35:72:1d:a4: 14:e5:ae:f2:96:6b:86:2d:2e:57:fe:59:12:4a:26: 68:6e:48:ae:e6:25:f0:cb:b2:38:3f:29:26:f4:52: 1b:20:ed:15:4b:66:93:65:f2:61:c4:f8:ac:45:94: 2d:0f:03:dd:55:14:fc:90:b4:98:4e:b6:69:78:18: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:38:D7:2E:2F:CF:85:E7:81:7E:57:E9:79:EE:38:BF:2A:BB:B1:F4 X509v3 Authority Key Identifier: keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c5:04:64:05:9e:91:4a:23:24:a6:c4:c6:38:7b:a5:a9:a9: 52:aa:ec:2c:4e:2f:66:64:ea:1b:36:51:24:16:4f:3d:9f:2b: 88:b8:e3:54:28:76:32:61:20:07:12:e6:7c:9b:fb:72:f1:20: fd:21:39:b5:56:f9:f7:e2:c6:1b:e3:eb:10:0c:aa:55:84:2e: 05:e7:d1:d2:e7:ed:40:ed:11:33:6b:c5:da:31:f3:eb:be:a8: 95:1b:ca:b7:1c:04:8b:16:c4:04:a4:9b:c6:1c:15:82:6d:1e: 02:9d:63:0a:d6:00:9c:52:34:76:d6:85:a1:26:be:4b:76:cb: 42:ea:5e:99:ed:4b:2b:3f:da:30:81:d5:cb:2f:97:f2:20:b0: 01:43:32:ae:51:e5:26:36:92:23:04:69:69:25:ce:7b:77:11: cf:82:67:34:b7:17:c3:27:87:f4:a6:73:6c:94:fc:96:23:76: a6:77:f5:c6:b5:1d:d0:1c:57:16:98:b4:5a:b8:d1:e2:83:eb: 68:d1:a4:88:e3:06:23:d8:85:b2:00:53:68:f2:9b:4c:89:77: cf:c8:3a:ed:c5:ba:f8:ba:c6:bc:e2:d5:26:83:f0:29:25:f9: 77:69:a0:0f:d6:cf:97:20:ab:9e:1b:fe:24:a3:58:6b:dc:b4: 7b:61:37:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmp6uCMOlr0h95epoi2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3 OWM0NWEwHhcNMjUxMjA2MTEwMDU1WhcNMjUxMjA3MTEwMDU1WjAzMTEwLwYDVQQD Eyg3NTM4ZDcyZTJmY2Y4NWU3ODE3ZTU3ZTk3OWVlMzhiZjJhYmJiMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrlKJ1sA9Qj+cc4MnubWDRJUVWOg zDa/oB/OBX2gP6i60SY00U42HTn+ZYFKdl8nFIuz2TsQVwiNCxnE8L2aub66KXkK 6K6tCevQeAannEkJmgjzHTTbyEmXG3xgmyh5zihcXHSNTyqvBtMTG+/uDJW+O9oT wxCJljM2mn/BSI53N6dCQVciQJ4XLiMdiSj13tManaKz5fq1mj3IO19kSm4nn83z tIieaONIuHlHZQkpwvdN8nvv0l9hqNGA8TVyHaQU5a7ylmuGLS5X/lkSSiZobkiu 5iXwy7I4Pykm9FIbIO0VS2aTZfJhxPisRZQtDwPdVRT8kLSYTrZpeBjwiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU41y4vz4XngX5X6XnuOL8qu7H0MB8GA1UdIwQY MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1 LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMUEZAWe kUojJKbExjh7pampUqrsLE4vZmTqGzZRJBZPPZ8riLjjVCh2MmEgBxLmfJv7cvEg /SE5tVb59+LGG+PrEAyqVYQuBefR0uftQO0RM2vF2jHz676olRvKtxwEixbEBKSb xhwVgm0eAp1jCtYAnFI0dtaFoSa+S3bLQupeme1LKz/aMIHVyy+X8iCwAUMyrlHl JjaSIwRpaSXOe3cRz4JnNLcXwyeH9KZzbJT8liN2pnf1xrUd0BxXFpi0WrjR4oPr aNGkiOMGI9iFsgBTaPKbTIl3z8g67cW6+LrGvOLVJoPwKSX5d2mgD9bPlyCrnhv+ JKNYa9y0e2E3jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:58 2025 by rpki-client