This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json) Hash identifier: dnVUCDEzvOfXW7VqYZjBjhoBBMMcMEa6inpyGZLG7eI= Subject key identifier: 1C:93:DB:9E:85:4F:D9:A5:A7:87:96:7A:66:C9:3C:82:FD:BE:35:BF Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019AF12EE2AAC7D422B2F865B3CA27C6FF04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft Manifest number: 0736 Signing time: Sat 06 Dec 2025 01:02:52 +0000 Manifest this update: Sat 06 Dec 2025 01:02:52 +0000 Manifest next update: Sun 07 Dec 2025 01:02:52 +0000 Files and hashes: 1: 0oVk2Y5npWjq5ymtulXUZ2hm3C0.roa (hash: aVpYgqvpTT43IiOkTb/Hlyp6rWMYHx6l92jkV7xammA=) 2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: RqgK5WYmVNb1DAUcbD179VSQHXtHgTRjad/tVSopEfk=) 3: bqp9PP7kmz97WUPiQSPXh32quMA.roa (hash: dz84t52ULIjxXY05zRubavqL0AcIH8CcS2AgnON+qD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e2:aa:c7:d4:22:b2:f8:65:b3:ca:27:c6:ff:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Dec 6 01:02:52 2025 GMT Not After : Dec 7 01:02:52 2025 GMT Subject: CN=1c93db9e854fd9a5a787967a66c93c82fdbe35bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:f2:a0:ec:6e:82:4f:08:40:c6:bc:f5:d8: af:a2:2f:f8:f9:e9:fb:d1:4e:2e:cb:0b:8c:06:6a: c1:84:3e:ca:85:72:e0:dd:ca:75:c1:5f:75:26:66: 74:bb:c7:e9:1e:d0:43:1a:92:de:2f:61:66:da:71: fc:5b:a4:0d:b2:65:ff:f2:f2:7f:4f:90:a4:d6:97: 7c:cd:88:56:3d:70:4f:93:eb:62:8c:7d:37:2b:7e: da:7b:a7:7d:64:52:35:13:86:e4:58:82:b0:e1:b4: e6:29:95:61:9e:99:ac:0a:96:a6:5f:21:24:71:45: cb:16:ac:b5:93:d5:78:b5:86:21:47:57:98:64:26: ff:5b:72:bc:1f:46:4d:5c:09:0a:56:97:c1:b0:8a: 08:fe:cc:48:d7:fa:1e:89:e1:4d:85:bd:f0:10:75: d7:60:06:1d:a0:41:d7:19:f3:34:2e:47:c4:10:d0: bc:4f:25:c8:58:bc:2b:54:eb:c5:e4:ad:46:39:0f: 3b:94:17:2b:00:d9:2c:5b:ec:40:44:e2:45:cd:83: 15:c6:b6:8e:e7:01:75:60:61:68:bc:58:ad:ae:38: 34:8f:9a:00:1f:9e:f1:6f:92:ec:17:88:fc:b4:73: b1:04:c7:04:bb:23:c4:4c:db:ed:e1:6d:fd:87:5f: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:93:DB:9E:85:4F:D9:A5:A7:87:96:7A:66:C9:3C:82:FD:BE:35:BF X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c2:0a:e2:85:13:0b:b1:26:cb:d2:71:ac:cb:0b:54:02:1b: 99:fb:f4:4f:dd:32:b8:91:4f:c1:ff:ba:7f:94:0a:bc:31:e1: 05:5d:cf:57:18:05:a5:48:5c:f1:3a:c2:d4:99:ee:dd:15:2d: 39:0c:43:eb:ba:54:fd:8b:d6:73:b3:0f:5a:f9:88:78:dc:7f: 4a:fb:3c:dd:30:45:e2:a7:46:63:37:c9:6b:c9:4d:02:50:db: 8d:f4:2a:a5:10:bb:4e:c6:fd:65:26:c6:d6:61:b1:0e:91:93: b5:fc:39:1b:15:3d:23:6a:6f:bc:ae:85:59:01:31:87:2c:64: c9:ad:ef:7b:27:ee:b8:ca:de:1c:b6:34:5a:8f:69:87:81:8a: 36:12:87:17:3f:5a:1e:35:61:ef:81:1d:e5:8e:8e:15:23:7d: b6:f8:25:7e:4f:ff:bf:af:6e:83:79:bc:3b:d9:32:e7:8e:65: 6c:4c:e5:ff:38:57:88:e1:62:7f:cd:57:92:ce:0c:59:4e:09: 2f:78:be:7d:85:76:2a:f6:1b:b7:dc:bc:30:35:1c:a3:08:91: d6:88:c3:b8:6e:94:4d:e8:83:53:54:bd:17:71:75:a2:1d:8e: 70:6b:3d:7d:e0:c4:4e:29:35:f7:4a:3c:be:4a:41:e3:4d:ce: af:cd:1d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuKqx9Qisvhls8onxv8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjUxMjA2MDEwMjUyWhcNMjUxMjA3MDEwMjUyWjAzMTEwLwYDVQQD EygxYzkzZGI5ZTg1NGZkOWE1YTc4Nzk2N2E2NmM5M2M4MmZkYmUzNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLLyoOxugk8IQMa89divoi/4+en7 0U4uywuMBmrBhD7KhXLg3cp1wV91JmZ0u8fpHtBDGpLeL2Fm2nH8W6QNsmX/8vJ/ T5Ck1pd8zYhWPXBPk+tijH03K37ae6d9ZFI1E4bkWIKw4bTmKZVhnpmsCpamXyEk cUXLFqy1k9V4tYYhR1eYZCb/W3K8H0ZNXAkKVpfBsIoI/sxI1/oeieFNhb3wEHXX YAYdoEHXGfM0LkfEENC8TyXIWLwrVOvF5K1GOQ87lBcrANksW+xAROJFzYMVxraO 5wF1YGFovFitrjg0j5oAH57xb5LsF4j8tHOxBMcEuyPETNvt4W39h1/geQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByT256FT9mlp4eWembJPIL9vjW/MB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMIK4oUT C7Emy9JxrMsLVAIbmfv0T90yuJFPwf+6f5QKvDHhBV3PVxgFpUhc8TrC1Jnu3RUt OQxD67pU/YvWc7MPWvmIeNx/Svs83TBF4qdGYzfJa8lNAlDbjfQqpRC7Tsb9ZSbG 1mGxDpGTtfw5GxU9I2pvvK6FWQExhyxkya3veyfuuMreHLY0Wo9ph4GKNhKHFz9a HjVh74Ed5Y6OFSN9tvglfk//v69ug3m8O9ky545lbEzl/zhXiOFif81Xks4MWU4J L3i+fYV2KvYbt9y8MDUcowiR1ojDuG6UTeiDU1S9F3F1oh2OcGs9feDETik190o8 vkpB403Or80deQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:13 2025 by rpki-client