This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json) Hash identifier: qzcwMAMgt9aQ6LcXB99ozpYs6x6KScFfGkF4bjHwdrY= Subject key identifier: 17:12:EC:05:60:D1:CF:59:83:59:E7:48:C8:24:21:70:BB:B8:79:DD Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e Certificate serial: 019AF08869AC6F3926419978DF46BE9E40C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft Manifest number: 06F3 Signing time: Fri 05 Dec 2025 22:01:03 +0000 Manifest this update: Fri 05 Dec 2025 22:01:03 +0000 Manifest next update: Sat 06 Dec 2025 22:01:03 +0000 Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: gtANpEa4Ma6Xz648sRKQ60CfCbCSZEjOEinbB371uZo=) 2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:69:ac:6f:39:26:41:99:78:df:46:be:9e:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e Validity Not Before: Dec 5 22:01:03 2025 GMT Not After : Dec 6 22:01:03 2025 GMT Subject: CN=1712ec0560d1cf598359e748c8242170bbb879dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:2c:92:f4:49:03:51:0d:d3:e8:7d:da:71: 2c:b5:f1:26:ec:62:d7:38:26:52:51:ba:af:6e:ee: c1:24:91:bf:76:95:20:50:ff:fe:2e:eb:69:09:94: c5:b6:17:d3:11:df:6f:18:06:c4:ba:d0:ad:dd:8d: cd:9d:22:5a:88:b1:a1:a4:e7:a4:89:67:9a:0d:02: 7e:05:60:bb:6f:1a:b9:ae:ca:5e:ca:18:db:ee:a5: 85:be:77:28:d2:fa:d6:de:d4:b9:0f:d9:bd:d5:aa: a9:b3:6d:0a:28:37:e1:86:f9:9b:91:6b:7a:88:f8: 3e:fb:ac:92:b3:cc:a9:21:c6:60:6f:a2:79:02:b1: f9:71:9a:7d:7c:92:b0:d9:8c:41:a2:66:6b:7c:89: a0:cf:cf:e3:08:ce:c6:38:5a:75:74:69:98:2c:d7: 67:57:40:f0:3d:61:60:f7:2a:c2:13:a9:87:83:88: 22:69:f1:d1:7b:4d:81:80:73:13:98:be:14:50:18: ad:a9:cd:16:59:94:7f:b6:2d:a5:b3:ee:30:8c:26: f1:d0:82:5d:16:8b:a0:d7:8a:e1:74:5a:da:02:4e: 0d:dc:b7:af:b8:11:da:d5:ed:fe:54:ac:e4:fa:03: 3c:c2:3f:17:bc:56:74:f4:4e:a6:b6:30:c5:3e:ae: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:EC:05:60:D1:CF:59:83:59:E7:48:C8:24:21:70:BB:B8:79:DD X509v3 Authority Key Identifier: keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0b:bb:14:dd:95:70:36:0c:e5:5b:eb:36:56:35:30:0a:6a: 37:f0:98:90:30:14:12:87:c8:78:94:c9:06:2e:a4:0d:a0:37: ec:ee:e8:af:11:38:96:bb:0e:a7:68:b3:7e:fa:86:da:65:87: bb:db:c1:87:64:bc:88:9d:b3:c7:74:1f:e3:2a:36:8f:d4:c1: 36:80:11:9f:ba:33:19:f8:d2:ba:fb:66:d7:f8:e7:88:eb:54: 1f:bb:fe:98:2b:63:33:71:8c:72:91:cc:2f:aa:bd:a2:ec:44: 19:f8:e4:94:22:ee:61:df:5d:b3:c8:e9:b6:54:38:95:94:0b: b0:35:98:90:95:c3:18:f9:23:44:90:e2:af:14:1f:23:a2:39: e3:c2:8b:0a:f6:52:ad:a1:3a:6d:a2:b5:76:e1:f6:42:0a:f5: 9c:3e:9b:b2:25:6b:d8:f4:9d:f8:50:09:63:b6:4e:de:56:61: 9f:c1:71:9d:ca:0c:b6:51:1a:7d:9b:f5:f9:38:4c:be:a1:af: 72:b4:9a:9d:f8:7e:ab:26:83:ba:ff:4d:63:0f:ac:db:2f:ee: fe:8f:79:1d:f1:9d:f3:52:ae:30:5c:6a:1f:a9:9e:c8:28:94: 51:9b:a5:6c:2f:63:3a:74:37:e7:28:8e:cb:df:8d:48:1b:e6: 22:a8:ba:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGmsbzkmQZl430a+nkDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzBkZGUzOGJhYjYyNThiNWEwMjk0ZWMxMzRmNmNhYzE1 ZDM2NmUwHhcNMjUxMjA1MjIwMTAzWhcNMjUxMjA2MjIwMTAzWjAzMTEwLwYDVQQD EygxNzEyZWMwNTYwZDFjZjU5ODM1OWU3NDhjODI0MjE3MGJiYjg3OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhsskvRJA1EN0+h92nEstfEm7GLX OCZSUbqvbu7BJJG/dpUgUP/+LutpCZTFthfTEd9vGAbEutCt3Y3NnSJaiLGhpOek iWeaDQJ+BWC7bxq5rspeyhjb7qWFvnco0vrW3tS5D9m91aqps20KKDfhhvmbkWt6 iPg++6ySs8ypIcZgb6J5ArH5cZp9fJKw2YxBomZrfImgz8/jCM7GOFp1dGmYLNdn V0DwPWFg9yrCE6mHg4giafHRe02BgHMTmL4UUBitqc0WWZR/ti2ls+4wjCbx0IJd Foug14rhdFraAk4N3LevuBHa1e3+VKzk+gM8wj8XvFZ09E6mtjDFPq5IOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcS7AVg0c9Zg1nnSMgkIXC7uHndMB8GA1UdIwQY MBaAFLjA3eOLq2JYtaApTsE09srBXTZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzIt MDRlZGJkYmNlYzM3LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzItMDRlZGJkYmNlYzM3 LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQu7FN2V cDYM5VvrNlY1MApqN/CYkDAUEofIeJTJBi6kDaA37O7orxE4lrsOp2izfvqG2mWH u9vBh2S8iJ2zx3Qf4yo2j9TBNoARn7ozGfjSuvtm1/jniOtUH7v+mCtjM3GMcpHM L6q9ouxEGfjklCLuYd9ds8jptlQ4lZQLsDWYkJXDGPkjRJDirxQfI6I548KLCvZS raE6baK1duH2Qgr1nD6bsiVr2PSd+FAJY7ZO3lZhn8FxncoMtlEafZv1+ThMvqGv crSanfh+qyaDuv9NYw+s2y/u/o95HfGd81KuMFxqH6meyCiUUZulbC9jOnQ35yiO y9+NSBvmIqi6dA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:25 2025 by rpki-client