This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json) Hash identifier: c8wlI9hmv6hZAHt8PWCPF3/wrFI1lUneHjM8sNf4G+c= Subject key identifier: 0A:F9:62:E3:9F:D2:71:A9:D1:C8:E7:1F:6F:DD:7D:E6:05:A3:93:2F Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Certificate serial: 019B3F483122F177E624CBAB3EF01B52584D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:00:54 +0000 Manifest this update: Sun 21 Dec 2025 05:00:54 +0000 Manifest next update: Mon 22 Dec 2025 05:00:54 +0000 Files and hashes: 1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=) 2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: ZFn/Nkvf8sDtoB4pKwjn0JkA4uPP7FZyfJ2vbmFE9hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:31:22:f1:77:e6:24:cb:ab:3e:f0:1b:52:58:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Validity Not Before: Dec 21 05:00:54 2025 GMT Not After : Dec 22 05:00:54 2025 GMT Subject: CN=0af962e39fd271a9d1c8e71f6fdd7de605a3932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:64:e8:22:ec:72:bb:df:91:c6:63:d4:97: b8:c5:a1:75:e8:0f:d1:a3:1b:30:a5:ab:f2:e2:a0: e1:a2:8b:10:34:21:f1:f8:de:d2:53:bf:80:7d:cb: b4:6b:52:e8:c5:15:1c:30:35:01:e7:f8:4e:d6:eb: b3:1e:ab:eb:c0:29:69:5c:66:7d:7f:3c:63:fb:e3: 5c:60:05:22:be:57:c3:11:4e:e1:47:f9:8b:c2:19: 6b:70:3a:b3:07:cd:d2:ec:69:aa:a5:e9:1a:b9:ad: 1a:af:93:1a:4d:a2:73:7d:ae:e9:2d:d6:8f:01:6d: 73:8b:da:18:de:50:b1:83:b2:87:cc:42:18:53:b5: a2:90:bb:c5:68:2b:ca:a1:d8:f7:41:fa:36:50:c7: 58:a4:09:a7:cf:32:39:01:31:a9:80:18:f2:70:a3: b2:0f:41:99:95:52:b9:46:8d:9a:27:a1:c5:3d:86: 3e:40:97:17:ad:14:76:aa:6e:df:83:99:f2:f6:6d: b0:fb:44:21:d6:b1:de:4f:71:c5:43:07:16:dd:50: 62:66:e2:ff:18:fb:db:8d:34:80:f1:b1:90:3d:70: 92:da:ce:9f:27:51:48:0a:df:25:f2:7c:29:7d:04: 66:27:d7:94:d9:4b:c2:e5:e0:4e:75:e3:04:ec:4b: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F9:62:E3:9F:D2:71:A9:D1:C8:E7:1F:6F:DD:7D:E6:05:A3:93:2F X509v3 Authority Key Identifier: keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:c8:97:cd:f7:b0:cf:d7:9a:a0:a5:d3:fe:08:c8:ec:4a: ee:58:7c:ab:9f:d1:f2:75:98:72:15:d4:6d:d6:b9:98:0b:a5: b7:b8:99:aa:fc:1c:39:92:f3:f5:a7:7c:57:c8:fa:2c:eb:11: f1:7d:73:16:ac:b6:48:a1:e1:b6:3b:73:3e:b0:af:02:a3:7c: 18:01:fd:be:68:46:ab:96:59:73:66:cf:d7:8c:00:e6:39:6f: 10:02:da:ab:22:7d:b1:e1:b2:74:65:83:56:b3:93:67:61:79: 19:25:6f:80:3f:36:55:46:6c:7d:b4:c5:92:6a:2e:d0:b6:45: 2f:c4:c4:c4:cf:46:9c:c7:b8:f3:0e:41:b2:90:cc:12:18:b6: 51:ee:ef:15:10:d1:c7:c9:52:0a:18:00:0b:94:48:39:34:6a: 5f:66:2a:f4:4c:2c:48:b5:20:93:69:b6:a4:91:d4:db:db:53: b2:a0:91:9f:88:bb:06:46:92:89:eb:46:6a:58:f4:d8:b4:fc: 63:f7:78:ad:3d:dc:2c:e0:2d:9c:cc:f3:d1:3c:a3:44:a9:11: 93:dc:f3:1a:01:a5:76:76:8e:20:5d:51:e6:0e:69:ac:79:56: cf:ff:9d:89:d2:f6:2f:68:a0:27:5e:71:23:95:70:21:bb:c3: 32:af:2b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDEi8XfmJMurPvAbUlhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5 ZDhlNDgwHhcNMjUxMjIxMDUwMDU0WhcNMjUxMjIyMDUwMDU0WjAzMTEwLwYDVQQD EygwYWY5NjJlMzlmZDI3MWE5ZDFjOGU3MWY2ZmRkN2RlNjA1YTM5MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt09k6CLscrvfkcZj1Je4xaF16A/R oxswpavy4qDhoosQNCHx+N7SU7+Afcu0a1LoxRUcMDUB5/hO1uuzHqvrwClpXGZ9 fzxj++NcYAUivlfDEU7hR/mLwhlrcDqzB83S7Gmqpekaua0ar5MaTaJzfa7pLdaP AW1zi9oY3lCxg7KHzEIYU7WikLvFaCvKodj3Qfo2UMdYpAmnzzI5ATGpgBjycKOy D0GZlVK5Ro2aJ6HFPYY+QJcXrRR2qm7fg5ny9m2w+0Qh1rHeT3HFQwcW3VBiZuL/ GPvbjTSA8bGQPXCS2s6fJ1FICt8l8nwpfQRmJ9eU2UvC5eBOdeME7EuI9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr5YuOf0nGp0cjnH2/dfeYFo5MvMB8GA1UdIwQY MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt MGExMzRiNjUzNWM0LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0 LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqnIl833 sM/XmqCl0/4IyOxK7lh8q5/R8nWYchXUbda5mAult7iZqvwcOZLz9ad8V8j6LOsR 8X1zFqy2SKHhtjtzPrCvAqN8GAH9vmhGq5ZZc2bP14wA5jlvEALaqyJ9seGydGWD VrOTZ2F5GSVvgD82VUZsfbTFkmou0LZFL8TExM9GnMe48w5BspDMEhi2Ue7vFRDR x8lSChgAC5RIOTRqX2Yq9EwsSLUgk2m2pJHU29tTsqCRn4i7BkaSietGalj02LT8 Y/d4rT3cLOAtnMzz0TyjRKkRk9zzGgGldnaOIF1R5g5prHlWz/+didL2L2igJ15x I5VwIbvDMq8rPg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:00 2025 by rpki-client