This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json) Hash identifier: om5JVVEWgr1K3H0eylKlYNNs6UatqDgxz/8IIAmfSl0= Subject key identifier: B1:28:4E:38:2A:7C:75:81:95:97:EF:0B:32:10:90:AC:24:FB:4B:1A Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9 Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9 Certificate serial: 019AF12E3CFF3328774C8B67077E728FB056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft Manifest number: 0D92 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: N4HGCrChJogUs5pCbAEfXoAjUQhXnBCgKUWBRcyBMgU=) 2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3c:ff:33:28:77:4c:8b:67:07:7e:72:8f:b0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=b1284e382a7c75819597ef0b321090ac24fb4b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:bf:0b:91:f7:87:75:7c:5b:62:23:c6:5f: 35:ac:a5:72:e5:9d:14:73:71:ef:dc:42:b0:43:e8: 56:72:33:20:33:66:c7:7c:d9:82:fc:9e:70:af:b4: e3:e8:0a:5c:8e:1a:a2:55:a0:29:45:61:8b:0c:1a: 15:20:60:57:65:d4:5f:40:31:bf:fe:4b:f6:74:7e: 85:37:13:21:db:c7:d7:25:bd:d1:be:94:61:80:6f: 13:d6:d1:8c:c4:fe:4f:fe:54:ef:cb:72:f0:ef:81: 44:78:5f:5c:d7:4c:56:0c:87:3b:cd:bf:02:16:22: 5a:93:8b:4c:b6:41:12:e8:6f:0d:c9:8c:39:46:01: c7:89:31:28:00:45:5e:c9:90:63:54:d6:9d:c7:90: 42:11:d8:50:53:87:1e:38:97:cc:ca:0b:66:d6:85: b2:84:4e:fc:79:46:90:13:4b:34:1b:8e:11:20:fb: 14:7e:48:d3:26:43:b2:a0:8c:d6:53:31:bf:7a:e9: 8c:a7:ae:8e:48:21:5a:c6:b0:04:0b:52:e4:bd:f3: a7:0a:a1:ba:1a:6b:38:5f:d9:33:fb:d2:73:41:40: bc:f4:2f:45:cc:7e:1d:a4:bd:71:b7:7c:21:fe:b1: 49:5d:eb:47:40:a3:33:f0:da:fc:8b:7a:86:93:30: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:4E:38:2A:7C:75:81:95:97:EF:0B:32:10:90:AC:24:FB:4B:1A X509v3 Authority Key Identifier: keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:63:a2:32:ac:ec:d0:6d:3d:17:e3:7a:c3:19:b3:89:d7:4d: ce:0c:72:f7:85:6d:68:97:c1:c3:8c:89:d0:02:fb:af:09:71: d6:1f:60:83:bc:3b:11:ea:e9:ea:e4:2d:40:4a:cc:08:d6:47: e8:7d:6c:00:5f:21:e9:37:28:16:eb:14:71:e6:e4:f7:94:ba: 04:7b:88:d8:b4:a7:d2:bf:81:8b:12:b4:38:d5:d1:40:85:6c: b6:3b:7f:4a:d6:86:82:91:7d:8f:ba:3c:2d:d4:5a:94:8c:6d: e3:a9:ce:6d:d8:2c:86:1c:b2:16:bd:13:d2:99:a4:67:70:7d: 5f:fa:43:66:06:26:98:ab:e3:6a:d9:73:93:14:4b:cb:7c:30: ec:e2:ce:a7:a2:91:d3:d1:6d:7c:f8:ac:f0:88:f3:6d:63:d6: 08:c7:68:ab:85:83:73:67:ec:1d:95:71:d4:0e:8a:29:86:94: c0:62:39:f6:b2:58:1c:45:1e:9d:2a:1c:ca:5e:76:42:a1:d8: 2c:b9:cc:cb:d4:05:1b:44:42:91:d8:66:3f:76:70:cd:8d:3f: ae:50:bd:53:83:85:0f:b6:98:17:26:14:43:7f:84:be:f4:78: 40:0f:66:72:88:ae:67:ab:93:bb:b6:8c:41:e6:42:b2:bf:77: 49:7c:e2:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjz/Myh3TItnB35yj7BWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMWNlZjZmOWU5ZWRjNDVlM2NkMjhlZjQwMjUxOTc5NTJk NDYwZTkwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EyhiMTI4NGUzODJhN2M3NTgxOTU5N2VmMGIzMjEwOTBhYzI0ZmI0YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww6/C5H3h3V8W2Ijxl81rKVy5Z0U c3Hv3EKwQ+hWcjMgM2bHfNmC/J5wr7Tj6ApcjhqiVaApRWGLDBoVIGBXZdRfQDG/ /kv2dH6FNxMh28fXJb3RvpRhgG8T1tGMxP5P/lTvy3Lw74FEeF9c10xWDIc7zb8C FiJak4tMtkES6G8NyYw5RgHHiTEoAEVeyZBjVNadx5BCEdhQU4ceOJfMygtm1oWy hE78eUaQE0s0G44RIPsUfkjTJkOyoIzWUzG/eumMp66OSCFaxrAEC1LkvfOnCqG6 Gms4X9kz+9JzQUC89C9FzH4dpL1xt3wh/rFJXetHQKMz8Nr8i3qGkzC9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEoTjgqfHWBlZfvCzIQkKwk+0saMB8GA1UdIwQY MBaAFLoc72+entxF480o70AlGXlS1GDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUt ZDljYTAzZTY2ZmZiLzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUtZDljYTAzZTY2ZmZi LzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWOiMqzs 0G09F+N6wxmziddNzgxy94VtaJfBw4yJ0AL7rwlx1h9gg7w7Eerp6uQtQErMCNZH 6H1sAF8h6TcoFusUcebk95S6BHuI2LSn0r+BixK0ONXRQIVstjt/StaGgpF9j7o8 LdRalIxt46nObdgshhyyFr0T0pmkZ3B9X/pDZgYmmKvjatlzkxRLy3ww7OLOp6KR 09FtfPis8IjzbWPWCMdoq4WDc2fsHZVx1A6KKYaUwGI59rJYHEUenSocyl52QqHY LLnMy9QFG0RCkdhmP3ZwzY0/rlC9U4OFD7aYFyYUQ3+EvvR4QA9mcoiuZ6uTu7aM QeZCsr93SXzi+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:57 2025 by rpki-client