This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json) Hash identifier: kQDf9k1i1YzfXstHpOpO1oFSWwFUIPSwiZUEeUe7Ba4= Subject key identifier: 08:0F:A6:40:B2:5E:1F:BD:B7:72:65:24:5A:48:3A:74:D5:1D:F6:94 Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead Certificate serial: 019AF31C765DFADE9E5EFF381198CF45B674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:00 +0000 Manifest this update: Sat 06 Dec 2025 10:02:00 +0000 Manifest next update: Sun 07 Dec 2025 10:02:00 +0000 Files and hashes: 1: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: qv3RULBMCLkRRavnuKcvXGMay5wj5z1PiAM1h+UCWLs=) 2: xDqVZVtr_9EDZVCNYlX0mCSaras.roa (hash: caUW0pjP9cTTEhVK0Pma740AnxF0QCHN6wxQ3vthDWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:76:5d:fa:de:9e:5e:ff:38:11:98:cf:45:b6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead Validity Not Before: Dec 6 10:02:00 2025 GMT Not After : Dec 7 10:02:00 2025 GMT Subject: CN=080fa640b25e1fbdb77265245a483a74d51df694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:8c:f0:45:96:8c:2d:3f:8b:56:2a:35:0a: 66:0c:6b:f6:d8:98:18:bd:e0:7c:d7:60:0d:d0:c0: d3:e2:a5:cc:55:fa:82:53:1f:2f:57:16:77:da:2e: cd:c1:32:06:86:e1:08:5e:8c:df:09:e1:d3:c4:b8: be:89:70:99:cf:d5:ec:71:db:cf:73:c8:57:c0:56: c3:d1:20:4e:33:89:d8:70:21:a6:b4:5d:ba:59:f8: 32:4e:96:32:d8:74:3c:6b:09:f9:46:30:cc:1d:06: bf:15:4e:35:dd:9b:26:2d:d0:1e:66:40:06:e7:ac: 59:2e:0c:da:cc:b8:92:6c:e7:07:1f:89:6b:6d:2f: 03:53:48:b0:8e:bb:37:1a:7c:b6:e0:4b:59:50:a4: 99:49:7d:9b:50:92:41:e2:91:13:90:7d:3e:db:ef: be:54:7b:91:9c:d4:6a:5c:01:09:79:64:6e:07:75: 7e:4e:b6:48:46:2a:5e:87:ba:b4:61:f2:fd:35:4d: 0c:95:b0:0f:ec:e2:98:0f:83:a4:b6:9f:58:39:b9: 36:2b:68:9e:0d:2f:78:a5:ba:1c:66:a9:be:bd:bb: 7f:84:5b:8b:b4:2f:27:18:a1:c2:b8:16:d9:22:fb: 4e:e3:3b:ca:80:eb:3d:8d:9d:bc:a0:b6:46:14:4b: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:A6:40:B2:5E:1F:BD:B7:72:65:24:5A:48:3A:74:D5:1D:F6:94 X509v3 Authority Key Identifier: keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a4:a2:2f:b1:0d:94:08:22:c4:16:8e:e0:6b:e2:72:84:80: fa:55:25:db:5b:46:7b:b1:23:a4:1d:d5:8a:86:1f:8f:73:6a: ca:64:38:3c:58:01:81:7d:56:6e:2e:38:ed:1e:d4:96:19:d1: 0e:4d:15:9b:c2:be:09:40:2a:b6:29:0c:6f:91:00:86:a5:5a: 5e:a1:d3:19:69:9a:91:02:b6:41:11:01:17:6b:cb:6d:4d:cf: 19:aa:f5:3e:d4:4d:e5:4c:74:d9:e2:7a:c8:d2:9c:ce:ce:37: 8a:89:ac:61:de:e1:ca:5e:bc:ff:d0:32:37:26:03:cf:db:87: 33:b3:cd:e8:d2:60:6b:30:a7:36:de:d4:b9:7a:bf:bd:ae:34: 9e:1d:5f:7f:5b:7f:0c:e9:90:cb:9b:c2:4c:42:71:55:96:99: ca:ad:32:ea:b0:c5:0e:e6:aa:ef:bd:a8:07:3b:e8:b3:c5:f3: 8c:87:44:fb:b1:7e:f4:23:30:7f:93:85:22:80:59:28:60:de: cc:4e:93:5d:0c:c9:5a:d8:7c:b4:b4:39:36:49:8f:d0:bf:43: 82:b0:d8:a9:0e:25:6f:65:6f:5e:c1:ac:f9:3b:21:64:e6:b8: c2:ed:af:56:a0:02:71:94:16:76:b2:a7:55:10:5b:57:fd:46: 71:5a:da:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHZd+t6eXv84EZjPRbZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjJjZjRjNzFhOTU5MTFiZDYwNDZkMDVjMGE4YmExNjQ2 YzllYWQwHhcNMjUxMjA2MTAwMjAwWhcNMjUxMjA3MTAwMjAwWjAzMTEwLwYDVQQD EygwODBmYTY0MGIyNWUxZmJkYjc3MjY1MjQ1YTQ4M2E3NGQ1MWRmNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntaM8EWWjC0/i1YqNQpmDGv22JgY veB812AN0MDT4qXMVfqCUx8vVxZ32i7NwTIGhuEIXozfCeHTxLi+iXCZz9XscdvP c8hXwFbD0SBOM4nYcCGmtF26WfgyTpYy2HQ8awn5RjDMHQa/FU413ZsmLdAeZkAG 56xZLgzazLiSbOcHH4lrbS8DU0iwjrs3Gny24EtZUKSZSX2bUJJB4pETkH0+2+++ VHuRnNRqXAEJeWRuB3V+TrZIRipeh7q0YfL9NU0MlbAP7OKYD4Oktp9YObk2K2ie DS94pbocZqm+vbt/hFuLtC8nGKHCuBbZIvtO4zvKgOs9jZ28oLZGFEuKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgPpkCyXh+9t3JlJFpIOnTVHfaUMB8GA1UdIwQY MBaAFLsiz0xxqVkRvWBG0FwKi6FkbJ6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMt YmJhZWM3NTA1ZDk3LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hZTgyNWYtNmY1NC00M2VhLTliODMtYmJhZWM3NTA1ZDk3 LzEvdXlMUFRIR3BXUkc5WUViUVhBcUxvV1JzbnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKSiL7EN lAgixBaO4GvicoSA+lUl21tGe7EjpB3VioYfj3NqymQ4PFgBgX1Wbi447R7UlhnR Dk0Vm8K+CUAqtikMb5EAhqVaXqHTGWmakQK2QREBF2vLbU3PGar1PtRN5Ux02eJ6 yNKczs43iomsYd7hyl68/9AyNyYDz9uHM7PN6NJgazCnNt7UuXq/va40nh1ff1t/ DOmQy5vCTEJxVZaZyq0y6rDFDuaq772oBzvos8XzjIdE+7F+9CMwf5OFIoBZKGDe zE6TXQzJWth8tLQ5NkmP0L9DgrDYqQ4lb2VvXsGs+TshZOa4wu2vVqACcZQWdrKn VRBbV/1GcVraXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:20 2025 by rpki-client