This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft File: uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json) Hash identifier: jbQvn4hsqvP5Ux/qFPDmJ4f74y6NOlsFKaz/aDpcTg4= Subject key identifier: 26:F1:3F:59:14:2D:12:44:88:63:28:66:B6:1D:B0:92:E2:9D:50:8E Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6 Certificate issuer: /CN=bb24311c1ec0673c50497924c202a13d212659b6 Certificate serial: 019AF240063150B78DFEE448C1DE44F84F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft Manifest number: 0699 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: 7srrLgFbVtsPS6lyBSj92dscHdbEAwAY8EtFd9IqetU=) 2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:06:31:50:b7:8d:fe:e4:48:c1:de:44:f8:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=26f13f59142d124488632866b61db092e29d508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:b5:2d:6c:9b:00:f0:7c:ec:59:f1:ad:d3: e3:4a:1a:76:fa:8d:42:4b:f5:34:0f:54:8e:8f:b2: d6:5f:84:94:6a:46:be:55:97:d7:92:d3:41:f7:62: 7c:16:2c:bc:28:08:96:5b:fe:3b:a7:3f:d5:64:78: a3:f3:e2:8c:a0:9d:8f:bc:aa:a6:de:da:a5:62:c2: 03:7c:94:ca:ac:19:9a:4e:1f:f3:07:88:de:a8:78: 5a:78:eb:87:5a:71:ae:1b:4c:d2:43:2d:b2:c6:e8: 5f:98:bf:97:38:9e:98:19:1c:af:35:14:82:93:38: 52:b3:a0:6b:05:0d:2a:ee:40:90:b1:3f:e1:7e:a7: e7:18:62:f7:03:fb:41:64:3a:87:c1:1f:ba:cd:0c: a2:1a:9f:c1:f2:68:1c:27:5c:b6:b9:80:2e:cc:99: b5:15:43:c7:ef:2a:2a:d3:1a:93:a3:fc:43:f5:a3: 70:02:f8:38:91:66:da:a0:06:2d:a7:7e:a4:0d:b8: 5b:2d:91:0a:23:77:d1:5d:e5:f3:f7:3b:5a:cf:83: 30:2e:60:2a:e7:0e:00:2b:69:95:c8:45:2e:fa:58: 28:ea:90:b7:b1:31:9f:1f:67:17:79:4b:4f:a0:71: de:0d:2c:da:81:02:dc:55:e9:10:d9:88:cc:19:1a: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F1:3F:59:14:2D:12:44:88:63:28:66:B6:1D:B0:92:E2:9D:50:8E X509v3 Authority Key Identifier: keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:57:48:db:26:fa:c3:0d:c8:3b:cf:ef:00:66:d5:7b:45:37: 84:57:98:e8:29:e0:b6:c4:af:17:b9:b3:0d:6e:a7:5a:22:0c: b8:8a:e8:6e:5d:9a:d1:11:b8:d6:ff:4c:ac:6f:7c:88:92:19: fd:c3:4f:77:fe:88:a4:8b:95:0c:ee:e2:f1:13:d5:e5:b5:d9: 9a:5c:46:4b:25:f8:2e:59:17:e4:b1:2e:b8:48:a8:00:13:f7: 6a:88:45:07:c6:4a:85:8f:85:d9:10:c7:6a:dc:96:69:24:a6: 0a:80:01:5a:a1:52:08:68:bf:4c:d7:42:23:39:2c:17:08:a5: 23:cd:f5:74:c5:fb:5e:de:a7:4f:d3:27:78:cd:d4:61:54:c5: 84:9b:23:ad:be:c8:e0:b8:d7:8f:47:2d:90:37:a0:ab:ed:a6: 68:02:f3:80:75:45:28:3a:ee:56:0f:bb:0b:b4:cf:d0:16:d6: d3:ea:9e:f5:85:32:14:e2:d3:e6:75:f8:cf:de:89:73:f7:c5: f2:f2:03:37:35:48:58:ea:69:b2:cf:a8:04:74:a5:df:bc:4a: ae:61:df:d7:ce:14:cc:bd:e8:a2:47:2d:ff:70:67:d8:57:8e: 19:f1:0d:dc:e3:78:63:da:0d:ce:1b:45:e0:75:0d:6e:65:54: 27:b5:70:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAYxULeN/uRIwd5E+E90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjQzMTFjMWVjMDY3M2M1MDQ5NzkyNGMyMDJhMTNkMjEy NjU5YjYwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EygyNmYxM2Y1OTE0MmQxMjQ0ODg2MzI4NjZiNjFkYjA5MmUyOWQ1MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml21LWybAPB87FnxrdPjShp2+o1C S/U0D1SOj7LWX4SUaka+VZfXktNB92J8Fiy8KAiWW/47pz/VZHij8+KMoJ2PvKqm 3tqlYsIDfJTKrBmaTh/zB4jeqHhaeOuHWnGuG0zSQy2yxuhfmL+XOJ6YGRyvNRSC kzhSs6BrBQ0q7kCQsT/hfqfnGGL3A/tBZDqHwR+6zQyiGp/B8mgcJ1y2uYAuzJm1 FUPH7yoq0xqTo/xD9aNwAvg4kWbaoAYtp36kDbhbLZEKI3fRXeXz9ztaz4MwLmAq 5w4AK2mVyEUu+lgo6pC3sTGfH2cXeUtPoHHeDSzagQLcVekQ2YjMGRrkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbxP1kULRJEiGMoZrYdsJLinVCOMB8GA1UdIwQY MBaAFLskMRwewGc8UEl5JMICoT0hJlm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzct MGE3ZjZjY2E2YmVhLzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iNGMwODUtOWI4Yi00MzBmLWEzNzctMGE3ZjZjY2E2YmVh LzEvdXlReEhCN0FaenhRU1hra3dnS2hQU0VtV2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVdI2yb6 ww3IO8/vAGbVe0U3hFeY6CngtsSvF7mzDW6nWiIMuIrobl2a0RG41v9MrG98iJIZ /cNPd/6IpIuVDO7i8RPV5bXZmlxGSyX4LlkX5LEuuEioABP3aohFB8ZKhY+F2RDH atyWaSSmCoABWqFSCGi/TNdCIzksFwilI831dMX7Xt6nT9MneM3UYVTFhJsjrb7I 4LjXj0ctkDegq+2maALzgHVFKDruVg+7C7TP0BbW0+qe9YUyFOLT5nX4z96Jc/fF 8vIDNzVIWOppss+oBHSl37xKrmHf184UzL3ookct/3Bn2FeOGfEN3ON4Y9oNzhtF 4HUNbmVUJ7Vwjw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:53 2025 by rpki-client