This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft File: uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json) Hash identifier: jhRlt9tDYGUAw0dC5WFw2HOPjKDvYLAl7t7edyh1iCA= Subject key identifier: 36:08:EE:35:5D:C7:08:34:44:53:26:84:AA:7F:24:CE:76:93:82:66 Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 Certificate issuer: /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053 Certificate serial: 019AF12D323F6601296A11747D1148602385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft Manifest number: 0FDF Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: N3q6u0fJAm5cfueMeHqWslOkGeg.roa (hash: PA7XmdPesUmpMNoT7zqJAR9d7u3yrzJY6Ip8rCLxobU=) 2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: 0f30OHzK3r8LJRRfht9YTVPvPD6gSKstsKtl7NPjnvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:32:3f:66:01:29:6a:11:74:7d:11:48:60:23:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=3608ee355dc7083444532684aa7f24ce76938266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:d7:22:d3:d6:f1:1f:40:78:80:f4:62:5b: 1f:79:0c:ef:1c:06:b6:c7:fb:7c:49:39:fd:d3:07: 81:bb:29:70:c7:8a:81:97:04:dc:8f:6d:eb:42:4b: c6:a2:13:9d:e9:9e:ef:c9:50:e1:d2:6d:a5:ba:89: 7f:59:72:43:27:6a:a1:2a:76:42:3e:9d:fd:48:e2: 44:49:96:b2:9a:30:db:97:07:92:37:e7:03:94:6a: 6d:5b:54:60:df:81:8e:cc:e6:d2:ba:62:42:d7:b1: a2:1d:31:5a:78:bc:32:4d:0f:c6:6b:22:a7:88:10: 0f:60:41:91:c2:e8:4d:c9:d1:c3:17:eb:19:e5:25: bc:e7:72:67:6d:8e:d7:09:bd:f1:8a:23:30:4b:27: a8:3b:06:89:c6:50:44:3e:2d:80:af:2f:56:be:96: 58:96:2d:f6:8b:16:e4:90:aa:9d:64:e8:1e:5e:12: ed:5e:6e:5a:7e:09:a2:a4:5f:75:d3:b3:32:52:62: 95:71:35:cd:59:26:e8:83:ae:f3:a2:6b:45:6b:ca: ae:58:69:0a:1a:14:d6:38:41:85:a4:21:89:f9:7b: ce:21:ca:19:7e:1d:d0:e9:f2:95:00:a0:e7:10:97: b3:8b:d6:79:d4:42:b8:c5:e3:9e:54:36:89:2f:36: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:EE:35:5D:C7:08:34:44:53:26:84:AA:7F:24:CE:76:93:82:66 X509v3 Authority Key Identifier: keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:91:0d:84:cc:46:63:61:91:f0:64:e1:50:5a:ba:63:62:17: f5:e1:14:b9:e0:e2:e0:88:1f:0e:3c:bc:8e:d4:e0:8f:d1:4e: 3d:e3:30:0e:d8:f2:bc:db:33:df:fd:15:5c:65:ec:1a:b6:55: b4:cd:f7:52:0a:20:e6:da:de:0c:25:ef:f7:7d:98:1f:41:7a: 94:57:a4:4e:e4:a5:21:72:af:1c:a9:3a:6d:1c:91:4c:85:cb: ef:4e:e0:96:cf:ed:c0:66:54:46:92:e2:bc:73:8f:e5:2c:c2: e1:01:6b:47:5e:69:cf:ac:08:d4:92:10:bb:9d:8a:57:81:90: a0:c7:00:62:ba:c8:a9:e0:a2:aa:5f:82:9d:e0:f2:ac:91:7f: ac:ad:a7:8b:2c:8a:b1:95:79:9f:19:fa:0a:78:02:58:33:75: 23:dc:10:01:2b:ce:c4:50:b8:47:45:67:63:fa:0b:e9:f6:f4: 08:e7:55:12:1e:5d:d5:45:87:c5:03:80:9a:b7:65:cb:0d:e8: a4:d3:9f:42:ff:02:e2:52:7f:d5:05:05:10:2d:6e:1c:6e:4a: a2:30:36:17:a4:e0:28:c0:4c:b0:57:52:d0:7c:17:eb:bc:71: 56:ec:5a:9b:e6:46:3d:e7:83:0e:e1:35:e0:43:8f:4a:cd:98: d0:fa:ba:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTI/ZgEpahF0fRFIYCOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4M2I1Y2RiNjVlY2M1YmQ3NDZkOGI3NDk4MjgzMWE2ZDhk YzEwNTMwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EygzNjA4ZWUzNTVkYzcwODM0NDQ1MzI2ODRhYTdmMjRjZTc2OTM4MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq47XItPW8R9AeID0YlsfeQzvHAa2 x/t8STn90weBuylwx4qBlwTcj23rQkvGohOd6Z7vyVDh0m2luol/WXJDJ2qhKnZC Pp39SOJESZaymjDblweSN+cDlGptW1Rg34GOzObSumJC17GiHTFaeLwyTQ/GayKn iBAPYEGRwuhNydHDF+sZ5SW853JnbY7XCb3xiiMwSyeoOwaJxlBEPi2Ary9WvpZY li32ixbkkKqdZOgeXhLtXm5afgmipF9107MyUmKVcTXNWSbog67zomtFa8quWGkK GhTWOEGFpCGJ+XvOIcoZfh3Q6fKVAKDnEJezi9Z51EK4xeOeVDaJLzZR3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYI7jVdxwg0RFMmhKp/JM52k4JmMB8GA1UdIwQY MBaAFLg7XNtl7MW9dG2LdJgoMabY3BBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWIt NTBjNzg5MTZmOGUzLzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWItNTBjNzg5MTZmOGUz LzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5ENhMxG Y2GR8GThUFq6Y2IX9eEUueDi4IgfDjy8jtTgj9FOPeMwDtjyvNsz3/0VXGXsGrZV tM33Ugog5treDCXv932YH0F6lFekTuSlIXKvHKk6bRyRTIXL707gls/twGZURpLi vHOP5SzC4QFrR15pz6wI1JIQu52KV4GQoMcAYrrIqeCiql+CneDyrJF/rK2niyyK sZV5nxn6CngCWDN1I9wQASvOxFC4R0VnY/oL6fb0COdVEh5d1UWHxQOAmrdlyw3o pNOfQv8C4lJ/1QUFEC1uHG5KojA2F6TgKMBMsFdS0HwX67xxVuxam+ZGPeeDDuE1 4EOPSs2Y0Pq67Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:44 2025 by rpki-client