This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json) Hash identifier: yfuukuUFzk37Z2hb8VOltn5/ZFMIBWyD2zPz6MNrG0M= Subject key identifier: CB:9B:ED:04:7A:DD:A9:4E:97:BA:2B:93:82:61:98:98:05:95:6B:B7 Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Certificate serial: 019AF2402CBFB83FF1BF8DDC00705D156153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft Manifest number: 0CA7 Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=) 2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: o12Px1szKsMRwbFKwhYfXvt6MtHRtP+2Zu6sJ7E4FSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2c:bf:b8:3f:f1:bf:8d:dc:00:70:5d:15:61:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=cb9bed047adda94e97ba2b938261989805956bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:d0:31:c0:0b:c8:b2:aa:a4:b9:09:b1:e1: c0:62:a4:c5:9f:0c:f2:9c:83:f2:a2:20:f9:cf:b9: 30:02:cb:26:b3:73:71:2e:22:57:e8:8d:09:95:0a: 30:87:ae:0e:70:ef:50:a3:18:3b:ae:d5:bb:d3:7a: 62:ad:22:8d:2d:cb:e5:42:ca:43:f5:47:2d:73:36: 3d:60:9b:d7:44:79:c1:de:e5:0f:83:08:38:6c:c3: d5:88:d1:a2:af:65:7a:5e:a1:1e:77:9a:c8:f1:3f: 1d:9a:06:25:66:a7:92:e0:9e:32:5d:b9:c2:a6:01: 9d:99:4a:6e:44:da:5e:0d:17:ff:22:27:2e:69:1c: 06:c9:e8:86:32:f7:2b:47:52:11:a4:2d:30:4c:8f: 78:b5:e7:5d:d6:d9:c7:79:a5:91:dc:2e:d6:ba:f6: 29:f6:6c:c7:53:6a:36:22:d9:15:71:99:23:66:72: 53:5d:d9:2b:6e:62:04:15:b1:07:2b:3f:18:a7:ae: a1:ae:04:77:03:8e:eb:77:9a:18:88:19:ee:ed:23: 8e:7b:95:aa:42:08:c6:29:07:e3:b1:fd:bf:b3:43: 96:8b:04:39:91:14:a0:d8:32:af:92:d4:7d:8c:42: a9:a2:e3:7b:74:70:1a:a3:e1:c1:7a:7e:89:26:6d: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9B:ED:04:7A:DD:A9:4E:97:BA:2B:93:82:61:98:98:05:95:6B:B7 X509v3 Authority Key Identifier: keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cc:7c:77:de:f1:64:bf:ed:50:97:22:e8:a1:ce:dd:f6:68: b6:4b:b8:d3:6c:d4:49:bc:0b:68:49:4c:77:63:0d:e6:16:9a: e0:b0:22:12:47:85:27:c9:65:cf:46:85:a7:37:bd:62:8a:23: 78:e3:08:81:bb:9a:55:0f:62:8f:6f:d4:a3:80:bd:67:ac:4f: 8e:20:88:06:02:63:d6:af:67:04:27:dc:a5:ec:2f:72:14:64: 34:f5:85:25:dc:da:f6:29:09:ba:cd:da:22:78:da:bd:b4:5f: 5b:b2:b8:cd:1c:0b:4a:2a:df:fd:ce:8b:d8:6f:17:d1:05:9f: df:9e:65:2c:f1:63:3b:e9:6f:bc:0b:76:64:75:78:97:fd:fe: da:4d:67:37:48:43:bc:78:3b:02:51:ba:5c:e8:ea:4a:dd:d0: 18:03:65:1d:8c:a1:61:4f:36:d5:46:86:a9:c2:f3:ed:42:2e: 7d:a4:03:ba:6f:db:73:61:c7:8b:cc:11:3d:c8:7f:44:a7:72: e5:1d:34:f7:0b:20:5d:c2:ba:d5:be:7c:92:83:a9:b2:12:a5: 5a:68:5e:15:5c:dd:20:3a:43:5e:8d:b1:7b:ad:4a:4b:be:33: 1c:42:03:d2:c4:60:ec:cc:a0:3e:7d:c0:ad:fb:b5:f1:9d:3b: 4a:71:4a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCy/uD/xv43cAHBdFWFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDczN2NlMWNmYmU2NTMzYjU4ODBiNjZlYTllMjQxM2Nk OWM4MjUwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EyhjYjliZWQwNDdhZGRhOTRlOTdiYTJiOTM4MjYxOTg5ODA1OTU2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw97QMcALyLKqpLkJseHAYqTFnwzy nIPyoiD5z7kwAssms3NxLiJX6I0JlQowh64OcO9Qoxg7rtW703pirSKNLcvlQspD 9UctczY9YJvXRHnB3uUPgwg4bMPViNGir2V6XqEed5rI8T8dmgYlZqeS4J4yXbnC pgGdmUpuRNpeDRf/IicuaRwGyeiGMvcrR1IRpC0wTI94tedd1tnHeaWR3C7WuvYp 9mzHU2o2ItkVcZkjZnJTXdkrbmIEFbEHKz8Yp66hrgR3A47rd5oYiBnu7SOOe5Wq QgjGKQfjsf2/s0OWiwQ5kRSg2DKvktR9jEKpouN7dHAao+HBen6JJm1O7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMub7QR63alOl7ork4JhmJgFlWu3MB8GA1UdIwQY MBaAFLgHN84c++ZTO1iAtm6p4kE82cglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEt NGNhZTU0MTkxY2Q1LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEtNGNhZTU0MTkxY2Q1 LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcx8d97x ZL/tUJci6KHO3fZotku402zUSbwLaElMd2MN5haa4LAiEkeFJ8llz0aFpze9Yooj eOMIgbuaVQ9ij2/Uo4C9Z6xPjiCIBgJj1q9nBCfcpewvchRkNPWFJdza9ikJus3a InjavbRfW7K4zRwLSirf/c6L2G8X0QWf355lLPFjO+lvvAt2ZHV4l/3+2k1nN0hD vHg7AlG6XOjqSt3QGANlHYyhYU821UaGqcLz7UIufaQDum/bc2HHi8wRPch/RKdy 5R009wsgXcK61b58koOpshKlWmheFVzdIDpDXo2xe61KS74zHEID0sRg7MygPn3A rfu18Z07SnFKiw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:01:59 2025 by rpki-client