This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json) Hash identifier: yAa1U3kAfV21+OhXkWsHcttkrsZyYtfCItePsOjQ1O0= Subject key identifier: 1F:D0:21:A3:53:94:C7:EF:92:00:B1:3C:D4:6A:2C:42:11:D2:49:F5 Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Certificate serial: 019AF12E1BCF18E163C3E3E929AB7433B150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=) 2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: b6Aeerp7t34zTexXJOKvw+z3PAwCH941TjfzOScGua4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1b:cf:18:e1:63:c3:e3:e9:29:ab:74:33:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=1fd021a35394c7ef9200b13cd46a2c4211d249f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:59:b0:dd:8b:e2:bb:7d:54:b7:08:b8:4c: a0:1b:24:6c:37:09:41:41:aa:de:cc:06:6b:b1:52: 9c:28:37:c3:dc:89:a6:78:44:93:d7:39:8b:e2:a3: 76:29:6c:1f:5d:01:89:29:47:95:1e:42:e3:1b:18: ed:1b:9c:12:11:42:7c:5b:e1:48:d3:1a:c0:80:30: 03:b3:d9:6a:19:a3:d5:7d:b2:64:dd:65:ed:17:c2: a4:e4:5a:77:14:dd:d3:7b:52:73:99:24:62:e5:13: f9:d8:bb:c1:ea:38:9c:18:4f:0e:ca:36:90:df:d8: 8f:9f:5a:dc:01:e4:84:b6:a5:57:51:8e:11:07:0f: d3:9d:20:5d:db:54:05:05:9e:7a:25:aa:85:be:b6: ae:90:07:07:a0:23:40:2d:8c:4a:37:68:b5:41:d6: b1:4a:0e:08:5e:18:82:c0:a0:41:c0:7d:f6:5c:01: b3:f8:4a:4e:4e:6c:33:9b:4b:4c:09:88:94:b4:1b: ad:9f:fd:0d:18:ce:87:c4:e0:a3:b7:f1:3f:a1:d6: e7:61:c4:26:8d:50:29:6b:48:32:0d:70:0f:53:ab: 86:6b:ae:90:8b:39:d5:4c:e2:47:8d:f4:c6:b2:2e: 0c:c6:5e:57:af:be:3c:b2:cf:9a:e4:20:9b:c9:b0: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:21:A3:53:94:C7:EF:92:00:B1:3C:D4:6A:2C:42:11:D2:49:F5 X509v3 Authority Key Identifier: keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:62:31:45:62:30:f1:c9:46:56:f4:ac:86:65:89:69:bf:3e: 39:e0:df:ca:77:ea:e6:10:61:46:43:2f:4b:b2:6b:ba:dc:4a: 65:50:93:20:f6:5c:ac:0f:e6:57:06:04:df:01:51:51:50:6d: a9:04:df:78:44:ee:dc:e5:04:39:61:57:cb:d6:bf:9c:69:4e: a9:65:e0:5e:40:75:34:be:a8:ae:f1:3f:50:c0:e8:d4:fe:13: 75:57:e0:b3:0d:95:08:59:e8:07:a6:a0:63:02:e4:02:ea:e2: 1d:9d:cc:08:4c:2f:b4:e1:4c:1d:bc:fc:ee:f6:fd:d5:f9:aa: 18:dc:eb:2e:8b:be:bc:49:a2:d0:5c:79:f5:84:bb:59:e6:d1: c6:13:38:06:a4:fc:9e:1c:0a:f8:12:94:75:0d:d6:4d:6d:e9: 7f:63:21:d6:37:03:72:e7:0b:f5:d5:40:6c:a1:e2:df:36:ca: 6e:5a:36:08:ef:ec:4e:fc:f6:ac:6d:ee:9e:b3:4c:62:25:04: 05:e6:11:87:15:f5:e6:37:92:a1:01:13:b8:8e:91:56:48:68: ce:97:0c:61:51:ec:c8:79:04:65:45:45:0e:96:31:09:c8:f7: 16:d3:14:7f:87:64:3a:52:78:47:1e:52:83:0b:0f:1b:f7:8f: 00:23:d8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhvPGOFjw+PpKat0M7FQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODcyMzY1MWNhYmNmMDAwOWNmMjgxYTJhNTFjNWI0ZTkw NTYyMmYwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EygxZmQwMjFhMzUzOTRjN2VmOTIwMGIxM2NkNDZhMmM0MjExZDI0OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6JZsN2L4rt9VLcIuEygGyRsNwlB QarezAZrsVKcKDfD3ImmeEST1zmL4qN2KWwfXQGJKUeVHkLjGxjtG5wSEUJ8W+FI 0xrAgDADs9lqGaPVfbJk3WXtF8Kk5Fp3FN3Te1JzmSRi5RP52LvB6jicGE8OyjaQ 39iPn1rcAeSEtqVXUY4RBw/TnSBd21QFBZ56JaqFvraukAcHoCNALYxKN2i1Qdax Sg4IXhiCwKBBwH32XAGz+EpOTmwzm0tMCYiUtButn/0NGM6HxOCjt/E/odbnYcQm jVApa0gyDXAPU6uGa66QiznVTOJHjfTGsi4Mxl5Xr748ss+a5CCbybDihQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/QIaNTlMfvkgCxPNRqLEIR0kn1MB8GA1UdIwQY MBaAFLqHI2Ucq88ACc8oGipRxbTpBWIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjct MmU3MGRlZDlkOTRmLzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjctMmU3MGRlZDlkOTRm LzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2IxRWIw 8clGVvSshmWJab8+OeDfynfq5hBhRkMvS7JrutxKZVCTIPZcrA/mVwYE3wFRUVBt qQTfeETu3OUEOWFXy9a/nGlOqWXgXkB1NL6orvE/UMDo1P4TdVfgsw2VCFnoB6ag YwLkAuriHZ3MCEwvtOFMHbz87vb91fmqGNzrLou+vEmi0Fx59YS7WebRxhM4BqT8 nhwK+BKUdQ3WTW3pf2Mh1jcDcucL9dVAbKHi3zbKblo2CO/sTvz2rG3unrNMYiUE BeYRhxX15jeSoQETuI6RVkhozpcMYVHsyHkEZUVFDpYxCcj3FtMUf4dkOlJ4Rx5S gwsPG/ePACPYWA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:19 2025 by rpki-client