This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json) Hash identifier: Ral6Lt+etjcu1RmEGxE4DqWSJ/7kpsy1VynRuYjCOaE= Subject key identifier: 1B:7E:7B:89:B9:5E:30:DA:89:BA:DA:F3:59:50:0A:5A:50:D4:BB:9C Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47 Certificate serial: 019AF19B77968E028324BC032B72F954946D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft Manifest number: 1463 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: PYgJOpz8wOF53DXcytLOF7qvdRrmUmT/Bw4qfzABKUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:77:96:8e:02:83:24:bc:03:2b:72:f9:54:94:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=1b7e7b89b95e30da89badaf359500a5a50d4bb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d3:b1:c1:b2:6a:35:cd:1b:66:0d:b2:b1:b0: ad:eb:67:33:a8:49:d1:c0:f4:52:be:37:6f:fa:8a: c7:bc:89:d1:f7:1e:0f:29:be:f7:c3:b3:c2:7d:92: 2c:ff:34:e3:ad:92:1e:3c:a5:e3:3e:fe:73:50:b2: c4:7c:d2:36:04:27:42:1e:85:3a:b3:d8:50:1b:9f: 40:98:ea:75:ad:06:6e:73:0d:58:92:f6:ba:59:cf: b3:f7:ae:18:42:88:9c:25:8d:b9:40:92:f9:64:22: 2b:d7:a2:af:b7:44:fd:0a:15:a5:9c:35:eb:0a:cc: 1b:44:01:eb:69:01:7e:4b:77:52:3e:45:40:e3:72: b9:d6:19:69:36:f0:16:4a:b2:01:5c:96:90:73:c5: 90:36:ba:1d:fd:82:69:1a:1b:86:64:ea:b6:99:ca: c7:46:6a:bd:08:30:2b:ec:c2:8f:65:2a:bf:60:0b: 1b:bb:17:d1:ae:7f:10:98:f7:c8:fc:a3:66:32:ba: 89:ef:7e:35:6b:d0:23:94:ec:7d:7c:7b:3d:4b:9c: f8:62:3e:67:7f:a1:20:71:2f:5f:29:f9:cf:7f:28: c6:1c:22:e8:65:9a:a5:0d:dc:57:d2:c0:03:51:93: 6e:2e:2f:e2:b1:bf:0e:64:f2:f8:c2:f1:68:9b:1d: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:7B:89:B9:5E:30:DA:89:BA:DA:F3:59:50:0A:5A:50:D4:BB:9C X509v3 Authority Key Identifier: keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:5a:0d:92:41:1d:7a:46:7c:49:cf:c0:1d:84:6a:1e:27: a8:2b:aa:56:98:87:e8:6f:b4:ad:c1:95:e4:f8:20:a8:d2:b1: 4c:99:4e:f9:f0:29:be:9b:a0:df:0b:78:1c:69:7c:ce:84:3a: 37:33:48:e4:df:4f:52:72:d5:48:5a:5f:80:75:5d:bb:57:39: a3:b2:25:71:48:9b:e0:79:c0:77:c1:b2:7b:7c:1f:90:8a:72: dc:34:eb:93:34:b9:7a:0e:bd:4f:2c:d1:c9:56:75:54:7a:32: a0:34:82:2d:64:17:66:6a:7c:fa:8a:20:e3:a2:cf:25:8b:62: 7a:41:56:f7:04:33:6c:61:c4:de:50:f4:c7:d1:e8:eb:07:58: 30:66:69:51:da:fc:68:a9:a3:53:df:b3:0a:7a:53:bb:62:fd: 18:eb:83:5e:03:1f:31:dc:bc:34:ad:47:e0:00:e5:68:5e:67: 7f:35:20:16:ea:4c:7d:68:c9:9a:91:e8:d4:39:fd:60:b1:3f: 42:df:f2:7c:ca:43:dd:f2:91:82:7d:fb:f5:b7:60:5e:2d:1e: 2d:d4:5f:fb:f6:f3:37:6a:75:0f:a1:c6:b6:8f:d1:9e:55:d1: d9:7e:6a:41:fc:e5:ad:76:9c:9a:88:e6:a0:ea:81:69:ff:28: 8b:44:4f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3eWjgKDJLwDK3L5VJRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDkwN2NlZTRmYWM1MGYzNzUzNjIyYWQyMWE5ODlhZTc3 NDFjNDcwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EygxYjdlN2I4OWI5NWUzMGRhODliYWRhZjM1OTUwMGE1YTUwZDRiYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dOxwbJqNc0bZg2ysbCt62czqEnR wPRSvjdv+orHvInR9x4PKb73w7PCfZIs/zTjrZIePKXjPv5zULLEfNI2BCdCHoU6 s9hQG59AmOp1rQZucw1Ykva6Wc+z964YQoicJY25QJL5ZCIr16Kvt0T9ChWlnDXr CswbRAHraQF+S3dSPkVA43K51hlpNvAWSrIBXJaQc8WQNrod/YJpGhuGZOq2mcrH Rmq9CDAr7MKPZSq/YAsbuxfRrn8QmPfI/KNmMrqJ7341a9AjlOx9fHs9S5z4Yj5n f6EgcS9fKfnPfyjGHCLoZZqlDdxX0sADUZNuLi/isb8OZPL4wvFomx2slQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt+e4m5XjDaibra81lQClpQ1LucMB8GA1UdIwQY MBaAFLkJB87k+sUPN1NiKtIamJrndBxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQt NTk5NmNhZTlkMTE1LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQtNTk5NmNhZTlkMTE1 LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFytaDZJB HXpGfEnPwB2Eah4nqCuqVpiH6G+0rcGV5PggqNKxTJlO+fApvpug3wt4HGl8zoQ6 NzNI5N9PUnLVSFpfgHVdu1c5o7IlcUib4HnAd8Gye3wfkIpy3DTrkzS5eg69TyzR yVZ1VHoyoDSCLWQXZmp8+oog46LPJYtiekFW9wQzbGHE3lD0x9Ho6wdYMGZpUdr8 aKmjU9+zCnpTu2L9GOuDXgMfMdy8NK1H4ADlaF5nfzUgFupMfWjJmpHo1Dn9YLE/ Qt/yfMpD3fKRgn379bdgXi0eLdRf+/bzN2p1D6HGto/RnlXR2X5qQfzlrXacmojm oOqBaf8oi0RPag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:33 2025 by rpki-client