This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json) Hash identifier: 0Z0ZImiLGBBn63eWr86P14rBwu0x1P+16fvA6U9Aci0= Subject key identifier: CA:4B:DB:32:B6:6A:97:67:99:50:C6:05:22:5F:F9:7A:E2:32:F5:BC Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019AF12CFF17695EDC60533948CC9441E05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft Manifest number: 0B27 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=) 2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: pPjM38kHo12WDG2pV1AYQ2MxtGpmPponYchOeXlNxYM=) 3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ff:17:69:5e:dc:60:53:39:48:cc:94:41:e0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=ca4bdb32b66a97679950c605225ff97ae232f5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:e1:6a:b6:1b:f2:34:a1:68:4e:36:68:36: af:4a:0b:dd:6e:5e:30:b3:39:56:04:ce:e6:b1:06: ff:c6:ba:93:67:3b:86:db:50:c4:5c:60:d4:f8:58: c6:66:4d:e3:b5:00:ad:64:c0:43:66:5f:78:e4:85: ce:fc:ff:70:f9:cd:e7:01:25:76:80:d1:36:e2:29: 61:c5:79:59:82:02:eb:81:43:f0:28:e2:12:4d:89: 2b:45:0f:ad:e3:3a:ba:7b:35:78:65:b7:ca:55:d5: 58:2d:2e:5f:d8:93:50:f9:db:a0:f6:4d:09:e2:8e: 3f:6d:e4:cb:f3:24:34:6e:0f:c3:06:99:de:41:a9: 27:7e:ac:28:05:23:cd:a9:38:70:97:a9:88:15:06: 30:d1:6a:31:55:fb:48:e4:1a:c0:18:b7:e4:52:47: e4:b8:eb:23:30:ec:07:05:8a:ca:f9:83:e0:9c:19: db:dc:27:2c:6b:8a:50:57:c3:eb:1e:bd:8c:6c:4b: 48:2d:0d:c4:1d:1e:d4:5d:23:aa:88:7e:ba:28:1a: 26:49:b0:f0:d4:de:0b:0a:32:41:70:a1:5a:14:73: a0:8c:12:37:a5:54:19:5d:31:47:2c:f1:f4:f8:d6: 69:07:c1:30:0e:ab:e2:af:98:b7:24:82:c0:bc:db: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:DB:32:B6:6A:97:67:99:50:C6:05:22:5F:F9:7A:E2:32:F5:BC X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a5:d2:a1:4a:e2:c4:07:45:9b:ba:d9:ee:6c:07:0e:28:19: 90:4b:3d:e2:64:56:84:6b:85:a6:65:2c:ee:a9:f9:70:2f:8e: 44:d7:32:12:dd:ea:cf:97:12:f3:40:fd:64:6b:33:68:13:cc: aa:6d:82:8a:3c:67:51:f2:fb:1c:5e:3b:93:6d:6a:f9:cb:48: 9e:1a:33:7a:77:f5:b0:04:82:b5:74:20:88:63:64:a4:4c:4d: d1:43:20:63:c2:03:8f:a2:6e:de:7d:d5:96:8c:68:e8:95:f9: 1f:18:38:92:12:88:3c:51:01:16:7b:77:42:17:7c:5a:76:29: 05:4e:ab:90:97:47:53:6f:80:4c:4b:35:aa:e9:3e:52:4a:df: b1:a9:e4:36:43:66:5c:db:d6:52:3e:9e:55:1d:99:e7:e3:47: 57:6e:de:f0:8d:05:93:a9:f3:1b:3e:ab:bf:3c:97:0d:60:3d: 74:e1:7e:38:71:23:11:0d:cf:11:8a:75:de:2a:20:45:c2:01: 98:87:f0:7c:b3:a0:3b:13:12:a0:0f:c4:38:a2:34:15:b4:43: de:26:45:4a:fa:7a:b7:9d:73:dd:38:7f:64:ad:be:88:2f:a2: c9:11:6f:a3:a4:e3:ec:e2:79:19:80:b2:d0:fa:e7:c3:0f:28: 54:17:60:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP8XaV7cYFM5SMyUQeBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhjYTRiZGIzMmI2NmE5NzY3OTk1MGM2MDUyMjVmZjk3YWUyMzJmNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBbharYb8jShaE42aDavSgvdbl4w szlWBM7msQb/xrqTZzuG21DEXGDU+FjGZk3jtQCtZMBDZl945IXO/P9w+c3nASV2 gNE24ilhxXlZggLrgUPwKOISTYkrRQ+t4zq6ezV4ZbfKVdVYLS5f2JNQ+dug9k0J 4o4/beTL8yQ0bg/DBpneQaknfqwoBSPNqThwl6mIFQYw0WoxVftI5BrAGLfkUkfk uOsjMOwHBYrK+YPgnBnb3Ccsa4pQV8PrHr2MbEtILQ3EHR7UXSOqiH66KBomSbDw 1N4LCjJBcKFaFHOgjBI3pVQZXTFHLPH0+NZpB8EwDqvir5i3JILAvNt7GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpL2zK2apdnmVDGBSJf+XriMvW8MB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKXSoUri xAdFm7rZ7mwHDigZkEs94mRWhGuFpmUs7qn5cC+ORNcyEt3qz5cS80D9ZGszaBPM qm2CijxnUfL7HF47k21q+ctInhozenf1sASCtXQgiGNkpExN0UMgY8IDj6Ju3n3V loxo6JX5Hxg4khKIPFEBFnt3Qhd8WnYpBU6rkJdHU2+ATEs1quk+UkrfsankNkNm XNvWUj6eVR2Z5+NHV27e8I0Fk6nzGz6rvzyXDWA9dOF+OHEjEQ3PEYp13iogRcIB mIfwfLOgOxMSoA/EOKI0FbRD3iZFSvp6t51z3Th/ZK2+iC+iyRFvo6Tj7OJ5GYCy 0Prnww8oVBdgjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:50 2025 by rpki-client