This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json) Hash identifier: m3BbU1PVF3BhglXTvwYzW+c5Zj/bjfWfBC+2m8PsB7o= Subject key identifier: F7:B3:4B:B2:92:C4:83:6B:1A:17:C3:22:82:35:E2:6E:AD:DB:38:0E Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79 Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79 Certificate serial: 019AF3F7285E3FFE1407B3115917DDCF530A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft Manifest number: 170D Signing time: Sat 06 Dec 2025 14:00:52 +0000 Manifest this update: Sat 06 Dec 2025 14:00:52 +0000 Manifest next update: Sun 07 Dec 2025 14:00:52 +0000 Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=) 2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: cLH/WiU9QtsW6aotx8+unLbv9Sj8wgOEJxxDI9E781w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:28:5e:3f:fe:14:07:b3:11:59:17:dd:cf:53:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79 Validity Not Before: Dec 6 14:00:52 2025 GMT Not After : Dec 7 14:00:52 2025 GMT Subject: CN=f7b34bb292c4836b1a17c3228235e26eaddb380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:6d:00:d2:27:a0:29:aa:c9:57:04:41:46: 4e:fa:77:65:b2:a8:64:03:bd:be:e6:d4:80:16:2f: bb:de:ce:e0:b6:d0:bc:7e:ae:06:63:45:43:ca:19: 1f:45:df:78:2b:ca:74:25:01:a4:22:1c:7b:01:83: 34:78:98:5e:1d:87:0e:34:e0:86:d2:ec:59:6f:25: 8a:be:8d:e0:3e:5c:f9:13:78:c0:2e:57:b0:76:48: 44:c6:9c:94:9e:17:27:da:dc:cc:80:18:1c:81:d9: 20:53:4d:10:8e:7f:b8:34:c2:56:37:26:b8:d9:9e: 59:0f:c0:d2:06:0a:4d:08:4f:c6:69:d7:8b:90:f0: 4d:50:9e:d7:75:33:9b:00:6b:6f:af:14:ae:b1:a5: 4a:c7:97:80:01:9d:67:87:75:5a:73:f9:f5:55:dd: 25:26:0b:e0:f1:01:31:6e:25:38:d3:f1:60:66:0d: 24:e8:5b:8e:50:98:1f:6e:51:1f:6c:cc:1a:51:30: de:3a:21:6e:4b:f8:28:43:0a:15:d5:6a:77:ac:f4: 19:7a:e7:24:5b:2c:07:e3:ae:fc:0b:f0:ec:c7:6d: 97:df:58:9f:f3:a9:39:cc:7c:6f:01:c8:04:94:76: b9:91:57:fd:d5:f3:c8:ad:bc:e1:28:47:b5:50:4c: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B3:4B:B2:92:C4:83:6B:1A:17:C3:22:82:35:E2:6E:AD:DB:38:0E X509v3 Authority Key Identifier: keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:06:ad:aa:01:b6:fc:a1:f8:ab:60:06:fb:d6:01:d6:e2:69: 83:0a:a2:b3:f3:7f:a9:cc:03:88:f6:41:3a:0c:91:b5:f7:c7: 32:25:33:94:63:3c:b6:2c:23:28:ad:05:3b:36:8e:41:5b:22: bc:1f:d3:10:d9:fc:63:c1:c5:22:27:6c:e2:00:55:cd:2a:3b: cc:ec:68:15:5c:26:e8:64:e3:fb:5e:d9:7b:c3:b1:5e:53:53: 9c:7f:15:7a:e9:2d:20:4e:ae:62:20:ed:6c:a6:17:75:76:bd: 14:6a:35:7d:f4:03:c3:3e:b5:35:2c:e2:b1:1c:90:20:b9:85: d3:ef:96:ab:d3:4e:e9:4a:82:58:e2:1a:33:c2:3e:00:89:a5: 32:e2:a0:f0:1a:ae:ed:02:3d:df:ce:63:c2:af:40:ec:be:28: 40:3f:55:b0:7a:6b:cd:ee:c7:25:58:79:72:58:e7:27:f8:e4: 6a:31:9f:f8:a2:04:9d:55:e4:6b:e4:26:34:94:04:5f:7c:18: 36:05:8e:bd:ab:b2:af:9e:31:d4:04:6e:5c:c4:00:d0:63:71: f3:2e:a0:f3:c6:55:3b:e7:88:04:c1:8a:e3:e9:3e:e8:2b:8e: 4b:c9:4a:c4:e3:ef:1f:19:12:8f:7c:1d:c2:e6:9a:a9:2e:ad: 85:70:ef:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yheP/4UB7MRWRfdz1MKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZTdmYTc3ZjcyNGJiNDY3MzI1YWQ1OWQ3ZGJmYzYzMzk5 YzZlNzkwHhcNMjUxMjA2MTQwMDUyWhcNMjUxMjA3MTQwMDUyWjAzMTEwLwYDVQQD EyhmN2IzNGJiMjkyYzQ4MzZiMWExN2MzMjI4MjM1ZTI2ZWFkZGIzODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdVtANInoCmqyVcEQUZO+ndlsqhk A72+5tSAFi+73s7gttC8fq4GY0VDyhkfRd94K8p0JQGkIhx7AYM0eJheHYcONOCG 0uxZbyWKvo3gPlz5E3jALlewdkhExpyUnhcn2tzMgBgcgdkgU00Qjn+4NMJWNya4 2Z5ZD8DSBgpNCE/GadeLkPBNUJ7XdTObAGtvrxSusaVKx5eAAZ1nh3Vac/n1Vd0l Jgvg8QExbiU40/FgZg0k6FuOUJgfblEfbMwaUTDeOiFuS/goQwoV1Wp3rPQZeuck WywH4678C/Dsx22X31if86k5zHxvAcgElHa5kVf91fPIrbzhKEe1UEwwoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPezS7KSxINrGhfDIoI14m6t2zgOMB8GA1UdIwQY MBaAFLrn+nf3JLtGcyWtWdfb/GM5nG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0Zjkt MTJkYzk0ZGRlZGNkLzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0ZjktMTJkYzk0ZGRlZGNk LzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAatqgG2 /KH4q2AG+9YB1uJpgwqis/N/qcwDiPZBOgyRtffHMiUzlGM8tiwjKK0FOzaOQVsi vB/TENn8Y8HFIids4gBVzSo7zOxoFVwm6GTj+17Ze8OxXlNTnH8VeuktIE6uYiDt bKYXdXa9FGo1ffQDwz61NSzisRyQILmF0++Wq9NO6UqCWOIaM8I+AImlMuKg8Bqu 7QI9385jwq9A7L4oQD9VsHprze7HJVh5cljnJ/jkajGf+KIEnVXka+QmNJQEX3wY NgWOvauyr54x1ARuXMQA0GNx8y6g88ZVO+eIBMGK4+k+6CuOS8lKxOPvHxkSj3wd wuaaqS6thXDvOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:34 2025 by rpki-client