This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft File: uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json) Hash identifier: DI/mhO38oeWpIPwLYbYNyOI1VTe1LG2X/8IXU7PbzU4= Subject key identifier: B8:C7:EB:19:88:B6:E2:28:A9:78:D0:00:49:59:BD:66:82:9C:B2:15 Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90 Certificate issuer: /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690 Certificate serial: 019AF31D356A25D00DCFEC8047621A923102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:48 +0000 Manifest this update: Sat 06 Dec 2025 10:02:48 +0000 Manifest next update: Sun 07 Dec 2025 10:02:48 +0000 Files and hashes: 1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: Snks+UZe6dyWd21Qfqqq2PFw/2TqirOs/FQCIsxt984=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:35:6a:25:d0:0d:cf:ec:80:47:62:1a:92:31:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690 Validity Not Before: Dec 6 10:02:48 2025 GMT Not After : Dec 7 10:02:48 2025 GMT Subject: CN=b8c7eb1988b6e228a978d0004959bd66829cb215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:52:0d:6a:93:02:9a:c6:86:45:ef:2d:38: 62:1b:7b:a5:1b:1e:45:4b:c9:0a:f0:eb:87:c2:84: 7a:40:8e:1a:8c:aa:82:20:d3:f2:a1:b9:74:ae:9d: bb:71:55:bd:8a:ab:f8:0d:08:87:dc:d9:d5:a8:2b: 46:4a:fc:b2:a3:64:9a:ba:e9:1c:64:20:cd:8c:ca: e2:69:54:cd:f6:d7:61:14:d4:4c:54:17:c4:42:94: 38:2a:0b:98:77:03:e8:e6:b5:2b:30:ca:3b:02:4f: 62:85:d9:f1:a1:ab:ec:e0:ef:2a:71:a9:4b:40:3e: 46:31:58:42:8d:29:58:1b:29:52:14:34:37:9b:ab: 21:61:2e:c3:e5:52:54:7b:27:d6:0f:c5:2b:36:64: ed:11:59:e2:15:34:7b:56:cc:73:bd:b8:92:92:fd: 53:0e:19:cf:3b:5b:08:85:59:27:c7:88:21:89:76: 77:5c:79:35:6c:d5:3e:22:69:3e:76:0f:64:73:f0: 16:60:77:62:c0:9d:9a:6e:6d:8c:0b:93:1c:04:e3: 7a:2a:3c:58:d4:fd:87:b3:46:2d:21:67:2b:12:b3: e2:35:0a:7e:e3:d1:f4:c6:1a:c8:64:ee:ac:d7:aa: 35:5d:93:c6:a3:bf:80:f2:2b:4d:e8:44:72:58:79: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:EB:19:88:B6:E2:28:A9:78:D0:00:49:59:BD:66:82:9C:B2:15 X509v3 Authority Key Identifier: keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:76:b7:73:17:8a:58:af:74:36:f3:2a:5d:b8:71:a2:70: 97:67:9d:a7:40:3b:16:27:b7:2b:db:db:66:44:b5:f0:76:71: b2:c3:c3:38:7f:11:7a:52:1c:9c:c4:23:52:27:19:49:ed:1d: 59:eb:df:fa:4c:e2:ce:3e:f7:5e:34:80:00:82:54:ec:5f:8d: 72:6b:b1:86:61:e4:fb:6a:12:53:9a:78:49:02:b6:2a:37:1e: f1:4e:12:a9:7d:e2:a3:66:7b:4d:5b:97:ed:98:e0:99:17:2d: 42:d9:81:7f:c9:30:d7:54:0a:f1:da:1a:b8:bc:3a:05:b7:55: d6:cf:24:a2:0b:1f:aa:ce:ae:77:74:68:e7:6f:39:e4:fb:45: 26:db:20:c5:92:bb:68:45:5a:54:f3:61:d2:bd:8e:c9:42:13: 15:5b:f1:9b:4f:31:61:14:5c:86:ee:c5:2e:92:bf:d9:15:41: 6f:dc:d8:3d:80:9e:23:2a:94:6e:de:e3:a5:34:9c:b0:42:dd: e9:aa:79:b3:7f:99:16:59:ff:89:30:eb:70:eb:15:05:88:d3: 4f:4b:22:d1:f1:3c:4b:0f:b7:4b:d0:6b:3a:25:a3:19:07:07: 5a:8b:7d:bf:f7:30:91:12:dc:03:fc:d1:b8:12:c4:11:9b:97: 22:58:3b:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTVqJdANz+yAR2IakjECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OGEyMGUyZmI5ZTExNTA0NjM5YjY3Y2ZlYzBhZmViM2Yz MDY2OTAwHhcNMjUxMjA2MTAwMjQ4WhcNMjUxMjA3MTAwMjQ4WjAzMTEwLwYDVQQD EyhiOGM3ZWIxOTg4YjZlMjI4YTk3OGQwMDA0OTU5YmQ2NjgyOWNiMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp55SDWqTAprGhkXvLThiG3ulGx5F S8kK8OuHwoR6QI4ajKqCINPyobl0rp27cVW9iqv4DQiH3NnVqCtGSvyyo2Sauukc ZCDNjMriaVTN9tdhFNRMVBfEQpQ4KguYdwPo5rUrMMo7Ak9ihdnxoavs4O8qcalL QD5GMVhCjSlYGylSFDQ3m6shYS7D5VJUeyfWD8UrNmTtEVniFTR7VsxzvbiSkv1T DhnPO1sIhVknx4ghiXZ3XHk1bNU+Imk+dg9kc/AWYHdiwJ2abm2MC5McBON6KjxY 1P2Hs0YtIWcrErPiNQp+49H0xhrIZO6s16o1XZPGo7+A8itN6ERyWHnH7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjH6xmItuIoqXjQAElZvWaCnLIVMB8GA1UdIwQY MBaAFLiKIOL7nhFQRjm2fP7Ar+s/MGaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYmI2MmUtNGI3NS00NGMzLThmYjMt MThjY2JjOTk1YmY4LzEvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hYmI2MmUtNGI3NS00NGMzLThmYjMtMThjY2JjOTk1YmY4 LzEvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjR2t3MX ilivdDbzKl24caJwl2edp0A7Fie3K9vbZkS18HZxssPDOH8RelIcnMQjUicZSe0d Wevf+kzizj73XjSAAIJU7F+NcmuxhmHk+2oSU5p4SQK2Kjce8U4SqX3io2Z7TVuX 7ZjgmRctQtmBf8kw11QK8doauLw6BbdV1s8kogsfqs6ud3Ro52855PtFJtsgxZK7 aEVaVPNh0r2OyUITFVvxm08xYRRchu7FLpK/2RVBb9zYPYCeIyqUbt7jpTScsELd 6ap5s3+ZFln/iTDrcOsVBYjTT0si0fE8Sw+3S9BrOiWjGQcHWot9v/cwkRLcA/zR uBLEEZuXIlg7Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:41 2025 by rpki-client