This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json) Hash identifier: xc/ydDfr+pp1P2QkgqrzrpGh22L89jGwbe8yVoV2Uxo= Subject key identifier: 2C:AE:91:42:7B:26:20:31:5D:14:8B:4A:ED:58:A6:DB:CD:45:C8:7D Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25 Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325 Certificate serial: 019AF19AFF8C24D0664976B65592CC621803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft Manifest number: 05A4 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=) 2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: Mx2oxuRrs5gHT7qmXwf3ufiQM2EiX+L/sAWr0P6MWNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:8c:24:d0:66:49:76:b6:55:92:cc:62:18:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=2cae91427b2620315d148b4aed58a6dbcd45c87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:09:b1:28:66:7e:9a:8a:cf:d7:74:b3:e5: 77:68:34:77:88:9c:74:ae:36:bd:ed:2e:78:2c:fd: 91:63:84:8a:4d:6e:b8:44:3e:14:b5:b0:bb:ff:24: 62:36:c1:e0:da:83:cc:54:c6:7d:60:de:89:42:6c: c6:58:0d:65:f0:f9:98:2c:1f:39:a4:94:b6:12:8c: fb:c9:92:8f:10:96:89:1e:85:7c:17:cd:55:dd:c9: 58:b9:56:1e:9e:af:5e:6f:78:93:e9:9d:25:4b:63: f3:27:98:ca:f9:52:de:52:c1:f9:fc:3b:71:a0:24: 43:d8:6f:be:5a:9d:40:9c:74:ab:52:da:94:90:c2: fb:ec:8a:a8:ec:21:3e:f5:1f:f6:77:55:e7:07:32: 88:65:ae:3d:ae:99:97:be:7a:02:d8:be:65:34:f4: 78:88:ee:d9:2c:cd:62:f4:f7:9b:1c:c2:e6:6a:b4: 68:6a:a4:58:8b:bc:3d:d6:b9:40:87:72:9c:24:98: 5e:dc:86:a0:02:62:fb:49:00:79:88:51:ea:a9:97: bf:28:6e:47:91:b0:d2:df:d5:71:bc:cb:ef:c6:27: f3:2a:68:07:5c:05:db:0a:78:08:aa:35:b4:78:72: 8f:68:9b:0b:85:ae:f6:ca:f6:47:13:aa:46:d4:25: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:91:42:7B:26:20:31:5D:14:8B:4A:ED:58:A6:DB:CD:45:C8:7D X509v3 Authority Key Identifier: keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:7c:61:fa:b1:de:b2:71:c8:c0:87:7f:f8:a6:25:27:50: c8:b9:3b:b6:5f:69:0f:bc:3e:ac:1d:36:5e:a7:76:38:1f:1b: fb:48:c4:26:89:a2:43:e0:aa:30:23:58:3e:42:ce:9c:38:8c: 0b:ad:a4:97:f3:5c:52:62:eb:17:6e:0c:d1:49:98:44:f7:b8: 32:38:fe:37:b2:31:fb:52:d8:75:07:df:6d:65:d8:9c:d7:9e: cd:be:df:57:df:59:18:f0:f0:48:f2:ce:9f:a6:46:d3:96:04: 3f:89:54:a3:aa:1b:1f:6c:b8:4f:7e:f5:bb:ba:db:ed:7f:d0: f3:46:17:60:86:14:11:9b:6c:f8:71:b4:66:70:af:19:c3:3d: 32:d2:d2:7a:d9:37:d5:d3:74:a8:c9:75:27:81:6d:a8:76:ab: d6:d4:c1:c0:01:0d:da:80:6a:20:a4:8a:70:83:5d:98:a2:e4: de:f9:34:3b:7a:9b:42:19:b2:08:6a:6b:82:43:a5:cd:d5:92: 51:17:bc:37:16:04:f5:6c:a2:07:96:9f:ce:16:b1:3d:e1:ba: 5c:35:10:03:b3:60:97:c2:f4:f1:06:08:85:f0:2d:9b:c2:fb: f4:e8:c9:f6:7b:e6:7b:ba:39:a1:54:a4:9e:f0:be:57:0e:39: 6e:3d:c7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv+MJNBmSXa2VZLMYhgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjc0MTU1MTA0ZTQzMzI4YzNiZmEyYWQ2YWM2NzE5NzY2 ZjEzMjUwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EygyY2FlOTE0MjdiMjYyMDMxNWQxNDhiNGFlZDU4YTZkYmNkNDVjODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m0JsShmfpqKz9d0s+V3aDR3iJx0 rja97S54LP2RY4SKTW64RD4UtbC7/yRiNsHg2oPMVMZ9YN6JQmzGWA1l8PmYLB85 pJS2Eoz7yZKPEJaJHoV8F81V3clYuVYenq9eb3iT6Z0lS2PzJ5jK+VLeUsH5/Dtx oCRD2G++Wp1AnHSrUtqUkML77Iqo7CE+9R/2d1XnBzKIZa49rpmXvnoC2L5lNPR4 iO7ZLM1i9PebHMLmarRoaqRYi7w91rlAh3KcJJhe3IagAmL7SQB5iFHqqZe/KG5H kbDS39VxvMvvxifzKmgHXAXbCngIqjW0eHKPaJsLha72yvZHE6pG1CVAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyukUJ7JiAxXRSLSu1YptvNRch9MB8GA1UdIwQY MBaAFLonQVUQTkMyjDv6KtasZxl2bxMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlkQlZSQk9RektNT19vcTFxeG5HWFp2RXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNjllZWYtNWFjMi00NzY4LTgzYjct ZWNkZjJhOTA2YjRjLzEvdWlkQlZSQk9RektNT19vcTFxeG5HWFp2RXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jNjllZWYtNWFjMi00NzY4LTgzYjctZWNkZjJhOTA2YjRj LzEvdWlkQlZSQk9RektNT19vcTFxeG5HWFp2RXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDF8Yfqx 3rJxyMCHf/imJSdQyLk7tl9pD7w+rB02Xqd2OB8b+0jEJomiQ+CqMCNYPkLOnDiM C62kl/NcUmLrF24M0UmYRPe4Mjj+N7Ix+1LYdQffbWXYnNeezb7fV99ZGPDwSPLO n6ZG05YEP4lUo6obH2y4T371u7rb7X/Q80YXYIYUEZts+HG0ZnCvGcM9MtLSetk3 1dN0qMl1J4FtqHar1tTBwAEN2oBqIKSKcINdmKLk3vk0O3qbQhmyCGprgkOlzdWS URe8NxYE9WyiB5afzhaxPeG6XDUQA7Ngl8L08QYIhfAtm8L79OjJ9nvme7o5oVSk nvC+Vw45bj3HrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:28 2025 by rpki-client