This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json) Hash identifier: xT74DMDuCEUwoj2bCHy3f+QHeM5sAuIVGU1huwIDLAk= Subject key identifier: B9:C8:CB:41:3A:7D:77:3F:F2:89:BC:02:9B:F8:DF:85:4C:4B:F1:DB Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Certificate serial: 019AF31C9D7348A06F581CFF37D3C13F220B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=) 2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: GXJmbGlkNwWLI8g0Z4zA8qnSUAhTIHlNsVfXP1JDu50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9d:73:48:a0:6f:58:1c:ff:37:d3:c1:3f:22:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=b9c8cb413a7d773ff289bc029bf8df854c4bf1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:eb:d2:49:1d:e9:a2:51:75:dd:f1:9c:2d: 84:f4:33:19:23:c8:fa:4c:4b:1f:bb:e6:e1:a7:d5: 3a:fd:6d:b5:ab:d4:f9:dd:95:8d:cc:f2:39:53:a3: ff:82:78:21:2f:63:b4:3e:f5:61:9d:7b:a6:e3:79: 03:ff:a9:8f:6c:dc:42:04:8f:74:5f:41:f8:3e:71: 30:8f:ff:09:5f:77:c5:d4:11:ce:bb:f9:ff:4d:2b: 08:64:32:2c:da:81:6c:2b:ae:b8:93:f6:20:da:24: f4:b7:1a:d0:06:7f:9c:7a:e5:3e:91:d6:58:b1:e1: 43:dc:73:24:67:55:44:5f:62:7f:eb:13:35:4a:46: db:3a:32:ff:45:83:a0:2b:35:73:3b:a0:d8:c4:da: 65:79:3e:d8:8d:91:6e:8b:32:5c:d1:84:22:4c:8a: 20:22:41:7b:fc:9a:d5:cd:6c:64:44:6c:12:57:a4: 03:a1:68:59:53:2c:51:a9:6a:80:b0:0a:82:bb:8f: bc:25:2d:31:b0:0e:6e:c9:a2:00:e4:0f:55:65:a6: cf:de:90:f1:10:96:3e:0d:2a:68:ba:12:ea:22:64: c8:17:1e:cf:c8:1e:93:f0:1d:0c:a4:c9:e9:c9:ce: 98:b9:cf:f3:e1:ec:6f:e9:ba:18:66:f9:3c:9e:74: f1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C8:CB:41:3A:7D:77:3F:F2:89:BC:02:9B:F8:DF:85:4C:4B:F1:DB X509v3 Authority Key Identifier: keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:89:e3:b2:c1:51:ca:89:52:6b:69:1c:bc:09:16:81:96:ec: 68:57:5c:71:8c:81:f2:48:28:37:96:51:00:fe:90:a7:9e:4a: ec:d2:98:4f:bc:c0:e4:85:3c:20:1d:0d:7c:56:58:2d:61:6c: f9:08:e9:6c:2d:90:56:b0:c2:3e:d5:ac:03:1b:50:3b:02:34: b7:35:8f:92:9d:79:c8:82:97:0b:41:79:7c:c9:8c:af:b3:31: 9d:8f:34:dc:31:2d:ae:28:5d:10:7a:e1:e1:68:c1:b0:64:b6: f2:78:3d:be:8c:70:87:5f:74:13:17:2e:38:83:e5:9b:0f:25: 42:23:87:8e:ad:0f:ba:c8:03:ee:aa:ce:96:7c:05:47:7d:53: d0:3f:e9:45:08:f9:81:c5:4f:73:3c:63:b6:da:d7:9b:8e:41: d5:3c:b7:4c:40:dc:76:5e:7c:6f:a8:12:74:04:a3:71:70:1c: e3:1e:1b:f5:d1:16:bb:cf:44:43:b1:0f:3a:3b:82:9b:55:10: a2:d7:48:a1:f7:1c:9e:df:50:af:5c:0a:47:a6:46:5b:6c:18: 27:98:57:ac:9b:03:64:53:e6:ec:25:60:05:9c:6e:4f:3b:4c: ba:11:95:b8:90:a4:cd:be:3a:14:80:c3:ce:e5:dc:44:13:d7: be:2a:a5:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJ1zSKBvWBz/N9PBPyILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTlhMzM5ODFlMzRiMmFlNTA1ODZlMzA0OGM2NjNhMmM2 Yjg1ODYwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD EyhiOWM4Y2I0MTNhN2Q3NzNmZjI4OWJjMDI5YmY4ZGY4NTRjNGJmMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR/r0kkd6aJRdd3xnC2E9DMZI8j6 TEsfu+bhp9U6/W21q9T53ZWNzPI5U6P/gnghL2O0PvVhnXum43kD/6mPbNxCBI90 X0H4PnEwj/8JX3fF1BHOu/n/TSsIZDIs2oFsK664k/Yg2iT0txrQBn+ceuU+kdZY seFD3HMkZ1VEX2J/6xM1SkbbOjL/RYOgKzVzO6DYxNpleT7YjZFuizJc0YQiTIog IkF7/JrVzWxkRGwSV6QDoWhZUyxRqWqAsAqCu4+8JS0xsA5uyaIA5A9VZabP3pDx EJY+DSpouhLqImTIFx7PyB6T8B0MpMnpyc6Yuc/z4exv6boYZvk8nnTxzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnIy0E6fXc/8om8Apv434VMS/HbMB8GA1UdIwQY MBaAFLsZozmB40sq5QWG4wSMZjosa4WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUt NjA2MGM0OGRhODM3LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUtNjA2MGM0OGRhODM3 LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYonjssFR yolSa2kcvAkWgZbsaFdccYyB8kgoN5ZRAP6Qp55K7NKYT7zA5IU8IB0NfFZYLWFs +QjpbC2QVrDCPtWsAxtQOwI0tzWPkp15yIKXC0F5fMmMr7MxnY803DEtrihdEHrh 4WjBsGS28ng9voxwh190ExcuOIPlmw8lQiOHjq0PusgD7qrOlnwFR31T0D/pRQj5 gcVPczxjttrXm45B1Ty3TEDcdl58b6gSdASjcXAc4x4b9dEWu89EQ7EPOjuCm1UQ otdIofccnt9Qr1wKR6ZGW2wYJ5hXrJsDZFPm7CVgBZxuTztMuhGVuJCkzb46FIDD zuXcRBPXviqlfg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:26 2025 by rpki-client