This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json) Hash identifier: IRCamQUHQVlrANH5S+gbfBaFM9vgOCAg4DBGfia4SXc= Subject key identifier: A6:E8:FB:13:BE:E7:A3:2A:82:7F:B7:E6:73:EA:9E:E5:BA:37:FB:F1 Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f Certificate serial: 019AF0BF938F133DAEB30A4F5A1E424E7F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft Manifest number: 0DA2 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=) 2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: +zr+0ymU+rhn7bR133gDttvGCQIgKfEjB06fKtN3t4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:93:8f:13:3d:ae:b3:0a:4f:5a:1e:42:4e:7f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=a6e8fb13bee7a32a827fb7e673ea9ee5ba37fbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:b7:12:2a:78:bd:c7:74:29:20:c8:23:d0: 18:d7:d3:54:3e:79:73:34:dd:1d:b6:f8:e2:f8:fd: b3:e9:43:ef:12:0b:00:9e:f3:9c:c4:ad:63:b9:56: 4c:49:77:f8:71:b7:cd:69:c6:4b:b5:da:a2:17:af: 43:64:ef:d6:99:c9:1c:2d:53:8d:3d:09:57:d8:2e: aa:12:86:4e:e7:a8:59:8f:70:82:b3:4c:ad:3c:31: 2e:8a:29:7d:39:da:31:fb:6f:b0:98:07:a3:c1:e9: 31:d5:f2:db:9d:f4:1b:e4:71:17:f6:a4:ad:91:b4: f1:ad:99:e3:51:bd:af:25:08:73:7e:62:8d:21:bc: 79:56:98:4f:e4:d4:6e:24:1b:2f:03:1b:bd:cd:46: d3:4f:0a:b4:5d:8d:63:39:11:b3:a0:80:f0:e3:2b: f4:e8:f5:cf:02:c8:be:71:18:71:bd:d4:d7:79:fe: 67:b5:ad:fa:70:6a:4c:5c:a7:13:2b:e2:5a:f3:d6: 26:d9:f1:2d:0d:79:93:12:85:23:ff:73:99:f9:10: b8:10:eb:78:e4:d6:f3:f8:5b:e5:5d:9e:07:70:9b: 99:27:76:6b:34:2c:a9:94:b5:56:36:b5:16:45:f5: 4c:0b:65:8a:ed:7d:51:be:79:6f:83:1e:d1:1b:58: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E8:FB:13:BE:E7:A3:2A:82:7F:B7:E6:73:EA:9E:E5:BA:37:FB:F1 X509v3 Authority Key Identifier: keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:0b:3d:c9:fd:c8:fa:bf:28:96:78:89:9a:f3:89:8c:e7: b4:73:d9:88:a1:af:d5:46:e2:f3:d7:86:63:60:00:f8:5f:d0: d8:da:5b:8c:7a:2e:d1:e0:3d:d5:d8:8a:53:86:ae:69:fc:14: 70:ff:a7:31:25:ca:4d:b9:21:38:a3:88:b3:73:86:b7:00:45: 9c:38:7f:71:83:ae:48:a2:7e:0f:01:97:c3:ae:bc:58:78:23: 2d:39:5d:a4:fb:f0:d8:53:eb:d8:51:6e:ca:d7:7f:46:0d:c1: 2f:10:b4:e8:6a:e9:ed:57:95:a6:7e:94:07:f0:d8:6b:27:dc: 84:d0:69:8e:05:c1:c5:57:85:0e:22:dd:36:fd:e4:9f:51:a9: fd:a5:41:bb:19:6e:da:7a:fb:c1:d4:22:2d:bc:e4:80:3f:49: c7:b0:a1:44:eb:22:c7:43:44:5e:c8:68:e6:f0:df:45:d8:0a: ea:63:97:38:6f:c8:8a:89:7f:65:77:96:a1:d6:62:93:97:1e: d5:d7:0c:99:d6:95:61:34:62:f2:cf:b0:07:c9:8a:1b:af:20: e1:75:ef:19:0e:fe:7a:18:b0:b8:ed:6a:21:4a:c2:0e:8e:89: c7:1e:88:9c:6f:a0:54:62:52:c7:87:eb:e9:65:4b:09:bd:26: e1:6b:a4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5OPEz2uswpPWh5CTn9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh MmE1MGYwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhhNmU4ZmIxM2JlZTdhMzJhODI3ZmI3ZTY3M2VhOWVlNWJhMzdmYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAi3Eip4vcd0KSDII9AY19NUPnlz NN0dtvji+P2z6UPvEgsAnvOcxK1juVZMSXf4cbfNacZLtdqiF69DZO/WmckcLVON PQlX2C6qEoZO56hZj3CCs0ytPDEuiil9Odox+2+wmAejwekx1fLbnfQb5HEX9qSt kbTxrZnjUb2vJQhzfmKNIbx5VphP5NRuJBsvAxu9zUbTTwq0XY1jORGzoIDw4yv0 6PXPAsi+cRhxvdTXef5nta36cGpMXKcTK+Ja89Ym2fEtDXmTEoUj/3OZ+RC4EOt4 5Nbz+FvlXZ4HcJuZJ3ZrNCyplLVWNrUWRfVMC2WK7X1Rvnlvgx7RG1hXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbo+xO+56Mqgn+35nPqnuW6N/vxMB8GA1UdIwQY MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuMLPcn9 yPq/KJZ4iZrziYzntHPZiKGv1Ubi89eGY2AA+F/Q2NpbjHou0eA91diKU4auafwU cP+nMSXKTbkhOKOIs3OGtwBFnDh/cYOuSKJ+DwGXw668WHgjLTldpPvw2FPr2FFu ytd/Rg3BLxC06Grp7VeVpn6UB/DYayfchNBpjgXBxVeFDiLdNv3kn1Gp/aVBuxlu 2nr7wdQiLbzkgD9Jx7ChROsix0NEXsho5vDfRdgK6mOXOG/Iiol/ZXeWodZik5ce 1dcMmdaVYTRi8s+wB8mKG68g4XXvGQ7+ehiwuO1qIUrCDo6Jxx6InG+gVGJSx4fr 6WVLCb0m4WukIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:29 2025 by rpki-client