This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json) Hash identifier: GaKrSuVAtXa+AjvmmCd/n8Zr1jrEFpYvDvHKx7iJl4g= Subject key identifier: 2F:B3:02:16:C2:31:70:A5:FF:DD:61:97:BC:7E:7C:4A:06:AE:30:A2 Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6 Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6 Certificate serial: 019AF31B7C43FA0199EAA2A41B5C5F5DF598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft Manifest number: 07F1 Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: 7OYINGfsZGRwmGiFBkte0bEqDWY.roa (hash: dfyzTywSCPRXETBeGtH7CmV1lDhC/PZ6zR8WT3NCcxg=) 2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: miEYUTg7ypwkv/fogaxtmOBT1+GN//NeOqfFjJUeEMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7c:43:fa:01:99:ea:a2:a4:1b:5c:5f:5d:f5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6 Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=2fb30216c23170a5ffdd6197bc7e7c4a06ae30a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:c1:3d:de:99:a4:01:38:27:07:92:be:6f: fd:80:84:c2:9e:5d:32:03:da:cf:a2:dd:c8:47:3e: 39:0b:5f:68:71:2d:d8:49:cb:e8:f6:0c:16:cc:b7: 4b:26:69:db:b6:0c:5f:ba:98:d7:7d:06:43:7d:44: fc:8e:f7:4b:c6:50:0b:f1:8f:e2:bd:18:36:ec:d1: 36:6a:9a:b7:2e:fa:96:60:44:74:42:8c:44:88:64: 95:5d:4c:9d:70:6a:93:bd:1e:23:0a:b2:61:34:bd: 26:03:d1:26:aa:18:6e:52:94:1a:87:d5:d3:b6:88: 7d:a3:c2:fa:94:d4:e6:0a:83:f6:50:91:2a:90:05: 27:57:90:ea:95:15:8f:25:2a:58:8a:dd:b2:00:3d: 6b:9c:8d:dc:cc:70:bc:14:16:35:76:bd:11:4a:60: 34:2a:22:65:81:41:b6:9e:de:fd:8f:2b:6f:13:ab: 83:73:30:51:4e:fa:b0:35:3e:fb:4e:2e:85:1a:48: 8e:24:41:1c:6b:9d:cd:6c:8e:9d:45:05:d7:eb:26: 01:d7:cd:43:63:c9:f2:75:78:ef:3e:2a:04:6e:4c: 13:ca:f8:d6:f0:9e:09:e5:2f:84:c8:c2:98:97:9f: ba:be:f4:90:af:b2:e6:c6:b3:70:19:cc:4c:3c:a3: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:02:16:C2:31:70:A5:FF:DD:61:97:BC:7E:7C:4A:06:AE:30:A2 X509v3 Authority Key Identifier: keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bd:41:fd:2f:ae:e2:9e:b3:4a:ac:f3:9b:76:3d:61:4b:3b: 34:c2:57:86:2f:b4:0a:c6:3b:fc:08:40:51:c0:15:85:00:0d: 24:5a:ff:42:87:29:0f:12:27:49:f0:16:89:4a:d6:b1:6e:24: c1:d4:da:cd:6e:f3:11:46:0f:fb:c9:14:46:a5:a4:08:41:e7: fe:a9:c2:88:e1:03:67:5e:03:7a:fe:4a:d4:a2:82:f8:78:26: 21:68:03:77:f4:4d:ba:b8:9f:e7:41:dd:0d:d6:05:60:ab:be: 30:e2:4a:ef:47:e4:b7:df:d3:81:78:6e:7c:a4:d8:c9:9f:04: fb:14:0a:8b:4f:79:72:e1:0e:58:bd:71:c8:c2:3d:5d:2f:8e: 04:12:4c:66:fb:05:cf:eb:d8:b5:02:2c:8d:63:de:2b:e2:76: 8a:01:09:e6:5b:b6:b4:bd:eb:ff:47:2b:d7:7a:f7:61:92:be: ee:77:30:26:df:4c:3e:9d:d7:93:56:d6:31:f3:c0:0f:57:24: 83:78:d6:01:2f:be:62:89:e4:0b:15:fe:63:9e:f0:e9:08:41: 82:e5:ec:e5:ce:0f:4f:84:1c:59:e8:71:e7:c2:36:f0:63:53: 2e:47:3c:3a:f0:8c:4c:f2:89:f9:6f:c3:7e:e6:5f:87:7f:74: 11:24:75:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3xD+gGZ6qKkG1xfXfWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm ZmRmYjYwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EygyZmIzMDIxNmMyMzE3MGE1ZmZkZDYxOTdiYzdlN2M0YTA2YWUzMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDBPd6ZpAE4JweSvm/9gITCnl0y A9rPot3IRz45C19ocS3YScvo9gwWzLdLJmnbtgxfupjXfQZDfUT8jvdLxlAL8Y/i vRg27NE2apq3LvqWYER0QoxEiGSVXUydcGqTvR4jCrJhNL0mA9EmqhhuUpQah9XT toh9o8L6lNTmCoP2UJEqkAUnV5DqlRWPJSpYit2yAD1rnI3czHC8FBY1dr0RSmA0 KiJlgUG2nt79jytvE6uDczBRTvqwNT77Ti6FGkiOJEEca53NbI6dRQXX6yYB181D Y8nydXjvPioEbkwTyvjW8J4J5S+EyMKYl5+6vvSQr7LmxrNwGcxMPKO7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+zAhbCMXCl/91hl7x+fEoGrjCiMB8GA1UdIwQY MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt NTUzY2I3NzY5Y2E5LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5 LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL1B/S+u 4p6zSqzzm3Y9YUs7NMJXhi+0CsY7/AhAUcAVhQANJFr/QocpDxInSfAWiUrWsW4k wdTazW7zEUYP+8kURqWkCEHn/qnCiOEDZ14Dev5K1KKC+HgmIWgDd/RNurif50Hd DdYFYKu+MOJK70fkt9/TgXhufKTYyZ8E+xQKi095cuEOWL1xyMI9XS+OBBJMZvsF z+vYtQIsjWPeK+J2igEJ5lu2tL3r/0cr13r3YZK+7ncwJt9MPp3Xk1bWMfPAD1ck g3jWAS++YonkCxX+Y57w6QhBguXs5c4PT4QcWehx58I28GNTLkc8OvCMTPKJ+W/D fuZfh390ESR1kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:29 2025 by rpki-client