This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json) Hash identifier: TGv1+BRCd3kynHh2oQLoAw7mglSLs/Q73AXVC/rsq2Q= Subject key identifier: 9F:54:3A:A4:D5:BE:70:9F:A7:87:F0:03:BF:B4:DA:07:F6:03:EB:D2 Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39 Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539 Certificate serial: 019AF23F6E4AB494BB91A7FB913B13A87768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=) 2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: RBp98aHjH/Gm0CZoLWGObtWpkIizQMUDSY0jb6YTk+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:4a:b4:94:bb:91:a7:fb:91:3b:13:a8:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=9f543aa4d5be709fa787f003bfb4da07f603ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:ed:15:f1:d0:40:c7:b1:57:52:5f:93:93: 16:85:74:9d:50:7f:2f:ce:a2:a1:31:26:04:13:6e: 7c:88:18:61:30:d3:7d:ac:78:75:fa:31:e1:2b:52: 79:2b:91:77:f1:b2:48:2f:4f:6a:91:22:fe:84:24: 01:38:85:95:3a:8a:d5:49:4a:c9:e6:2f:37:d2:6c: ea:66:21:a4:8a:61:57:09:a4:41:2f:b1:b2:40:cc: 13:b9:43:c7:38:41:65:df:3c:c3:0d:7b:8a:04:b5: 3a:36:e2:c9:93:a5:34:25:fb:36:eb:30:7d:9d:7d: d8:1a:50:32:54:10:2f:b8:21:94:4f:07:44:11:30: ed:cc:ed:49:01:c6:f8:58:a2:f7:81:1c:a7:a3:0f: 8c:ff:0d:fd:83:d8:0b:05:84:cf:43:57:c1:d9:8b: ea:d5:52:6d:0b:43:84:6f:8f:98:0f:48:5f:f5:69: bd:2c:94:16:cb:82:07:82:51:bc:3f:7d:12:fe:ee: 41:c4:a5:26:e7:1e:ea:80:54:d7:f8:06:08:10:69: 9c:31:4c:0e:08:2e:a0:7b:ab:e3:40:9f:38:b1:e8: d7:75:17:c8:25:4f:42:c1:0f:ef:22:82:23:9a:ac: 4b:25:72:06:1e:a1:7d:e1:b8:8c:64:20:0a:cf:ab: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:3A:A4:D5:BE:70:9F:A7:87:F0:03:BF:B4:DA:07:F6:03:EB:D2 X509v3 Authority Key Identifier: keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:e3:ba:a6:1e:12:8b:d0:ae:af:61:0f:b0:80:31:85:f5: 31:8e:92:9e:0c:a9:3a:b7:15:51:97:7b:bf:e1:47:9c:8c:d9: 6b:4f:a7:5f:40:ab:8d:72:ff:cf:3a:32:fc:04:b9:84:5e:78: b1:38:21:9d:9e:38:00:5a:fe:b2:5c:20:c0:09:6e:96:b1:2e: 0b:9c:76:1d:18:c0:e2:fa:2c:c8:4b:66:4e:7b:0f:2c:a0:92: 74:b1:26:c4:56:4d:69:61:7b:14:e4:78:d3:48:2a:2e:98:33: c6:d0:a1:be:c7:fd:cf:ff:9f:98:6d:55:6d:24:ad:6b:2d:de: f1:59:0e:d5:d9:2d:11:66:77:10:5b:28:c7:43:ed:3d:ee:a2: 22:92:09:93:f9:8b:9f:58:84:bd:93:70:71:35:a4:5c:c2:36: a7:f9:6c:2b:37:00:9a:52:53:7c:f4:8e:4f:50:de:08:a7:46: bb:38:f6:d7:ec:27:c3:75:63:0a:40:c5:e5:d4:b6:71:64:4b: 88:eb:72:74:e2:e4:2f:3e:17:d1:26:1f:d6:13:ba:91:36:5e: cd:b4:f4:8f:41:3a:2c:20:5a:1b:97:fb:3e:1b:04:dd:60:22: c7:3d:0b:f7:52:82:e4:5f:13:04:84:b5:13:77:d8:a3:17:2c: ee:2e:5e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP25KtJS7kaf7kTsTqHdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWFhOTliMWI1NWI0ZTUwYjVkOWVjY2RlZWNkZjM4OTI0 NzM1MzkwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD Eyg5ZjU0M2FhNGQ1YmU3MDlmYTc4N2YwMDNiZmI0ZGEwN2Y2MDNlYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt/tFfHQQMexV1Jfk5MWhXSdUH8v zqKhMSYEE258iBhhMNN9rHh1+jHhK1J5K5F38bJIL09qkSL+hCQBOIWVOorVSUrJ 5i830mzqZiGkimFXCaRBL7GyQMwTuUPHOEFl3zzDDXuKBLU6NuLJk6U0Jfs26zB9 nX3YGlAyVBAvuCGUTwdEETDtzO1JAcb4WKL3gRynow+M/w39g9gLBYTPQ1fB2Yvq 1VJtC0OEb4+YD0hf9Wm9LJQWy4IHglG8P30S/u5BxKUm5x7qgFTX+AYIEGmcMUwO CC6ge6vjQJ84sejXdRfIJU9CwQ/vIoIjmqxLJXIGHqF94biMZCAKz6tzzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9UOqTVvnCfp4fwA7+02gf2A+vSMB8GA1UdIwQY MBaAFLnqqZsbVbTlC12ezN7s3ziSRzU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEt ZDNiZWMwNmFjOGUxLzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEtZDNiZWMwNmFjOGUx LzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUnjuqYe EovQrq9hD7CAMYX1MY6SngypOrcVUZd7v+FHnIzZa0+nX0CrjXL/zzoy/AS5hF54 sTghnZ44AFr+slwgwAlulrEuC5x2HRjA4vosyEtmTnsPLKCSdLEmxFZNaWF7FOR4 00gqLpgzxtChvsf9z/+fmG1VbSStay3e8VkO1dktEWZ3EFsox0PtPe6iIpIJk/mL n1iEvZNwcTWkXMI2p/lsKzcAmlJTfPSOT1DeCKdGuzj21+wnw3VjCkDF5dS2cWRL iOtydOLkLz4X0SYf1hO6kTZezbT0j0E6LCBaG5f7PhsE3WAixz0L91KC5F8TBIS1 E3fYoxcs7i5eVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:17 2025 by rpki-client