This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json) Hash identifier: TlFW6GJL0HD5xlCQ5Nd1oZ4k/AY+s1vJ/AO4MxIowsY= Subject key identifier: F9:E5:8E:45:81:0E:51:F1:B2:B3:EB:95:82:76:95:FA:A4:48:D5:12 Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61 Certificate serial: 019B3079E7330F4508D159945C0206C994A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft Manifest number: 05C8 Signing time: Thu 18 Dec 2025 08:00:53 +0000 Manifest this update: Thu 18 Dec 2025 08:00:53 +0000 Manifest next update: Fri 19 Dec 2025 08:00:53 +0000 Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=) 2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: HSnHfZWC7ZzVV7IlV7RtyqVqejdw5mQfLzVI/Ko/r3A=) 3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:e7:33:0f:45:08:d1:59:94:5c:02:06:c9:94:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61 Validity Not Before: Dec 18 08:00:53 2025 GMT Not After : Dec 19 08:00:53 2025 GMT Subject: CN=f9e58e45810e51f1b2b3eb95827695faa448d512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:69:98:93:99:ab:8d:0d:f6:82:3d:a7:35: b7:90:9a:94:34:e3:58:a1:7e:0d:c5:8e:d6:3d:2d: 88:d4:7b:23:49:8a:4a:b4:7d:08:9a:30:16:67:1d: 53:2d:19:28:59:24:a3:a2:e6:4e:29:a7:5a:ad:a0: 43:ae:81:f2:33:b3:2c:b1:29:4b:fe:11:79:ea:b1: b9:c6:8c:2d:9f:d9:94:60:2a:e0:20:af:8b:06:0e: dc:13:7f:35:c0:c7:16:d5:0e:e5:cc:72:82:e8:b7: 15:be:98:49:06:b5:60:90:19:b5:2a:96:f2:87:d8: b8:62:5f:b3:e8:92:cd:5d:1d:48:56:79:cc:2a:87: aa:aa:24:6b:86:f0:91:96:6e:cb:8e:2b:7b:33:61: 9e:87:cd:4c:37:43:68:79:72:de:bb:5b:75:6b:e1: 25:fe:62:1e:94:86:03:d7:bd:81:01:55:52:08:60: 28:e8:b0:59:04:15:25:f7:6e:04:ca:42:dc:77:f9: 51:5a:4d:08:6d:42:26:ca:db:9e:63:78:7e:b5:d3: 86:5c:3d:76:fd:fc:51:74:87:02:7d:ec:d7:2a:5a: a4:77:f7:92:02:78:9c:3c:b5:0e:8b:5f:fc:43:08: 9f:d6:0d:f7:19:24:37:59:11:eb:47:dd:3b:72:c6: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:8E:45:81:0E:51:F1:B2:B3:EB:95:82:76:95:FA:A4:48:D5:12 X509v3 Authority Key Identifier: keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:55:59:54:58:cc:ab:df:69:a5:26:6a:b4:91:46:fa:10:29: 27:72:3d:ff:3d:6b:75:8c:6e:82:41:1b:a6:68:dc:54:62:9d: df:38:3e:d1:ee:99:a4:07:86:56:98:72:9d:c3:89:7f:9b:ff: 4a:17:44:00:cd:e6:bf:4b:c8:91:90:44:48:0d:ca:9c:b0:47: 6d:96:98:a6:51:e6:46:62:ae:eb:19:fd:56:3d:8b:3c:ca:c7: d6:34:3a:35:39:91:2c:0d:d0:a3:c7:80:11:fe:35:ab:08:7f: 1e:dc:3e:97:c2:6d:ff:e9:ce:00:db:52:c9:99:4f:39:68:c8: 3a:f5:40:8e:8d:b6:7e:78:cc:69:cc:93:eb:a2:48:c5:92:c4: 79:35:77:6c:15:eb:c0:aa:91:12:e9:b8:a3:cd:8b:b0:d0:e3: 44:da:3c:a4:d6:07:1b:ee:45:a4:16:f8:c5:9c:dc:7c:b7:9a: bf:a9:ca:fa:6d:87:24:15:ef:75:cc:47:1e:8a:5f:a1:50:ee: 31:f2:e5:ea:21:d0:f2:9c:c0:a3:7f:dc:05:74:e8:33:71:8e: d6:4c:58:0c:53:89:eb:a6:ad:4e:24:7c:06:12:29:47:b3:13: f9:d3:77:46:45:99:21:40:ad:c7:41:19:2d:d3:9c:68:78:94: 7a:4a:f9:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweeczD0UI0VmUXAIGyZSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDRjMTk3NDQ0NTk0YjExZWM1OTlkMjA1NjU2ZjY0ZTRk MWZjNjEwHhcNMjUxMjE4MDgwMDUzWhcNMjUxMjE5MDgwMDUzWjAzMTEwLwYDVQQD EyhmOWU1OGU0NTgxMGU1MWYxYjJiM2ViOTU4Mjc2OTVmYWE0NDhkNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ZpmJOZq40N9oI9pzW3kJqUNONY oX4NxY7WPS2I1HsjSYpKtH0ImjAWZx1TLRkoWSSjouZOKadaraBDroHyM7MssSlL /hF56rG5xowtn9mUYCrgIK+LBg7cE381wMcW1Q7lzHKC6LcVvphJBrVgkBm1Kpby h9i4Yl+z6JLNXR1IVnnMKoeqqiRrhvCRlm7Ljit7M2Geh81MN0NoeXLeu1t1a+El /mIelIYD172BAVVSCGAo6LBZBBUl924EykLcd/lRWk0IbUImytueY3h+tdOGXD12 /fxRdIcCfezXKlqkd/eSAnicPLUOi1/8Qwif1g33GSQ3WRHrR907csZwYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnljkWBDlHxsrPrlYJ2lfqkSNUSMB8GA1UdIwQY MBaAFLgEwZdERZSxHsWZ0gVlb2Tk0fxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2Ut OTM4YWI5NjQ1NGU5LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYmM1NTMtMGVlMC00YjcyLWI5M2UtOTM4YWI5NjQ1NGU5 LzEvdUFUQmwwUkZsTEVleFpuU0JXVnZaT1RSX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFVZVFjM q99ppSZqtJFG+hApJ3I9/z1rdYxugkEbpmjcVGKd3zg+0e6ZpAeGVphyncOJf5v/ ShdEAM3mv0vIkZBESA3KnLBHbZaYplHmRmKu6xn9Vj2LPMrH1jQ6NTmRLA3Qo8eA Ef41qwh/Htw+l8Jt/+nOANtSyZlPOWjIOvVAjo22fnjMacyT66JIxZLEeTV3bBXr wKqREum4o82LsNDjRNo8pNYHG+5FpBb4xZzcfLeav6nK+m2HJBXvdcxHHopfoVDu MfLl6iHQ8pzAo3/cBXToM3GO1kxYDFOJ66atTiR8BhIpR7MT+dN3RkWZIUCtx0EZ LdOcaHiUekr5MQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:17:28 2025 by rpki-client