This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json) Hash identifier: djOQi4jEuAwj/a10iFwdsSlv9WXTDCzTJGR+GN4OTDw= Subject key identifier: 7D:B5:0B:94:DE:68:6B:25:A5:7E:FE:09:08:90:DC:D2:36:7D:40:C9 Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Certificate serial: 019B435C2B0B77D4BAB79D412C2765EF4115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft Manifest number: 0E1B Signing time: Mon 22 Dec 2025 00:01:12 +0000 Manifest this update: Mon 22 Dec 2025 00:01:12 +0000 Manifest next update: Tue 23 Dec 2025 00:01:12 +0000 Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=) 2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: QKTv8g6V0P6GC9KespPnM7lkSAUOJDRksTp+J76SRJg=) 3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:2b:0b:77:d4:ba:b7:9d:41:2c:27:65:ef:41:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Validity Not Before: Dec 22 00:01:12 2025 GMT Not After : Dec 23 00:01:12 2025 GMT Subject: CN=7db50b94de686b25a57efe090890dcd2367d40c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:fe:43:b0:6e:f4:dc:73:b0:a7:23:5a:35: 51:0b:8e:2e:7c:f5:93:b1:c0:9b:fc:ae:1e:1a:73: 7b:83:46:b5:de:2c:d0:8b:f5:3b:60:4f:e0:e5:6c: 75:be:04:9b:61:bc:e9:7d:da:f7:44:08:08:f0:ed: 20:4a:31:5e:ec:9b:a8:a9:5e:01:8a:7b:69:83:8d: 10:00:a1:27:50:f8:29:52:e8:ef:c6:f0:42:76:31: 3a:51:73:36:9a:9c:93:8f:9b:7b:e3:0c:f9:6d:0e: 94:af:b8:6d:7d:30:ef:ed:f4:54:97:75:61:62:3a: 00:18:7a:14:32:be:d0:7a:c2:9b:5d:04:64:d2:29: 1a:93:38:84:42:e5:66:80:ac:bd:b0:de:de:f9:29: 94:6a:12:cc:17:4b:94:0e:cb:9f:9d:d4:64:2d:93: 95:f1:8f:c3:3e:ce:f9:e6:2a:4c:ae:2a:d9:a8:22: c1:23:81:97:a3:34:3f:16:52:f9:fd:69:1e:e7:0d: 8a:2b:95:18:19:b7:14:6b:97:9d:57:48:9c:ff:0c: 79:91:1a:87:d4:aa:fb:83:d6:13:1d:c7:f0:40:ff: a1:8f:fe:3e:3f:5e:fb:da:6e:a4:a3:2c:ef:f6:cf: 1a:fc:0d:cd:ae:1f:73:2b:c5:49:20:b5:b3:a6:fa: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B5:0B:94:DE:68:6B:25:A5:7E:FE:09:08:90:DC:D2:36:7D:40:C9 X509v3 Authority Key Identifier: keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:e9:9d:8d:0c:f4:de:80:a9:d5:d4:8d:88:20:25:1b:06: 93:e8:2d:fd:6b:b4:2f:60:ce:68:df:dc:86:e6:05:70:65:ee: a5:2e:31:53:27:ea:07:93:f0:0b:32:f5:f6:99:88:77:3f:fa: f9:a4:94:88:af:b0:8c:10:3f:4f:b7:d6:0e:46:1d:41:8f:ba: c0:97:f0:76:41:99:fa:ca:9a:3f:9d:7e:e3:a0:74:3a:d2:e7: b1:34:0f:63:6a:ec:ee:09:2c:63:ee:6e:53:21:69:07:85:ac: 26:9d:b4:75:84:81:e4:05:72:9f:27:f8:c6:f5:f5:10:e7:ca: 6d:e8:68:ea:5a:48:2d:92:23:e6:8d:c4:ed:93:46:fb:67:3a: 54:b2:09:9e:f7:f1:1c:1b:db:73:b7:f5:a6:b8:34:7f:1b:c4: 6b:02:38:7d:15:e4:bf:5f:38:b0:6e:b7:90:5b:34:39:ac:48: 1d:79:08:b6:96:7e:a2:bf:6a:54:c9:d5:c6:9d:af:31:a5:9f: 67:c6:35:49:6f:fe:ca:e7:60:e1:a3:4b:bc:e7:c8:55:77:1b: aa:7e:17:a0:18:61:89:dd:1d:3a:f9:fd:5c:7c:bd:35:53:aa: c0:cf:fe:94:6e:c0:6c:ea:aa:39:83:74:c4:42:73:be:7a:4c: 69:89:69:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXCsLd9S6t51BLCdl70EVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl NzBhMTIwHhcNMjUxMjIyMDAwMTEyWhcNMjUxMjIzMDAwMTEyWjAzMTEwLwYDVQQD Eyg3ZGI1MGI5NGRlNjg2YjI1YTU3ZWZlMDkwODkwZGNkMjM2N2Q0MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/3+Q7Bu9NxzsKcjWjVRC44ufPWT scCb/K4eGnN7g0a13izQi/U7YE/g5Wx1vgSbYbzpfdr3RAgI8O0gSjFe7JuoqV4B intpg40QAKEnUPgpUujvxvBCdjE6UXM2mpyTj5t74wz5bQ6Ur7htfTDv7fRUl3Vh YjoAGHoUMr7QesKbXQRk0ikakziEQuVmgKy9sN7e+SmUahLMF0uUDsufndRkLZOV 8Y/DPs755ipMrirZqCLBI4GXozQ/FlL5/Wke5w2KK5UYGbcUa5edV0ic/wx5kRqH 1Kr7g9YTHcfwQP+hj/4+P1772m6koyzv9s8a/A3Nrh9zK8VJILWzpvpahQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH21C5TeaGslpX7+CQiQ3NI2fUDJMB8GA1UdIwQY MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt OThlOWUyNTEwYmI2LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2 LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+zpnY0M 9N6AqdXUjYggJRsGk+gt/Wu0L2DOaN/chuYFcGXupS4xUyfqB5PwCzL19pmIdz/6 +aSUiK+wjBA/T7fWDkYdQY+6wJfwdkGZ+sqaP51+46B0OtLnsTQPY2rs7gksY+5u UyFpB4WsJp20dYSB5AVynyf4xvX1EOfKbeho6lpILZIj5o3E7ZNG+2c6VLIJnvfx HBvbc7f1prg0fxvEawI4fRXkv184sG63kFs0OaxIHXkItpZ+or9qVMnVxp2vMaWf Z8Y1SW/+yudg4aNLvOfIVXcbqn4XoBhhid0dOvn9XHy9NVOqwM/+lG7AbOqqOYN0 xEJzvnpMaYlpBg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:55:51 2025 by rpki-client