This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json) Hash identifier: olexJ8rvPqK+1xixTFJ+sq9u9p+w/x5qEqaQqiUm2o0= Subject key identifier: 23:33:B3:01:72:F7:AC:33:7D:64:A0:24:44:F2:6C:93:81:76:47:8F Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c Certificate serial: 019B3F4800E5FF4A3540B4459CC586CADB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:00:41 +0000 Manifest this update: Sun 21 Dec 2025 05:00:41 +0000 Manifest next update: Mon 22 Dec 2025 05:00:41 +0000 Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: JuHuIk3GMp0czWN9RAy8UT/IK4EiLXxLnHrfESA5eNY=) 2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:00:e5:ff:4a:35:40:b4:45:9c:c5:86:ca:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c Validity Not Before: Dec 21 05:00:41 2025 GMT Not After : Dec 22 05:00:41 2025 GMT Subject: CN=2333b30172f7ac337d64a02444f26c938176478f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:9d:6a:46:00:4b:df:ff:9f:97:ba:af:a1: ee:d7:2e:56:de:59:56:ce:ab:29:be:00:9e:12:3b: a0:9b:ed:41:a6:b8:c2:6f:89:a5:4f:fd:84:71:ac: f9:a4:0b:3d:8c:ff:85:e2:8a:cc:2a:cd:55:95:28: 9a:2d:11:f2:1a:77:d9:2c:a8:cd:c7:b0:b4:74:7b: 60:f6:9e:3c:34:89:78:c3:51:97:42:82:29:5f:a8: 79:9c:f9:4c:37:68:53:80:61:c0:d9:8e:15:92:cf: f8:44:e7:76:72:71:e3:b0:bc:dc:82:38:a0:c5:26: 96:cb:c6:12:f7:fd:eb:e4:fd:dc:e2:34:86:e0:e7: d5:ae:dd:c9:3a:b1:80:b4:89:a8:e8:78:48:d3:48: 72:e7:20:51:2c:2a:f8:d0:0b:f9:ca:d1:cb:10:52: 00:26:08:df:56:af:bb:66:6c:62:7b:46:07:dd:d7: ae:53:8a:b9:a6:d0:c1:49:f1:93:41:cd:ac:47:78: ac:51:54:ab:47:6b:36:20:d4:c7:98:37:ca:c1:3e: 45:97:31:78:78:a2:5c:6b:35:1e:24:91:e9:b7:cf: 5b:2a:b0:49:87:f6:68:8c:75:a4:a8:4a:f9:09:c7: 23:ef:a8:34:ea:6e:08:a7:77:4e:56:73:17:dc:0c: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:33:B3:01:72:F7:AC:33:7D:64:A0:24:44:F2:6C:93:81:76:47:8F X509v3 Authority Key Identifier: keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:de:7d:2f:d6:29:c7:06:09:27:fe:d8:9d:86:a5:a6:c0:38: 35:72:2c:d0:7e:c6:5f:df:96:a4:29:91:9b:ca:cf:f9:7f:d2: 24:b6:88:57:f3:58:88:20:d4:90:40:2e:d9:98:98:ac:e9:81: 53:f9:3f:37:4d:45:2f:55:ed:08:76:d0:a2:0e:b8:82:a5:bc: 30:2e:3f:44:6f:cc:3f:35:3f:75:0c:3b:de:46:42:f8:8e:f2: 87:8a:c0:ce:44:ce:85:3e:9e:c9:54:10:96:65:c2:0c:65:70: 5d:14:b6:38:b0:eb:df:96:70:1c:75:10:e4:4a:3b:00:e8:75: 83:6a:42:7e:d3:4c:34:e4:cf:f4:25:fb:a8:8a:4c:8c:37:3d: 86:56:4f:19:53:f4:89:fc:b2:7c:61:14:0f:dc:1a:23:e8:1e: 67:a1:b0:56:6b:b7:56:22:e4:51:13:74:2b:c5:f8:d7:33:71: fd:d5:e1:63:f6:c0:81:64:9c:08:7f:5a:a2:33:a2:53:48:e6: 41:7d:a8:2b:a1:9d:b4:42:ac:d6:45:e3:97:05:07:4c:37:b0: 1a:62:01:3b:6b:91:d7:e6:be:cd:c7:23:d9:ce:0e:4e:30:30: a6:31:af:ae:dd:2f:19:dd:b3:e1:79:4d:bc:ad:fa:1d:37:d7: 87:79:44:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SADl/0o1QLRFnMWGytsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTE1ZGEzMzk2N2Q0MTQ3MGE5NmQ2MTQxYzgzNDBmMjI0 MDU4MWMwHhcNMjUxMjIxMDUwMDQxWhcNMjUxMjIyMDUwMDQxWjAzMTEwLwYDVQQD EygyMzMzYjMwMTcyZjdhYzMzN2Q2NGEwMjQ0NGYyNmM5MzgxNzY0NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMadakYAS9//n5e6r6Hu1y5W3llW zqspvgCeEjugm+1BprjCb4mlT/2Ecaz5pAs9jP+F4orMKs1VlSiaLRHyGnfZLKjN x7C0dHtg9p48NIl4w1GXQoIpX6h5nPlMN2hTgGHA2Y4Vks/4ROd2cnHjsLzcgjig xSaWy8YS9/3r5P3c4jSG4OfVrt3JOrGAtImo6HhI00hy5yBRLCr40Av5ytHLEFIA JgjfVq+7Zmxie0YH3deuU4q5ptDBSfGTQc2sR3isUVSrR2s2INTHmDfKwT5FlzF4 eKJcazUeJJHpt89bKrBJh/ZojHWkqEr5Cccj76g06m4Ip3dOVnMX3Axd7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMzswFy96wzfWSgJETybJOBdkePMB8GA1UdIwQY MBaAFFHhXaM5Z9QUcKltYUHINA8iQFgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYt MzgwODg1NzQwZDRhLzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYtMzgwODg1NzQwZDRh LzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd59L9Yp xwYJJ/7YnYalpsA4NXIs0H7GX9+WpCmRm8rP+X/SJLaIV/NYiCDUkEAu2ZiYrOmB U/k/N01FL1XtCHbQog64gqW8MC4/RG/MPzU/dQw73kZC+I7yh4rAzkTOhT6eyVQQ lmXCDGVwXRS2OLDr35ZwHHUQ5Eo7AOh1g2pCftNMNOTP9CX7qIpMjDc9hlZPGVP0 ifyyfGEUD9waI+geZ6GwVmu3ViLkURN0K8X41zNx/dXhY/bAgWScCH9aojOiU0jm QX2oK6GdtEKs1kXjlwUHTDewGmIBO2uR1+a+zccj2c4OTjAwpjGvrt0vGd2z4XlN vK36HTfXh3lEJg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:25 2025 by rpki-client