This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json) Hash identifier: JjVbr/PISYefb8RIdlubRFOWzfop7zlhsHYoQsXVzv4= Subject key identifier: 4E:C3:F2:83:22:E9:E2:E4:B1:B1:7F:3C:B4:EA:23:63:14:CE:52:02 Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Certificate serial: 019B3FB61A065EB512E2ACC9046670730E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft Manifest number: 175C Signing time: Sun 21 Dec 2025 07:00:57 +0000 Manifest this update: Sun 21 Dec 2025 07:00:57 +0000 Manifest next update: Mon 22 Dec 2025 07:00:57 +0000 Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=) 2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: fpNaxEP0pV/SoCYj/76Qbruc5XB9MsfFupPsT3gSG/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:1a:06:5e:b5:12:e2:ac:c9:04:66:70:73:0e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Validity Not Before: Dec 21 07:00:57 2025 GMT Not After : Dec 22 07:00:57 2025 GMT Subject: CN=4ec3f28322e9e2e4b1b17f3cb4ea236314ce5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:f2:7e:68:6d:6f:81:08:35:2f:4a:63:c2: 26:77:34:43:d6:15:8e:c8:de:f2:cc:7e:39:b4:0d: 11:b3:5d:ac:7b:a7:4d:57:81:e9:66:57:da:bb:52: fa:62:e1:d0:65:f1:fe:57:45:8b:39:c5:99:8e:55: e3:18:eb:c2:4a:90:4a:16:98:30:2b:27:1f:3a:a8: 8b:3c:4e:c2:0e:69:6c:9e:6f:32:29:64:b5:3c:9e: c1:b8:4d:72:c8:4c:5b:1f:bf:d9:60:50:06:10:7a: d1:a2:49:ce:f9:60:c5:a3:0f:f0:2c:d6:91:8f:67: 4b:f4:86:8e:b2:7a:4b:87:b0:ec:de:77:ea:53:c4: 37:ff:31:6b:df:b5:2f:76:7d:26:99:6e:c0:0d:64: 27:e7:17:4a:6b:42:c3:c5:15:a0:7a:e9:2a:77:a9: 0a:9c:7f:e0:1f:d0:2c:dc:ad:aa:39:85:a8:2a:14: 4c:00:bd:d0:99:2f:63:e4:6e:b4:55:dd:9e:ea:ac: 68:28:cf:5d:24:97:ed:d8:f4:23:04:78:13:d8:81: 34:28:9d:a8:26:8d:30:ea:c3:c8:88:ff:52:82:d6: d8:2f:23:cb:68:5d:43:c0:1e:9a:2b:60:6d:e2:43: 74:69:0b:50:df:be:1e:ee:3d:ed:9d:98:20:e8:21: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:F2:83:22:E9:E2:E4:B1:B1:7F:3C:B4:EA:23:63:14:CE:52:02 X509v3 Authority Key Identifier: keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:f4:01:ff:d4:b1:16:35:e8:a4:0f:e3:f8:a9:b5:ca:5e: 76:9b:d4:d0:6a:e6:07:d3:03:60:a2:2e:39:11:3f:03:82:17: 04:bb:d9:ae:3e:42:e8:39:e6:7f:2d:c5:e9:2b:c5:26:63:24: f5:12:e7:54:8e:cb:62:73:d5:b7:e8:25:80:0f:de:74:b6:3e: 2f:28:b1:8d:a3:51:d1:6a:51:9e:fa:f8:76:27:5a:fc:ad:a6: 04:90:57:75:e4:8a:1f:01:f4:2b:02:c8:bf:23:55:0b:29:17: 05:02:ac:9d:40:80:25:0d:d9:c8:3f:8a:17:35:28:7b:a6:99: 17:f9:97:10:f1:d7:6a:62:9e:7b:53:d1:e4:5c:63:d2:c2:98: 5b:13:c2:ab:2c:18:2c:14:6b:7d:41:71:0a:ac:fb:98:ba:24: 2a:36:5d:a6:3a:42:60:70:5a:c1:a6:4d:b5:44:6a:c3:c5:ea: f2:fd:0c:b5:37:0c:be:6f:d8:b5:ea:23:44:ce:d4:47:85:4a: e6:4d:c6:e3:d9:7b:15:90:94:de:08:eb:f1:34:f7:34:4f:15: 51:c1:6c:60:a6:3c:12:6f:db:6b:cf:b9:8d:36:aa:4f:6f:19: aa:a6:91:5b:9c:35:6c:2f:6b:39:9c:d6:54:62:3e:bb:34:c5: 85:df:69:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/thoGXrUS4qzJBGZwcw5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw MTY1YWEwHhcNMjUxMjIxMDcwMDU3WhcNMjUxMjIyMDcwMDU3WjAzMTEwLwYDVQQD Eyg0ZWMzZjI4MzIyZTllMmU0YjFiMTdmM2NiNGVhMjM2MzE0Y2U1MjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhvyfmhtb4EINS9KY8ImdzRD1hWO yN7yzH45tA0Rs12se6dNV4HpZlfau1L6YuHQZfH+V0WLOcWZjlXjGOvCSpBKFpgw KycfOqiLPE7CDmlsnm8yKWS1PJ7BuE1yyExbH7/ZYFAGEHrRoknO+WDFow/wLNaR j2dL9IaOsnpLh7Ds3nfqU8Q3/zFr37Uvdn0mmW7ADWQn5xdKa0LDxRWgeukqd6kK nH/gH9As3K2qOYWoKhRMAL3QmS9j5G60Vd2e6qxoKM9dJJft2PQjBHgT2IE0KJ2o Jo0w6sPIiP9SgtbYLyPLaF1DwB6aK2Bt4kN0aQtQ374e7j3tnZgg6CFEKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7D8oMi6eLksbF/PLTqI2MUzlICMB8GA1UdIwQY MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5 LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshX0Af/U sRY16KQP4/iptcpedpvU0GrmB9MDYKIuORE/A4IXBLvZrj5C6Dnmfy3F6SvFJmMk 9RLnVI7LYnPVt+glgA/edLY+LyixjaNR0WpRnvr4dida/K2mBJBXdeSKHwH0KwLI vyNVCykXBQKsnUCAJQ3ZyD+KFzUoe6aZF/mXEPHXamKee1PR5Fxj0sKYWxPCqywY LBRrfUFxCqz7mLokKjZdpjpCYHBawaZNtURqw8Xq8v0MtTcMvm/YteojRM7UR4VK 5k3G49l7FZCU3gjr8TT3NE8VUcFsYKY8Em/ba8+5jTaqT28ZqqaRW5w1bC9rOZzW VGI+uzTFhd9pKg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:44 2025 by rpki-client