This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: n19tlJUBdhvaX9fHnknsFt4XC5tD1EM0gH3OD99pJAo= Subject key identifier: D1:BF:C3:59:42:1B:CA:6C:EB:48:45:C1:CF:1C:89:A1:DB:B0:E2:0F Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B3BD9D0BC4024F617FF3BB830E7D02A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 1005 Signing time: Sat 20 Dec 2025 13:01:28 +0000 Manifest this update: Sat 20 Dec 2025 13:01:28 +0000 Manifest next update: Sun 21 Dec 2025 13:01:28 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: 3eeP3H3Qn9jZIKa2cGydo/tfYi7oJ8LJMAF48Ce/Xeg=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:d0:bc:40:24:f6:17:ff:3b:b8:30:e7:d0:2a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Dec 20 13:01:28 2025 GMT Not After : Dec 21 13:01:28 2025 GMT Subject: CN=d1bfc359421bca6ceb4845c1cf1c89a1dbb0e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:ee:dd:32:43:99:61:04:d6:07:37:10:dc: 46:a2:ae:c6:78:00:36:f6:c0:9b:c2:20:d7:af:ec: e1:b0:54:41:c3:6f:99:e7:6b:5c:6b:33:7b:28:02: bc:4f:91:54:27:f4:63:04:c2:7e:69:65:cd:fc:5b: 65:f4:58:1a:dd:a9:1f:9f:c0:b0:0c:03:c7:b0:0f: fa:a1:5a:b9:dc:66:e7:9e:11:e1:ce:c7:f6:db:a9: 0b:ae:87:5d:59:f5:0c:64:fd:71:08:44:27:6b:fc: bb:49:9c:32:1a:73:90:74:f8:7b:41:db:fa:84:b0: 68:12:9c:bd:77:bd:ac:59:03:bd:2c:a9:7e:06:3a: 39:c4:6d:e4:a4:73:0d:10:dd:6a:ef:f4:84:92:9f: 41:7e:f3:60:e3:05:b8:15:76:80:c5:44:ce:bb:76: 1f:3e:1c:6c:d4:3a:ab:87:24:4f:ea:aa:40:a9:91: fa:d9:1c:b9:3a:1c:a7:58:8a:7c:b0:74:0a:3a:82: 52:3a:6a:d0:22:e6:b7:d5:21:06:86:94:e8:86:cc: 30:2c:39:ee:2b:e0:e8:47:f6:61:81:b8:ed:fb:fe: b2:71:03:56:66:a7:51:45:34:ee:a3:3c:c1:35:af: 7d:65:7e:db:46:25:e7:48:ee:09:d2:5b:7e:25:3c: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BF:C3:59:42:1B:CA:6C:EB:48:45:C1:CF:1C:89:A1:DB:B0:E2:0F X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f5:68:53:05:54:d7:97:0e:8f:1b:06:bf:0e:4f:87:8f:c3: fd:9a:5b:ca:fd:83:ac:ab:d9:23:f9:cf:a0:5d:54:58:36:fc: 22:05:8d:fe:7d:3c:c5:8c:e8:de:e5:aa:b4:81:1d:2a:5c:c7: 14:bc:a1:07:38:87:5e:5a:6d:89:0d:bd:6a:1b:ed:16:5e:c2: 55:cb:97:e9:91:e8:67:e5:ea:fe:03:73:76:75:98:93:43:7a: a0:5f:3c:4f:a2:ab:89:8c:01:d3:c1:2a:f1:3e:e1:6e:80:f6: 75:be:aa:f7:86:5c:3f:f1:f4:14:54:91:a3:23:21:73:21:86: ef:4b:a3:72:8e:1d:ed:99:cb:02:c1:ad:71:4a:b6:46:85:81: 41:8d:f9:6e:9a:1e:57:1b:68:d7:ed:f7:31:81:42:88:a1:ec: 75:5a:ee:a4:2b:b4:4f:69:2a:1d:4e:61:fa:28:ec:ad:c1:ee: 27:36:00:9d:18:31:f2:1d:95:a5:cb:f7:14:22:17:49:db:a1: 86:1b:ec:cf:8a:96:a2:10:1a:87:79:4e:99:91:0c:c3:6b:7b: 71:30:ca:36:dd:30:2c:97:c9:18:aa:27:3b:64:93:66:fa:e8: f6:ca:14:f7:9b:3a:2b:38:4d:ca:88:06:4b:dc:63:1d:9b:f6: 92:b2:3b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72dC8QCT2F/87uDDn0CpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUxMjIwMTMwMTI4WhcNMjUxMjIxMTMwMTI4WjAzMTEwLwYDVQQD EyhkMWJmYzM1OTQyMWJjYTZjZWI0ODQ1YzFjZjFjODlhMWRiYjBlMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqvu3TJDmWEE1gc3ENxGoq7GeAA2 9sCbwiDXr+zhsFRBw2+Z52tcazN7KAK8T5FUJ/RjBMJ+aWXN/Ftl9Fga3akfn8Cw DAPHsA/6oVq53GbnnhHhzsf226kLroddWfUMZP1xCEQna/y7SZwyGnOQdPh7Qdv6 hLBoEpy9d72sWQO9LKl+Bjo5xG3kpHMNEN1q7/SEkp9BfvNg4wW4FXaAxUTOu3Yf Phxs1DqrhyRP6qpAqZH62Ry5OhynWIp8sHQKOoJSOmrQIua31SEGhpTohswwLDnu K+DoR/Zhgbjt+/6ycQNWZqdRRTTuozzBNa99ZX7bRiXnSO4J0lt+JTyZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG/w1lCG8ps60hFwc8ciaHbsOIPMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPVoUwVU 15cOjxsGvw5Ph4/D/Zpbyv2DrKvZI/nPoF1UWDb8IgWN/n08xYzo3uWqtIEdKlzH FLyhBziHXlptiQ29ahvtFl7CVcuX6ZHoZ+Xq/gNzdnWYk0N6oF88T6KriYwB08Eq 8T7hboD2db6q94ZcP/H0FFSRoyMhcyGG70ujco4d7ZnLAsGtcUq2RoWBQY35bpoe Vxto1+33MYFCiKHsdVrupCu0T2kqHU5h+ijsrcHuJzYAnRgx8h2Vpcv3FCIXSduh hhvsz4qWohAah3lOmZEMw2t7cTDKNt0wLJfJGKonO2STZvro9soU95s6KzhNyogG S9xjHZv2krI7Pg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:39 2025 by rpki-client