This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft File: uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json) Hash identifier: yDTRIrFVmZJvVnYey6yk2NYSzd15nzlaoGWWdPr99OM= Subject key identifier: 1B:6E:0F:22:49:E9:FF:CB:46:A7:72:2E:5D:C7:26:C6:BF:41:87:84 Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1 Certificate issuer: /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1 Certificate serial: 019B2D0BCD3C60C43B4B33C2FA9B1EBEF9E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 16:01:46 +0000 Manifest this update: Wed 17 Dec 2025 16:01:46 +0000 Manifest next update: Thu 18 Dec 2025 16:01:46 +0000 Files and hashes: 1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: GWMa4+d23VpCp/d/PFunn5fpvolFya4uePAjXtVzrGI=) 2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:cd:3c:60:c4:3b:4b:33:c2:fa:9b:1e:be:f9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1 Validity Not Before: Dec 17 16:01:46 2025 GMT Not After : Dec 18 16:01:46 2025 GMT Subject: CN=1b6e0f2249e9ffcb46a7722e5dc726c6bf418784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:77:ed:f0:55:16:cc:a3:bd:86:74:14:30: 6c:a4:4c:59:39:0a:63:e2:69:52:47:a3:c6:e8:e5: 78:98:28:d7:a8:28:7d:eb:e3:35:b0:ed:42:bb:1b: bc:63:91:ee:f2:0c:89:40:7f:37:39:bd:9c:33:87: 5a:f8:4a:41:35:ab:55:d7:76:5d:49:1d:2b:10:f1: 8b:38:4b:43:2c:72:02:d0:d5:9d:72:16:05:58:32: bd:ea:49:c8:0d:e3:df:36:e1:92:65:0c:bf:50:88: 9e:9e:42:2e:f4:04:c9:a4:19:92:d6:f0:31:9e:71: 73:05:8c:e0:a6:dd:52:82:1d:61:93:e9:bc:db:9f: 51:94:b5:37:e4:fa:9b:fb:6c:6e:35:e7:ba:de:15: cb:5e:9f:c2:17:a6:16:96:9d:99:6c:68:1a:29:ad: 18:2b:08:cc:a3:50:46:15:40:d3:a5:08:5b:84:63: ed:6f:57:29:79:e9:7c:1a:05:28:9f:e3:cf:e7:57: 51:42:63:ef:c1:0f:79:25:61:ff:39:8f:25:30:df: 66:9f:08:5f:ce:c0:2d:16:bf:00:b0:71:03:bc:25: f4:24:92:a7:99:14:73:97:f9:29:c3:54:0e:40:33: b1:33:4e:a9:eb:2a:3c:5a:f3:1a:b6:8b:8d:84:2f: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:0F:22:49:E9:FF:CB:46:A7:72:2E:5D:C7:26:C6:BF:41:87:84 X509v3 Authority Key Identifier: keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:86:21:90:2b:19:ba:f3:dc:21:c3:3e:13:7f:be:42:bb:d6: 12:66:2d:d8:19:bc:2f:43:7b:75:b5:54:40:dc:24:cd:74:ae: 3f:79:52:e4:78:95:d7:5c:93:ee:c7:e8:61:b9:03:50:fa:88: 3b:77:d3:51:be:0c:87:dc:e1:7c:17:fa:22:85:ed:bf:a2:23: 61:66:ec:63:3b:77:a3:5e:80:72:40:06:8e:d8:5a:27:7a:b9: bd:4a:fe:6e:27:86:cf:91:28:9c:00:91:70:21:22:9a:e3:91: c9:8d:b4:3a:12:50:4d:c2:ad:40:ad:e7:03:fc:f6:d9:5e:ce: c9:81:44:7e:2c:2a:f5:f6:4c:e0:d3:0e:42:6f:6a:32:a4:cb: 38:eb:b5:c1:46:30:cf:a1:52:5c:f1:b4:d5:8a:04:5c:fb:1a: 6d:7e:c6:7c:36:41:47:99:a4:a1:42:81:97:b1:b2:38:f3:1b: d6:9c:61:97:13:c9:4b:8a:3e:7b:fa:02:e2:e4:c4:5b:2e:e5: f6:ee:2b:a1:d9:f7:07:2c:58:45:e9:ed:e4:ff:0f:c4:7d:d9: 80:ea:19:83:77:a8:a5:e4:77:96:6c:87:3d:e2:7b:92:5f:78: 5c:a1:11:3b:93:de:7c:d9:4b:fa:4a:28:12:e9:af:e3:bb:ed: 88:e6:b4:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC808YMQ7SzPC+psevvnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MmI3MjI3MTVmOTFiZTc5MmExZWMzYzMxZTc3ZWQ5ZGEw NWNiZTEwHhcNMjUxMjE3MTYwMTQ2WhcNMjUxMjE4MTYwMTQ2WjAzMTEwLwYDVQQD EygxYjZlMGYyMjQ5ZTlmZmNiNDZhNzcyMmU1ZGM3MjZjNmJmNDE4Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4t37fBVFsyjvYZ0FDBspExZOQpj 4mlSR6PG6OV4mCjXqCh96+M1sO1Cuxu8Y5Hu8gyJQH83Ob2cM4da+EpBNatV13Zd SR0rEPGLOEtDLHIC0NWdchYFWDK96knIDePfNuGSZQy/UIienkIu9ATJpBmS1vAx nnFzBYzgpt1Sgh1hk+m8259RlLU35Pqb+2xuNee63hXLXp/CF6YWlp2ZbGgaKa0Y KwjMo1BGFUDTpQhbhGPtb1cpeel8GgUon+PP51dRQmPvwQ95JWH/OY8lMN9mnwhf zsAtFr8AsHEDvCX0JJKnmRRzl/kpw1QOQDOxM06p6yo8WvMatouNhC/qRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtuDyJJ6f/LRqdyLl3HJsa/QYeEMB8GA1UdIwQY MBaAFLgrcicV+RvnkqHsPDHnftnaBcvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMt YTE1YTE4NjEzZGE2LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zOTY3NTktYjBjNi00OGVmLTk3YjMtYTE1YTE4NjEzZGE2 LzEvdUN0eUp4WDVHLWVTb2V3OE1lZC0yZG9GeS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYYhkCsZ uvPcIcM+E3++QrvWEmYt2Bm8L0N7dbVUQNwkzXSuP3lS5HiV11yT7sfoYbkDUPqI O3fTUb4Mh9zhfBf6IoXtv6IjYWbsYzt3o16AckAGjthaJ3q5vUr+bieGz5EonACR cCEimuORyY20OhJQTcKtQK3nA/z22V7OyYFEfiwq9fZM4NMOQm9qMqTLOOu1wUYw z6FSXPG01YoEXPsabX7GfDZBR5mkoUKBl7GyOPMb1pxhlxPJS4o+e/oC4uTEWy7l 9u4rodn3ByxYRent5P8PxH3ZgOoZg3eopeR3lmyHPeJ7kl94XKERO5PefNlL+koo Eumv47vtiOa0Mg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:14:57 2025 by rpki-client