This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json) Hash identifier: l5lkCaS56QazNmWuBEUzpVIgVeAzyB+NQCdwF5E5/ZM= Subject key identifier: 25:7C:A2:19:3C:F2:4A:4C:19:1D:24:14:33:7C:4E:B5:69:93:47:D4 Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af Certificate serial: 019B3EA30D46F76FC9073F4A3D76641CD6D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 02:00:31 +0000 Manifest this update: Sun 21 Dec 2025 02:00:31 +0000 Manifest next update: Mon 22 Dec 2025 02:00:31 +0000 Files and hashes: 1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=) 2: MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa (hash: JNpBzF/bGBycltANPUKMe/k4nJGYJgbUSLWLk2GhApA=) 3: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=) 4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: 9tyQ5AhMPOCQN4NToJnjqIhW1T50SBSK1Px8dD4x5Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:0d:46:f7:6f:c9:07:3f:4a:3d:76:64:1c:d6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb190d102ac9603b405b36374d429868604937af Validity Not Before: Dec 21 02:00:31 2025 GMT Not After : Dec 22 02:00:31 2025 GMT Subject: CN=257ca2193cf24a4c191d2414337c4eb5699347d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:42:c3:a6:9d:9a:30:fe:10:85:6c:71:a0:4f: 51:c0:b0:77:bc:67:ad:7d:d8:cc:12:1e:24:62:d2: 6c:57:f7:10:8f:f6:af:d3:06:5c:eb:2c:41:9f:e8: a4:76:04:29:4a:b7:38:c1:1a:47:42:ee:b5:c1:b0: 22:3e:db:98:ad:97:bc:d5:b3:35:cb:f1:58:53:44: 2d:c8:32:54:b3:64:ec:37:09:5d:b4:38:bf:79:40: 87:eb:b5:73:0a:da:0c:e8:25:30:0e:53:00:32:3f: f5:59:6a:d5:5d:65:5b:0c:bc:eb:5d:c5:5e:6c:2f: 62:d5:90:22:1d:20:70:19:69:d0:f6:8d:97:69:39: 14:00:dd:d4:0f:e3:58:61:bc:93:20:e9:12:f6:a5: b4:ce:71:07:c8:d0:c1:dc:77:a3:14:26:f1:fe:a6: 64:26:2e:b2:cc:97:ad:6f:44:14:fe:e7:67:2a:90: de:34:05:4b:a2:11:23:77:76:3f:1d:4c:f1:dd:5b: 96:bb:1e:f2:05:f8:bd:c9:73:ea:05:ff:ee:a8:14: 1f:36:91:4d:e5:6c:d4:f3:f0:f9:37:77:40:d5:41: a9:4c:0f:6f:0a:ae:f6:0b:77:69:04:a6:f9:12:8e: f2:2c:a8:51:55:44:e2:e4:37:70:c2:25:d5:88:80: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7C:A2:19:3C:F2:4A:4C:19:1D:24:14:33:7C:4E:B5:69:93:47:D4 X509v3 Authority Key Identifier: keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2e:c7:1d:6b:d8:97:8b:e5:67:e4:cc:42:09:e4:7a:4c:59: ce:9a:06:1a:d9:c2:e3:27:20:05:ee:d9:cd:93:f3:13:b5:9d: aa:c7:fc:4e:bf:6d:9f:20:6d:36:b4:7b:de:0c:ef:92:8e:58: 90:5e:10:b4:a7:09:3b:fd:6c:11:e1:3c:0b:c4:58:d5:3b:49: f7:7d:7e:ac:3b:12:f7:57:63:17:af:51:c9:7b:ba:d1:50:4c: f5:5c:89:b8:7a:1d:a6:c2:62:68:09:d2:b3:f6:83:6e:7c:f5: 9d:d1:cb:ff:58:7f:79:81:2a:2c:c8:e5:c1:5b:53:94:06:1c: bd:fa:07:bc:dc:6e:09:f4:7a:cc:f5:e9:10:be:2d:88:b0:09: b7:e7:0d:33:21:76:5a:9d:04:2c:82:44:d3:7d:41:33:ed:22: 42:d0:d4:28:50:87:4f:ff:19:3f:d1:df:b3:b3:81:31:81:ac: a2:7e:4a:15:05:cd:e0:db:38:09:3c:cf:4e:24:12:ad:4c:ec: df:c8:4a:c5:33:bc:89:ea:84:53:87:04:99:f3:90:42:72:e7: c6:1f:94:3d:54:2c:7b:52:fc:55:6d:fc:0a:9a:f2:75:c7:1b: d1:fc:1e:67:0c:83:b3:dd:3d:1f:b6:8b:4e:a1:a3:d1:2c:84: c6:8d:d2:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ow1G92/JBz9KPXZkHNbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0 OTM3YWYwHhcNMjUxMjIxMDIwMDMxWhcNMjUxMjIyMDIwMDMxWjAzMTEwLwYDVQQD EygyNTdjYTIxOTNjZjI0YTRjMTkxZDI0MTQzMzdjNGViNTY5OTM0N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kLDpp2aMP4QhWxxoE9RwLB3vGet fdjMEh4kYtJsV/cQj/av0wZc6yxBn+ikdgQpSrc4wRpHQu61wbAiPtuYrZe81bM1 y/FYU0QtyDJUs2TsNwldtDi/eUCH67VzCtoM6CUwDlMAMj/1WWrVXWVbDLzrXcVe bC9i1ZAiHSBwGWnQ9o2XaTkUAN3UD+NYYbyTIOkS9qW0znEHyNDB3HejFCbx/qZk Ji6yzJetb0QU/udnKpDeNAVLohEjd3Y/HUzx3VuWux7yBfi9yXPqBf/uqBQfNpFN 5WzU8/D5N3dA1UGpTA9vCq72C3dpBKb5Eo7yLKhRVUTi5DdwwiXViICDyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV8ohk88kpMGR0kFDN8TrVpk0fUMB8GA1UdIwQY MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5 LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi7HHWvY l4vlZ+TMQgnkekxZzpoGGtnC4ycgBe7ZzZPzE7Wdqsf8Tr9tnyBtNrR73gzvko5Y kF4QtKcJO/1sEeE8C8RY1TtJ931+rDsS91djF69RyXu60VBM9VyJuHodpsJiaAnS s/aDbnz1ndHL/1h/eYEqLMjlwVtTlAYcvfoHvNxuCfR6zPXpEL4tiLAJt+cNMyF2 Wp0ELIJE031BM+0iQtDUKFCHT/8ZP9Hfs7OBMYGson5KFQXN4Ns4CTzPTiQSrUzs 38hKxTO8ieqEU4cEmfOQQnLnxh+UPVQse1L8VW38Cprydccb0fweZwyDs909H7aL TqGj0SyExo3SjA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:16 2025 by rpki-client