This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json) Hash identifier: DTgESt024cU9WJ4y2DfoWJ7PMfZ+gcS0WMt7Y4aVxSc= Subject key identifier: DF:19:48:4F:64:23:51:8B:67:32:14:55:1B:79:A6:33:5C:41:3D:D0 Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608 Certificate serial: 019B3EA38F1D69037A6973FD63CB0C82D2D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft Manifest number: 176C Signing time: Sun 21 Dec 2025 02:01:04 +0000 Manifest this update: Sun 21 Dec 2025 02:01:04 +0000 Manifest next update: Mon 22 Dec 2025 02:01:04 +0000 Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: n7NHCtxnz1ysN5H8eRGYsGzBFdHG9pUgclivbYRE9sM=) 2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:8f:1d:69:03:7a:69:73:fd:63:cb:0c:82:d2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608 Validity Not Before: Dec 21 02:01:04 2025 GMT Not After : Dec 22 02:01:04 2025 GMT Subject: CN=df19484f6423518b673214551b79a6335c413dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:3f:12:5b:29:fa:c0:b0:75:20:d0:18:0a: bb:92:99:72:2f:33:1d:fb:b0:92:25:01:4b:21:ce: 75:0e:9c:fb:a5:53:ea:54:dc:1a:d3:6b:a0:0d:66: 1d:62:c2:f7:1a:e1:8f:3a:47:7a:6e:b0:9b:5a:e7: 73:90:b5:80:36:e3:68:ed:d5:26:46:c1:4c:41:b7: 54:aa:b0:8d:4f:d6:cf:17:30:3d:70:56:1d:58:00: 83:51:d1:ee:3f:05:85:80:19:82:82:fc:11:06:b0: 70:12:c1:1e:5d:bd:f9:eb:43:d2:5c:99:90:d2:83: a1:bc:23:45:70:a5:d5:88:2f:80:f6:6f:d7:a4:4a: 6d:65:00:e2:5d:51:1a:e8:bb:ca:aa:d3:12:b2:03: e7:57:47:dd:ab:3c:24:70:98:d0:30:e8:72:78:42: 29:28:bc:34:c2:a1:06:c6:05:97:30:ff:d6:f1:fa: 73:e1:86:fe:8b:d2:59:49:1a:d6:fa:ac:d0:12:a8: 70:9e:ee:9e:3b:c3:66:59:c8:d3:1d:4e:2c:23:a8: 9f:0d:92:8c:e1:84:2d:07:36:ac:b2:df:1b:18:cc: 04:d1:0e:46:e6:7e:1e:30:e9:6f:66:84:f9:dd:3b: 7e:48:6f:22:e7:79:d4:96:c9:57:e0:78:04:64:f3: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:48:4F:64:23:51:8B:67:32:14:55:1B:79:A6:33:5C:41:3D:D0 X509v3 Authority Key Identifier: keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7f:54:47:68:e4:34:d3:16:cd:1f:77:8a:42:b2:60:03:bc: e1:c1:fc:68:34:8a:8b:64:1a:5f:50:a9:79:62:cf:7a:36:d3: 5e:23:2a:94:7e:c2:bd:50:6a:47:53:8a:7b:0d:50:c0:5d:17: 99:ba:6e:6c:8a:6f:22:44:95:17:3a:6a:f6:1f:bf:39:fb:73: f7:9d:a5:6c:d6:f0:e5:53:8b:0e:d9:16:52:1e:05:3c:0b:50: d3:e2:45:e9:b2:ca:56:32:a9:36:b0:87:d8:42:29:f6:65:ff: ae:01:cb:a6:4c:ca:29:9e:56:ec:e3:c5:31:e7:f8:1b:a8:52: d5:a7:a7:f6:c4:d0:7a:82:e2:e7:14:a8:48:e8:e5:72:e2:df: 12:33:46:db:ed:e1:62:1d:ab:f0:8c:5d:fb:1d:19:e0:59:95: e6:2c:a1:c8:2e:6c:9e:d1:06:7d:82:1e:98:26:23:4f:34:9a: b3:70:c3:e4:b7:1e:76:14:00:df:3e:b2:61:93:f1:66:4e:b4: a6:4d:b2:4b:c4:5f:fc:7b:25:f8:fa:9f:96:16:52:a4:1f:c3: f9:89:60:64:57:7f:cf:ba:24:4c:9e:26:b2:86:51:79:7b:f0: e4:53:96:b6:1d:f0:96:c2:b4:f6:c8:af:54:52:a2:0d:3a:c1: e1:e2:0a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o48daQN6aXP9Y8sMgtLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMDg0MWU4MmFhNDZkOTk1OWZjNzgxMWIyNTc5NWM1NmNk NTA2MDgwHhcNMjUxMjIxMDIwMTA0WhcNMjUxMjIyMDIwMTA0WjAzMTEwLwYDVQQD EyhkZjE5NDg0ZjY0MjM1MThiNjczMjE0NTUxYjc5YTYzMzVjNDEzZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsk/Elsp+sCwdSDQGAq7kplyLzMd +7CSJQFLIc51Dpz7pVPqVNwa02ugDWYdYsL3GuGPOkd6brCbWudzkLWANuNo7dUm RsFMQbdUqrCNT9bPFzA9cFYdWACDUdHuPwWFgBmCgvwRBrBwEsEeXb3560PSXJmQ 0oOhvCNFcKXViC+A9m/XpEptZQDiXVEa6LvKqtMSsgPnV0fdqzwkcJjQMOhyeEIp KLw0wqEGxgWXMP/W8fpz4Yb+i9JZSRrW+qzQEqhwnu6eO8NmWcjTHU4sI6ifDZKM 4YQtBzasst8bGMwE0Q5G5n4eMOlvZoT53Tt+SG8i53nUlslX4HgEZPN5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8ZSE9kI1GLZzIUVRt5pjNcQT3QMB8GA1UdIwQY MBaAFFMIQegqpG2ZWfx4EbJXlcVs1QYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTkt NGE4MmNkZDRiMWEwLzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTktNGE4MmNkZDRiMWEw LzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXX9UR2jk NNMWzR93ikKyYAO84cH8aDSKi2QaX1CpeWLPejbTXiMqlH7CvVBqR1OKew1QwF0X mbpubIpvIkSVFzpq9h+/Oftz952lbNbw5VOLDtkWUh4FPAtQ0+JF6bLKVjKpNrCH 2EIp9mX/rgHLpkzKKZ5W7OPFMef4G6hS1aen9sTQeoLi5xSoSOjlcuLfEjNG2+3h Yh2r8Ixd+x0Z4FmV5iyhyC5sntEGfYIemCYjTzSas3DD5LcedhQA3z6yYZPxZk60 pk2yS8Rf/Hsl+PqflhZSpB/D+YlgZFd/z7okTJ4msoZReXvw5FOWth3wlsK09siv VFKiDTrB4eIKXg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:46 2025 by rpki-client