This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json) Hash identifier: LH90cMEilG+xBUfjJC6THFgFd3PwKkO3YXdaTyURD9A= Subject key identifier: 9D:A3:6E:DE:52:4C:2D:46:46:34:BD:79:BC:23:61:88:FE:98:78:53 Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab Certificate serial: 019B65B167826ACC7AE8516D2BB6AD569E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft Manifest number: 0431 Signing time: Sun 28 Dec 2025 16:01:23 +0000 Manifest this update: Sun 28 Dec 2025 16:01:23 +0000 Manifest next update: Mon 29 Dec 2025 16:01:23 +0000 Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: r567lfMIR+W01s0pcv4Bw0iHcpQDdTnxH345WXuXjH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:67:82:6a:cc:7a:e8:51:6d:2b:b6:ad:56:9e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab Validity Not Before: Dec 28 16:01:23 2025 GMT Not After : Dec 29 16:01:23 2025 GMT Subject: CN=9da36ede524c2d464634bd79bc236188fe987853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:1a:64:42:f6:38:e1:61:ec:a3:6d:a8:cd: 29:0a:5b:12:78:ae:d9:be:a6:15:05:77:15:11:97: a3:6e:2a:bd:9c:90:4a:c1:af:f6:b7:3f:3f:a1:a6: dc:35:9e:61:cc:55:73:96:3f:d9:b7:3a:6f:5a:13: ea:b9:d6:02:10:21:21:d9:b7:5d:96:9d:62:ae:ce: cd:f1:90:df:69:93:7c:1a:38:25:89:31:12:7b:81: 8c:38:3b:ad:f9:2a:4d:33:b0:a9:ad:09:8a:61:fa: 8f:8c:bf:f4:47:d8:0d:db:96:89:d2:27:7b:03:4d: bc:93:f7:b6:10:f8:6b:16:20:8e:7f:5b:d3:93:e5: 43:54:23:e0:8e:23:65:70:1c:b4:8d:0c:41:36:eb: df:f8:d4:39:f9:19:8a:ad:0a:d3:91:38:46:81:44: 26:b4:29:62:92:13:2c:0a:5e:ca:9d:54:68:51:e2: a2:25:10:29:ee:67:38:fa:a8:8e:6e:9b:5e:f1:96: 6f:57:71:1b:f7:7d:80:15:34:ce:0b:38:ef:bd:67: 44:5b:58:31:22:89:5f:27:7a:fc:c0:63:1f:f8:66: d4:25:b7:7c:76:85:b7:e6:55:3f:f1:69:e8:88:1f: 57:2c:2e:24:db:b1:cc:e4:bf:1b:fb:98:db:4f:d4: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A3:6E:DE:52:4C:2D:46:46:34:BD:79:BC:23:61:88:FE:98:78:53 X509v3 Authority Key Identifier: keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bd:df:d0:48:53:ed:a1:6a:18:0e:92:f2:e7:20:de:4e:dd: 3d:14:1c:0f:20:fc:fe:21:6c:3a:b1:f4:61:8f:86:38:22:28: fb:f3:4a:8d:02:74:75:bb:80:67:91:03:59:f9:38:51:9d:6a: c5:07:27:13:65:ad:78:55:e3:f2:87:42:40:ee:13:a6:7f:c6: d5:47:e9:20:16:65:3a:62:56:d4:fc:4b:04:49:7e:b1:9c:42: 33:54:39:97:60:23:8b:e1:e7:e7:05:3e:57:df:77:a5:af:f3: 42:35:1b:32:cf:b5:79:fb:69:a1:f3:0a:10:5b:27:86:25:86: 16:8a:fe:74:f3:3c:54:92:c6:6d:37:de:d1:35:ef:03:17:fe: e0:70:9d:39:ff:8a:24:fe:c8:16:b8:cd:c3:f7:a6:bc:b4:46: 05:7d:d6:2a:4c:48:2f:3e:e5:09:a3:70:ae:9d:9d:99:71:05: 74:d7:da:1c:37:5d:2b:9c:70:ab:7b:0b:8c:c1:c7:a1:3e:f0: c7:4f:d9:54:24:ec:02:0d:01:62:3b:f0:86:89:91:33:75:cd: 56:a4:f4:35:42:9c:a5:e0:da:eb:50:26:41:b8:36:e4:c5:3d: 0a:3b:42:64:d2:18:dd:e3:dd:c2:0a:22:90:a0:3b:f2:db:f2: 8a:51:8e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsWeCasx66FFtK7atVp6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NGYzMGEwNzY5NGEyMTEzOTY0ODcyNWEyNmViMzRjZTRh MTZiYWIwHhcNMjUxMjI4MTYwMTIzWhcNMjUxMjI5MTYwMTIzWjAzMTEwLwYDVQQD Eyg5ZGEzNmVkZTUyNGMyZDQ2NDYzNGJkNzliYzIzNjE4OGZlOTg3ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3waZEL2OOFh7KNtqM0pClsSeK7Z vqYVBXcVEZejbiq9nJBKwa/2tz8/oabcNZ5hzFVzlj/ZtzpvWhPqudYCECEh2bdd lp1irs7N8ZDfaZN8GjgliTESe4GMODut+SpNM7CprQmKYfqPjL/0R9gN25aJ0id7 A028k/e2EPhrFiCOf1vTk+VDVCPgjiNlcBy0jQxBNuvf+NQ5+RmKrQrTkThGgUQm tClikhMsCl7KnVRoUeKiJRAp7mc4+qiObpte8ZZvV3Eb932AFTTOCzjvvWdEW1gx IolfJ3r8wGMf+GbUJbd8doW35lU/8WnoiB9XLC4k27HM5L8b+5jbT9QaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2jbt5STC1GRjS9ebwjYYj+mHhTMB8GA1UdIwQY MBaAFLlPMKB2lKIROWSHJaJus0zkoWurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNzZjMjEtOTljMy00ZjlhLThiNDIt NzdhMzgzNWQ0ZmJiLzEvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mNzZjMjEtOTljMy00ZjlhLThiNDItNzdhMzgzNWQ0ZmJi LzEvdVU4d29IYVVvaEU1WkljbG9tNnpUT1NoYTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL3f0EhT 7aFqGA6S8ucg3k7dPRQcDyD8/iFsOrH0YY+GOCIo+/NKjQJ0dbuAZ5EDWfk4UZ1q xQcnE2WteFXj8odCQO4Tpn/G1UfpIBZlOmJW1PxLBEl+sZxCM1Q5l2Aji+Hn5wU+ V993pa/zQjUbMs+1eftpofMKEFsnhiWGFor+dPM8VJLGbTfe0TXvAxf+4HCdOf+K JP7IFrjNw/emvLRGBX3WKkxILz7lCaNwrp2dmXEFdNfaHDddK5xwq3sLjMHHoT7w x0/ZVCTsAg0BYjvwhomRM3XNVqT0NUKcpeDa61AmQbg25MU9CjtCZNIY3ePdwgoi kKA78tvyilGOfQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client