This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json) Hash identifier: EVwE7mSw/Yy6oFF/D38ND2qApWF5l2O8rrJ3V3aPhSI= Subject key identifier: EB:BD:C2:0D:6A:69:12:97:63:EF:1E:7B:14:A0:26:02:DB:AC:69:E5 Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Certificate serial: 019B4A717B1AE7BBFA461D49CE84090796C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft Manifest number: 1012 Signing time: Tue 23 Dec 2025 09:01:49 +0000 Manifest this update: Tue 23 Dec 2025 09:01:49 +0000 Manifest next update: Wed 24 Dec 2025 09:01:49 +0000 Files and hashes: 1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=) 2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: I3araUWnASE7+mgWHYq2gXJgtQim480OFUQYRvUCYws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:7b:1a:e7:bb:fa:46:1d:49:ce:84:09:07:96:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd Validity Not Before: Dec 23 09:01:49 2025 GMT Not After : Dec 24 09:01:49 2025 GMT Subject: CN=ebbdc20d6a69129763ef1e7b14a02602dbac69e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:eb:dc:64:c2:23:be:3b:bf:3f:7d:a5:a1: 08:56:76:91:63:5f:11:28:e9:eb:2e:6d:5e:26:69: c5:7e:69:d2:cc:60:ff:00:25:a7:f0:01:48:a3:98: cc:b7:f3:25:e3:ad:95:7f:ce:f9:ca:5c:33:7b:7a: 27:d7:26:15:d4:09:80:68:52:ab:be:ef:9e:62:fd: a7:b2:86:11:45:0a:0f:f7:73:d7:28:59:bf:ca:86: d1:4c:00:7e:1b:77:7b:eb:bf:27:2c:c6:34:9e:69: e1:46:19:06:ca:93:9e:cc:f9:df:7e:77:f5:69:67: a2:47:38:2b:97:6d:ff:c8:c2:2b:67:2c:d3:e8:74: 3a:e4:6a:72:ee:d2:1a:9a:e0:f0:7e:2c:2a:5a:9d: d8:36:2f:52:73:87:21:e2:27:26:ca:33:b6:95:24: 17:38:c5:7d:70:7d:b4:6c:00:98:d6:9a:42:dd:35: 52:bd:44:68:be:89:74:55:2d:0e:fa:d1:8d:12:5b: 48:33:47:e5:1b:56:f9:27:8d:e0:d3:1c:c5:a2:a9: bf:ec:13:ce:b1:ec:59:8c:1b:b4:53:a1:a3:fc:cd: 08:cb:51:d2:5c:68:4a:ae:53:b2:4b:d1:cd:fe:84: c9:e0:25:bb:df:e7:f7:27:bf:f8:a9:1b:bc:28:20: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BD:C2:0D:6A:69:12:97:63:EF:1E:7B:14:A0:26:02:DB:AC:69:E5 X509v3 Authority Key Identifier: keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:d8:7f:35:39:08:19:2d:ed:b1:15:90:ea:6f:ea:c7:6e: a1:2d:a8:d2:70:30:d7:2c:25:50:99:16:7d:95:e4:e1:f4:3d: 41:a0:f5:68:03:b4:06:89:2b:65:3c:09:b1:37:96:f7:23:53: 33:8a:e2:3b:b6:42:d2:40:b1:80:a8:8d:77:3d:7e:ed:30:80: 8d:1d:29:fb:da:56:f0:0d:65:df:79:18:2e:cf:86:b4:46:ad: 9f:36:0a:3b:a9:67:bd:9c:c7:8e:f3:f3:a3:95:93:39:5d:62: 04:d4:d3:2e:2d:05:cc:d3:2e:c2:65:a2:0e:3e:85:72:e7:a3: 64:5e:14:30:00:aa:63:28:9d:54:52:6f:10:71:b5:66:16:a2: 27:29:60:84:70:6e:b3:f8:55:36:9c:9e:f4:5a:73:d8:4c:e1: 77:67:c9:2b:68:55:8f:90:e8:be:cc:2a:e4:c0:73:7d:7b:ef: f8:c5:5e:fe:9b:15:bd:45:9e:ab:71:41:8a:28:7e:db:05:55: fe:02:7e:5a:40:64:29:2e:1f:96:fa:d5:4a:ed:b1:87:28:a4: c1:7d:49:a5:84:62:db:78:3e:f2:8a:de:f9:f5:37:da:a6:2b: ae:f2:cf:16:c7:64:4d:61:11:13:94:f3:e0:28:67:bb:4e:cd: 93:8d:ee:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcXsa57v6Rh1JzoQJB5bJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3 MmVkZGQwHhcNMjUxMjIzMDkwMTQ5WhcNMjUxMjI0MDkwMTQ5WjAzMTEwLwYDVQQD EyhlYmJkYzIwZDZhNjkxMjk3NjNlZjFlN2IxNGEwMjYwMmRiYWM2OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgbr3GTCI747vz99paEIVnaRY18R KOnrLm1eJmnFfmnSzGD/ACWn8AFIo5jMt/Ml462Vf875ylwze3on1yYV1AmAaFKr vu+eYv2nsoYRRQoP93PXKFm/yobRTAB+G3d7678nLMY0nmnhRhkGypOezPnffnf1 aWeiRzgrl23/yMIrZyzT6HQ65Gpy7tIamuDwfiwqWp3YNi9Sc4ch4icmyjO2lSQX OMV9cH20bACY1ppC3TVSvURovol0VS0O+tGNEltIM0flG1b5J43g0xzFoqm/7BPO sexZjBu0U6Gj/M0Iy1HSXGhKrlOyS9HN/oTJ4CW73+f3J7/4qRu8KCAh0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu9wg1qaRKXY+8eexSgJgLbrGnlMB8GA1UdIwQY MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5 LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmLYfzU5 CBkt7bEVkOpv6sduoS2o0nAw1ywlUJkWfZXk4fQ9QaD1aAO0BokrZTwJsTeW9yNT M4riO7ZC0kCxgKiNdz1+7TCAjR0p+9pW8A1l33kYLs+GtEatnzYKO6lnvZzHjvPz o5WTOV1iBNTTLi0FzNMuwmWiDj6FcuejZF4UMACqYyidVFJvEHG1ZhaiJylghHBu s/hVNpye9Fpz2Ezhd2fJK2hVj5Dovswq5MBzfXvv+MVe/psVvUWeq3FBiih+2wVV /gJ+WkBkKS4flvrVSu2xhyikwX1JpYRi23g+8ore+fU32qYrrvLPFsdkTWERE5Tz 4Chnu07Nk43u2Q== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:29 2025 by rpki-client