This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json) Hash identifier: POuH5LsdD3aspQBMtih5i3mKUFOW4xjVKxuJz26mGes= Subject key identifier: D8:12:0E:59:99:C7:E9:C3:3D:9E:4F:1B:68:F7:B5:99:A8:57:07:48 Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Certificate serial: 019B631F29CF3EF3578A3170B20AEA0C5A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft Manifest number: 058D Signing time: Sun 28 Dec 2025 04:02:25 +0000 Manifest this update: Sun 28 Dec 2025 04:02:25 +0000 Manifest next update: Mon 29 Dec 2025 04:02:25 +0000 Files and hashes: 1: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=) 2: moBOnIbdvq8-QVwwe2b5CEKfZgA.roa (hash: 2B1eVc1QZjAUpKco7izarXEMSn1SUBcrE9RYHExsfCE=) 3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: 0Ve8VHEiXFDrkme/g/fnk67Qw+QEy/jHXs203xa2CeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:29:cf:3e:f3:57:8a:31:70:b2:0a:ea:0c:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Validity Not Before: Dec 28 04:02:25 2025 GMT Not After : Dec 29 04:02:25 2025 GMT Subject: CN=d8120e5999c7e9c33d9e4f1b68f7b599a8570748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:ab:4d:5a:98:f5:2f:42:f3:4c:be:8a:d2: 76:3e:af:35:6f:81:9d:e2:b8:4e:4d:25:63:58:0c: 3b:c6:9f:25:ec:11:2b:91:6f:0b:9b:24:6b:56:54: 37:b7:a2:7f:a9:13:10:eb:1e:f6:e4:94:6e:c6:74: 1b:1b:85:9f:36:5e:51:63:8d:70:d0:b9:7b:34:a8: 38:1f:cf:1d:56:cb:95:a6:85:39:9a:1d:c7:60:28: 91:50:7d:68:bb:3a:fd:77:81:74:e5:fe:65:46:08: 36:37:79:ef:f7:fd:c3:3e:8b:94:b7:85:3b:32:68: e9:94:dc:2d:d3:7f:2a:7a:e9:84:08:82:a0:c7:da: e5:1d:e9:a9:b0:21:8d:20:56:d3:90:29:9d:cd:4b: a1:97:d2:f5:3f:07:9c:e8:51:5d:dd:59:05:ab:c8: 5d:13:0c:68:3a:75:04:65:10:33:0c:f4:47:07:bb: 14:97:ed:51:5a:84:0b:28:67:5d:bb:59:ba:8c:30: 45:92:3e:e5:ce:53:ad:88:54:79:05:3a:4d:a1:ea: 5d:ff:e4:e9:ae:a6:b0:81:2d:23:6f:84:c0:1b:f3: 46:16:d6:cc:6f:03:b4:1c:50:6e:4e:a8:68:09:a3: 53:8f:8a:d3:e6:6f:87:48:e3:42:26:8a:ea:9e:92: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:0E:59:99:C7:E9:C3:3D:9E:4F:1B:68:F7:B5:99:A8:57:07:48 X509v3 Authority Key Identifier: keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:58:96:e0:40:41:f5:41:e4:35:ce:c8:03:6d:62:5e:e5:6d: 87:26:f3:16:b3:1e:d5:9d:6d:bd:53:5e:36:c7:1d:4a:1a:f6: 80:b9:13:04:89:1e:ef:da:55:0b:64:1e:f5:be:1f:e1:c6:52: 82:97:9e:14:8f:27:48:88:9c:7a:fe:be:2c:56:a0:3a:59:51: 72:90:62:93:4a:0d:1d:c8:f3:81:0b:f0:48:49:cf:1d:a5:41: 53:56:ca:b0:ae:f7:07:bb:77:3d:6a:24:9b:d1:b0:e6:60:c1: 71:1f:63:6f:aa:67:10:64:38:be:66:77:4f:de:f8:59:57:b2: 4d:bc:7b:d4:d5:1f:3f:3f:8e:47:45:ed:5a:62:fa:16:a8:11: 52:c8:63:db:9c:c2:59:de:5f:e1:95:99:2e:4f:ba:93:03:0f: 13:98:f1:ab:1e:4b:ad:2f:21:5b:a2:24:9b:dc:a3:56:d8:f3: cb:b2:5f:3c:63:ef:32:de:6b:df:88:8c:11:17:50:ec:a1:29: 5f:5c:8a:3b:f2:32:8d:20:7a:6e:66:56:8a:25:2f:0d:a9:b9: 2f:12:52:45:ec:34:23:bf:db:d6:1c:32:d1:13:9f:f2:a5:1e: e1:09:fe:48:b9:fb:a7:ac:e0:08:d0:30:a8:a5:48:f4:b5:85: f3:ca:b4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHynPPvNXijFwsgrqDFowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2Q0OTA4ZDljNDNhODVmODViZTE5MzM0YTI2ZjVkNTEz NTBiY2IwHhcNMjUxMjI4MDQwMjI1WhcNMjUxMjI5MDQwMjI1WjAzMTEwLwYDVQQD EyhkODEyMGU1OTk5YzdlOWMzM2Q5ZTRmMWI2OGY3YjU5OWE4NTcwNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnurTVqY9S9C80y+itJ2Pq81b4Gd 4rhOTSVjWAw7xp8l7BErkW8LmyRrVlQ3t6J/qRMQ6x725JRuxnQbG4WfNl5RY41w 0Ll7NKg4H88dVsuVpoU5mh3HYCiRUH1ouzr9d4F05f5lRgg2N3nv9/3DPouUt4U7 MmjplNwt038qeumECIKgx9rlHempsCGNIFbTkCmdzUuhl9L1Pwec6FFd3VkFq8hd EwxoOnUEZRAzDPRHB7sUl+1RWoQLKGddu1m6jDBFkj7lzlOtiFR5BTpNoepd/+Tp rqawgS0jb4TAG/NGFtbMbwO0HFBuTqhoCaNTj4rT5m+HSONCJorqnpL57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgSDlmZx+nDPZ5PG2j3tZmoVwdIMB8GA1UdIwQY MBaAFLk9SQjZxDqF+FvhkzSib11RNQvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAt NTI4NzQ2MTFjZDIxLzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xZDdiMGMtMjI1MS00ZGQzLTg2OTAtNTI4NzQ2MTFjZDIx LzEvdVQxSkNObkVPb1g0Vy1HVE5LSnZYVkUxQzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgliW4EBB 9UHkNc7IA21iXuVthybzFrMe1Z1tvVNeNscdShr2gLkTBIke79pVC2Qe9b4f4cZS gpeeFI8nSIicev6+LFagOllRcpBik0oNHcjzgQvwSEnPHaVBU1bKsK73B7t3PWok m9Gw5mDBcR9jb6pnEGQ4vmZ3T974WVeyTbx71NUfPz+OR0XtWmL6FqgRUshj25zC Wd5f4ZWZLk+6kwMPE5jxqx5LrS8hW6Ikm9yjVtjzy7JfPGPvMt5r34iMERdQ7KEp X1yKO/IyjSB6bmZWiiUvDam5LxJSRew0I7/b1hwy0ROf8qUe4Qn+SLn7p6zgCNAw qKVI9LWF88q07Q== -----END CERTIFICATE-----Generated at Sun Dec 28 06:24:11 2025 by rpki-client