This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json) Hash identifier: GHwOpHvTibraP8H3OAHb2pcIaJW2kl2YxsYqKJQJivQ= Subject key identifier: B0:0D:E4:3E:2B:30:70:50:7B:C1:A9:D7:D9:B5:66:C2:C4:F3:63:ED Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Certificate serial: 019B40FF878B08BA665C9B0AC7A45D76E165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 13:00:46 +0000 Manifest this update: Sun 21 Dec 2025 13:00:46 +0000 Manifest next update: Mon 22 Dec 2025 13:00:46 +0000 Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=) 2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: MZyOZJK6a+tHetMMCzWjdQRAAoPXxzwW4bmQihlD4Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:87:8b:08:ba:66:5c:9b:0a:c7:a4:5d:76:e1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Validity Not Before: Dec 21 13:00:46 2025 GMT Not After : Dec 22 13:00:46 2025 GMT Subject: CN=b00de43e2b3070507bc1a9d7d9b566c2c4f363ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:e7:8a:f2:0e:9e:3b:06:cf:61:b0:5d:66: 82:47:c5:eb:58:62:9a:73:70:7f:ec:cb:f0:de:b7: aa:4c:aa:d7:38:db:aa:c3:02:0d:21:d3:5c:7e:b8: 44:88:29:49:c6:54:ae:d5:82:f5:84:8f:bb:fd:3b: ba:27:a6:35:4a:eb:46:62:b5:05:98:18:d8:24:63: b9:d2:c6:95:87:76:86:30:cc:eb:49:b6:57:e2:09: 91:84:a3:48:cf:ae:44:7a:a5:7e:a8:62:09:8a:bf: e9:90:2a:39:01:74:21:ec:98:22:05:2c:35:7b:3f: 95:1f:fe:a1:64:c7:a9:58:3b:fe:00:f5:97:58:05: db:44:d6:19:fa:45:87:22:66:65:f7:08:25:d8:d8: 51:9c:6e:b2:a1:38:35:92:f1:cf:c0:27:7b:9c:2b: f4:01:ca:66:5a:cb:4c:c7:8d:94:89:04:d8:c5:ae: 05:0f:e6:7e:d0:46:4f:64:33:b4:d4:2d:f9:0a:86: ea:14:0a:1f:22:2d:c5:7d:3d:ac:86:be:31:4e:ff: d4:1d:6c:69:57:ac:00:a6:dc:37:dc:bc:b2:95:55: 05:cb:2e:87:31:31:dc:5e:0f:48:b2:ed:a0:4f:f9: 7f:83:a5:be:5e:97:72:81:4c:21:53:5a:20:b4:db: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0D:E4:3E:2B:30:70:50:7B:C1:A9:D7:D9:B5:66:C2:C4:F3:63:ED X509v3 Authority Key Identifier: keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:e9:b0:aa:9a:9e:4f:b1:6d:4e:44:00:e0:70:3d:0a:c4:5b: 3f:5b:d6:69:49:86:0e:f3:7b:e8:69:4b:d0:b7:28:5c:48:32: 42:56:87:45:fc:0b:34:20:6a:67:87:40:39:67:67:6f:a8:67: 8c:c2:58:7d:23:3d:88:e0:59:7c:73:46:d7:7e:28:22:c2:db: 6c:7c:04:64:ed:47:3c:be:6b:ea:00:ed:69:25:ee:67:c4:53: 20:ca:7b:48:71:da:0d:af:cb:24:4e:cf:ec:c4:35:7c:44:2e: b5:69:09:e2:6a:45:be:d4:87:7e:fe:59:67:4e:3f:3b:13:be: 82:24:92:2d:f3:91:c4:5d:27:05:90:8e:27:14:8d:0e:a4:be: ec:6d:3e:12:cc:2a:31:c7:91:d8:d0:98:42:c2:6a:7c:8f:1b: c5:86:52:0b:5c:35:33:2c:bd:a7:44:f8:37:19:0f:fe:c3:25: fe:fa:02:1d:5d:e9:e6:55:51:11:ea:9d:30:7f:35:09:92:77: ca:7e:90:ca:49:2e:ec:f5:4f:80:e4:52:63:10:c4:fe:7e:46: e6:90:0e:d5:bd:67:ff:a7:e4:4d:a3:b3:68:fd:57:c2:c7:37: 49:6a:76:46:0d:27:05:76:ec:20:ef:ce:27:6b:34:02:65:18: 6d:82:3c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4eLCLpmXJsKx6RdduFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDZjNGQyMDBmZTUwMzVjNjFiMGM4OTRiOTQ1NGU3MmQy N2M5MWYwHhcNMjUxMjIxMTMwMDQ2WhcNMjUxMjIyMTMwMDQ2WjAzMTEwLwYDVQQD EyhiMDBkZTQzZTJiMzA3MDUwN2JjMWE5ZDdkOWI1NjZjMmM0ZjM2M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2nnivIOnjsGz2GwXWaCR8XrWGKa c3B/7Mvw3reqTKrXONuqwwINIdNcfrhEiClJxlSu1YL1hI+7/Tu6J6Y1SutGYrUF mBjYJGO50saVh3aGMMzrSbZX4gmRhKNIz65EeqV+qGIJir/pkCo5AXQh7JgiBSw1 ez+VH/6hZMepWDv+APWXWAXbRNYZ+kWHImZl9wgl2NhRnG6yoTg1kvHPwCd7nCv0 AcpmWstMx42UiQTYxa4FD+Z+0EZPZDO01C35CobqFAofIi3FfT2shr4xTv/UHWxp V6wAptw33LyylVUFyy6HMTHcXg9Isu2gT/l/g6W+XpdygUwhU1ogtNudvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAN5D4rMHBQe8Gp19m1ZsLE82PtMB8GA1UdIwQY MBaAFFNGxNIA/lA1xhsMiUuUVOctJ8kfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzkt MjRhYWI0NGYyNTM5LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzktMjRhYWI0NGYyNTM5 LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+mwqpqe T7FtTkQA4HA9CsRbP1vWaUmGDvN76GlL0LcoXEgyQlaHRfwLNCBqZ4dAOWdnb6hn jMJYfSM9iOBZfHNG134oIsLbbHwEZO1HPL5r6gDtaSXuZ8RTIMp7SHHaDa/LJE7P 7MQ1fEQutWkJ4mpFvtSHfv5ZZ04/OxO+giSSLfORxF0nBZCOJxSNDqS+7G0+Eswq MceR2NCYQsJqfI8bxYZSC1w1Myy9p0T4NxkP/sMl/voCHV3p5lVREeqdMH81CZJ3 yn6Qykku7PVPgORSYxDE/n5G5pAO1b1n/6fkTaOzaP1Xwsc3SWp2Rg0nBXbsIO/O J2s0AmUYbYI8Aw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:53:10 2025 by rpki-client