This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json) Hash identifier: dLMPFu0IcQA5z13Qw+PcK79eLjguLLfVU6RQeUIDYLA= Subject key identifier: 32:EB:75:4F:77:B3:FE:D0:76:56:6B:51:C4:9B:1B:47:2C:EB:97:90 Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37 Certificate serial: 019B3A900A7208C70AFF4DB22AE0525BBF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft Manifest number: 0454 Signing time: Sat 20 Dec 2025 07:01:16 +0000 Manifest this update: Sat 20 Dec 2025 07:01:16 +0000 Manifest next update: Sun 21 Dec 2025 07:01:16 +0000 Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=) 2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: 22tfoA74Z+C7HVm4fj3YXEprJR+1hykKz/ENzw55LnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:0a:72:08:c7:0a:ff:4d:b2:2a:e0:52:5b:bf:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37 Validity Not Before: Dec 20 07:01:16 2025 GMT Not After : Dec 21 07:01:16 2025 GMT Subject: CN=32eb754f77b3fed076566b51c49b1b472ceb9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:ee:0d:24:c8:16:80:77:3d:86:b2:77:af: d7:1d:63:41:52:43:6d:64:6e:e9:89:13:f7:b4:7a: ea:87:0b:50:35:45:f2:ac:d5:02:ab:b8:df:5b:2a: a8:e3:6b:d4:eb:7e:e3:7d:dc:e3:24:26:be:45:4a: c0:81:ee:8f:47:b6:2e:74:26:b0:3d:42:fe:2b:32: dd:c3:66:4b:9b:f0:b9:a5:7f:ab:a9:da:b6:11:dc: 20:d1:e9:05:bf:d2:73:58:08:91:3f:d1:3f:66:c3: db:1e:a1:e9:1a:0a:84:e2:c3:82:69:fe:10:30:f2: 1e:a6:13:8d:33:b6:d6:41:05:e1:4e:b7:66:53:e7: f9:81:47:21:8a:5a:10:b9:b4:e8:9b:46:ea:3f:a3: 3f:77:9a:9d:97:2f:8b:a4:49:15:79:5d:ec:af:8f: c1:17:71:cc:fe:96:54:bd:d1:bb:2d:f6:39:a5:c0: ed:a9:02:d0:24:aa:77:bd:60:8e:73:90:c7:58:87: 34:2d:6d:5e:d5:a0:fd:54:3a:16:86:26:1f:ff:08: 99:5b:32:5d:1b:ed:e7:42:70:7f:66:b2:e0:d8:06: 7e:8f:d3:15:7d:6d:93:21:ee:3c:38:b7:52:df:86: 28:b2:4c:0e:8a:3e:b5:a3:bd:57:9d:28:dd:b0:a0: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:75:4F:77:B3:FE:D0:76:56:6B:51:C4:9B:1B:47:2C:EB:97:90 X509v3 Authority Key Identifier: keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2a:19:a9:e7:35:bf:08:46:40:6b:d0:d6:19:8f:4d:56:0e: b9:8e:77:98:8a:9d:83:d1:0f:1d:59:97:fd:71:6f:99:c1:d3: 85:ce:ae:ab:ad:09:54:81:88:ca:3b:cd:45:21:00:3f:7b:37: 8e:d3:10:62:ae:1c:95:a6:e9:59:6e:27:15:37:55:88:6e:38: c1:0e:88:49:4f:ea:97:08:88:22:ca:06:1c:47:7a:cc:1a:17: 93:d2:53:74:78:41:96:4f:5f:60:84:5c:61:41:d9:f1:2c:8f: 05:3f:99:5a:1a:06:58:46:68:8f:74:14:f8:e5:68:10:58:59: ee:22:20:b1:8c:82:49:8c:50:8a:73:78:ef:e0:cd:2c:f3:8a: 97:f8:21:54:c1:2b:29:b7:77:e7:51:dc:91:ae:96:f3:4b:ae: 2e:30:69:55:3c:07:0d:29:61:b9:1b:ad:55:7c:a0:67:d4:37: 1b:c0:05:58:f8:4f:15:a0:ba:df:0f:04:8d:ce:52:ab:75:86: 6e:bb:d7:fd:5e:72:03:d7:4d:41:95:4e:df:28:5e:b9:32:b1: 76:df:55:83:6e:ec:a1:bc:13:4b:38:9d:7d:33:94:83:96:7d: 69:0a:33:76:e3:08:9d:01:81:93:f9:87:e3:7a:34:da:46:0c: 15:5b:86:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kApyCMcK/02yKuBSW783MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1 NTFkMzcwHhcNMjUxMjIwMDcwMTE2WhcNMjUxMjIxMDcwMTE2WjAzMTEwLwYDVQQD EygzMmViNzU0Zjc3YjNmZWQwNzY1NjZiNTFjNDliMWI0NzJjZWI5NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDuDSTIFoB3PYayd6/XHWNBUkNt ZG7piRP3tHrqhwtQNUXyrNUCq7jfWyqo42vU637jfdzjJCa+RUrAge6PR7YudCaw PUL+KzLdw2ZLm/C5pX+rqdq2Edwg0ekFv9JzWAiRP9E/ZsPbHqHpGgqE4sOCaf4Q MPIephONM7bWQQXhTrdmU+f5gUchiloQubTom0bqP6M/d5qdly+LpEkVeV3sr4/B F3HM/pZUvdG7LfY5pcDtqQLQJKp3vWCOc5DHWIc0LW1e1aD9VDoWhiYf/wiZWzJd G+3nQnB/ZrLg2AZ+j9MVfW2TIe48OLdS34YoskwOij61o71XnSjdsKDjTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLrdU93s/7QdlZrUcSbG0cs65eQMB8GA1UdIwQY MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyoZqec1 vwhGQGvQ1hmPTVYOuY53mIqdg9EPHVmX/XFvmcHThc6uq60JVIGIyjvNRSEAP3s3 jtMQYq4clabpWW4nFTdViG44wQ6ISU/qlwiIIsoGHEd6zBoXk9JTdHhBlk9fYIRc YUHZ8SyPBT+ZWhoGWEZoj3QU+OVoEFhZ7iIgsYyCSYxQinN47+DNLPOKl/ghVMEr Kbd351Hcka6W80uuLjBpVTwHDSlhuRutVXygZ9Q3G8AFWPhPFaC63w8Ejc5Sq3WG brvX/V5yA9dNQZVO3yheuTKxdt9Vg27sobwTSzidfTOUg5Z9aQozduMInQGBk/mH 43o02kYMFVuGAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:56 2025 by rpki-client