This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json) Hash identifier: w8ZR1gyiJtQutfjbraLM1ocfTHRqvUdSG8Gj5dooRE0= Subject key identifier: 87:01:A2:23:D7:75:1C:58:EF:BF:91:AB:D8:A7:7E:7D:F5:5A:3D:CD Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580 Certificate serial: 019B4A026A1CA7A9E8446D7931125162A02F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft Manifest number: 0C07 Signing time: Tue 23 Dec 2025 07:00:30 +0000 Manifest this update: Tue 23 Dec 2025 07:00:30 +0000 Manifest next update: Wed 24 Dec 2025 07:00:30 +0000 Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=) 2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: sByze9+OX+oK4n1g/rOWC0RcYGv5VcwGh38ThlNbPv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:6a:1c:a7:a9:e8:44:6d:79:31:12:51:62:a0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580 Validity Not Before: Dec 23 07:00:30 2025 GMT Not After : Dec 24 07:00:30 2025 GMT Subject: CN=8701a223d7751c58efbf91abd8a77e7df55a3dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:0c:40:27:87:2d:63:78:bf:e6:d9:74:6a: a3:e3:c9:02:a2:80:f9:a3:ed:73:4e:48:6f:b3:a9: b0:02:9f:b8:f0:3b:60:d4:82:da:4a:30:e3:22:16: 67:5b:18:9a:58:06:66:67:a9:d9:e7:58:d1:a1:ba: f4:85:54:74:70:65:99:2b:e9:6b:cf:88:96:14:aa: 5f:a8:9b:0a:4e:ed:34:10:82:17:d2:96:73:f4:0d: 0f:7c:39:34:fd:0f:a4:07:7e:39:4c:29:fa:59:70: f3:78:d0:3e:9d:96:8d:a4:e2:97:7b:64:76:63:7a: 51:dc:74:27:2c:c7:59:fd:4d:f4:d8:84:8c:03:01: 62:19:a6:1e:7c:10:8a:70:13:f6:70:7e:0d:7b:92: 7e:f4:26:e9:32:fa:36:4b:a7:ab:f9:48:c8:10:48: 6d:57:e0:2c:ba:2c:3c:69:e7:06:60:62:a6:33:1e: 6d:da:50:97:be:04:5c:e4:23:ab:bd:25:2f:78:1f: b8:df:1b:73:04:23:d6:6b:b8:9f:40:3d:82:ad:2f: 1b:5f:f7:4d:66:23:b8:5b:db:86:3e:95:1a:e8:a8: a4:f8:01:b9:14:5a:2a:bb:d2:e2:08:6e:f6:47:22: 52:91:9e:eb:7f:69:3b:92:fc:dc:f1:47:37:9a:65: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:A2:23:D7:75:1C:58:EF:BF:91:AB:D8:A7:7E:7D:F5:5A:3D:CD X509v3 Authority Key Identifier: keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:12:ca:bb:d6:ad:e6:06:52:46:0e:d3:b0:b7:6b:3a:cf:d0: c9:ba:ed:49:0a:13:71:e4:c7:9e:ed:56:9d:95:6c:90:7a:4b: f2:8f:38:d5:54:07:5e:6c:e3:6e:99:26:f3:ac:50:f9:be:72: b4:61:0f:6f:2b:d2:7f:a9:3c:8b:9c:d8:29:b0:a6:81:d6:79: f9:d6:f4:09:55:5f:f5:56:32:d9:06:96:ed:1b:e6:3f:1c:0b: f1:60:31:2e:d2:2c:db:9d:ee:fb:86:41:f4:3c:b0:3b:c8:8e: ae:ef:97:8e:94:74:fa:36:7f:b9:1d:35:98:71:94:66:e6:d8: e7:d3:a9:10:d5:4d:7b:0b:6f:50:e4:d7:c9:d2:31:60:68:24: 41:20:4e:78:3a:86:ff:68:2e:92:6b:4b:b7:61:3a:0e:47:5b: 3d:8a:d5:ff:b1:d6:34:c6:89:61:ad:ed:e1:0c:5e:7f:4f:69: 19:5f:96:0f:74:a3:0e:ee:e3:f2:d1:1e:58:cf:7a:e9:47:71: fa:25:6f:6b:41:66:a2:91:d9:11:4f:29:8d:35:32:64:45:e8: 33:08:43:af:9b:cb:2c:23:b6:48:07:94:72:80:dd:b4:74:99: da:63:2f:d7:0c:7a:20:43:64:f0:9c:e7:a2:8b:f4:cd:39:2f: a9:6b:0f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAmocp6noRG15MRJRYqAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz NmE1ODAwHhcNMjUxMjIzMDcwMDMwWhcNMjUxMjI0MDcwMDMwWjAzMTEwLwYDVQQD Eyg4NzAxYTIyM2Q3NzUxYzU4ZWZiZjkxYWJkOGE3N2U3ZGY1NWEzZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5YMQCeHLWN4v+bZdGqj48kCooD5 o+1zTkhvs6mwAp+48Dtg1ILaSjDjIhZnWxiaWAZmZ6nZ51jRobr0hVR0cGWZK+lr z4iWFKpfqJsKTu00EIIX0pZz9A0PfDk0/Q+kB345TCn6WXDzeNA+nZaNpOKXe2R2 Y3pR3HQnLMdZ/U302ISMAwFiGaYefBCKcBP2cH4Ne5J+9CbpMvo2S6er+UjIEEht V+Asuiw8aecGYGKmMx5t2lCXvgRc5COrvSUveB+43xtzBCPWa7ifQD2CrS8bX/dN ZiO4W9uGPpUa6Kik+AG5FFoqu9LiCG72RyJSkZ7rf2k7kvzc8Uc3mmWG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcBoiPXdRxY77+Rq9infn31Wj3NMB8GA1UdIwQY MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt ODUyN2M5YjNlNzVmLzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxLKu9at 5gZSRg7TsLdrOs/QybrtSQoTceTHnu1WnZVskHpL8o841VQHXmzjbpkm86xQ+b5y tGEPbyvSf6k8i5zYKbCmgdZ5+db0CVVf9VYy2QaW7RvmPxwL8WAxLtIs253u+4ZB 9DywO8iOru+XjpR0+jZ/uR01mHGUZubY59OpENVNewtvUOTXydIxYGgkQSBOeDqG /2gukmtLt2E6DkdbPYrV/7HWNMaJYa3t4Qxef09pGV+WD3SjDu7j8tEeWM966Udx +iVva0FmopHZEU8pjTUyZEXoMwhDr5vLLCO2SAeUcoDdtHSZ2mMv1wx6IENk8Jzn oov0zTkvqWsPOg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:59 2025 by rpki-client