This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json) Hash identifier: UMjdJHT9y4P1eAnRAacz2kF2UL2GUKPO30MwGd/rO38= Subject key identifier: BA:F6:8B:46:05:94:30:E2:65:86:50:D7:C5:99:D9:4D:F7:BB:59:88 Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8 Certificate serial: 019B397D30AF0BA6B7C381E4CF27C99C6E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 02:01:04 +0000 Manifest this update: Sat 20 Dec 2025 02:01:04 +0000 Manifest next update: Sun 21 Dec 2025 02:01:04 +0000 Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=) 2: ft2mxf9aaNoul-AnIThMbBr-lps.roa (hash: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=) 3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: Ek1VK8vXZiF2KhraXqBQIrzPxGqKafHBK4pM7XpikEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:30:af:0b:a6:b7:c3:81:e4:cf:27:c9:9c:6e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8 Validity Not Before: Dec 20 02:01:04 2025 GMT Not After : Dec 21 02:01:04 2025 GMT Subject: CN=baf68b46059430e2658650d7c599d94df7bb5988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:0a:80:ef:47:b2:f0:d9:f7:77:7d:c3:a2: 57:08:79:0b:47:fd:2e:c3:ad:b4:c0:89:14:94:bc: fa:45:ef:a4:8f:16:ab:36:4d:fc:4a:ec:8c:5b:c9: d7:b1:a3:30:f0:36:05:bc:da:0f:88:5a:40:23:e7: ca:8a:68:16:a1:90:65:bf:ff:6e:d5:d8:b5:7c:75: 8f:e4:b2:b8:6a:65:e9:40:57:f1:ff:47:3f:9b:c9: 03:ab:37:58:f4:57:81:7f:a8:0d:34:58:5c:a1:d5: a8:7d:03:ed:61:ef:1d:90:1f:04:a0:36:cb:f1:90: ea:7f:92:28:f8:91:37:ca:5b:ba:4d:09:32:eb:57: 3f:47:60:9f:a3:04:a2:74:28:46:ab:9a:8c:26:1f: 73:87:2a:ca:89:24:b4:27:1e:d8:ad:66:c4:88:e7: 66:f2:95:ab:77:25:d5:52:5c:6e:b1:f3:ba:7f:fe: 6c:58:ce:e3:55:dd:be:0b:8b:b8:80:0a:be:2c:d7: c8:d7:3f:8c:6c:a0:e2:d9:d4:72:31:f3:54:00:84: 32:68:5b:1d:14:0f:77:7c:53:e6:5c:4f:dc:95:a2: 2c:67:65:14:ca:98:fd:8f:76:54:13:49:3f:46:ad: c7:42:fb:e2:bb:fb:71:b7:28:32:96:31:50:fc:10: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:8B:46:05:94:30:E2:65:86:50:D7:C5:99:D9:4D:F7:BB:59:88 X509v3 Authority Key Identifier: keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3f:92:eb:84:97:c2:11:7d:33:c1:6a:54:84:fa:74:bb:a1: 35:f8:84:ca:e2:9e:04:01:c1:a5:f7:52:0a:91:7d:bf:a2:be: 23:df:ca:b5:c2:82:88:80:82:08:b6:e9:1a:89:80:3b:01:0d: 10:35:0e:d0:50:c2:2b:8a:bb:4b:34:14:c7:15:b0:18:55:04: d6:e2:f2:75:66:1b:13:64:69:b3:cd:f6:03:73:59:9b:76:77: 9f:7b:7f:49:7c:cf:8e:98:46:32:5e:9a:17:a5:f1:39:66:68: 01:8b:3f:a7:78:b3:4e:67:33:2c:9a:5e:7e:ef:15:ad:12:79: bd:ae:00:27:8c:c2:0c:f1:73:dc:1b:93:33:e9:75:3a:b9:ed: 7a:32:1b:d0:7c:ac:87:d4:9e:83:db:07:36:e8:ed:22:ab:20: f1:a4:dd:3e:55:9c:ac:9e:45:90:4c:2a:e2:fa:c9:38:25:fd: 1c:08:45:a8:e2:d8:6e:99:64:23:e9:5e:c9:2b:90:07:85:ce: 75:b8:ea:cd:34:24:75:fb:df:0f:b1:e5:9a:21:20:f7:f5:36: f0:bd:74:ca:91:f6:62:24:3d:67:56:e1:d0:e3:8f:90:28:d2: 79:0e:bd:1a:17:c0:4b:51:f6:f5:df:46:03:db:ce:f8:6f:c4: 78:0e:59:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTCvC6a3w4HkzyfJnG4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2I3NjY5Njg3MTYyOTZlNWJiYTBiY2U4Mzg1NmFlNzE2 NWI4YjgwHhcNMjUxMjIwMDIwMTA0WhcNMjUxMjIxMDIwMTA0WjAzMTEwLwYDVQQD EyhiYWY2OGI0NjA1OTQzMGUyNjU4NjUwZDdjNTk5ZDk0ZGY3YmI1OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAYKgO9HsvDZ93d9w6JXCHkLR/0u w620wIkUlLz6Re+kjxarNk38SuyMW8nXsaMw8DYFvNoPiFpAI+fKimgWoZBlv/9u 1di1fHWP5LK4amXpQFfx/0c/m8kDqzdY9FeBf6gNNFhcodWofQPtYe8dkB8EoDbL 8ZDqf5Io+JE3ylu6TQky61c/R2CfowSidChGq5qMJh9zhyrKiSS0Jx7YrWbEiOdm 8pWrdyXVUlxusfO6f/5sWM7jVd2+C4u4gAq+LNfI1z+MbKDi2dRyMfNUAIQyaFsd FA93fFPmXE/claIsZ2UUypj9j3ZUE0k/Rq3HQvviu/txtygyljFQ/BBaLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr2i0YFlDDiZYZQ18WZ2U33u1mIMB8GA1UdIwQY MBaAFLh7dmlocWKW5bugvOg4Vq5xZbi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMt M2Q2MTJmMzI0OTk2LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMtM2Q2MTJmMzI0OTk2 LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD+S64SX whF9M8FqVIT6dLuhNfiEyuKeBAHBpfdSCpF9v6K+I9/KtcKCiICCCLbpGomAOwEN EDUO0FDCK4q7SzQUxxWwGFUE1uLydWYbE2Rps832A3NZm3Z3n3t/SXzPjphGMl6a F6XxOWZoAYs/p3izTmczLJpefu8VrRJ5va4AJ4zCDPFz3BuTM+l1OrntejIb0Hys h9Seg9sHNujtIqsg8aTdPlWcrJ5FkEwq4vrJOCX9HAhFqOLYbplkI+leySuQB4XO dbjqzTQkdfvfD7HlmiEg9/U28L10ypH2YiQ9Z1bh0OOPkCjSeQ69GhfAS1H29d9G A9vO+G/EeA5Zfg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:26:45 2025 by rpki-client