This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json) Hash identifier: yvyDIQP7r6fwtDOulJDS0EMJb3hWTpEDXiS+zhrzx1g= Subject key identifier: BD:44:33:EF:AD:CA:6F:30:5A:0F:4F:A1:87:2A:93:34:0C:48:85:94 Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6 Certificate serial: 019B2B1DC4957A3462C0D71235B241E64735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 07:02:09 +0000 Manifest this update: Wed 17 Dec 2025 07:02:09 +0000 Manifest next update: Thu 18 Dec 2025 07:02:09 +0000 Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=) 2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=) 3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: //AF853kxxYQ8YbVSc6ShcE8kTgZPtZBYRwLfAJE0Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:c4:95:7a:34:62:c0:d7:12:35:b2:41:e6:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6 Validity Not Before: Dec 17 07:02:09 2025 GMT Not After : Dec 18 07:02:09 2025 GMT Subject: CN=bd4433efadca6f305a0f4fa1872a93340c488594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:83:76:df:04:9f:42:e1:40:78:38:c4:93: 7e:7a:b8:5d:56:dd:c3:78:08:52:34:a1:bc:a5:bc: 43:8a:d6:97:3b:39:cd:4b:4e:e9:30:63:9c:61:e2: fa:33:62:83:de:f4:b8:dc:09:64:df:83:49:b2:00: 89:f7:d7:53:40:fb:3f:77:92:df:1b:97:0a:ec:17: d0:3a:cf:38:64:77:4f:4d:14:7f:f1:74:ce:da:f6: d1:46:ed:38:f8:fc:58:bf:5a:46:b1:13:69:57:2e: 13:06:21:bf:17:ec:2c:f9:ca:fd:50:98:d3:09:c2: d0:f4:51:89:02:a4:7f:84:83:6c:43:9c:f1:07:d1: 9c:ef:f5:2e:32:c4:f8:be:8f:7f:cf:bd:08:48:91: 50:1b:9c:e3:28:36:2c:90:6b:7a:7a:d5:21:3e:f2: a5:1a:4e:c5:64:20:57:fd:89:93:15:92:be:33:8d: 6e:60:b3:92:98:08:f5:61:58:f1:34:72:fa:97:0e: fc:96:d0:e5:63:e2:76:6e:c2:64:d4:48:c7:1e:c2: 62:95:e6:7b:f1:82:7a:87:8f:dd:cc:23:05:cf:83: a2:3e:dd:9a:09:a8:43:d1:94:02:47:34:90:91:48: 7f:70:92:e4:8d:c0:a0:73:14:55:3e:f2:3e:5f:db: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:44:33:EF:AD:CA:6F:30:5A:0F:4F:A1:87:2A:93:34:0C:48:85:94 X509v3 Authority Key Identifier: keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:53:d0:70:72:ac:01:ad:fb:e0:f0:47:21:0f:67:be:a6: 3f:9d:d7:e8:0c:21:e3:b6:41:12:db:bd:e0:ed:32:25:e1:98: a4:a4:8d:b3:dc:39:e4:c7:82:c2:a5:68:3d:79:fd:90:26:b9: d3:e3:7f:b4:75:89:82:04:45:0c:d7:ec:14:04:d9:28:a7:85: 7f:20:97:80:f7:67:72:88:1f:47:26:a3:be:b6:c6:a4:df:45: 95:10:a9:c4:f9:ab:d5:6d:27:81:db:93:fb:59:fd:21:e7:d1: e3:7e:2d:0b:6b:7d:0a:fd:df:60:06:53:3e:cc:43:e0:26:13: f9:47:53:9e:b8:ad:90:1a:c9:0c:cf:ca:4d:b1:a8:07:4f:08: 0f:04:8b:ff:ae:1d:aa:bd:d1:ab:2f:74:be:74:32:ec:e9:3e: a6:be:9d:88:bf:04:0e:9c:e9:c6:7e:03:67:b4:02:3e:65:01: 96:90:aa:5c:2e:54:4a:13:6a:a0:e8:5f:93:5d:ba:49:5b:f6: c1:91:5e:32:fc:90:70:fd:e2:5c:8d:eb:61:1a:51:b7:ff:5f: 98:e2:b6:49:3c:9a:32:12:00:8c:98:9c:de:0b:2d:48:0e:14: 8c:0c:91:b2:49:ee:95:88:dc:26:fe:7a:f0:74:6d:51:e9:99: 95:57:3f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHcSVejRiwNcSNbJB5kc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWQyYzA3YzI4YWM3YjcyNmE4MjVkMzY5M2FmZTIzOTcy MDlkZTYwHhcNMjUxMjE3MDcwMjA5WhcNMjUxMjE4MDcwMjA5WjAzMTEwLwYDVQQD EyhiZDQ0MzNlZmFkY2E2ZjMwNWEwZjRmYTE4NzJhOTMzNDBjNDg4NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmDdt8En0LhQHg4xJN+erhdVt3D eAhSNKG8pbxDitaXOznNS07pMGOcYeL6M2KD3vS43Alk34NJsgCJ99dTQPs/d5Lf G5cK7BfQOs84ZHdPTRR/8XTO2vbRRu04+PxYv1pGsRNpVy4TBiG/F+ws+cr9UJjT CcLQ9FGJAqR/hINsQ5zxB9Gc7/UuMsT4vo9/z70ISJFQG5zjKDYskGt6etUhPvKl Gk7FZCBX/YmTFZK+M41uYLOSmAj1YVjxNHL6lw78ltDlY+J2bsJk1EjHHsJileZ7 8YJ6h4/dzCMFz4OiPt2aCahD0ZQCRzSQkUh/cJLkjcCgcxRVPvI+X9tVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1EM++tym8wWg9PoYcqkzQMSIWUMB8GA1UdIwQY MBaAFFIdLAfCise3Jqgl02k6/iOXIJ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjkt Y2FjZmI2N2JmZjlkLzEvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjktY2FjZmI2N2JmZjlk LzEvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPJT0HBy rAGt++DwRyEPZ76mP53X6Awh47ZBEtu94O0yJeGYpKSNs9w55MeCwqVoPXn9kCa5 0+N/tHWJggRFDNfsFATZKKeFfyCXgPdncogfRyajvrbGpN9FlRCpxPmr1W0ngduT +1n9IefR434tC2t9Cv3fYAZTPsxD4CYT+UdTnritkBrJDM/KTbGoB08IDwSL/64d qr3Rqy90vnQy7Ok+pr6diL8EDpzpxn4DZ7QCPmUBlpCqXC5UShNqoOhfk126SVv2 wZFeMvyQcP3iXI3rYRpRt/9fmOK2STyaMhIAjJic3gstSA4UjAyRsknulYjcJv56 8HRtUemZlVc/Vw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:49 2025 by rpki-client