This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json) Hash identifier: mC7S21QccsE04PwrdOFBvEbTfNz6hHwX6OGOzC3ODEc= Subject key identifier: 23:7C:4A:D7:D6:AB:83:F9:12:66:8B:FF:12:ED:CE:76:14:1E:46:D1 Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Certificate serial: 019B37FD022387AD5CA8290340D6447467F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft Manifest number: 0EAE Signing time: Fri 19 Dec 2025 19:01:26 +0000 Manifest this update: Fri 19 Dec 2025 19:01:26 +0000 Manifest next update: Sat 20 Dec 2025 19:01:26 +0000 Files and hashes: 1: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (hash: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=) 2: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=) 3: mj78j7-0AeevMahy3Oa3oEUR37o.roa (hash: GV37V8PynELJMOdG95g3RGrNY37XlDLhQkTKeFw+n+A=) 4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: 03gR0jvZCJgIBq5eySZuq35OiQKolWm2Gw5SUx4B+7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:02:23:87:ad:5c:a8:29:03:40:d6:44:74:67:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Validity Not Before: Dec 19 19:01:26 2025 GMT Not After : Dec 20 19:01:26 2025 GMT Subject: CN=237c4ad7d6ab83f912668bff12edce76141e46d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:fe:42:b9:b1:fa:d6:74:e9:92:41:37:ea: 9e:02:f3:d4:4d:2a:d7:32:68:0b:78:05:2f:d0:8c: 30:cc:ab:79:f6:8f:c9:6d:48:ca:8d:db:d6:eb:1f: f2:6b:0b:6c:e8:6f:c8:49:58:90:a9:7f:e0:f9:05: ce:64:8a:87:42:1e:46:9e:ff:d4:eb:23:be:5c:9f: 60:d1:58:d2:74:1c:a9:65:5d:3d:b0:f4:c0:e5:31: 81:1c:ae:bf:7d:d3:0d:eb:8c:08:dc:bb:6a:1e:cf: 84:77:dd:cf:6d:35:fa:10:42:7b:94:dc:95:26:e6: eb:5e:46:63:53:da:5d:15:77:ca:2f:30:65:6d:05: a0:e5:52:b2:59:08:fe:b2:d6:15:ef:95:ce:a7:07: fd:cf:f5:d8:e1:f1:d7:a2:97:c6:3d:ea:f2:8d:fa: 44:43:f8:93:79:30:2a:e5:eb:35:69:c6:06:eb:65: 9f:02:e5:51:fb:b6:af:a1:a4:d2:90:67:99:4e:a4: 7d:6b:6a:a7:2c:57:62:46:0d:da:af:66:a4:b0:b4: a5:e6:eb:81:a4:88:6b:58:d3:80:95:ba:0a:fc:d8: 47:8d:f0:ae:78:31:63:ae:55:de:bb:5c:3a:a8:5e: e1:40:78:ef:e7:47:1e:e7:82:99:d1:7a:79:4b:02: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:4A:D7:D6:AB:83:F9:12:66:8B:FF:12:ED:CE:76:14:1E:46:D1 X509v3 Authority Key Identifier: keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a9:ea:0e:f6:69:fc:ac:e8:c8:a8:2a:fa:98:11:fe:0a:16: a2:64:9c:12:d8:f6:11:f7:70:87:d4:d4:5b:c2:53:03:25:ee: 9d:82:06:d5:c2:85:f1:a6:e2:e9:d8:92:58:22:ed:31:d9:cc: d2:a6:64:d7:af:64:b8:d0:2a:30:dd:58:00:34:09:21:d8:bf: 63:63:3b:93:74:b6:4d:d4:c1:21:6e:ce:c3:18:b5:79:00:e8: 1a:73:19:71:32:f7:c4:86:ae:ad:b7:ca:c7:a8:a8:ec:96:3e: a9:d1:e8:14:98:5b:21:a3:e2:62:bc:22:b8:89:7d:85:14:32: a3:9e:d1:ab:2c:d4:f5:b8:b8:79:6b:b2:47:66:55:b6:ca:f2: fb:63:90:8f:3d:47:71:fe:6f:b1:66:0c:e4:bb:54:d6:29:38: 98:d7:b2:99:fa:48:01:36:2f:9e:a4:3f:3f:ae:38:e6:ca:06: 7e:8b:88:ac:b6:04:b7:7f:ba:9d:d8:bd:1b:87:45:25:d7:69: cc:cc:06:6c:4a:90:e4:f6:cd:73:6e:e3:52:fe:26:19:49:b7: 60:5a:c2:92:e0:59:95:c9:9d:26:7b:bf:fd:dc:f3:dc:0b:11: ed:00:fd:7d:21:9b:fa:68:f8:c3:a4:f2:3b:7f:2e:ac:12:36: f0:b8:46:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/QIjh61cqCkDQNZEdGf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx M2RiZTQwHhcNMjUxMjE5MTkwMTI2WhcNMjUxMjIwMTkwMTI2WjAzMTEwLwYDVQQD EygyMzdjNGFkN2Q2YWI4M2Y5MTI2NjhiZmYxMmVkY2U3NjE0MWU0NmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDD+Qrmx+tZ06ZJBN+qeAvPUTSrX MmgLeAUv0IwwzKt59o/JbUjKjdvW6x/yawts6G/ISViQqX/g+QXOZIqHQh5Gnv/U 6yO+XJ9g0VjSdBypZV09sPTA5TGBHK6/fdMN64wI3LtqHs+Ed93PbTX6EEJ7lNyV JubrXkZjU9pdFXfKLzBlbQWg5VKyWQj+stYV75XOpwf9z/XY4fHXopfGPeryjfpE Q/iTeTAq5es1acYG62WfAuVR+7avoaTSkGeZTqR9a2qnLFdiRg3ar2aksLSl5uuB pIhrWNOAlboK/NhHjfCueDFjrlXeu1w6qF7hQHjv50ce54KZ0Xp5SwIbfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN8StfWq4P5EmaL/xLtznYUHkbRMB8GA1UdIwQY MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0 LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6nqDvZp /KzoyKgq+pgR/goWomScEtj2Efdwh9TUW8JTAyXunYIG1cKF8abi6diSWCLtMdnM 0qZk169kuNAqMN1YADQJIdi/Y2M7k3S2TdTBIW7Owxi1eQDoGnMZcTL3xIaurbfK x6io7JY+qdHoFJhbIaPiYrwiuIl9hRQyo57RqyzU9bi4eWuyR2ZVtsry+2OQjz1H cf5vsWYM5LtU1ik4mNeymfpIATYvnqQ/P6445soGfouIrLYEt3+6ndi9G4dFJddp zMwGbEqQ5PbNc27jUv4mGUm3YFrCkuBZlcmdJnu//dzz3AsR7QD9fSGb+mj4w6Ty O38urBI28LhGHg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:52:02 2025 by rpki-client