This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json) Hash identifier: C/4Te8sFfxLF8f9bmmun2ToX1ifIsCUEJqvQN7Bo52I= Subject key identifier: 47:64:BF:BA:4C:D6:98:E4:3E:2C:D9:7B:BA:75:F6:1E:A5:E8:B7:10 Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Certificate serial: 019B3A2236CEB4D5E259715F8A4708529CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft Manifest number: 04B1 Signing time: Sat 20 Dec 2025 05:01:19 +0000 Manifest this update: Sat 20 Dec 2025 05:01:19 +0000 Manifest next update: Sun 21 Dec 2025 05:01:19 +0000 Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=) 2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=) 3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=) 4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=) 5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: Ewx9QpDgUJppZMpp2o1pFpWZrPql2pkFJ4LGAJ3ZRPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:36:ce:b4:d5:e2:59:71:5f:8a:47:08:52:9c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7 Validity Not Before: Dec 20 05:01:19 2025 GMT Not After : Dec 21 05:01:19 2025 GMT Subject: CN=4764bfba4cd698e43e2cd97bba75f61ea5e8b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:3a:cc:62:db:a7:8e:2a:38:3f:cc:b5:50: 32:44:16:f9:ed:a3:54:1d:10:c2:11:0d:83:31:6e: f8:eb:78:bd:ca:de:4a:48:30:db:cc:f5:a3:c3:8b: 48:13:0a:79:fa:dd:90:23:4e:c3:94:ab:9e:66:fc: dd:1a:bf:f9:54:48:67:63:b8:fb:cc:5d:8f:14:3b: a4:5f:e8:23:b2:49:a9:7f:e8:01:11:4e:6b:d1:12: 6e:45:0a:4e:a9:a8:a0:4e:df:d6:7c:27:a9:a4:86: d7:7d:d3:56:d6:ea:ce:2d:61:1f:2d:bb:86:a3:87: 4c:b1:b5:42:22:29:7d:2d:50:f8:cc:f2:3d:24:eb: 40:be:b6:d6:93:4a:85:9c:6f:41:a7:4a:fc:c2:34: dc:fc:15:1f:08:fb:5a:a9:81:1e:5e:f3:e5:5c:d9: 49:30:cd:2a:93:ca:00:9e:86:f5:d2:0a:9e:0d:c1: 35:d6:c1:e3:a9:2d:20:ee:76:d4:f5:61:8b:76:49: d2:c9:08:77:3c:b5:65:df:cd:69:36:27:05:f6:a9: bd:fe:60:ab:84:2d:bc:85:05:dc:79:7c:2c:26:98: 97:73:14:ac:6a:56:d5:26:c0:1e:a2:33:8b:13:ac: 0d:22:62:91:9f:6b:a7:50:d5:35:97:57:60:18:19: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:BF:BA:4C:D6:98:E4:3E:2C:D9:7B:BA:75:F6:1E:A5:E8:B7:10 X509v3 Authority Key Identifier: keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a8:35:c1:ea:a7:0b:d9:6f:2f:ba:87:38:f0:f6:ec:4d:e1: 22:76:29:63:31:25:9c:7e:d2:ec:da:ff:2a:e3:e4:9d:65:00: cf:c6:b4:0a:77:65:1d:e2:e9:b7:5b:26:4d:ba:cf:11:be:09: 26:8d:c7:f4:ea:8c:f1:b8:e6:45:6f:4b:78:53:8b:0f:b2:d1: ef:6b:a9:df:2d:13:c1:48:f3:0d:3d:f5:a5:2f:41:45:72:36: 45:b0:47:3e:60:7f:9f:39:2b:73:fa:ec:28:76:9f:63:3b:f2: 39:90:c6:69:53:ca:4c:a0:a1:8a:d4:64:29:14:e4:52:08:96: ba:7c:27:b0:56:72:f5:c0:cb:f3:a6:17:77:0c:76:58:8d:c5: 8e:a6:ed:d9:1e:e1:86:bb:ac:83:b9:85:7d:bb:8d:58:58:a4: 68:23:45:a3:11:be:41:ec:7c:31:c3:a2:53:39:d1:26:2f:88: 68:02:2b:9c:7d:07:e8:71:e3:27:3a:c3:c7:d6:e0:9c:6d:2c: d3:70:97:5f:88:15:01:2c:6a:e2:a1:7f:41:08:09:ff:0b:5a: 5c:e2:d3:f3:b6:ae:55:f9:69:41:95:c4:bf:09:60:0d:a2:c6: 39:7e:5d:f3:3f:bb:6e:be:ed:d4:8c:6d:57:13:1e:43:2d:ea: 30:37:3f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjbOtNXiWXFfikcIUpy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz ODg1ZTcwHhcNMjUxMjIwMDUwMTE5WhcNMjUxMjIxMDUwMTE5WjAzMTEwLwYDVQQD Eyg0NzY0YmZiYTRjZDY5OGU0M2UyY2Q5N2JiYTc1ZjYxZWE1ZThiNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXg6zGLbp44qOD/MtVAyRBb57aNU HRDCEQ2DMW7463i9yt5KSDDbzPWjw4tIEwp5+t2QI07DlKueZvzdGr/5VEhnY7j7 zF2PFDukX+gjskmpf+gBEU5r0RJuRQpOqaigTt/WfCeppIbXfdNW1urOLWEfLbuG o4dMsbVCIil9LVD4zPI9JOtAvrbWk0qFnG9Bp0r8wjTc/BUfCPtaqYEeXvPlXNlJ MM0qk8oAnob10gqeDcE11sHjqS0g7nbU9WGLdknSyQh3PLVl381pNicF9qm9/mCr hC28hQXceXwsJpiXcxSsalbVJsAeojOLE6wNImKRn2unUNU1l1dgGBkCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdkv7pM1pjkPizZe7p19h6l6LcQMB8GA1UdIwQY MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3 LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6g1weqn C9lvL7qHOPD27E3hInYpYzElnH7S7Nr/KuPknWUAz8a0CndlHeLpt1smTbrPEb4J Jo3H9OqM8bjmRW9LeFOLD7LR72up3y0TwUjzDT31pS9BRXI2RbBHPmB/nzkrc/rs KHafYzvyOZDGaVPKTKChitRkKRTkUgiWunwnsFZy9cDL86YXdwx2WI3Fjqbt2R7h hrusg7mFfbuNWFikaCNFoxG+Qex8McOiUznRJi+IaAIrnH0H6HHjJzrDx9bgnG0s 03CXX4gVASxq4qF/QQgJ/wtaXOLT87auVflpQZXEvwlgDaLGOX5d8z+7br7t1Ixt VxMeQy3qMDc/2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:09:45 2025 by rpki-client