This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft File: uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json) Hash identifier: 2V7flEhcQld/eEg4/8hIGpPlxqwJCz+QNn/gEg7eMD4= Subject key identifier: B4:99:1C:39:16:CD:08:54:08:0D:47:A5:42:66:3B:AA:C4:D1:BB:9B Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5 Certificate issuer: /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5 Certificate serial: 019B4C5F0A557720F1B5DD099352E074FEA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft Manifest number: 1799 Signing time: Tue 23 Dec 2025 18:00:55 +0000 Manifest this update: Tue 23 Dec 2025 18:00:55 +0000 Manifest next update: Wed 24 Dec 2025 18:00:55 +0000 Files and hashes: 1: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (hash: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=) 2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: 7FwoufELlavs2CMYFIN6oV8Y9PKXJvPmZYqVhmcvljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:0a:55:77:20:f1:b5:dd:09:93:52:e0:74:fe:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5 Validity Not Before: Dec 23 18:00:55 2025 GMT Not After : Dec 24 18:00:55 2025 GMT Subject: CN=b4991c3916cd0854080d47a542663baac4d1bb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:fa:2c:ac:87:66:b3:8c:88:69:a1:75:f3: 5d:fe:ce:24:20:60:6b:4f:5b:4a:70:b5:2d:e3:f5: 28:43:40:bf:2f:f4:63:8a:56:a8:03:9c:28:6b:10: c3:9a:b2:27:8d:d6:6c:68:83:c8:65:ba:df:98:a3: ae:5f:6a:92:24:25:a0:82:b0:b4:65:3c:9f:63:dd: b4:a6:1e:cb:69:85:01:c2:a0:54:b2:2f:7c:68:6d: 25:dd:a6:34:de:0f:3b:03:49:be:ac:2b:2c:1d:fa: 7a:ec:1d:44:f5:67:3d:22:83:31:9e:c0:3c:8d:14: a6:57:f8:50:4e:a2:64:56:6a:15:4b:2c:8a:c1:79: d5:b0:5e:ea:51:9b:6a:ff:f6:0c:1b:c6:b6:97:0b: 5e:5d:bf:ac:26:e2:91:f8:20:38:f5:e1:7f:a1:13: 8f:ed:e8:6b:e6:61:5a:eb:02:3c:d2:54:39:fa:af: 47:9f:5f:14:a6:7c:59:78:c2:d1:43:34:69:4c:87: d4:81:f4:09:91:7b:a4:7e:c0:42:57:1a:62:c4:28: 1c:41:3d:98:00:63:2a:27:aa:a0:43:93:aa:9e:89: 10:76:34:7e:a5:bc:66:6d:2d:9b:a3:8c:a5:b3:b2: 0a:17:f2:58:a7:53:df:8b:1b:8b:4d:d6:14:d0:15: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:1C:39:16:CD:08:54:08:0D:47:A5:42:66:3B:AA:C4:D1:BB:9B X509v3 Authority Key Identifier: keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:4b:01:eb:47:35:eb:88:ca:69:37:85:8a:a1:f3:ee:e1: 29:65:c1:3a:7b:86:9e:a2:56:d0:d5:f3:f0:67:dc:2c:15:13: 88:d0:50:d8:bf:04:ff:fd:76:12:be:2e:b2:f0:1b:34:b3:bb: 2d:61:91:42:72:51:26:95:ec:6a:6d:6c:71:03:9f:57:0c:09: 87:2d:8d:2b:1a:99:0d:96:db:7c:7f:dd:72:68:6a:e9:a7:6c: dc:f6:a5:d3:3a:56:28:09:a1:de:7d:3c:fe:43:2b:f2:19:7d: 6d:87:52:12:60:9b:31:ef:4e:6c:1c:34:fa:05:07:75:a9:98: 6c:ad:9b:df:46:bf:ef:72:de:c1:7e:d2:38:57:08:8d:e2:7a: c8:83:89:d5:c7:8d:83:0e:a7:40:16:79:0f:9d:1b:c6:5d:6b: 73:8a:ee:5c:98:98:d0:26:3e:9c:14:a1:ae:df:0b:ff:43:7e: 8f:35:04:30:17:cf:9d:2d:b1:a6:44:31:66:30:97:a1:ef:eb: 5b:09:12:30:5d:4a:5b:e7:25:4a:25:8d:30:c7:8a:27:1c:95: 18:12:1a:22:55:b8:8e:59:e0:c7:f6:b6:ea:ed:bd:82:f1:70: ba:f6:71:29:0d:a9:7b:05:e9:b1:23:2d:c0:1a:f3:ee:73:ee: 3e:b4:b0:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXwpVdyDxtd0Jk1LgdP6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzUxNTVkYjdmOTg1OWUwODRjMmVlOWJmOTZlODY4OTIw OWQzZDUwHhcNMjUxMjIzMTgwMDU1WhcNMjUxMjI0MTgwMDU1WjAzMTEwLwYDVQQD EyhiNDk5MWMzOTE2Y2QwODU0MDgwZDQ3YTU0MjY2M2JhYWM0ZDFiYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssL6LKyHZrOMiGmhdfNd/s4kIGBr T1tKcLUt4/UoQ0C/L/RjilaoA5woaxDDmrInjdZsaIPIZbrfmKOuX2qSJCWggrC0 ZTyfY920ph7LaYUBwqBUsi98aG0l3aY03g87A0m+rCssHfp67B1E9Wc9IoMxnsA8 jRSmV/hQTqJkVmoVSyyKwXnVsF7qUZtq//YMG8a2lwteXb+sJuKR+CA49eF/oROP 7ehr5mFa6wI80lQ5+q9Hn18UpnxZeMLRQzRpTIfUgfQJkXukfsBCVxpixCgcQT2Y AGMqJ6qgQ5OqnokQdjR+pbxmbS2bo4yls7IKF/JYp1PfixuLTdYU0BWR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSZHDkWzQhUCA1HpUJmO6rE0bubMB8GA1UdIwQY MBaAFLjFFV23+YWeCEwu6b+W6GiSCdPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjkt YzY4YTY4ZThhMjM0LzEvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjktYzY4YTY4ZThhMjM0 LzEvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntpLAetH NeuIymk3hYqh8+7hKWXBOnuGnqJW0NXz8GfcLBUTiNBQ2L8E//12Er4usvAbNLO7 LWGRQnJRJpXsam1scQOfVwwJhy2NKxqZDZbbfH/dcmhq6ads3Pal0zpWKAmh3n08 /kMr8hl9bYdSEmCbMe9ObBw0+gUHdamYbK2b30a/73LewX7SOFcIjeJ6yIOJ1ceN gw6nQBZ5D50bxl1rc4ruXJiY0CY+nBShrt8L/0N+jzUEMBfPnS2xpkQxZjCXoe/r WwkSMF1KW+clSiWNMMeKJxyVGBIaIlW4jlngx/a26u29gvFwuvZxKQ2pewXpsSMt wBrz7nPuPrSwlA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:28 2025 by rpki-client