This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json) Hash identifier: PNQlKVndqKR5g0Bm4VlSq/RNVesXjMzz3jWBINc3EJg= Subject key identifier: 16:8D:95:E7:C4:5A:5C:A1:0A:86:62:A4:2F:72:19:D5:3F:99:11:A2 Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Certificate serial: 019B3C10820EF67DF46AA5087B9A0BD537D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=) 2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=) 3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: lR9zMyBaCzMhVSoFwM6wooJ6Bz1KAVlywl/AmfrvS18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:82:0e:f6:7d:f4:6a:a5:08:7b:9a:0b:d5:37:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=168d95e7c45a5ca10a8662a42f7219d53f9911a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:c3:4e:93:43:93:8c:aa:75:79:b8:0f:25: 5d:f5:18:93:3e:cf:ee:58:35:89:9d:bb:d8:f1:b0: 86:ce:9a:7f:86:37:eb:dc:b1:4c:50:c4:f5:99:48: 05:6c:f3:1d:67:c6:bc:e3:33:ba:53:e0:b6:74:97: 76:a6:5a:80:e8:3c:62:2c:bf:fa:1a:1c:20:55:bd: 6f:95:d7:a3:75:13:01:68:7f:df:30:04:0c:83:70: 49:d6:f4:8c:ba:b6:3d:b7:00:86:9f:df:2c:dc:90: 39:c4:b0:e8:c9:03:a8:c4:96:a6:2a:d2:4a:44:dd: 17:d1:27:15:86:80:dd:97:e8:dc:32:d3:fe:fa:55: 3c:f6:97:8e:40:43:4f:d4:e4:74:1e:90:11:37:57: a6:e0:d7:d8:49:f3:ae:f6:3a:5a:30:fc:1e:1e:1f: eb:77:35:b9:0c:ed:c2:53:86:dc:c1:81:61:9f:b9: 0b:15:42:05:2d:f6:15:de:3b:73:f2:2b:1e:b1:31: 64:07:fd:09:99:ad:65:e6:82:37:ce:cb:6e:e9:0c: e9:93:31:53:66:b1:a0:1a:2c:f1:59:f2:4e:35:b3: 20:00:7f:5a:1d:d2:28:5b:eb:85:b3:09:5a:73:d2: 90:a3:35:02:f0:1e:f0:ea:48:d3:40:d2:b4:03:75: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:95:E7:C4:5A:5C:A1:0A:86:62:A4:2F:72:19:D5:3F:99:11:A2 X509v3 Authority Key Identifier: keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2f:49:84:49:23:ce:93:f4:fe:14:65:18:21:1c:a3:22:d7: 66:bc:60:2a:80:5b:dc:ee:19:99:fd:8c:e3:c2:00:a2:2f:e0: d2:a9:3f:03:56:2e:8e:fb:a2:b1:39:d2:6f:1d:1f:a0:d9:dc: c8:60:ec:90:ed:d4:97:9a:e1:3f:57:32:12:cc:1a:e7:8c:58: 6b:9f:7c:de:0a:cd:ee:d2:a3:00:03:7e:d9:81:51:e0:61:e4: 2b:88:11:20:90:14:8e:f2:c1:58:7d:36:e3:40:3c:d5:55:1e: 70:e0:19:06:96:cb:28:39:d7:9c:98:62:b4:b2:c0:7b:19:fd: a9:64:28:1a:12:5f:b7:15:8d:f2:6e:c6:f1:a4:aa:2f:1d:97: b9:c2:0d:c4:08:d6:dd:c9:0c:4b:d3:2b:dd:61:5c:9c:65:ff: c8:02:b8:32:26:19:69:e4:8f:4b:1a:84:74:1f:e4:9c:b2:be: 51:a5:84:00:d8:00:70:a3:b3:7b:c4:81:b3:e4:ca:b0:2b:02: b1:40:33:6f:97:33:33:c5:50:0a:a6:4d:9d:0e:b8:12:af:d1: c9:c9:5e:78:a6:13:31:cf:96:52:d0:52:d4:df:65:7b:e6:6a: e1:c8:3f:3f:d2:4a:cd:5e:b7:fe:22:5f:19:18:99:9a:7e:0f: fc:6d:9d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIIO9n30aqUIe5oL1TfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4 NzI4NWQwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD EygxNjhkOTVlN2M0NWE1Y2ExMGE4NjYyYTQyZjcyMTlkNTNmOTkxMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdvDTpNDk4yqdXm4DyVd9RiTPs/u WDWJnbvY8bCGzpp/hjfr3LFMUMT1mUgFbPMdZ8a84zO6U+C2dJd2plqA6DxiLL/6 GhwgVb1vldejdRMBaH/fMAQMg3BJ1vSMurY9twCGn98s3JA5xLDoyQOoxJamKtJK RN0X0ScVhoDdl+jcMtP++lU89peOQENP1OR0HpARN1em4NfYSfOu9jpaMPweHh/r dzW5DO3CU4bcwYFhn7kLFUIFLfYV3jtz8isesTFkB/0Jma1l5oI3zstu6QzpkzFT ZrGgGizxWfJONbMgAH9aHdIoW+uFswlac9KQozUC8B7w6kjTQNK0A3UQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaNlefEWlyhCoZipC9yGdU/mRGiMB8GA1UdIwQY MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy9JhEkj zpP0/hRlGCEcoyLXZrxgKoBb3O4Zmf2M48IAoi/g0qk/A1YujvuisTnSbx0foNnc yGDskO3Ul5rhP1cyEswa54xYa5983grN7tKjAAN+2YFR4GHkK4gRIJAUjvLBWH02 40A81VUecOAZBpbLKDnXnJhitLLAexn9qWQoGhJftxWN8m7G8aSqLx2XucINxAjW 3ckMS9Mr3WFcnGX/yAK4MiYZaeSPSxqEdB/knLK+UaWEANgAcKOze8SBs+TKsCsC sUAzb5czM8VQCqZNnQ64Eq/RycleeKYTMc+WUtBS1N9le+Zq4cg/P9JKzV63/iJf GRiZmn4P/G2dFA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:03 2025 by rpki-client