This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json) Hash identifier: lNklvAABYKsZdxa9yQOjmdrVDR/a9hZudXm2lu11acg= Subject key identifier: 3B:12:CE:A6:D1:53:9D:6E:1D:23:BD:09:48:4F:B3:0D:B4:62:9F:33 Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9 Certificate serial: 019B3F115717A901F0D47788970F63F7BC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft Manifest number: 1502 Signing time: Sun 21 Dec 2025 04:00:59 +0000 Manifest this update: Sun 21 Dec 2025 04:00:59 +0000 Manifest next update: Mon 22 Dec 2025 04:00:59 +0000 Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=) 2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 8iBoYgqwVs49e5F6z1n4fA6n8z7TNfQN6s8k3Uf5QaE=) 3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:57:17:a9:01:f0:d4:77:88:97:0f:63:f7:bc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9 Validity Not Before: Dec 21 04:00:59 2025 GMT Not After : Dec 22 04:00:59 2025 GMT Subject: CN=3b12cea6d1539d6e1d23bd09484fb30db4629f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:9f:9d:7a:6a:c5:a0:1c:69:be:d5:6e:12: 01:da:f4:42:93:e3:60:8f:5b:87:a3:95:ff:ca:7f: ff:20:2a:da:13:66:fc:15:b1:68:7e:d2:e8:ee:3d: c2:af:0e:b2:2d:f2:23:08:0a:d2:48:a1:dc:26:14: f6:ae:e5:31:d7:04:c0:3e:38:cd:a3:2c:47:c5:61: 69:db:9e:d7:99:3b:76:55:63:ec:9a:b3:c1:0b:ec: 38:ba:07:77:09:f3:2e:c1:82:40:7f:84:a3:cb:70: 90:47:6b:5a:fd:dd:30:e9:5a:4a:d3:5a:3c:50:7a: d0:e8:c7:50:12:02:04:23:00:f5:b8:c6:ef:a2:69: f5:d5:a0:46:c6:bf:51:df:cc:cd:44:29:da:e0:f6: 89:82:05:92:e8:e7:ab:bc:3d:1b:c4:52:c5:f7:c2: e1:5b:56:9d:cd:4b:88:0d:8c:9c:56:1f:e6:4b:54: 9f:fd:12:d3:2a:20:d0:53:18:ea:ff:a4:9e:8f:1d: 27:7d:b5:b3:d4:8b:ab:4d:d6:b4:d0:db:41:b6:19: e2:02:3e:38:aa:df:fd:3e:9d:c8:ea:b8:3a:8d:07: d5:de:4d:d3:fd:9a:29:e2:21:b2:b2:5b:cd:2c:a9: 36:63:d3:73:df:3b:8f:11:21:f6:45:5b:57:37:33: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:CE:A6:D1:53:9D:6E:1D:23:BD:09:48:4F:B3:0D:B4:62:9F:33 X509v3 Authority Key Identifier: keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9d:d5:be:28:71:7c:b8:60:1d:95:3e:28:56:f2:f7:37:f6: b8:8b:ef:c1:f0:6f:7f:2a:e2:8c:7a:7f:41:79:e7:29:9d:12: 3d:2e:12:4c:51:55:99:ef:2e:b1:4d:7f:f6:f1:59:7f:68:e9: 75:72:44:52:09:33:44:b1:69:11:3b:37:d5:8d:18:91:f2:56: b8:77:4d:ac:35:7a:75:f2:0a:5a:6d:f8:10:2c:e9:9a:3a:d3: 82:6d:81:e5:2d:e5:0f:3e:35:9b:8b:a7:a2:7a:9d:22:35:46: 0e:c4:de:9c:80:2d:66:19:79:bb:af:80:df:7c:d4:1e:fd:e2: 4e:a4:7f:4a:63:a6:0f:c0:58:b1:ea:73:ad:23:63:81:bd:9b: 1e:74:11:10:cf:25:65:49:67:c6:72:8d:05:64:32:29:90:56: 28:90:c9:11:50:e4:ed:1e:37:6f:46:ac:2b:64:73:66:d0:a9: 42:1a:df:36:0a:a0:04:8f:9d:a8:f3:a0:36:60:8e:ed:b9:cc: 3d:ec:83:e9:93:f8:54:36:91:be:7a:d7:26:8c:3d:b1:7d:21: 73:b8:1d:83:07:7c:45:9d:ef:f6:66:89:b6:08:03:d9:43:9b: 8a:6d:3d:d9:c6:05:20:2f:6b:cb:56:43:58:34:7f:4a:fd:d6: 05:b0:e1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EVcXqQHw1HeIlw9j97wOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5 MTFmYzkwHhcNMjUxMjIxMDQwMDU5WhcNMjUxMjIyMDQwMDU5WjAzMTEwLwYDVQQD EygzYjEyY2VhNmQxNTM5ZDZlMWQyM2JkMDk0ODRmYjMwZGI0NjI5ZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2mfnXpqxaAcab7VbhIB2vRCk+Ng j1uHo5X/yn//ICraE2b8FbFoftLo7j3Crw6yLfIjCArSSKHcJhT2ruUx1wTAPjjN oyxHxWFp257XmTt2VWPsmrPBC+w4ugd3CfMuwYJAf4Sjy3CQR2ta/d0w6VpK01o8 UHrQ6MdQEgIEIwD1uMbvomn11aBGxr9R38zNRCna4PaJggWS6OervD0bxFLF98Lh W1adzUuIDYycVh/mS1Sf/RLTKiDQUxjq/6Sejx0nfbWz1IurTda00NtBthniAj44 qt/9Pp3I6rg6jQfV3k3T/Zop4iGyslvNLKk2Y9Nz3zuPESH2RVtXNzPl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsSzqbRU51uHSO9CUhPsw20Yp8zMB8GA1UdIwQY MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ3Vvihx fLhgHZU+KFby9zf2uIvvwfBvfyrijHp/QXnnKZ0SPS4STFFVme8usU1/9vFZf2jp dXJEUgkzRLFpETs31Y0YkfJWuHdNrDV6dfIKWm34ECzpmjrTgm2B5S3lDz41m4un onqdIjVGDsTenIAtZhl5u6+A33zUHv3iTqR/SmOmD8BYsepzrSNjgb2bHnQREM8l ZUlnxnKNBWQyKZBWKJDJEVDk7R43b0asK2RzZtCpQhrfNgqgBI+dqPOgNmCO7bnM PeyD6ZP4VDaRvnrXJow9sX0hc7gdgwd8RZ3v9maJtggD2UObim092cYFIC9ry1ZD WDR/Sv3WBbDhwA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:45:31 2025 by rpki-client