This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json) Hash identifier: LtUYz6rAwGlR+ov/7lkNokc3NWuIQCRe/YKc9i1BAG0= Subject key identifier: BF:75:8E:2E:55:6D:74:FC:1A:95:AE:01:3A:3F:BA:05:DC:51:26:59 Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Certificate serial: 019B39EB50AAD1928F27CDF5F4AB15A5A312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft Manifest number: 05A5 Signing time: Sat 20 Dec 2025 04:01:21 +0000 Manifest this update: Sat 20 Dec 2025 04:01:21 +0000 Manifest next update: Sun 21 Dec 2025 04:01:21 +0000 Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=) 2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: rl3UWijIaV9pyiydlKZi6iuHYjeMTHQS6iCvK/M+ML8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:50:aa:d1:92:8f:27:cd:f5:f4:ab:15:a5:a3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Validity Not Before: Dec 20 04:01:21 2025 GMT Not After : Dec 21 04:01:21 2025 GMT Subject: CN=bf758e2e556d74fc1a95ae013a3fba05dc512659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:bd:92:ec:e7:4d:fb:7e:65:58:47:03:d9: 88:a2:e4:d4:52:6d:80:d2:02:2d:8c:12:3d:8c:00: 23:8d:a4:06:72:a8:b6:7e:50:0b:39:73:a9:93:66: cd:d1:a8:ac:3e:7c:15:81:57:ca:ca:8e:59:7b:84: bd:c3:fa:4f:68:ed:f8:26:0d:dd:fc:7c:7e:12:0a: ee:35:27:08:2a:d3:c8:9e:65:b6:86:3e:7f:aa:78: 10:9d:4b:9e:e8:d7:e3:70:e5:98:4f:46:78:c5:c6: e4:00:a7:61:dc:b0:e4:0f:66:ff:8e:42:e7:9b:f9: 3e:2a:4d:23:4b:0e:90:2d:a0:f4:89:14:7b:6a:d8: e4:25:d6:4c:f3:b6:5d:75:b7:c6:64:e5:cb:4c:a3: c5:4b:39:83:f8:89:a8:db:11:e6:97:06:2c:29:73: 2a:7f:28:9d:86:73:01:09:b9:e3:07:d4:42:05:19: de:76:7c:78:a6:00:a3:76:82:eb:cf:68:0e:b1:fc: df:ef:05:0f:fa:0b:08:27:ad:92:18:e9:40:f7:7b: b5:10:c3:a4:73:c4:f4:78:d3:c6:79:6e:58:8a:64: 37:43:3e:9c:ef:d2:59:55:7b:1b:db:3e:ec:2f:f5: ea:3e:1f:19:00:89:65:2e:b4:df:87:f8:6c:29:b7: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:8E:2E:55:6D:74:FC:1A:95:AE:01:3A:3F:BA:05:DC:51:26:59 X509v3 Authority Key Identifier: keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:59:22:3c:eb:7d:59:31:aa:75:b3:5b:86:77:d5:7e:c2:51: 5e:57:f9:c6:fc:a6:12:48:e5:93:59:94:cc:ff:ba:00:8c:c4: 6a:fc:4d:d9:bb:4e:e0:66:5c:d3:08:85:c0:b0:42:6c:be:ba: d3:7d:9f:ae:18:ae:11:77:a4:4d:65:b6:8a:94:c2:ca:b7:74: 20:f8:57:84:88:5d:a4:87:77:c2:e3:fb:da:7f:4a:29:3a:af: b5:89:78:59:8d:50:f9:0e:ee:10:41:c1:65:bd:6c:60:d5:36: 41:9c:70:29:7d:72:93:58:9c:d7:06:ad:e1:ce:96:b5:63:fd: 3d:54:a1:cc:91:9b:97:d1:e8:cc:85:7c:4b:fa:6b:d6:a2:ff: d6:1c:81:9c:6c:bb:50:99:0f:29:f4:a9:77:03:cf:ef:25:99: 41:4f:8a:43:61:7a:33:f8:15:16:c2:e3:49:11:1e:70:0d:c6: 75:a8:67:57:ab:c6:46:3c:78:2a:ea:52:00:80:0e:2a:a6:68: e7:2b:1c:50:fa:5c:3a:18:67:d3:18:27:79:53:95:67:12:c2: de:d2:8b:18:87:56:dc:66:5c:05:da:52:0f:b9:ca:9f:6c:2e: 8d:1e:d6:cd:ab:28:37:f7:6c:ca:77:1c:9a:58:3c:5b:c2:22: 93:80:f1:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561Cq0ZKPJ8319KsVpaMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGNlNzgxZGIwZGM3ZTRmOWY0OTQxNDVhMjk1ZTRjY2Ix MjFjYWUwHhcNMjUxMjIwMDQwMTIxWhcNMjUxMjIxMDQwMTIxWjAzMTEwLwYDVQQD EyhiZjc1OGUyZTU1NmQ3NGZjMWE5NWFlMDEzYTNmYmEwNWRjNTEyNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGe9kuznTft+ZVhHA9mIouTUUm2A 0gItjBI9jAAjjaQGcqi2flALOXOpk2bN0aisPnwVgVfKyo5Ze4S9w/pPaO34Jg3d /Hx+EgruNScIKtPInmW2hj5/qngQnUue6NfjcOWYT0Z4xcbkAKdh3LDkD2b/jkLn m/k+Kk0jSw6QLaD0iRR7atjkJdZM87ZddbfGZOXLTKPFSzmD+Imo2xHmlwYsKXMq fyidhnMBCbnjB9RCBRnednx4pgCjdoLrz2gOsfzf7wUP+gsIJ62SGOlA93u1EMOk c8T0eNPGeW5YimQ3Qz6c79JZVXsb2z7sL/XqPh8ZAIllLrTfh/hsKbf5hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL91ji5VbXT8GpWuATo/ugXcUSZZMB8GA1UdIwQY MBaAFFEM54HbDcfk+fSUFFopXkzLEhyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQt YzFkNmM4ZjMxOWMxLzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQtYzFkNmM4ZjMxOWMx LzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolkiPOt9 WTGqdbNbhnfVfsJRXlf5xvymEkjlk1mUzP+6AIzEavxN2btO4GZc0wiFwLBCbL66 032frhiuEXekTWW2ipTCyrd0IPhXhIhdpId3wuP72n9KKTqvtYl4WY1Q+Q7uEEHB Zb1sYNU2QZxwKX1yk1ic1wat4c6WtWP9PVShzJGbl9HozIV8S/pr1qL/1hyBnGy7 UJkPKfSpdwPP7yWZQU+KQ2F6M/gVFsLjSREecA3GdahnV6vGRjx4KupSAIAOKqZo 5yscUPpcOhhn0xgneVOVZxLC3tKLGIdW3GZcBdpSD7nKn2wujR7WzasoN/dsyncc mlg8W8Iik4DxnA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:03:15 2025 by rpki-client