This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft File: uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json) Hash identifier: ooq1lyARwZhb0xqsO+WLwMP8ySBeA65gGpuw7o6PqVo= Subject key identifier: 98:63:32:31:18:20:A7:48:D5:D3:88:F6:41:11:FC:A2:58:08:85:DD Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Certificate serial: 019B3EA3741DC9CD93DB4F93BFC1B16B3140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft Manifest number: 0250 Signing time: Sun 21 Dec 2025 02:00:57 +0000 Manifest this update: Sun 21 Dec 2025 02:00:57 +0000 Manifest next update: Mon 22 Dec 2025 02:00:57 +0000 Files and hashes: 1: dHqraQM0J28TwBZI9kOV-wg_Nys.roa (hash: 9SP50kXHayfJ5rdM97ecdGjoNLOBx7zfNbIDZBfMyaE=) 2: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: qs97jB+I+SHpjIx2Rl8iPtMLW8E4i1oIu2pEiqJXgFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:74:1d:c9:cd:93:db:4f:93:bf:c1:b1:6b:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Validity Not Before: Dec 21 02:00:57 2025 GMT Not After : Dec 22 02:00:57 2025 GMT Subject: CN=986332311820a748d5d388f64111fca2580885dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:9b:1c:07:33:93:01:c5:a3:2d:69:70:27: bd:46:30:2f:f5:bf:30:cd:3a:13:72:56:a5:6f:51: 76:ad:a9:05:d7:49:e1:1e:6c:17:3b:b0:3b:8d:80: c1:01:78:0d:8d:3f:0d:5d:2e:5d:ed:7e:71:d9:50: 72:7b:cf:02:fa:d7:0a:f9:42:3e:64:ad:c1:98:c0: 50:64:fe:10:21:e1:8e:0e:a9:47:f9:e5:07:5f:09: 7c:bf:64:e1:7e:81:86:ae:43:3b:b6:59:e0:af:78: 16:8b:74:91:67:e3:66:4f:cd:77:4e:a5:7f:d2:00: fd:7c:0a:eb:c4:ec:55:2d:c3:ef:27:52:ab:c1:7f: 38:f7:16:28:fb:04:1d:5b:74:59:b8:f8:24:64:67: 83:d5:d9:a9:6d:ff:a5:75:7d:1f:4b:96:e7:96:d4: 7d:c7:25:fb:49:1f:d2:c2:ca:19:f7:e3:98:c1:4b: eb:e7:5c:54:c3:d3:29:be:03:54:0b:4b:25:19:2d: 77:34:b2:fb:17:24:db:5e:a4:55:d5:7e:06:f7:29: ac:94:f9:0b:5c:0d:a8:e9:7d:a0:5f:1b:c4:b8:e1: bb:07:15:b4:ff:fb:58:fa:35:d9:67:8d:69:dc:13: 8a:2b:d3:98:80:2a:c2:e0:94:b2:65:28:2f:c7:f2: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:32:31:18:20:A7:48:D5:D3:88:F6:41:11:FC:A2:58:08:85:DD X509v3 Authority Key Identifier: keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:96:fe:72:6e:f5:5b:7e:17:ff:22:3e:2a:9e:e6:f1:1d:d7: ec:e6:94:42:26:c0:07:d7:30:ea:07:73:45:ff:cd:bd:fa:ec: fe:39:f0:69:b3:d6:e7:26:b9:f7:eb:9b:35:55:3b:82:4a:f4: b1:a6:aa:74:9d:95:2a:58:b6:e5:ba:f1:01:df:c5:e7:12:ff: bb:54:ba:88:94:a1:52:3b:63:21:93:52:ba:6d:23:d6:72:f2: b6:c8:05:ef:14:ed:4c:a4:8a:4d:af:cc:11:b5:41:64:c6:0e: fd:00:b2:39:25:54:d2:87:0c:9a:ad:5b:69:f6:1f:54:3f:89: ad:4d:16:aa:4a:55:75:40:24:7c:76:21:df:fb:88:59:eb:09: 94:27:38:e3:98:00:69:07:51:ae:7d:0c:be:3f:7c:db:a1:63: 69:c0:62:af:11:cb:07:8b:2c:5f:ac:cc:ac:70:1e:e3:31:c8: d8:c3:58:8d:76:ce:9c:1d:51:23:b3:d6:c7:f8:2a:f5:20:67: c0:f3:5e:c7:0b:3c:82:72:0b:15:6f:d8:24:59:77:1e:e3:4d: 7f:40:88:4d:e1:1c:98:ca:4b:e3:74:01:a6:81:fe:6b:06:8f: 67:0d:1b:b5:62:f6:e7:b2:8e:54:ad:3d:2b:42:14:ff:9a:69: dc:86:e2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3Qdyc2T20+Tv8GxazFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODFiMjRhNmQ2MDMwYmYwODhkZWEzMGM5YTU5MzJmZWJk YzZhN2MwHhcNMjUxMjIxMDIwMDU3WhcNMjUxMjIyMDIwMDU3WjAzMTEwLwYDVQQD Eyg5ODYzMzIzMTE4MjBhNzQ4ZDVkMzg4ZjY0MTExZmNhMjU4MDg4NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfGbHAczkwHFoy1pcCe9RjAv9b8w zToTclalb1F2rakF10nhHmwXO7A7jYDBAXgNjT8NXS5d7X5x2VBye88C+tcK+UI+ ZK3BmMBQZP4QIeGODqlH+eUHXwl8v2ThfoGGrkM7tlngr3gWi3SRZ+NmT813TqV/ 0gD9fArrxOxVLcPvJ1KrwX849xYo+wQdW3RZuPgkZGeD1dmpbf+ldX0fS5bnltR9 xyX7SR/SwsoZ9+OYwUvr51xUw9MpvgNUC0slGS13NLL7FyTbXqRV1X4G9ymslPkL XA2o6X2gXxvEuOG7BxW0//tY+jXZZ41p3BOKK9OYgCrC4JSyZSgvx/L24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhjMjEYIKdI1dOI9kER/KJYCIXdMB8GA1UdIwQY MBaAFLqBskptYDC/CI3qMMmlky/r3Gp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQt NDhjZDA1ZWNhNzM2LzEvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQtNDhjZDA1ZWNhNzM2 LzEvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZb+cm71 W34X/yI+Kp7m8R3X7OaUQibAB9cw6gdzRf/Nvfrs/jnwabPW5ya59+ubNVU7gkr0 saaqdJ2VKli25brxAd/F5xL/u1S6iJShUjtjIZNSum0j1nLytsgF7xTtTKSKTa/M EbVBZMYO/QCyOSVU0ocMmq1bafYfVD+JrU0WqkpVdUAkfHYh3/uIWesJlCc445gA aQdRrn0Mvj9826FjacBirxHLB4ssX6zMrHAe4zHI2MNYjXbOnB1RI7PWx/gq9SBn wPNexws8gnILFW/YJFl3HuNNf0CITeEcmMpL43QBpoH+awaPZw0btWL257KOVK09 K0IU/5pp3IbiIg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:25 2025 by rpki-client