This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json) Hash identifier: XLwuRai2gJopfpSxQnEZCWIYtPqtNYfrAujuVcucxnU= Subject key identifier: 2C:9B:B8:5C:CA:51:CD:0E:6F:2C:D4:4F:97:1E:F7:11:39:B5:87:E1 Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a Certificate serial: 019B4A02BE95242AB02F3795B44C82712FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft Manifest number: 09B7 Signing time: Tue 23 Dec 2025 07:00:52 +0000 Manifest this update: Tue 23 Dec 2025 07:00:52 +0000 Manifest next update: Wed 24 Dec 2025 07:00:52 +0000 Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: AlRv1wxrdfuopx/fuLVUxm8GPBAKyFc3kiQsHNkkIB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:be:95:24:2a:b0:2f:37:95:b4:4c:82:71:2f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a Validity Not Before: Dec 23 07:00:52 2025 GMT Not After : Dec 24 07:00:52 2025 GMT Subject: CN=2c9bb85cca51cd0e6f2cd44f971ef71139b587e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:05:37:4d:65:4e:4d:be:b7:bf:31:ba:a4: d5:5a:70:7e:3e:59:77:10:fc:99:f8:22:1d:85:dd: c0:47:de:a8:79:10:ab:d1:0f:7e:12:7d:2a:a1:ac: 04:72:63:50:ff:db:35:b1:03:bc:36:52:c8:e0:31: 01:23:cb:95:2e:2f:79:d5:36:4a:85:e8:f8:b1:9a: cb:3a:25:4a:04:06:b9:a1:12:8f:81:ee:ca:19:0d: 05:3a:a4:df:73:eb:5f:e5:0e:cf:4f:87:85:35:bc: d4:55:df:bf:38:89:f7:9a:83:a7:02:20:13:c0:31: b4:be:42:92:a6:b1:e6:5b:a0:b8:9b:f5:cb:31:3b: b4:b5:06:b0:8d:22:02:03:a3:a0:29:02:94:66:ae: 45:32:ec:47:a8:cc:59:ea:f2:33:44:04:07:73:43: e2:4c:79:74:0f:12:19:b3:2f:a3:a7:df:47:64:94: 8f:18:98:7a:5a:af:1f:87:ea:d3:f0:6f:ec:4e:76: ac:6b:46:3b:eb:51:39:09:a0:1a:e4:10:77:23:d0: d0:82:3e:8c:61:47:b8:06:a5:cb:f0:09:f2:45:b0: f0:69:26:e5:68:cf:49:3d:9e:4b:4f:bb:cb:8a:57: 61:f9:04:1a:a7:da:63:dd:6c:47:fc:de:dc:7e:cf: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:B8:5C:CA:51:CD:0E:6F:2C:D4:4F:97:1E:F7:11:39:B5:87:E1 X509v3 Authority Key Identifier: keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d2:a1:92:94:8a:f7:e6:db:86:69:09:8d:df:f9:38:de:25: cc:a1:bb:f7:96:34:1d:fe:a3:89:b5:0a:57:1f:02:7e:69:b8: a0:17:3b:4c:3b:e7:1d:4c:4e:77:84:f0:6c:67:4a:ae:38:53: 22:75:3f:a2:f9:b5:c4:83:ae:35:69:7f:5d:f5:c1:34:da:3b: e8:01:7d:89:06:82:f0:b0:80:7c:bc:56:50:3a:af:58:8b:02: c9:cd:e3:9b:1a:e6:e4:1e:24:bf:8c:3a:17:c3:58:12:6b:b5: 36:2b:03:61:d9:6f:e2:66:ea:f2:a8:a7:5e:3a:dd:60:ce:d1: 57:26:5c:74:bb:29:7b:29:64:72:d5:73:2a:e1:a2:b7:07:d0: 3c:88:bd:0a:14:ad:c3:01:fc:3e:eb:d5:db:13:a8:93:af:5b: 46:89:5c:1a:b1:56:1d:4f:93:fc:c0:a5:38:96:a7:74:65:87: 13:44:5a:79:f1:53:28:aa:f4:9f:e3:49:2e:22:82:ff:08:23: df:4a:b1:c8:a8:fd:6b:af:c8:9d:01:58:21:46:72:28:4e:80: 47:76:de:79:92:88:9f:79:40:06:0f:56:08:36:3c:ed:2f:0a: 12:4a:6c:f0:a8:32:ec:93:22:8e:f7:93:ca:c3:9b:f8:3f:b1: 2e:b4:95:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAr6VJCqwLzeVtEyCcS+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWEyOTc3OGJlYjI4MDAxODI5NGUyMzk1Y2JmYTAwNDJj OGY3OGEwHhcNMjUxMjIzMDcwMDUyWhcNMjUxMjI0MDcwMDUyWjAzMTEwLwYDVQQD EygyYzliYjg1Y2NhNTFjZDBlNmYyY2Q0NGY5NzFlZjcxMTM5YjU4N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdEFN01lTk2+t78xuqTVWnB+Pll3 EPyZ+CIdhd3AR96oeRCr0Q9+En0qoawEcmNQ/9s1sQO8NlLI4DEBI8uVLi951TZK hej4sZrLOiVKBAa5oRKPge7KGQ0FOqTfc+tf5Q7PT4eFNbzUVd+/OIn3moOnAiAT wDG0vkKSprHmW6C4m/XLMTu0tQawjSICA6OgKQKUZq5FMuxHqMxZ6vIzRAQHc0Pi THl0DxIZsy+jp99HZJSPGJh6Wq8fh+rT8G/sTnasa0Y761E5CaAa5BB3I9DQgj6M YUe4BqXL8AnyRbDwaSblaM9JPZ5LT7vLildh+QQap9pj3WxH/N7cfs9hswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCybuFzKUc0ObyzUT5ce9xE5tYfhMB8GA1UdIwQY MBaAFFLqKXeL6ygAGClOI5XL+gBCyPeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUt OWY5OTYxZGMzODUxLzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUtOWY5OTYxZGMzODUx LzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9KhkpSK 9+bbhmkJjd/5ON4lzKG795Y0Hf6jibUKVx8Cfmm4oBc7TDvnHUxOd4TwbGdKrjhT InU/ovm1xIOuNWl/XfXBNNo76AF9iQaC8LCAfLxWUDqvWIsCyc3jmxrm5B4kv4w6 F8NYEmu1NisDYdlv4mbq8qinXjrdYM7RVyZcdLspeylkctVzKuGitwfQPIi9ChSt wwH8PuvV2xOok69bRolcGrFWHU+T/MClOJandGWHE0RaefFTKKr0n+NJLiKC/wgj 30qxyKj9a6/InQFYIUZyKE6AR3beeZKIn3lABg9WCDY87S8KEkps8Kgy7JMijveT ysOb+D+xLrSVpw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:16:41 2025 by rpki-client