This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json) Hash identifier: Sf8NW9FcjPIWj1iMQm6m1HYFLqPDeDWk4blcc3nkA7c= Subject key identifier: 1F:94:B0:A3:D9:E9:92:91:A8:1D:3E:BF:10:D0:4D:5D:16:BD:61:65 Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc Certificate serial: 019B53064CD9F886421933304229D76EEF48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft Manifest number: 034D Signing time: Thu 25 Dec 2025 01:01:20 +0000 Manifest this update: Thu 25 Dec 2025 01:01:20 +0000 Manifest next update: Fri 26 Dec 2025 01:01:20 +0000 Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: nmsZ5ophhZMG8km98/Obh+TC7OHcWpWCGDKcIshSBRw=) 2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:4c:d9:f8:86:42:19:33:30:42:29:d7:6e:ef:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc Validity Not Before: Dec 25 01:01:20 2025 GMT Not After : Dec 26 01:01:20 2025 GMT Subject: CN=1f94b0a3d9e99291a81d3ebf10d04d5d16bd6165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:e6:92:fe:f6:60:5e:c0:05:d6:c8:e0:c6: 4a:8c:9d:8c:6c:d8:6c:ef:9a:3a:e1:b6:e3:3d:f8: 7f:e7:b8:1c:ab:45:96:68:29:1c:a7:16:92:ae:d6: 12:32:c1:ee:2f:27:2a:46:55:f3:53:53:03:04:66: f1:a0:aa:91:f8:c6:e2:76:b0:c6:ac:c5:d7:38:3a: 96:bf:b7:a0:4c:2b:8c:52:05:86:72:d6:90:a6:7b: 3d:6e:96:e2:97:27:33:f8:2a:5e:fe:64:43:dc:84: b7:87:cb:d3:08:a7:45:d4:73:bf:78:a0:80:c8:1e: 5b:9c:42:41:31:99:17:71:80:a1:b5:b4:10:4d:fd: 15:85:60:88:5c:1d:c2:de:ca:d0:21:ce:0f:70:09: 1d:0f:22:18:68:bf:79:fc:7d:f0:69:9a:04:84:6b: 3f:fa:a4:d0:12:e3:94:fa:95:6f:d3:85:15:43:4e: da:59:47:37:78:d0:e1:b9:1f:30:d8:52:2d:61:85: 85:f2:23:87:9f:12:87:55:cb:83:bb:25:52:1a:10: 82:48:dd:23:3c:2c:e6:0b:68:24:90:50:f1:1f:04: 93:62:86:ba:af:fc:65:ad:c3:c9:5e:2e:62:94:9f: d4:16:b0:23:5b:e5:94:a4:1d:70:df:b8:c6:ff:c6: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:94:B0:A3:D9:E9:92:91:A8:1D:3E:BF:10:D0:4D:5D:16:BD:61:65 X509v3 Authority Key Identifier: keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:11:a8:48:18:1e:20:4f:57:31:c1:52:1d:3a:c9:06:8a: d9:fa:71:2e:18:99:68:f8:42:2e:d1:a9:af:81:34:55:16:f4: 17:c3:9e:e4:0c:be:a0:d5:e1:8c:46:5f:3f:80:81:d2:88:66: 81:46:1f:ee:00:fa:e8:3d:4e:b9:e9:37:1a:d9:7f:96:f2:53: 43:ed:d9:4a:7a:97:5c:14:f9:35:cd:61:df:87:6a:a4:22:31: ef:6f:f2:fe:5e:c3:1c:ca:05:d1:c2:be:d9:35:0e:f6:8a:2e: 54:ed:5e:c0:fd:51:30:e5:f2:85:48:bd:bb:76:ab:29:ee:85: 9b:9d:a8:fa:45:03:dd:99:45:57:13:9c:48:f3:08:4a:a7:5e: e0:df:d0:a2:66:f6:e8:d9:2f:a8:5a:cd:3a:6d:24:e2:0c:43: 21:45:3b:6c:02:7f:75:1e:31:d2:9d:36:36:9e:9f:77:a0:a9: 4f:25:50:f5:a8:cb:87:68:45:53:a1:08:4f:fd:9a:b2:26:6a: 1c:1d:2d:2b:24:30:25:3f:e8:27:9e:fb:89:8d:e6:1d:35:7b: 31:15:80:e5:01:84:f2:08:57:b4:89:23:ef:6b:66:61:99:19: 35:d0:61:1d:3f:44:59:a7:e4:ae:a7:58:60:ae:7c:19:cd:9c: 0c:a4:75:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBkzZ+IZCGTMwQinXbu9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk OWVkZGMwHhcNMjUxMjI1MDEwMTIwWhcNMjUxMjI2MDEwMTIwWjAzMTEwLwYDVQQD EygxZjk0YjBhM2Q5ZTk5MjkxYTgxZDNlYmYxMGQwNGQ1ZDE2YmQ2MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBbmkv72YF7ABdbI4MZKjJ2MbNhs 75o64bbjPfh/57gcq0WWaCkcpxaSrtYSMsHuLycqRlXzU1MDBGbxoKqR+MbidrDG rMXXODqWv7egTCuMUgWGctaQpns9bpbilycz+Cpe/mRD3IS3h8vTCKdF1HO/eKCA yB5bnEJBMZkXcYChtbQQTf0VhWCIXB3C3srQIc4PcAkdDyIYaL95/H3waZoEhGs/ +qTQEuOU+pVv04UVQ07aWUc3eNDhuR8w2FItYYWF8iOHnxKHVcuDuyVSGhCCSN0j PCzmC2gkkFDxHwSTYoa6r/xlrcPJXi5ilJ/UFrAjW+WUpB1w37jG/8aTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+UsKPZ6ZKRqB0+vxDQTV0WvWFlMB8GA1UdIwQY MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnsRqEgY HiBPVzHBUh06yQaK2fpxLhiZaPhCLtGpr4E0VRb0F8Oe5Ay+oNXhjEZfP4CB0ohm gUYf7gD66D1Ouek3Gtl/lvJTQ+3ZSnqXXBT5Nc1h34dqpCIx72/y/l7DHMoF0cK+ 2TUO9oouVO1ewP1RMOXyhUi9u3arKe6Fm52o+kUD3ZlFVxOcSPMISqde4N/Qomb2 6NkvqFrNOm0k4gxDIUU7bAJ/dR4x0p02Np6fd6CpTyVQ9ajLh2hFU6EIT/2asiZq HB0tKyQwJT/oJ577iY3mHTV7MRWA5QGE8ghXtIkj72tmYZkZNdBhHT9EWafkrqdY YK58Gc2cDKR1eg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:59:51 2025 by rpki-client