This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json) Hash identifier: 3MJmyC3uVk/tpNHcPZXzLB5zU73GnUhsmDS+9r/kwek= Subject key identifier: AD:68:B8:D6:CA:E5:F2:3A:FC:9B:D0:6E:1A:B8:32:07:E2:1B:E5:3F Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Certificate serial: 019B3A21E5C5F6C3D1300FF94CFD5F85D6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft Manifest number: 0EE8 Signing time: Sat 20 Dec 2025 05:00:58 +0000 Manifest this update: Sat 20 Dec 2025 05:00:58 +0000 Manifest next update: Sun 21 Dec 2025 05:00:58 +0000 Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=) 2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: cK08c4fkwjAzyC47v5B6nFtlmS19rJUHTvy0Ly13+0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e5:c5:f6:c3:d1:30:0f:f9:4c:fd:5f:85:d6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Validity Not Before: Dec 20 05:00:58 2025 GMT Not After : Dec 21 05:00:58 2025 GMT Subject: CN=ad68b8d6cae5f23afc9bd06e1ab83207e21be53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:5c:44:1f:c5:0b:ae:12:0e:aa:ea:9a:80: d1:84:a7:26:66:d3:97:d3:ed:4f:39:b4:88:d2:05: 54:eb:b6:e3:52:b5:13:f0:08:43:08:01:0d:9f:df: ab:a8:70:7e:e7:68:cc:f2:fd:7b:2f:41:c3:51:11: ce:f5:a6:4d:3d:ea:33:73:88:4f:c3:6f:49:79:f3: ae:cc:f4:3f:ff:45:9d:85:30:b8:9a:5f:3c:1d:2c: 60:29:8d:01:20:45:bb:00:ad:f3:b3:f5:5e:9e:80: 07:21:49:96:58:29:84:52:ab:77:b9:1c:58:c7:ba: a9:3c:d8:0e:52:75:00:c9:52:90:8e:d5:6b:9a:b1: 4f:46:84:5c:12:bf:e0:5f:e6:c7:cd:ba:dc:1a:d5: 1c:1e:ef:fd:70:6e:3c:18:f2:df:c8:66:be:95:95: 9d:b1:0c:20:54:fc:36:f5:a6:5e:9a:c1:42:60:70: 00:6e:6a:6c:a6:aa:2d:ae:18:19:64:4f:2e:ce:23: af:26:85:c1:ba:51:ec:ab:aa:0b:44:18:d0:5d:19: 80:7f:f7:df:c8:d8:54:80:49:3e:72:6d:51:13:cc: ff:4d:3f:c6:65:2c:07:17:d9:ab:0b:ce:33:4b:84: 42:a2:03:fb:e7:30:c9:d3:9e:a4:be:8f:dc:57:21: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:68:B8:D6:CA:E5:F2:3A:FC:9B:D0:6E:1A:B8:32:07:E2:1B:E5:3F X509v3 Authority Key Identifier: keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4b:09:44:0d:f4:2e:33:3f:46:66:fa:1e:8a:00:ca:97:d8: ab:21:ef:3b:5b:0c:de:4b:a6:dd:db:33:f0:cd:6c:71:56:19: a9:b6:3a:e0:31:1a:52:61:41:cb:75:02:ce:59:65:88:dc:4d: c7:d8:a9:1f:90:a0:86:a4:e2:22:8f:b1:ca:b1:d3:a3:5d:74: 5a:59:b3:5b:fd:c7:c6:fa:33:3b:35:b9:58:75:e4:a5:43:9e: f1:97:a8:fb:03:5b:18:aa:9e:bb:94:3d:f7:22:c8:90:25:19: d1:0b:b6:4a:0b:05:7b:e2:18:36:2b:ff:66:a7:6d:6a:ed:66: 6d:fe:1e:1c:2a:3c:69:34:b3:3a:a5:e5:8c:d8:9b:d0:8a:d7: 52:42:43:46:f6:50:6e:94:f1:fd:e0:c0:3f:6e:92:02:a2:cb: ee:a4:21:69:9c:21:af:2f:0f:87:ba:47:c4:7b:d3:ae:de:c7: 0a:08:30:9b:bd:5f:aa:b4:b1:7d:ff:de:96:52:b0:60:7d:83: 6f:2d:30:a6:7e:a0:a7:de:28:15:dc:59:78:30:d1:76:aa:5d: bf:63:a8:82:ce:0e:ba:82:5e:a5:c4:0a:10:4d:56:f8:db:47: 38:66:1f:f9:9b:85:c2:ab:ce:93:75:21:75:1b:23:62:a0:ba: 3e:63:ca:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IeXF9sPRMA/5TP1fhdbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3 YzNmOGEwHhcNMjUxMjIwMDUwMDU4WhcNMjUxMjIxMDUwMDU4WjAzMTEwLwYDVQQD EyhhZDY4YjhkNmNhZTVmMjNhZmM5YmQwNmUxYWI4MzIwN2UyMWJlNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDZcRB/FC64SDqrqmoDRhKcmZtOX 0+1PObSI0gVU67bjUrUT8AhDCAENn9+rqHB+52jM8v17L0HDURHO9aZNPeozc4hP w29JefOuzPQ//0WdhTC4ml88HSxgKY0BIEW7AK3zs/VenoAHIUmWWCmEUqt3uRxY x7qpPNgOUnUAyVKQjtVrmrFPRoRcEr/gX+bHzbrcGtUcHu/9cG48GPLfyGa+lZWd sQwgVPw29aZemsFCYHAAbmpspqotrhgZZE8uziOvJoXBulHsq6oLRBjQXRmAf/ff yNhUgEk+cm1RE8z/TT/GZSwHF9mrC84zS4RCogP75zDJ056kvo/cVyEeqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1ouNbK5fI6/JvQbhq4MgfiG+U/MB8GA1UdIwQY MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0sJRA30 LjM/Rmb6HooAypfYqyHvO1sM3kum3dsz8M1scVYZqbY64DEaUmFBy3UCzllliNxN x9ipH5CghqTiIo+xyrHTo110WlmzW/3HxvozOzW5WHXkpUOe8Zeo+wNbGKqeu5Q9 9yLIkCUZ0Qu2SgsFe+IYNiv/Zqdtau1mbf4eHCo8aTSzOqXljNib0IrXUkJDRvZQ bpTx/eDAP26SAqLL7qQhaZwhry8Ph7pHxHvTrt7HCggwm71fqrSxff/ellKwYH2D by0wpn6gp94oFdxZeDDRdqpdv2Oogs4OuoJepcQKEE1W+NtHOGYf+ZuFwqvOk3Uh dRsjYqC6PmPKOg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:02 2025 by rpki-client