This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft File: uq_lp700ifDcc4TIjZWJVDfPxMQ.mft (raw, json) Hash identifier: dSa13TxldKw2kVHrKZCaja1N6RNmxHWY7ToB7RsUrAw= Subject key identifier: A5:B2:EC:AD:5E:43:96:13:15:3E:A6:C3:63:B0:2C:95:E3:68:29:64 Authority key identifier: BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4 Certificate issuer: /CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4 Certificate serial: 019B2EF9A4BB4FFD2B5FB6E2B3EEA15456FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft Manifest number: 0B8D Signing time: Thu 18 Dec 2025 01:01:11 +0000 Manifest this update: Thu 18 Dec 2025 01:01:11 +0000 Manifest next update: Fri 19 Dec 2025 01:01:11 +0000 Files and hashes: 1: uq_lp700ifDcc4TIjZWJVDfPxMQ.crl (hash: glVhIaQEzdBa55VbnJie5aM2tZPGUx8acP/IKH9Rock=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:a4:bb:4f:fd:2b:5f:b6:e2:b3:ee:a1:54:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baafe5a7bd3489f0dc7384c88d95895437cfc4c4 Validity Not Before: Dec 18 01:01:11 2025 GMT Not After : Dec 19 01:01:11 2025 GMT Subject: CN=a5b2ecad5e439613153ea6c363b02c95e3682964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:ec:12:f3:a0:2e:43:c8:ea:ec:8e:2f:75: ca:08:51:e0:10:91:37:7b:be:01:36:34:bc:6d:ec: e1:52:95:57:42:44:fc:0b:01:b7:9b:0c:14:92:0e: 6a:4f:12:40:be:1a:a1:05:41:0d:dc:89:7e:d8:48: e0:fb:8d:9b:3b:09:51:b7:83:62:2b:b9:ba:66:90: e6:ac:75:07:ef:b1:6f:92:2c:84:6f:64:e6:51:af: 03:a0:34:97:ef:2d:9f:b6:17:f9:a8:ff:ad:a7:ae: e7:c5:b4:e8:da:ef:95:15:9d:be:ab:f1:eb:84:6c: a9:56:2c:be:4d:d4:c9:ec:69:a8:11:2f:c9:ff:c9: 67:15:0b:35:36:20:b6:8b:ef:99:93:87:d5:65:ea: 03:fa:34:82:16:0a:76:6a:99:1b:3f:f9:c4:91:43: 4c:f1:68:8d:1c:28:a0:a1:05:f3:b9:ef:0b:7e:32: a1:e3:c7:95:64:80:9a:14:2d:f1:48:a4:bc:f9:ea: e1:21:c0:04:35:d2:85:30:99:d6:c5:60:bf:e8:21: 6a:33:6b:3c:a6:54:4f:fa:73:20:bb:00:76:13:fe: c5:28:b9:5d:dc:d6:d7:6e:75:d0:a4:5f:52:94:08: 1d:cd:b3:3b:95:78:ff:6c:fd:6e:fb:42:b1:08:fe: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:EC:AD:5E:43:96:13:15:3E:A6:C3:63:B0:2C:95:E3:68:29:64 X509v3 Authority Key Identifier: keyid:BA:AF:E5:A7:BD:34:89:F0:DC:73:84:C8:8D:95:89:54:37:CF:C4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq_lp700ifDcc4TIjZWJVDfPxMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0c92c2-1f3f-4e86-bf9b-44057ee22de1/1/uq_lp700ifDcc4TIjZWJVDfPxMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fc:c9:86:40:ed:55:5b:66:42:50:2b:78:9d:8e:71:e6:5e: 0c:3f:2d:53:13:4c:aa:cd:54:47:02:b2:2e:77:5c:39:1b:23: b0:fa:a4:f5:ac:6d:ca:53:87:76:a9:64:25:90:15:0f:08:b5: 3c:ae:62:21:30:16:a5:aa:2e:be:5f:1b:7c:20:05:68:6d:de: 39:e0:69:14:40:79:6b:9e:ec:89:c8:14:79:e8:91:26:23:7f: 87:70:cd:15:d8:9f:61:81:ae:1a:4c:e1:3e:9b:18:6a:1f:35: dc:1e:45:82:65:24:7b:3d:a6:a8:70:c2:4f:eb:c9:30:e9:40: e8:99:83:5c:d5:ef:ce:a9:03:57:98:16:3d:c1:21:ff:fb:7c: 66:a1:5a:e2:4b:08:40:36:2e:3e:30:e4:71:a4:ac:fe:d5:a4: 48:78:88:99:d1:dc:5d:72:9c:1c:5e:25:0d:cf:b3:72:93:e1: de:78:25:f1:bd:dd:fc:53:77:44:2a:56:c0:0b:7a:0e:0f:bd: 38:dd:eb:2e:15:bc:86:f4:a1:a8:61:1f:fd:e7:81:28:68:e9: f0:26:a0:e0:f3:04:13:17:f0:9c:e2:6e:4b:e4:2c:2d:14:23: 48:a6:5e:e0:96:8e:26:c4:f2:ff:78:4e:de:ea:09:57:8d:4f: ec:45:9e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+aS7T/0rX7bis+6hVFb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWZlNWE3YmQzNDg5ZjBkYzczODRjODhkOTU4OTU0Mzdj ZmM0YzQwHhcNMjUxMjE4MDEwMTExWhcNMjUxMjE5MDEwMTExWjAzMTEwLwYDVQQD EyhhNWIyZWNhZDVlNDM5NjEzMTUzZWE2YzM2M2IwMmM5NWUzNjgyOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTDsEvOgLkPI6uyOL3XKCFHgEJE3 e74BNjS8bezhUpVXQkT8CwG3mwwUkg5qTxJAvhqhBUEN3Il+2Ejg+42bOwlRt4Ni K7m6ZpDmrHUH77FvkiyEb2TmUa8DoDSX7y2fthf5qP+tp67nxbTo2u+VFZ2+q/Hr hGypViy+TdTJ7GmoES/J/8lnFQs1NiC2i++Zk4fVZeoD+jSCFgp2apkbP/nEkUNM 8WiNHCigoQXzue8LfjKh48eVZICaFC3xSKS8+erhIcAENdKFMJnWxWC/6CFqM2s8 plRP+nMguwB2E/7FKLld3NbXbnXQpF9SlAgdzbM7lXj/bP1u+0KxCP78sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWy7K1eQ5YTFT6mw2OwLJXjaClkMB8GA1UdIwQY MBaAFLqv5ae9NInw3HOEyI2ViVQ3z8TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wYzkyYzItMWYzZi00ZTg2LWJmOWIt NDQwNTdlZTIyZGUxLzEvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wYzkyYzItMWYzZi00ZTg2LWJmOWItNDQwNTdlZTIyZGUx LzEvdXFfbHA3MDBpZkRjYzRUSWpaV0pWRGZQeE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPzJhkDt VVtmQlAreJ2OceZeDD8tUxNMqs1URwKyLndcORsjsPqk9axtylOHdqlkJZAVDwi1 PK5iITAWpaouvl8bfCAFaG3eOeBpFEB5a57sicgUeeiRJiN/h3DNFdifYYGuGkzh PpsYah813B5FgmUkez2mqHDCT+vJMOlA6JmDXNXvzqkDV5gWPcEh//t8ZqFa4ksI QDYuPjDkcaSs/tWkSHiImdHcXXKcHF4lDc+zcpPh3ngl8b3d/FN3RCpWwAt6Dg+9 ON3rLhW8hvShqGEf/eeBKGjp8Cag4PMEExfwnOJuS+QsLRQjSKZe4JaOJsTy/3hO 3uoJV41P7EWevQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:43 2025 by rpki-client