This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json) Hash identifier: A6PNaNEQO1WdIMScdeoE/RlWFlfXx/qsFozfQqnsgFs= Subject key identifier: 13:C3:A2:13:81:F0:C7:24:99:92:11:44:E7:F3:A4:53:90:8F:99:7B Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055 Certificate serial: 019B4B4CD7D7EB81DF860C6C1B2AC0FD30B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft Manifest number: 1283 Signing time: Tue 23 Dec 2025 13:01:25 +0000 Manifest this update: Tue 23 Dec 2025 13:01:25 +0000 Manifest next update: Wed 24 Dec 2025 13:01:25 +0000 Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=) 2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: 8SgN1NqQQ1rRqjhvo140dXN3408NR1mgl6Kk8xlZg44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:d7:d7:eb:81:df:86:0c:6c:1b:2a:c0:fd:30:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055 Validity Not Before: Dec 23 13:01:25 2025 GMT Not After : Dec 24 13:01:25 2025 GMT Subject: CN=13c3a21381f0c72499921144e7f3a453908f997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:60:e5:2b:2b:d0:c2:a7:f9:59:0a:ee:35: a3:3a:5d:5d:d3:48:1c:3a:09:0b:0b:3f:fe:37:18: 80:7f:00:d6:4f:91:e8:1d:e5:c8:b2:fd:e8:66:64: cd:b9:19:65:01:dc:c5:03:25:3c:e6:2e:49:4f:b3: 47:ae:0d:40:24:a6:6c:7a:4c:ad:9c:6b:f2:e5:31: c5:70:f7:b0:0d:9e:46:8c:52:b8:fe:a1:8c:32:9b: 4f:a9:2f:09:93:64:9b:e2:b1:6a:65:91:27:c5:af: a0:07:d2:7d:ec:7e:9c:bb:35:78:e4:74:cf:40:b6: d2:60:ab:f6:46:9b:36:32:4b:31:6f:79:8a:1c:07: 09:48:fd:d3:48:dc:63:9f:17:9b:c6:e5:5c:47:82: bb:24:95:51:ff:59:c6:dc:16:38:56:87:f5:0a:8e: b2:8a:75:f6:65:df:03:18:ba:4f:9e:03:78:92:c0: dc:4f:63:8a:33:3b:bf:63:53:f6:2e:82:5f:58:80: 18:0d:eb:14:c1:d3:f0:cd:f5:d5:42:bf:e1:17:23: 23:af:be:76:93:c6:2c:78:84:5c:55:57:f3:b4:8f: 07:1c:fe:9f:e8:64:2f:14:fc:f8:18:a4:4b:61:f7: bc:f1:db:cf:76:80:a0:3b:7a:49:1c:df:9c:bd:6f: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:A2:13:81:F0:C7:24:99:92:11:44:E7:F3:A4:53:90:8F:99:7B X509v3 Authority Key Identifier: keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4c:f5:40:7f:03:0c:23:6d:f0:ff:de:34:71:e0:46:94:1d: c5:eb:76:7b:94:26:f9:5b:88:2b:cd:71:55:e4:8f:dd:c5:14: 01:37:05:a6:3f:61:a7:31:fd:d5:f0:6b:31:d6:84:14:6b:a2: 85:1d:24:93:5e:26:a2:aa:46:0d:d9:b7:5e:1f:98:55:ab:e3: 4b:78:f6:50:c9:a8:22:1c:c2:29:f8:16:da:35:83:98:5e:13: be:d7:a2:cb:53:0b:1e:51:f4:0f:f1:20:09:f3:bb:0e:4a:8e: 8d:c0:7a:7b:e4:b9:25:7d:64:9e:20:af:96:bd:e9:77:a9:73: 33:35:e7:e1:c5:b2:16:0f:c7:92:5c:63:91:9c:e1:41:cb:de: 58:88:b7:9a:55:02:e8:60:a8:4e:45:3d:24:6e:e9:68:04:16: 32:df:82:ca:6c:9c:ad:09:8e:a8:f1:30:7d:2a:83:27:cc:5d: 0d:a4:36:06:ae:9d:a4:f5:c9:f1:61:ba:cf:87:7c:c2:3a:5c: 36:ed:0c:77:b2:e4:03:0c:76:e5:41:06:69:af:d7:4f:06:92: a7:55:91:51:71:cd:57:e2:5f:0c:40:1c:8a:0f:f8:a1:d2:fb: 6b:f1:a8:46:c7:4d:d3:91:a7:d4:d7:ba:58:24:6c:dd:be:c8: 04:f7:92:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTNfX64HfhgxsGyrA/TC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm NWEwNTUwHhcNMjUxMjIzMTMwMTI1WhcNMjUxMjI0MTMwMTI1WjAzMTEwLwYDVQQD EygxM2MzYTIxMzgxZjBjNzI0OTk5MjExNDRlN2YzYTQ1MzkwOGY5OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HVg5Ssr0MKn+VkK7jWjOl1d00gc OgkLCz/+NxiAfwDWT5HoHeXIsv3oZmTNuRllAdzFAyU85i5JT7NHrg1AJKZsekyt nGvy5THFcPewDZ5GjFK4/qGMMptPqS8Jk2Sb4rFqZZEnxa+gB9J97H6cuzV45HTP QLbSYKv2Rps2Mksxb3mKHAcJSP3TSNxjnxebxuVcR4K7JJVR/1nG3BY4Vof1Co6y inX2Zd8DGLpPngN4ksDcT2OKMzu/Y1P2LoJfWIAYDesUwdPwzfXVQr/hFyMjr752 k8YseIRcVVfztI8HHP6f6GQvFPz4GKRLYfe88dvPdoCgO3pJHN+cvW+FywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPDohOB8MckmZIRROfzpFOQj5l7MB8GA1UdIwQY MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5 LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUz1QH8D DCNt8P/eNHHgRpQdxet2e5Qm+VuIK81xVeSP3cUUATcFpj9hpzH91fBrMdaEFGui hR0kk14moqpGDdm3Xh+YVavjS3j2UMmoIhzCKfgW2jWDmF4Tvteiy1MLHlH0D/Eg CfO7DkqOjcB6e+S5JX1kniCvlr3pd6lzMzXn4cWyFg/HklxjkZzhQcveWIi3mlUC 6GCoTkU9JG7paAQWMt+CymycrQmOqPEwfSqDJ8xdDaQ2Bq6dpPXJ8WG6z4d8wjpc Nu0Md7LkAwx25UEGaa/XTwaSp1WRUXHNV+JfDEAcig/4odL7a/GoRsdN05Gn1Ne6 WCRs3b7IBPeS8Q== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:43 2025 by rpki-client