This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json) Hash identifier: EOjTnkKPbAzXM1yXWUJo0asQmLT65DmSiLFzIBy27QA= Subject key identifier: 0F:24:93:D6:23:46:F6:24:9E:39:3D:38:43:7C:44:09:27:13:E8:EE Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Certificate serial: 019B3EDA36734D49B5004D42772111B93F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft Manifest number: 0398 Signing time: Sun 21 Dec 2025 03:00:46 +0000 Manifest this update: Sun 21 Dec 2025 03:00:46 +0000 Manifest next update: Mon 22 Dec 2025 03:00:46 +0000 Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=) 2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: 8cfLg51t/Q/ocTPl4at4jzjyc4yU6mTPDOuGTTwm9VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:36:73:4d:49:b5:00:4d:42:77:21:11:b9:3f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Validity Not Before: Dec 21 03:00:46 2025 GMT Not After : Dec 22 03:00:46 2025 GMT Subject: CN=0f2493d62346f6249e393d38437c44092713e8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:21:88:39:00:49:ad:9b:0c:25:1a:17:a7: 6d:60:15:22:08:d8:5e:fc:e7:32:89:5e:72:e3:1f: 05:55:8c:c5:3b:ff:eb:1c:22:2c:8f:56:55:c7:96: c0:38:6e:12:97:d4:08:78:4a:71:df:c8:dd:f2:26: 1e:c4:7b:2c:c2:7f:fc:c5:cb:4c:b5:b1:57:a8:b7: 22:5a:0c:2c:ae:f9:8a:32:3d:6d:07:0f:50:38:73: 09:aa:54:1b:bd:f9:47:4f:29:ec:be:45:65:1c:1c: de:c1:2b:97:92:ab:6b:11:f0:6f:88:36:48:2a:bc: fb:23:ef:f1:5e:af:5d:58:2f:ee:73:b3:1a:ce:6f: 4e:bf:47:49:76:a2:b5:40:0e:a4:50:1a:99:d5:3a: 4c:84:79:b6:33:c4:cf:17:a4:ed:63:9f:60:55:43: 0d:19:77:df:64:cd:92:f7:06:95:6d:a9:58:03:1d: 67:01:7c:47:cf:93:98:74:ba:e6:6b:93:c6:17:be: 51:18:f0:44:62:7b:14:09:e8:83:99:ec:a3:40:8d: 54:74:82:f1:6c:74:da:96:fe:9c:83:cf:6e:6f:30: 3b:0b:01:20:b7:01:88:fc:1c:24:97:c1:e8:9e:f2: ac:cc:90:c1:d2:31:2e:fd:21:fa:fb:26:9c:d4:e5: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:93:D6:23:46:F6:24:9E:39:3D:38:43:7C:44:09:27:13:E8:EE X509v3 Authority Key Identifier: keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f6:18:50:90:56:01:ec:2f:2c:01:2b:dd:85:83:04:b0:58: d8:95:7f:f7:0f:33:3a:75:a7:40:b2:c4:ff:f1:00:65:91:f8: 63:b7:a5:6b:b8:21:10:9f:23:c3:90:11:92:62:6a:7a:f4:27: 70:a2:a4:e4:fd:98:40:b8:13:c8:d8:18:80:a7:55:cc:dc:a3: cb:62:e7:14:f1:f0:59:fb:2b:64:80:bb:64:3b:e9:da:1e:46: 2a:74:ac:9b:0e:7e:cf:30:64:ba:41:f0:f1:95:25:de:de:af: 30:cc:93:4a:2b:19:82:00:ee:b3:31:ae:f1:65:e5:f7:5c:a1: 76:c5:ae:07:ed:ca:85:82:d4:1d:07:3f:ed:23:60:a9:ce:9f: 20:64:c6:3e:d5:98:bf:8d:fd:a5:d1:3f:8f:d8:f4:0e:9a:ea: ef:b1:23:d6:19:59:6f:90:f2:b1:62:21:15:c3:7b:1d:a2:e4: de:84:15:51:b3:46:34:d5:4c:2f:d7:7f:ce:2d:e5:53:85:5b: fd:bb:ce:6e:d9:c5:76:12:95:0a:86:c3:c6:d7:a0:69:e3:98: d6:c2:7a:9d:c0:b4:b1:1d:62:ab:98:6e:80:aa:db:ab:2e:6e: 35:9e:29:34:c9:53:f1:f0:a0:25:2c:6d:6b:43:9b:5a:4c:ee: 20:43:99:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2jZzTUm1AE1CdyERuT+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj ZDFmOGYwHhcNMjUxMjIxMDMwMDQ2WhcNMjUxMjIyMDMwMDQ2WjAzMTEwLwYDVQQD EygwZjI0OTNkNjIzNDZmNjI0OWUzOTNkMzg0MzdjNDQwOTI3MTNlOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwshiDkASa2bDCUaF6dtYBUiCNhe /OcyiV5y4x8FVYzFO//rHCIsj1ZVx5bAOG4Sl9QIeEpx38jd8iYexHsswn/8xctM tbFXqLciWgwsrvmKMj1tBw9QOHMJqlQbvflHTynsvkVlHBzewSuXkqtrEfBviDZI Krz7I+/xXq9dWC/uc7Mazm9Ov0dJdqK1QA6kUBqZ1TpMhHm2M8TPF6TtY59gVUMN GXffZM2S9waVbalYAx1nAXxHz5OYdLrma5PGF75RGPBEYnsUCeiDmeyjQI1UdILx bHTalv6cg89ubzA7CwEgtwGI/Bwkl8HonvKszJDB0jEu/SH6+yac1OV6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8kk9YjRvYknjk9OEN8RAknE+juMB8GA1UdIwQY MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPYYUJBW AewvLAEr3YWDBLBY2JV/9w8zOnWnQLLE//EAZZH4Y7ela7ghEJ8jw5ARkmJqevQn cKKk5P2YQLgTyNgYgKdVzNyjy2LnFPHwWfsrZIC7ZDvp2h5GKnSsmw5+zzBkukHw 8ZUl3t6vMMyTSisZggDuszGu8WXl91yhdsWuB+3KhYLUHQc/7SNgqc6fIGTGPtWY v439pdE/j9j0Dprq77Ej1hlZb5DysWIhFcN7HaLk3oQVUbNGNNVML9d/zi3lU4Vb /bvObtnFdhKVCobDxtegaeOY1sJ6ncC0sR1iq5hugKrbqy5uNZ4pNMlT8fCgJSxt a0ObWkzuIEOZ3A== -----END CERTIFICATE-----Generated at Sun Dec 21 11:40:15 2025 by rpki-client