This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json) Hash identifier: 5AKRgVh41OXyYAvERTSkdlVqD/QFhrI7D4Nmdm3Gqlw= Subject key identifier: BF:4B:6C:18:CD:EB:26:67:B1:04:53:41:E4:6D:05:03:BA:04:D1:D1 Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb Certificate serial: 019B341FF0C867349C830B1E206F9D629172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft Manifest number: 1749 Signing time: Fri 19 Dec 2025 01:01:07 +0000 Manifest this update: Fri 19 Dec 2025 01:01:07 +0000 Manifest next update: Sat 20 Dec 2025 01:01:07 +0000 Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=) 2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 9DCDmDPAbrJ4BPMhU90Yv/RPhgaHZCutFjioJfoQySo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:f0:c8:67:34:9c:83:0b:1e:20:6f:9d:62:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb Validity Not Before: Dec 19 01:01:07 2025 GMT Not After : Dec 20 01:01:07 2025 GMT Subject: CN=bf4b6c18cdeb2667b1045341e46d0503ba04d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:64:46:f1:39:af:06:6b:bc:a5:e1:c8:f3: 8f:8e:85:2b:f6:e2:df:c7:1d:3f:0e:78:74:98:9d: a9:db:10:96:28:c7:a0:2d:72:3e:d2:9e:91:fd:36: a7:f0:b8:d7:29:8d:56:65:4f:69:d0:cb:46:f3:24: e1:37:59:96:14:73:a7:a4:35:58:91:c3:38:2d:bd: d7:2b:24:11:ed:6a:d7:dc:06:56:4c:5a:c0:ba:87: 19:d1:e8:c8:6e:31:0f:df:ea:8f:69:2e:1e:25:ee: fb:65:78:18:5c:25:4b:6b:f2:50:7b:d9:68:da:34: 42:1b:c6:bd:7b:8c:48:20:6c:26:e9:3d:a1:c9:09: ac:71:1a:85:00:39:d5:28:8d:b1:76:ff:32:06:82: 7a:29:33:63:35:5b:57:4b:8f:47:68:a9:5e:e3:2e: 7f:4a:0d:7f:02:d5:e8:bd:46:40:5b:e0:49:17:fb: 1f:f5:da:41:a9:99:b9:c6:ac:fa:71:2c:7a:89:48: 62:da:42:a5:a4:3c:85:99:78:c9:c1:24:40:50:8e: a2:3c:21:97:f2:bf:8f:56:e8:c8:4e:8e:f0:db:94: 0d:e2:ee:42:1c:3a:81:7a:dc:be:58:f9:e3:7a:c5: 0e:c1:73:12:2f:f8:70:90:d1:c5:a1:6a:29:2e:ca: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4B:6C:18:CD:EB:26:67:B1:04:53:41:E4:6D:05:03:BA:04:D1:D1 X509v3 Authority Key Identifier: keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:11:bf:c0:0e:3a:ee:93:d6:44:8e:12:8a:4b:ed:89:69:22: a3:39:1c:c9:2f:e7:b5:df:50:cb:ea:da:68:0b:ff:7f:88:1d: ac:92:2f:17:36:01:b4:cc:e7:8c:cc:a9:26:57:ab:87:49:94: aa:6d:9c:e5:f7:41:03:b5:02:42:d0:c1:30:bb:02:a7:55:16: 1f:16:a7:1c:28:3e:74:88:15:b2:ef:a7:7d:ab:a1:cf:45:5f: cd:43:c4:c6:31:01:03:2b:20:37:a6:62:7d:57:86:6d:d1:3e: ce:60:ff:cd:92:4d:ae:2a:25:14:1a:bd:61:e9:ce:15:af:0e: 82:92:d3:df:50:a6:cb:6a:cd:b4:fe:58:19:eb:d5:e9:3d:67: 50:0e:bb:12:24:de:38:1b:f9:18:3d:9b:b9:39:73:c6:7e:45: b6:08:30:82:28:06:0e:64:3d:b0:40:5c:bc:90:22:32:0d:05: d2:a1:ec:58:58:aa:f1:d5:7f:c1:6d:24:68:6f:58:cd:3e:9b: 1a:56:65:5d:fe:e6:84:27:44:bc:b6:b0:2a:f3:78:f5:a5:a3: 71:aa:ad:09:4e:db:e9:2c:37:6f:f7:a6:a0:27:ed:a6:21:6a: 62:1a:c5:c0:ed:8c:cd:34:90:e1:48:8d:8d:21:b6:b9:24:e1: 0a:d3:76:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/DIZzScgwseIG+dYpFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx MTlhYmIwHhcNMjUxMjE5MDEwMTA3WhcNMjUxMjIwMDEwMTA3WjAzMTEwLwYDVQQD EyhiZjRiNmMxOGNkZWIyNjY3YjEwNDUzNDFlNDZkMDUwM2JhMDRkMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMlkRvE5rwZrvKXhyPOPjoUr9uLf xx0/Dnh0mJ2p2xCWKMegLXI+0p6R/Tan8LjXKY1WZU9p0MtG8yThN1mWFHOnpDVY kcM4Lb3XKyQR7WrX3AZWTFrAuocZ0ejIbjEP3+qPaS4eJe77ZXgYXCVLa/JQe9lo 2jRCG8a9e4xIIGwm6T2hyQmscRqFADnVKI2xdv8yBoJ6KTNjNVtXS49HaKle4y5/ Sg1/AtXovUZAW+BJF/sf9dpBqZm5xqz6cSx6iUhi2kKlpDyFmXjJwSRAUI6iPCGX 8r+PVujITo7w25QN4u5CHDqBety+WPnjesUOwXMSL/hwkNHFoWopLspsJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9LbBjN6yZnsQRTQeRtBQO6BNHRMB8GA1UdIwQY MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5 LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxG/wA46 7pPWRI4SikvtiWkiozkcyS/ntd9Qy+raaAv/f4gdrJIvFzYBtMznjMypJlerh0mU qm2c5fdBA7UCQtDBMLsCp1UWHxanHCg+dIgVsu+nfauhz0VfzUPExjEBAysgN6Zi fVeGbdE+zmD/zZJNriolFBq9YenOFa8OgpLT31Cmy2rNtP5YGevV6T1nUA67EiTe OBv5GD2buTlzxn5FtggwgigGDmQ9sEBcvJAiMg0F0qHsWFiq8dV/wW0kaG9YzT6b GlZlXf7mhCdEvLawKvN49aWjcaqtCU7b6Sw3b/emoCftpiFqYhrFwO2MzTSQ4UiN jSG2uSThCtN2zQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:56:47 2025 by rpki-client