This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json) Hash identifier: E7Uawf0czClJ1WGAzXweEHu7NncjScXL97qGIw6Onvk= Subject key identifier: 95:49:1A:98:B5:44:34:53:B1:8A:55:05:93:C9:D6:61:A6:83:EC:F0 Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Certificate serial: 019B5C773C5250E0FCC8066D0EF8EBCD6A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft Manifest number: 0CDE Signing time: Fri 26 Dec 2025 21:01:16 +0000 Manifest this update: Fri 26 Dec 2025 21:01:16 +0000 Manifest next update: Sat 27 Dec 2025 21:01:16 +0000 Files and hashes: 1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=) 2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: +0WmQ1d0F6sos9r2kZlt6ZO7UuUT5q0n2g6j3iCLgCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:77:3c:52:50:e0:fc:c8:06:6d:0e:f8:eb:cd:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Validity Not Before: Dec 26 21:01:16 2025 GMT Not After : Dec 27 21:01:16 2025 GMT Subject: CN=95491a98b5443453b18a550593c9d661a683ecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:f0:33:fe:36:00:26:11:80:4c:c6:d8:45: 26:0b:dc:22:5f:2b:bf:7d:ff:af:61:0e:cd:5f:c6: 48:02:98:03:c9:ab:68:9b:93:b4:15:ad:6e:3e:eb: f0:df:cb:6d:d7:d4:97:f8:56:32:e1:59:3d:42:f6: 91:1f:b3:22:1c:17:a9:1f:77:af:fa:02:e3:fe:ab: 3a:70:f0:67:f1:69:b7:24:e2:e7:13:18:bb:19:90: 2a:e9:a8:6e:e6:26:bf:af:f0:a6:53:f1:a3:4c:4c: 69:85:4b:6c:c5:f1:cd:7f:29:16:97:aa:60:e6:24: a5:8e:83:7f:0e:86:87:0c:0e:84:94:a2:af:45:ff: 19:15:25:8f:71:9e:ed:e8:cf:6b:da:d8:ae:79:b5: 29:e2:18:58:16:e8:e7:4a:b6:b8:c9:88:61:97:3c: c5:b1:fb:09:a8:3b:1d:ff:10:e1:a3:e4:ec:af:b1: 70:73:98:40:d9:b4:da:95:e5:ee:dd:24:45:8f:10: 22:3c:dc:8b:42:43:6c:23:c6:23:86:47:e6:24:31: 73:24:fb:85:e0:5c:6c:db:c8:d7:7a:8d:89:1a:ff: bd:02:c5:bd:b1:9c:77:44:7b:72:2f:a6:96:c5:48: 75:0c:27:cc:ef:78:4b:8f:fb:56:09:f2:f1:ac:9e: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:1A:98:B5:44:34:53:B1:8A:55:05:93:C9:D6:61:A6:83:EC:F0 X509v3 Authority Key Identifier: keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e2:82:c5:35:71:53:f5:95:bb:62:17:9d:f6:23:50:43:55: 83:69:9c:38:71:f4:50:f3:40:6b:68:cb:25:84:5a:ba:fe:4b: b8:78:14:5f:39:dd:5f:7a:f8:6f:17:6b:09:68:39:16:b4:ea: 22:83:db:21:ec:44:d0:25:6d:5d:e3:3c:1f:45:3b:a0:1a:c7: de:70:e1:e9:54:f4:7e:5c:f5:47:bf:5c:60:1f:60:37:8a:ce: 04:f6:ce:69:f1:9b:9e:92:ba:d6:07:27:13:05:07:db:f8:28: ef:3d:cb:2f:68:1e:7a:59:15:ab:71:a4:2b:1f:73:00:6c:ce: 2b:48:82:9f:60:e4:89:7c:b9:c5:b2:c5:82:fb:a9:7d:6c:d6: 1d:50:07:8f:01:c4:7e:b1:af:32:c3:7f:9c:0e:fc:cd:6a:db: 1e:5d:81:b5:69:9e:9a:c6:8d:88:84:75:a7:f0:f2:6e:b5:86: 89:02:73:03:be:a0:4b:be:ef:5d:15:09:bf:8a:47:c2:53:94: 50:a9:f8:01:ce:09:c0:1f:2a:41:02:4f:c1:05:45:5a:6f:d1: 7d:f6:19:e6:46:08:b0:25:05:86:be:2d:28:21:4b:71:37:91: 23:fd:45:0b:c9:b9:b4:87:3c:b7:04:2a:76:df:a4:5d:24:3d: 4c:cb:26:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdzxSUOD8yAZtDvjrzWo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDczN2NlMWNmYmU2NTMzYjU4ODBiNjZlYTllMjQxM2Nk OWM4MjUwHhcNMjUxMjI2MjEwMTE2WhcNMjUxMjI3MjEwMTE2WjAzMTEwLwYDVQQD Eyg5NTQ5MWE5OGI1NDQzNDUzYjE4YTU1MDU5M2M5ZDY2MWE2ODNlY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU/wM/42ACYRgEzG2EUmC9wiXyu/ ff+vYQ7NX8ZIApgDyatom5O0Fa1uPuvw38tt19SX+FYy4Vk9QvaRH7MiHBepH3ev +gLj/qs6cPBn8Wm3JOLnExi7GZAq6ahu5ia/r/CmU/GjTExphUtsxfHNfykWl6pg 5iSljoN/DoaHDA6ElKKvRf8ZFSWPcZ7t6M9r2tiuebUp4hhYFujnSra4yYhhlzzF sfsJqDsd/xDho+Tsr7Fwc5hA2bTaleXu3SRFjxAiPNyLQkNsI8YjhkfmJDFzJPuF 4Fxs28jXeo2JGv+9AsW9sZx3RHtyL6aWxUh1DCfM73hLj/tWCfLxrJ7V9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVJGpi1RDRTsYpVBZPJ1mGmg+zwMB8GA1UdIwQY MBaAFLgHN84c++ZTO1iAtm6p4kE82cglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEt NGNhZTU0MTkxY2Q1LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEtNGNhZTU0MTkxY2Q1 LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseKCxTVx U/WVu2IXnfYjUENVg2mcOHH0UPNAa2jLJYRauv5LuHgUXzndX3r4bxdrCWg5FrTq IoPbIexE0CVtXeM8H0U7oBrH3nDh6VT0flz1R79cYB9gN4rOBPbOafGbnpK61gcn EwUH2/go7z3LL2geelkVq3GkKx9zAGzOK0iCn2DkiXy5xbLFgvupfWzWHVAHjwHE frGvMsN/nA78zWrbHl2BtWmemsaNiIR1p/DybrWGiQJzA76gS77vXRUJv4pHwlOU UKn4Ac4JwB8qQQJPwQVFWm/RffYZ5kYIsCUFhr4tKCFLcTeRI/1FC8m5tIc8twQq dt+kXSQ9TMsmYw== -----END CERTIFICATE-----Generated at Sat Dec 27 04:51:23 2025 by rpki-client