This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json) Hash identifier: bO/KywSpZoxtmnw1cd4pLz7G7X6UkAnD/xp0eTmH//w= Subject key identifier: FA:FD:58:3C:AA:37:AD:BF:66:1F:C0:9B:99:3F:58:A8:56:54:1E:28 Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Certificate serial: 019B416D94DE9F445FF9F62F9C7B5DCEAB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft Manifest number: 0CD0 Signing time: Sun 21 Dec 2025 15:00:59 +0000 Manifest this update: Sun 21 Dec 2025 15:00:59 +0000 Manifest next update: Mon 22 Dec 2025 15:00:59 +0000 Files and hashes: 1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=) 2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: zAMvyPr9lOhxygMhRVXl4Z9idgbhyv/mpyuYYCupvSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:94:de:9f:44:5f:f9:f6:2f:9c:7b:5d:ce:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Validity Not Before: Dec 21 15:00:59 2025 GMT Not After : Dec 22 15:00:59 2025 GMT Subject: CN=fafd583caa37adbf661fc09b993f58a856541e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:99:48:74:db:e1:17:f0:cf:eb:95:7f:19: 17:c8:25:61:4c:a1:e4:c3:24:f5:91:03:1b:21:7a: c8:ab:4f:da:e0:8f:2d:4e:4a:43:25:54:b4:43:47: f3:b2:b8:89:98:92:30:6e:2e:4c:59:e9:4f:e7:de: c1:c7:5d:5a:eb:c4:6c:94:ef:46:42:d3:d2:10:4f: 1c:dc:4d:fb:c3:c3:b6:7a:de:89:e1:e8:8c:3c:64: 37:01:14:1e:54:64:96:2f:01:f4:d7:da:5c:ba:0a: 60:37:40:6c:3d:d1:a5:43:e0:88:0d:8d:89:e6:49: 4e:fb:b0:0c:2d:8c:80:47:70:3d:8e:95:08:84:57: 99:7e:74:88:94:d8:76:36:86:c3:cf:73:d2:df:21: 31:6c:6d:e3:d4:bc:06:31:60:de:25:74:ee:c9:34: 9a:e4:72:ae:67:7c:a5:41:f0:85:d3:0b:19:48:3d: 57:d8:31:b1:33:31:15:4a:c8:a7:c0:0a:4e:31:9e: 2e:67:4c:9f:1f:91:87:54:20:ce:cb:cb:ff:f1:e0: 17:91:98:d2:bc:77:46:89:24:ca:fd:f7:38:c1:7f: 97:1f:8c:5b:ab:0f:03:43:5b:8b:99:2a:a1:99:40: 22:ce:05:90:e7:1f:29:05:ce:af:fa:04:63:de:30: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:58:3C:AA:37:AD:BF:66:1F:C0:9B:99:3F:58:A8:56:54:1E:28 X509v3 Authority Key Identifier: keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:b7:e5:af:34:38:80:f1:13:e0:98:b0:10:06:21:58:68: 67:76:b9:6d:0f:c6:1e:64:35:44:6e:81:b7:95:54:68:e7:9a: e5:fe:a8:3a:e4:b1:97:99:0c:79:ed:5b:a9:42:16:aa:91:2d: ae:5d:6d:82:0b:c6:b3:ab:46:a0:f4:d2:bf:f0:33:02:5c:18: bc:cd:6d:a2:ae:a2:bc:66:23:d4:09:11:d8:23:7d:a4:52:ca: cf:fe:a5:90:35:da:de:34:37:96:d8:9c:0f:1f:e1:e8:c8:b8: 45:d8:99:69:9e:3a:04:69:f9:b4:ff:d9:91:b0:1c:d1:0c:34: ed:58:ea:30:68:95:82:4d:19:b2:84:aa:ad:d1:0e:db:a3:b8: 36:7e:fe:fd:c3:44:c2:fa:8b:c9:d2:fd:5e:e4:09:2c:d4:47: f7:9c:a2:ca:cb:ed:d7:8d:d2:a2:8b:cb:92:02:18:3a:60:90: fb:7c:2b:aa:54:8a:23:4e:08:fc:91:c2:c7:ec:b2:3c:bb:16: 36:a1:20:7f:50:95:c8:32:c6:80:eb:fe:6e:7e:68:80:e6:91: 76:10:71:4c:3f:9a:b8:da:e8:95:f5:56:82:8d:1d:21:0b:bc: f5:0f:8f:4f:46:c6:1d:c0:3a:57:4d:f7:77:45:b9:79:89:2e: 95:77:e7:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbZTen0Rf+fYvnHtdzqt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDczN2NlMWNmYmU2NTMzYjU4ODBiNjZlYTllMjQxM2Nk OWM4MjUwHhcNMjUxMjIxMTUwMDU5WhcNMjUxMjIyMTUwMDU5WjAzMTEwLwYDVQQD EyhmYWZkNTgzY2FhMzdhZGJmNjYxZmMwOWI5OTNmNThhODU2NTQxZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeqZSHTb4Rfwz+uVfxkXyCVhTKHk wyT1kQMbIXrIq0/a4I8tTkpDJVS0Q0fzsriJmJIwbi5MWelP597Bx11a68RslO9G QtPSEE8c3E37w8O2et6J4eiMPGQ3ARQeVGSWLwH019pcugpgN0BsPdGlQ+CIDY2J 5klO+7AMLYyAR3A9jpUIhFeZfnSIlNh2NobDz3PS3yExbG3j1LwGMWDeJXTuyTSa 5HKuZ3ylQfCF0wsZSD1X2DGxMzEVSsinwApOMZ4uZ0yfH5GHVCDOy8v/8eAXkZjS vHdGiSTK/fc4wX+XH4xbqw8DQ1uLmSqhmUAizgWQ5x8pBc6v+gRj3jAIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr9WDyqN62/Zh/Am5k/WKhWVB4oMB8GA1UdIwQY MBaAFLgHN84c++ZTO1iAtm6p4kE82cglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEt NGNhZTU0MTkxY2Q1LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82OTZmOTktZjQxMS00ZTJlLWIyNmEtNGNhZTU0MTkxY2Q1 LzEvdUFjM3poejc1bE03V0lDMmJxbmlRVHpaeUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFO35a80 OIDxE+CYsBAGIVhoZ3a5bQ/GHmQ1RG6Bt5VUaOea5f6oOuSxl5kMee1bqUIWqpEt rl1tggvGs6tGoPTSv/AzAlwYvM1toq6ivGYj1AkR2CN9pFLKz/6lkDXa3jQ3ltic Dx/h6Mi4RdiZaZ46BGn5tP/ZkbAc0Qw07VjqMGiVgk0ZsoSqrdEO26O4Nn7+/cNE wvqLydL9XuQJLNRH95yiysvt143SoovLkgIYOmCQ+3wrqlSKI04I/JHCx+yyPLsW NqEgf1CVyDLGgOv+bn5ogOaRdhBxTD+auNrolfVWgo0dIQu89Q+PT0bGHcA6V033 d0W5eYkulXfnjA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:18:13 2025 by rpki-client