This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft File: uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json) Hash identifier: b9avm4k2nT9qrQMMy+/qaYPAPff5wnHf0eNFF8NbFxI= Subject key identifier: 1A:17:C6:0B:70:ED:3E:22:68:11:D8:4E:03:4C:A1:77:3C:FD:F2:D6 Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Certificate serial: 019B3C7E4485B47EEF69C70D9EDA61B3FF69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:06 +0000 Manifest this update: Sat 20 Dec 2025 16:01:06 +0000 Manifest next update: Sun 21 Dec 2025 16:01:06 +0000 Files and hashes: 1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=) 2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: WRVitwJNKIan/ze0mzZ0EsxA4M9Q0Gcb2BcB1pS7Hj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:44:85:b4:7e:ef:69:c7:0d:9e:da:61:b3:ff:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Validity Not Before: Dec 20 16:01:06 2025 GMT Not After : Dec 21 16:01:06 2025 GMT Subject: CN=1a17c60b70ed3e226811d84e034ca1773cfdf2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:05:4a:30:f8:f4:59:5a:de:db:3f:83:51: c1:04:47:7c:e1:93:b8:60:34:8f:73:ac:0a:db:35: 3d:79:32:21:10:1f:5d:2b:ea:e1:b1:33:b8:73:02: a0:62:c1:92:0d:5c:ce:fc:b0:78:43:87:1d:9e:5c: 93:1b:3f:0d:eb:82:d8:e2:67:b8:02:04:eb:d6:6c: bb:09:87:bc:d5:66:fe:99:49:dc:5b:35:4e:cf:17: 6a:d1:24:5f:f3:01:75:5f:ca:cf:ea:0c:35:c3:a9: d0:3a:f3:a5:3a:2b:7b:cd:c1:51:86:5b:94:ac:2e: b4:9c:cf:2a:44:ab:8f:65:bd:e8:0f:86:e6:4d:67: 98:93:4b:38:be:04:a6:8c:fc:52:a5:32:0f:dc:5b: 63:05:19:d8:c6:ea:cd:75:be:86:6d:fc:db:ea:85: ec:c6:6f:8e:1b:8a:2a:fa:b7:83:b6:30:88:b3:12: b6:61:8f:e6:ba:78:33:ad:56:28:27:c0:08:99:e8: e8:a2:f8:31:ba:2d:32:5c:a3:e2:95:d9:3c:f8:63: 53:2f:e7:f8:1d:8b:d5:9d:f6:8f:cc:f0:c7:f0:fb: 93:40:00:be:da:4a:93:40:3f:27:f0:80:99:92:9a: 03:1c:e8:47:66:4a:9e:33:b7:ce:1d:db:ab:40:63: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:C6:0B:70:ED:3E:22:68:11:D8:4E:03:4C:A1:77:3C:FD:F2:D6 X509v3 Authority Key Identifier: keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e9:2d:21:f7:ea:37:2b:c4:37:24:f1:ee:71:c9:9e:8f:25: 95:6b:dd:eb:f5:60:a3:8c:2f:42:45:d1:25:5d:35:af:70:fd: 9f:e5:70:c9:b6:14:c7:82:a8:f0:7f:a8:86:c5:00:92:7b:a7: 68:22:e8:7c:24:6d:11:71:dc:f6:b4:03:9d:42:4d:28:30:a7: 75:02:2a:8d:e0:e6:8a:e7:20:26:b0:db:5b:59:88:a0:80:31: b2:22:af:f9:58:72:be:45:d9:c6:a2:3e:29:0d:c9:bc:58:c8: 52:55:b0:6d:82:81:b8:8b:09:eb:94:ad:1d:0c:9f:f5:46:73: d0:f1:be:a9:1f:18:28:66:21:3c:c3:1d:6c:35:20:ca:c2:be: c4:51:b4:11:d6:f4:76:41:83:3b:97:96:12:56:df:6c:92:3f: 0e:97:c8:49:32:62:1a:7e:97:fc:16:52:bd:f9:25:1d:7b:b3: 86:9c:08:17:2f:16:21:00:72:e4:8d:38:3d:81:0d:6d:51:c1: 27:74:a8:c8:e4:f2:ee:86:9d:9f:bc:0c:fa:f4:d2:f3:75:08: 9c:bc:24:fa:05:45:48:35:e3:f0:df:92:ed:9e:cc:ff:09:62: 71:2a:48:2d:67:b5:c6:f4:46:dd:8a:d4:4f:78:9a:41:fd:08: 9e:4f:ff:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkSFtH7vaccNntphs/9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTdmNzFiY2Y1MmVkNmQwNWI3ZWIzYjc0MWVjNzkwNmU3 N2RjY2EwHhcNMjUxMjIwMTYwMTA2WhcNMjUxMjIxMTYwMTA2WjAzMTEwLwYDVQQD EygxYTE3YzYwYjcwZWQzZTIyNjgxMWQ4NGUwMzRjYTE3NzNjZmRmMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq70FSjD49Fla3ts/g1HBBEd84ZO4 YDSPc6wK2zU9eTIhEB9dK+rhsTO4cwKgYsGSDVzO/LB4Q4cdnlyTGz8N64LY4me4 AgTr1my7CYe81Wb+mUncWzVOzxdq0SRf8wF1X8rP6gw1w6nQOvOlOit7zcFRhluU rC60nM8qRKuPZb3oD4bmTWeYk0s4vgSmjPxSpTIP3FtjBRnYxurNdb6Gbfzb6oXs xm+OG4oq+reDtjCIsxK2YY/mungzrVYoJ8AImejoovgxui0yXKPildk8+GNTL+f4 HYvVnfaPzPDH8PuTQAC+2kqTQD8n8ICZkpoDHOhHZkqeM7fOHdurQGP8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoXxgtw7T4iaBHYTgNMoXc8/fLWMB8GA1UdIwQY MBaAFLnn9xvPUu1tBbfrO3Qex5Bud9zKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQt YjVjZDEzZDkxODRjLzEvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjE2OTUtN2FkNi00ZDI0LTgwNmQtYjVjZDEzZDkxODRj LzEvdWVmM0c4OVM3VzBGdC1zN2RCN0hrRzUzM01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOktIffq NyvENyTx7nHJno8llWvd6/Vgo4wvQkXRJV01r3D9n+VwybYUx4Ko8H+ohsUAknun aCLofCRtEXHc9rQDnUJNKDCndQIqjeDmiucgJrDbW1mIoIAxsiKv+VhyvkXZxqI+ KQ3JvFjIUlWwbYKBuIsJ65StHQyf9UZz0PG+qR8YKGYhPMMdbDUgysK+xFG0Edb0 dkGDO5eWElbfbJI/DpfISTJiGn6X/BZSvfklHXuzhpwIFy8WIQBy5I04PYENbVHB J3SoyOTy7oadn7wM+vTS83UInLwk+gVFSDXj8N+S7Z7M/wlicSpILWe1xvRG3YrU T3iaQf0Ink//4w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:44 2025 by rpki-client