This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json) Hash identifier: BekqtvfN5eMTon++ytJofj1UKwhQbHf3AlMd2KfzBN0= Subject key identifier: 3A:D3:55:87:74:27:81:78:B8:74:1E:B1:53:2E:7A:D0:35:E5:F2:6F Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc Certificate serial: 019B454A66CCB542AAC7D7D660FEE17014C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 09:01:02 +0000 Manifest this update: Mon 22 Dec 2025 09:01:02 +0000 Manifest next update: Tue 23 Dec 2025 09:01:02 +0000 Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: 2W+dyt+eOyxxWSuEU4/DEJJYgsVQZemXSiBFahfLVKQ=) 2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:66:cc:b5:42:aa:c7:d7:d6:60:fe:e1:70:14:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc Validity Not Before: Dec 22 09:01:02 2025 GMT Not After : Dec 23 09:01:02 2025 GMT Subject: CN=3ad3558774278178b8741eb1532e7ad035e5f26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:e7:50:cd:30:34:95:df:5f:52:52:33:61: 12:b3:d2:08:0b:be:fa:07:a3:39:61:5c:08:1f:b8: 9d:31:f5:32:59:2a:d1:5d:fd:ef:dd:a7:29:5f:eb: 4a:e5:7f:e9:89:d7:61:66:41:f9:e9:4b:f6:86:39: ad:e4:f6:8d:6b:ff:07:5a:0d:d4:90:95:87:4e:94: b1:6c:7a:48:71:a6:75:4f:9f:c2:f8:8c:a5:65:d1: 3c:b3:5c:22:81:80:f1:05:ee:ce:61:4f:91:08:14: 5f:c7:78:c5:58:aa:0b:da:84:7c:58:97:e9:06:c1: 76:6d:92:1d:ab:ae:d7:c4:ea:12:a5:82:56:c4:83: 58:dd:5c:13:a2:07:f4:33:ee:12:bf:3b:23:8e:b9: a1:42:38:70:4c:03:f3:4d:4a:2d:e4:81:fe:fd:0c: e0:06:60:8d:df:0d:5e:0e:40:db:1e:c7:f9:a7:96: 52:aa:93:cc:b6:c3:c3:c7:89:3e:f4:13:67:d0:c7: 51:86:92:55:80:13:b4:79:f4:9d:2f:d3:06:70:ef: 18:d9:25:a2:71:a4:08:83:ba:aa:ba:3e:b8:0e:e5: 4a:a4:9f:42:7f:22:c8:1f:bb:a1:d3:09:98:45:9a: 89:44:8f:eb:c1:6d:31:e4:96:c9:76:92:d1:87:b0: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:55:87:74:27:81:78:B8:74:1E:B1:53:2E:7A:D0:35:E5:F2:6F X509v3 Authority Key Identifier: keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:4b:12:e3:1e:33:cc:57:80:ad:a1:9e:a5:c6:78:b1:d8: 93:7f:d5:0b:2d:f9:3c:92:5d:f2:62:0a:2d:eb:d8:fd:3f:82: c3:7f:30:8d:c7:9f:14:28:30:cf:a2:7a:59:32:e5:c9:02:b5: 04:f3:9c:fb:2d:e5:e3:e7:f8:1a:c6:1f:44:ef:8b:b4:02:7b: 6e:86:95:8b:d4:96:f5:30:02:2c:23:e5:1b:79:41:e6:aa:e4: f2:67:46:59:d9:10:a8:30:fc:24:33:d0:c6:67:88:5d:bf:bd: 52:7d:0a:d6:5d:de:7c:17:f5:e1:0d:f3:4b:67:48:03:74:54: 5f:07:99:8e:2d:a9:ce:ac:1b:92:38:41:6f:6d:8b:80:31:f4: e9:9b:32:5d:29:7d:40:30:cd:8e:9e:e7:a0:e8:66:91:00:a8: e3:9f:a0:59:c7:60:87:80:6e:b8:03:b7:eb:03:5d:72:27:f7: e3:d4:e4:ae:3f:80:f2:6c:cc:07:83:25:46:59:42:07:29:35: 93:20:be:38:3e:ba:d2:49:bd:ab:8d:02:19:79:40:5e:f3:65: c8:76:0f:68:ea:ee:6b:2b:ae:e4:db:15:f0:a2:df:10:72:4c: 43:b6:28:16:18:f5:35:11:37:4a:e7:c5:54:0a:16:f5:f0:f4: ad:a2:30:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSmbMtUKqx9fWYP7hcBTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMTVmZTgzOTQ4Y2ZjN2QzZTAwNzI4NzBjNzAzZmEzMTM1 MDJjYmMwHhcNMjUxMjIyMDkwMTAyWhcNMjUxMjIzMDkwMTAyWjAzMTEwLwYDVQQD EygzYWQzNTU4Nzc0Mjc4MTc4Yjg3NDFlYjE1MzJlN2FkMDM1ZTVmMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQrnUM0wNJXfX1JSM2ESs9IIC776 B6M5YVwIH7idMfUyWSrRXf3v3acpX+tK5X/piddhZkH56Uv2hjmt5PaNa/8HWg3U kJWHTpSxbHpIcaZ1T5/C+IylZdE8s1wigYDxBe7OYU+RCBRfx3jFWKoL2oR8WJfp BsF2bZIdq67XxOoSpYJWxINY3VwTogf0M+4SvzsjjrmhQjhwTAPzTUot5IH+/Qzg BmCN3w1eDkDbHsf5p5ZSqpPMtsPDx4k+9BNn0MdRhpJVgBO0efSdL9MGcO8Y2SWi caQIg7qquj64DuVKpJ9CfyLIH7uh0wmYRZqJRI/rwW0x5JbJdpLRh7A6mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrTVYd0J4F4uHQesVMuetA15fJvMB8GA1UdIwQY MBaAFFIV/oOUjPx9PgByhwxwP6MTUCy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYt ZWY5ODE0Y2ZmMmI4LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYtZWY5ODE0Y2ZmMmI4 LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIClLEuMe M8xXgK2hnqXGeLHYk3/VCy35PJJd8mIKLevY/T+Cw38wjcefFCgwz6J6WTLlyQK1 BPOc+y3l4+f4GsYfRO+LtAJ7boaVi9SW9TACLCPlG3lB5qrk8mdGWdkQqDD8JDPQ xmeIXb+9Un0K1l3efBf14Q3zS2dIA3RUXweZji2pzqwbkjhBb22LgDH06ZsyXSl9 QDDNjp7noOhmkQCo45+gWcdgh4BuuAO36wNdcif349Tkrj+A8mzMB4MlRllCByk1 kyC+OD660km9q40CGXlAXvNlyHYPaOruayuu5NsV8KLfEHJMQ7YoFhj1NRE3SufF VAoW9fD0raIwcA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:22 2025 by rpki-client