This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json) Hash identifier: PorhJ/41t3dQbqreGtYpq5E96paTN73BoOyNjcqDP+E= Subject key identifier: 47:B9:04:3A:31:8E:D9:5E:63:91:14:A8:77:0B:5E:83:B3:1E:4B:3E Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Certificate serial: 019B530648C5714EB14E4F5E7A7CEAC0A3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft Manifest number: 1576 Signing time: Thu 25 Dec 2025 01:01:19 +0000 Manifest this update: Thu 25 Dec 2025 01:01:19 +0000 Manifest next update: Fri 26 Dec 2025 01:01:19 +0000 Files and hashes: 1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: 5S7sJGjq9UK/Fo8PhUfNg3fk0kA3/9eNeLKTAvMLV4M=) 2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:48:c5:71:4e:b1:4e:4f:5e:7a:7c:ea:c0:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45 Validity Not Before: Dec 25 01:01:19 2025 GMT Not After : Dec 26 01:01:19 2025 GMT Subject: CN=47b9043a318ed95e639114a8770b5e83b31e4b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:b1:1a:69:f5:78:e3:d8:b5:56:1a:57:53: 63:47:c5:f5:53:d3:18:cb:34:03:10:b3:bd:40:a9: 46:da:02:22:82:54:55:ad:3b:fe:98:ab:93:65:85: 89:38:ed:55:f7:52:50:d9:f5:df:e8:86:ee:8a:5a: ab:f6:b3:5c:71:f6:72:f4:a8:fa:b4:c1:69:a0:c5: cc:be:b1:93:74:9a:cd:d9:23:26:e2:cc:d2:74:62: 45:8b:7b:1d:af:fb:f0:52:e1:59:c7:81:9b:46:ba: 1b:59:e1:13:c3:27:3c:19:46:9e:b0:67:ac:2c:75: f3:c2:f3:6f:eb:62:75:67:a8:90:1b:3f:91:9c:8d: cd:a4:c9:63:20:1f:4f:fa:48:12:1c:5e:72:c4:d7: b8:fe:0e:f2:f1:e9:9e:84:03:16:a6:29:f5:cc:be: f1:12:1f:2f:61:af:55:a3:ab:97:d9:dd:0f:bc:bb: 34:5b:dc:e6:f4:f4:13:71:f3:d2:96:cf:80:86:3e: ba:9f:e6:43:26:06:05:2f:13:16:69:da:70:01:b0: 1e:be:9e:8a:32:83:e7:80:29:de:f9:80:13:a2:55: c3:58:04:62:5d:8c:46:40:63:26:9d:35:55:52:97: 3e:d5:36:2a:eb:6f:ef:50:90:08:79:b7:f6:03:7f: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:04:3A:31:8E:D9:5E:63:91:14:A8:77:0B:5E:83:B3:1E:4B:3E X509v3 Authority Key Identifier: keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:89:b7:1b:88:65:bf:5d:2a:88:92:9b:c0:94:ea:d7:28:c9: 58:ce:85:70:be:0d:e3:1b:be:31:05:96:c7:25:f1:ea:03:83: c8:3d:c3:aa:f4:32:94:6a:02:40:66:35:99:58:a5:6a:d0:52: ae:d8:f7:26:7c:f7:91:cd:f1:8a:0c:25:96:c5:ad:68:ff:36: 92:25:ab:d0:37:93:7f:d4:36:18:6a:35:e5:37:e5:f9:4b:15: 61:e1:0a:a5:ce:0d:2e:0f:8a:41:da:f2:f4:74:4a:9c:2f:66: 09:c2:59:61:81:8f:b4:6f:d6:df:2c:3d:cb:10:06:47:bd:57: 5c:cd:f5:49:5a:55:f0:f1:45:7a:d3:f6:ab:4d:44:9e:f1:67: 0d:bb:d4:1b:e3:72:a7:a5:c9:29:89:00:5a:84:6d:32:d0:90: a3:da:00:8c:fb:f8:48:cc:32:ba:4c:70:12:ca:18:fc:1d:58: cf:10:9a:6a:10:ad:9d:b2:19:c0:04:6b:32:42:92:ea:42:03: c7:05:2c:f5:5e:5e:31:97:3f:db:df:4c:1e:11:73:d5:2c:f1: ae:d4:15:7c:7e:f0:2a:e6:55:28:f6:f1:ce:a8:2b:4a:f7:9c: 8e:3d:2e:88:3b:9e:b1:b3:1b:fc:7a:e1:12:4b:78:c7:40:28: 8e:5a:9e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBkjFcU6xTk9eenzqwKPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWEwMWFiMzUyNmI4ZWJiOGFmYjE3Yjk4YTcxMjdmMGY1 NGNhNDUwHhcNMjUxMjI1MDEwMTE5WhcNMjUxMjI2MDEwMTE5WjAzMTEwLwYDVQQD Eyg0N2I5MDQzYTMxOGVkOTVlNjM5MTE0YTg3NzBiNWU4M2IzMWU0YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n+xGmn1eOPYtVYaV1NjR8X1U9MY yzQDELO9QKlG2gIiglRVrTv+mKuTZYWJOO1V91JQ2fXf6Ibuilqr9rNccfZy9Kj6 tMFpoMXMvrGTdJrN2SMm4szSdGJFi3sdr/vwUuFZx4GbRrobWeETwyc8GUaesGes LHXzwvNv62J1Z6iQGz+RnI3NpMljIB9P+kgSHF5yxNe4/g7y8emehAMWpin1zL7x Eh8vYa9Vo6uX2d0PvLs0W9zm9PQTcfPSls+Ahj66n+ZDJgYFLxMWadpwAbAevp6K MoPngCne+YATolXDWARiXYxGQGMmnTVVUpc+1TYq62/vUJAIebf2A39XHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe5BDoxjtleY5EUqHcLXoOzHks+MB8GA1UdIwQY MBaAFLmqAas1JrjruK+xe5inEn8PVMpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEt NWE3YmZiM2NkMDhiLzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEtNWE3YmZiM2NkMDhi LzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYm3G4hl v10qiJKbwJTq1yjJWM6FcL4N4xu+MQWWxyXx6gODyD3DqvQylGoCQGY1mVilatBS rtj3Jnz3kc3xigwllsWtaP82kiWr0DeTf9Q2GGo15Tfl+UsVYeEKpc4NLg+KQdry 9HRKnC9mCcJZYYGPtG/W3yw9yxAGR71XXM31SVpV8PFFetP2q01EnvFnDbvUG+Ny p6XJKYkAWoRtMtCQo9oAjPv4SMwyukxwEsoY/B1YzxCaahCtnbIZwARrMkKS6kID xwUs9V5eMZc/299MHhFz1SzxrtQVfH7wKuZVKPbxzqgrSvecjj0uiDuesbMb/Hrh Ekt4x0Aojlqezg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:00:55 2025 by rpki-client