This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json) Hash identifier: hYjjCDUIHv/TuuxCvHPqfFJgSIARwn8JpGlTzpu5YHM= Subject key identifier: 8D:90:A9:61:24:0B:1F:21:A9:3E:EF:C8:FA:9B:A0:E8:42:8D:66:51 Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Certificate serial: 019B3532EA8F41F3DC66C43B2A69E348685A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 06:01:27 +0000 Manifest this update: Fri 19 Dec 2025 06:01:27 +0000 Manifest next update: Sat 20 Dec 2025 06:01:27 +0000 Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: HUwuhZ8fdmg+XuesQRpH5P2k7AONxCUzZ6TAaKUSapc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:ea:8f:41:f3:dc:66:c4:3b:2a:69:e3:48:68:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Validity Not Before: Dec 19 06:01:27 2025 GMT Not After : Dec 20 06:01:27 2025 GMT Subject: CN=8d90a961240b1f21a93eefc8fa9ba0e8428d6651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:39:e7:05:12:74:98:76:85:28:8a:ae:ee:e7: 2b:ed:92:d2:ca:43:71:fb:37:94:8e:1f:1c:4d:c8: 69:96:90:f7:71:a2:fa:a2:4e:8f:a5:57:dc:04:09: b5:1f:18:d9:2c:fb:dd:e2:32:10:3a:3d:5b:4f:b0: 26:41:b5:11:07:c9:ad:78:46:81:30:93:8d:a6:c9: 71:6a:a8:1f:61:8d:07:9c:1d:69:d4:33:8f:b2:7c: 7a:21:1a:e1:7b:61:90:a6:9a:16:0a:82:ae:ed:0b: 78:60:bf:6e:9b:97:a3:53:0d:7d:5b:3f:53:de:38: 10:14:87:08:8d:cb:b0:7c:cc:a5:ba:f5:f9:5e:8a: 62:d7:e1:3f:b4:41:07:51:b9:e2:ec:87:16:57:f7: a8:ce:79:da:9b:29:3c:ff:b5:d6:50:dd:b8:81:ff: 63:41:7f:fd:d0:fb:a2:14:6d:3e:ab:41:9a:aa:15: ae:e6:fa:03:41:a8:cd:ad:10:31:e9:df:8d:9d:c7: 88:4c:10:63:c1:73:b6:47:96:23:ef:b4:1f:19:51: f0:be:8f:e5:fc:79:50:e9:b1:c5:4e:5f:74:89:da: 6d:5e:82:dd:4b:bd:d3:ec:1a:5c:a1:fe:34:f8:64: 99:17:23:13:14:67:80:b7:be:1c:c3:3a:44:7b:4e: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:90:A9:61:24:0B:1F:21:A9:3E:EF:C8:FA:9B:A0:E8:42:8D:66:51 X509v3 Authority Key Identifier: keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:23:73:94:8b:bc:3c:7b:85:a1:0e:4c:6e:fe:8e:14:a8:df: 96:4c:0a:c3:d2:bc:a9:64:59:0b:34:37:ff:f7:bf:60:77:68: 57:b0:da:bd:c2:47:5d:cd:43:17:cc:ff:90:24:90:4b:03:90: 88:24:7d:a0:0c:9a:2c:a4:b9:ff:de:64:c5:41:22:4e:b7:15: 37:31:f4:af:11:7f:21:b7:f1:bc:26:c7:61:32:c2:3a:bf:91: 13:fa:c6:b6:19:d8:f6:00:d1:4b:59:cf:bd:37:f1:6f:9b:b9: 88:c2:f6:56:8b:c6:67:65:5b:52:5c:0b:64:7b:b9:08:97:fc: f5:f0:a3:28:8e:8b:a6:4f:86:a7:45:ea:59:58:ed:ba:6f:13: c1:7b:52:c4:e3:ca:70:07:96:25:03:5b:f3:a9:3f:ec:18:8e: 4a:06:16:0a:e0:ee:a8:92:91:d0:50:c2:d1:0f:ea:ce:06:d2: 71:d8:84:42:77:57:dd:eb:b1:f0:e4:fb:f6:a5:38:b0:73:4f: 11:37:c6:5a:00:1d:65:e9:ef:7f:87:c2:3a:32:3c:9b:d3:04: c8:17:92:f9:6a:c8:a2:7c:b5:83:d4:73:fe:70:a0:e3:7a:4d: ce:5d:74:2b:53:49:7b:ac:74:a2:99:b7:d3:50:dd:bb:c2:8e: 8a:06:fa:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuqPQfPcZsQ7KmnjSGhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh NGJkOTcwHhcNMjUxMjE5MDYwMTI3WhcNMjUxMjIwMDYwMTI3WjAzMTEwLwYDVQQD Eyg4ZDkwYTk2MTI0MGIxZjIxYTkzZWVmYzhmYTliYTBlODQyOGQ2NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TnnBRJ0mHaFKIqu7ucr7ZLSykNx +zeUjh8cTchplpD3caL6ok6PpVfcBAm1HxjZLPvd4jIQOj1bT7AmQbURB8mteEaB MJONpslxaqgfYY0HnB1p1DOPsnx6IRrhe2GQppoWCoKu7Qt4YL9um5ejUw19Wz9T 3jgQFIcIjcuwfMyluvX5Xopi1+E/tEEHUbni7IcWV/eoznnamyk8/7XWUN24gf9j QX/90PuiFG0+q0GaqhWu5voDQajNrRAx6d+NnceITBBjwXO2R5Yj77QfGVHwvo/l /HlQ6bHFTl90idptXoLdS73T7Bpcof40+GSZFyMTFGeAt74cwzpEe06WkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2QqWEkCx8hqT7vyPqboOhCjWZRMB8GA1UdIwQY MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2 LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCNzlIu8 PHuFoQ5Mbv6OFKjflkwKw9K8qWRZCzQ3//e/YHdoV7DavcJHXc1DF8z/kCSQSwOQ iCR9oAyaLKS5/95kxUEiTrcVNzH0rxF/IbfxvCbHYTLCOr+RE/rGthnY9gDRS1nP vTfxb5u5iML2VovGZ2VbUlwLZHu5CJf89fCjKI6Lpk+Gp0XqWVjtum8TwXtSxOPK cAeWJQNb86k/7BiOSgYWCuDuqJKR0FDC0Q/qzgbScdiEQndX3eux8OT79qU4sHNP ETfGWgAdZenvf4fCOjI8m9MEyBeS+WrIony1g9Rz/nCg43pNzl10K1NJe6x0opm3 01Ddu8KOigb6bQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:09:01 2025 by rpki-client