This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json) Hash identifier: Q5SjJjb04aYjiz0cxJW7czySMlb3M5t7yB/1ySiGBzs= Subject key identifier: BE:74:AD:BC:0C:FB:0C:F7:E3:2C:71:5C:88:B4:65:3C:E7:85:45:08 Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c Certificate serial: 019B33B1B2FE3FE6645C3EE2A98953663F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 23:00:42 +0000 Manifest this update: Thu 18 Dec 2025 23:00:42 +0000 Manifest next update: Fri 19 Dec 2025 23:00:42 +0000 Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: 7KkB0ScxGb3tgXKNirUmsbQvc1fuo6qzzKyWbY5d+pA=) 2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:b2:fe:3f:e6:64:5c:3e:e2:a9:89:53:66:3f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c Validity Not Before: Dec 18 23:00:42 2025 GMT Not After : Dec 19 23:00:42 2025 GMT Subject: CN=be74adbc0cfb0cf7e32c715c88b4653ce7854508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:4f:3a:c3:30:00:b4:ab:dc:d5:77:a2:3d: 97:60:44:75:9b:4a:06:d8:4e:c2:13:4f:a6:23:14: f0:1f:38:89:eb:f7:96:ce:a2:3d:9f:c8:0c:34:3d: a6:96:61:84:54:7a:37:b7:b9:21:7d:27:79:7a:cb: ce:c1:1e:43:08:8d:3d:a0:bb:08:54:0a:59:76:3f: 41:26:7a:91:8a:b9:0e:c0:14:07:62:88:89:04:d1: 20:bf:27:de:0e:83:02:a3:c0:0f:f4:e4:79:b9:f2: 17:02:41:10:8d:90:89:de:62:05:f7:a3:5a:cc:af: eb:93:08:99:e1:bf:6d:a3:1e:a2:43:52:a0:c8:e4: ed:29:8f:d9:4f:45:fa:b9:76:e5:24:d2:42:da:26: a6:55:72:00:87:1b:6a:8e:0a:ab:e4:f7:dc:9d:a6: 54:bb:ed:26:51:d6:65:fe:0b:57:53:01:c5:c2:0c: ca:29:b5:8f:bb:a3:ae:ac:ff:7c:60:73:af:c6:46: 20:9a:31:6e:f4:68:2f:0f:74:09:5e:39:22:0b:2b: ee:23:dd:7a:13:b2:63:90:28:b9:29:1e:78:60:c5: 23:6a:48:84:e0:95:02:1d:b1:a7:a4:70:42:04:57: 71:d7:6d:69:e1:6b:55:79:f6:84:d7:56:1c:14:5b: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:74:AD:BC:0C:FB:0C:F7:E3:2C:71:5C:88:B4:65:3C:E7:85:45:08 X509v3 Authority Key Identifier: keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:fd:38:6a:30:ae:3a:6a:b6:29:c6:37:ff:30:e4:62:ba: cf:ef:f4:0b:c3:92:b8:e5:03:b9:15:a8:f7:ea:35:8a:dc:da: e6:a5:c5:79:be:aa:53:ca:5f:0c:bf:1b:97:8f:11:4e:38:6c: 93:34:70:a7:52:b5:52:71:90:fd:45:ec:b2:93:cd:a3:c3:8d: ca:0a:35:68:91:be:74:06:69:4c:bd:68:10:f8:45:49:88:bb: 4b:07:cb:dc:70:10:4f:a4:46:c3:a7:8b:9c:31:2e:26:41:0c: 76:74:ff:04:41:66:1b:91:04:69:de:45:12:21:c9:fb:e3:28: 76:7a:63:ec:6f:f9:b7:73:5a:a2:95:0e:09:73:17:da:58:1c: c2:47:bc:39:8f:54:64:ff:66:e7:10:c6:a2:55:84:47:80:6c: 0f:81:51:56:78:83:b4:47:c4:9f:98:cc:c6:c7:3c:14:5b:79: a8:9b:1d:04:13:c0:e9:fe:f0:e0:49:cd:b8:44:a9:df:51:dd: d1:ce:92:28:33:ef:72:38:96:fd:fa:ab:8c:62:42:b6:89:c9: 05:e8:60:a8:db:02:8c:e5:b2:62:24:a7:83:bb:8e:cb:e6:28: a4:9b:63:80:4e:8e:8f:42:43:a5:3a:5e:46:05:d4:69:46:f6: 61:0a:f6:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsbL+P+ZkXD7iqYlTZj8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTE1ZGEzMzk2N2Q0MTQ3MGE5NmQ2MTQxYzgzNDBmMjI0 MDU4MWMwHhcNMjUxMjE4MjMwMDQyWhcNMjUxMjE5MjMwMDQyWjAzMTEwLwYDVQQD EyhiZTc0YWRiYzBjZmIwY2Y3ZTMyYzcxNWM4OGI0NjUzY2U3ODU0NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj01POsMwALSr3NV3oj2XYER1m0oG 2E7CE0+mIxTwHziJ6/eWzqI9n8gMND2mlmGEVHo3t7khfSd5esvOwR5DCI09oLsI VApZdj9BJnqRirkOwBQHYoiJBNEgvyfeDoMCo8AP9OR5ufIXAkEQjZCJ3mIF96Na zK/rkwiZ4b9tox6iQ1KgyOTtKY/ZT0X6uXblJNJC2iamVXIAhxtqjgqr5PfcnaZU u+0mUdZl/gtXUwHFwgzKKbWPu6OurP98YHOvxkYgmjFu9GgvD3QJXjkiCyvuI916 E7JjkCi5KR54YMUjakiE4JUCHbGnpHBCBFdx121p4WtVefaE11YcFFtquwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL50rbwM+wz34yxxXIi0ZTznhUUIMB8GA1UdIwQY MBaAFFHhXaM5Z9QUcKltYUHINA8iQFgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYt MzgwODg1NzQwZDRhLzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYtMzgwODg1NzQwZDRh LzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJN79OGow rjpqtinGN/8w5GK6z+/0C8OSuOUDuRWo9+o1itza5qXFeb6qU8pfDL8bl48RTjhs kzRwp1K1UnGQ/UXsspPNo8ONygo1aJG+dAZpTL1oEPhFSYi7SwfL3HAQT6RGw6eL nDEuJkEMdnT/BEFmG5EEad5FEiHJ++Modnpj7G/5t3NaopUOCXMX2lgcwke8OY9U ZP9m5xDGolWER4BsD4FRVniDtEfEn5jMxsc8FFt5qJsdBBPA6f7w4EnNuESp31Hd 0c6SKDPvcjiW/fqrjGJCtonJBehgqNsCjOWyYiSng7uOy+YopJtjgE6Oj0JDpTpe RgXUaUb2YQr2aA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:10:11 2025 by rpki-client