This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json) Hash identifier: gYjk8yEaSFA+nr+XJJjL0eT4Y8jCLkkUHtrpS5+h3NM= Subject key identifier: 86:A4:8A:AD:D5:B3:41:9E:4D:3E:34:C7:AA:1B:61:01:77:E7:4A:EF Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Certificate serial: 019B5ABFC33CE5DE3919D0D5DFD0742221C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft Manifest number: 176A Signing time: Fri 26 Dec 2025 13:01:15 +0000 Manifest this update: Fri 26 Dec 2025 13:01:15 +0000 Manifest next update: Sat 27 Dec 2025 13:01:15 +0000 Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=) 2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: KFe7XsIaTzhuCMbfODRpuWDJ56nkHwCKuHGkTffasiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c3:3c:e5:de:39:19:d0:d5:df:d0:74:22:21:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Validity Not Before: Dec 26 13:01:15 2025 GMT Not After : Dec 27 13:01:15 2025 GMT Subject: CN=86a48aadd5b3419e4d3e34c7aa1b610177e74aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:0f:7e:fd:73:8d:b8:16:da:5b:10:1c:ba: 35:98:28:72:15:b8:25:ac:0c:78:cc:4f:98:5b:b7: 54:dc:3e:8b:4f:9d:0b:13:4e:58:76:63:84:98:5e: a8:46:e7:88:ef:49:e3:6a:d3:b8:d3:7d:49:df:85: 3f:63:a0:7f:d3:b4:e4:78:d5:71:93:56:b1:74:64: a2:4a:06:45:c6:2d:49:cd:5f:a9:1b:65:a3:20:a7: 6e:25:a6:10:ac:32:37:f3:f9:21:c1:2d:1d:28:09: a4:18:45:a5:90:4b:2c:4a:fd:ef:32:d9:49:48:c9: 38:12:c5:ac:80:6e:69:78:f3:87:06:b7:08:22:ec: 15:3b:2e:b9:4e:3a:8f:81:2f:db:dd:67:dd:7b:07: 78:83:02:18:e3:60:e9:4f:8a:62:93:f0:58:ff:d0: ea:aa:fd:b6:9b:03:2f:9f:2c:bd:93:d0:68:4b:ba: 41:d5:9a:2c:46:66:35:9a:c7:69:2e:b5:74:d5:22: e7:1c:28:13:b0:da:6a:b8:7f:5a:a5:33:84:c1:3d: 0e:ac:b8:38:37:a5:8f:97:42:38:ac:c5:ff:01:e9: b1:5d:10:3a:9b:71:ad:cc:d1:bf:13:70:97:3f:32: 54:ff:a7:43:6b:91:c4:71:2d:b5:bb:e0:eb:ac:d3: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A4:8A:AD:D5:B3:41:9E:4D:3E:34:C7:AA:1B:61:01:77:E7:4A:EF X509v3 Authority Key Identifier: keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:21:a2:fc:f6:bb:01:a5:96:48:cb:42:29:af:14:37:89: e4:a8:09:be:71:30:60:2b:99:1c:02:38:19:b4:85:7c:d0:77: 24:79:1f:c0:21:9f:a9:b0:5e:10:f7:f7:0f:d1:25:d2:b4:f0: 25:58:fa:2e:5b:da:67:1b:7a:11:ce:43:17:6f:fc:51:b6:2b: b4:12:c6:74:cd:cc:db:a2:71:e9:a4:47:5e:b0:7d:75:bb:e4: 08:ad:4d:77:f9:f7:63:1a:8b:ef:0d:3d:90:21:9d:20:7f:9c: 6f:cb:81:83:ae:3b:70:5d:55:5a:e7:89:80:29:49:83:2c:70: 9c:3e:6b:44:56:79:71:f3:d3:3b:25:a8:08:01:67:ef:2d:87: c9:8e:9f:01:72:09:b4:05:bf:b1:3e:be:04:e1:a0:aa:23:5f: c8:f7:2e:c8:ab:8c:81:c4:93:41:ff:b2:b9:38:59:ed:f4:8d: 15:b6:a5:81:1b:67:0e:10:ba:ef:bb:39:f2:b0:d5:3a:63:95: c5:1c:9a:3c:d5:a0:46:fb:3f:85:38:59:b2:7d:83:eb:98:d9: 7b:7e:b8:3b:a2:d8:1c:dc:f2:97:ff:72:8e:d7:1d:bc:19:18: ff:43:73:68:b4:f3:24:c5:ee:f7:da:93:5f:d2:9d:a6:c7:eb: c4:40:c8:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8M85d45GdDV39B0IiHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw MTY1YWEwHhcNMjUxMjI2MTMwMTE1WhcNMjUxMjI3MTMwMTE1WjAzMTEwLwYDVQQD Eyg4NmE0OGFhZGQ1YjM0MTllNGQzZTM0YzdhYTFiNjEwMTc3ZTc0YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuwPfv1zjbgW2lsQHLo1mChyFbgl rAx4zE+YW7dU3D6LT50LE05YdmOEmF6oRueI70njatO4031J34U/Y6B/07TkeNVx k1axdGSiSgZFxi1JzV+pG2WjIKduJaYQrDI38/khwS0dKAmkGEWlkEssSv3vMtlJ SMk4EsWsgG5pePOHBrcIIuwVOy65TjqPgS/b3Wfdewd4gwIY42DpT4pik/BY/9Dq qv22mwMvnyy9k9BoS7pB1ZosRmY1msdpLrV01SLnHCgTsNpquH9apTOEwT0OrLg4 N6WPl0I4rMX/AemxXRA6m3GtzNG/E3CXPzJU/6dDa5HEcS21u+DrrNNxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIakiq3Vs0GeTT40x6obYQF350rvMB8GA1UdIwQY MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5 LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1Mhovz2 uwGllkjLQimvFDeJ5KgJvnEwYCuZHAI4GbSFfNB3JHkfwCGfqbBeEPf3D9El0rTw JVj6LlvaZxt6Ec5DF2/8UbYrtBLGdM3M26Jx6aRHXrB9dbvkCK1Nd/n3YxqL7w09 kCGdIH+cb8uBg647cF1VWueJgClJgyxwnD5rRFZ5cfPTOyWoCAFn7y2HyY6fAXIJ tAW/sT6+BOGgqiNfyPcuyKuMgcSTQf+yuThZ7fSNFbalgRtnDhC677s58rDVOmOV xRyaPNWgRvs/hThZsn2D65jZe364O6LYHNzyl/9yjtcdvBkY/0NzaLTzJMXu99qT X9KdpsfrxEDIfw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:14:39 2025 by rpki-client