This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json) Hash identifier: XQcs507lMD7EJThdk0tGal+4pQ5T7knbRzuQK8npmow= Subject key identifier: 3D:9A:81:EC:91:4D:DF:87:3F:55:9F:63:34:46:1F:62:20:32:B3:DB Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Certificate serial: 019B0E92EB15BBCA9B3BF82447A50239F788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft Manifest number: 0741 Signing time: Thu 11 Dec 2025 18:01:07 +0000 Manifest this update: Thu 11 Dec 2025 18:01:07 +0000 Manifest next update: Fri 12 Dec 2025 18:01:07 +0000 Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=) 2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: MrXILIiNziWQFUrLZX34llM7VnZK5bcfYkJohYQPiHM=) 3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:eb:15:bb:ca:9b:3b:f8:24:47:a5:02:39:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Validity Not Before: Dec 11 18:01:07 2025 GMT Not After : Dec 12 18:01:07 2025 GMT Subject: CN=3d9a81ec914ddf873f559f6334461f622032b3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:2b:b3:96:da:d4:8d:bc:6c:d4:2f:06:c5: 49:3f:58:59:9f:4f:8b:b7:79:87:1f:c7:87:3f:1d: 83:94:83:0a:8b:0e:98:ce:ea:f8:65:f3:32:11:cd: dd:c9:4e:9b:cd:17:9d:b5:1b:a9:7a:62:82:69:1e: 44:fb:dc:54:87:b0:cb:98:c7:78:c1:bc:c5:23:af: 8e:d3:4f:c3:56:29:6d:7c:2b:1a:06:92:a1:9e:8e: 46:47:fb:fe:86:58:da:09:be:7d:bf:da:29:7b:17: 53:24:c6:3f:b5:61:9e:07:e9:63:41:1c:df:0c:43: e4:60:23:6e:2e:2b:2f:3b:e3:f8:e7:8d:5d:6a:b8: fb:90:af:a2:66:c1:23:bc:12:9d:01:88:da:ef:43: 5c:3a:d0:71:10:b4:39:95:a3:f6:61:77:db:d1:6f: 7f:a9:e2:e6:78:e6:fa:34:3f:71:66:b7:9a:c1:d0: f2:ed:b3:e1:c4:51:1a:20:a0:97:d3:4c:79:fd:74: 53:25:54:2d:c6:1b:41:fd:5a:a2:7c:cc:93:b3:db: f4:f6:14:b9:82:86:50:4e:c2:c7:32:0e:f9:e9:3d: 23:02:2b:ca:9d:f4:9a:76:fa:fd:8b:f7:ba:c8:ef: 4b:3b:4b:b5:4d:cc:14:65:bd:2a:9a:2f:97:5d:46: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:81:EC:91:4D:DF:87:3F:55:9F:63:34:46:1F:62:20:32:B3:DB X509v3 Authority Key Identifier: keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:72:c4:57:ca:52:a7:17:30:ac:c9:c4:80:cf:3c:39:db: 23:45:cd:bb:5f:67:51:ae:d7:e4:8a:1b:8e:a5:74:41:5b:f7: 0e:66:b2:34:b4:ee:ab:66:0d:51:87:42:f9:b6:cc:8f:27:ec: ae:93:53:ef:0a:50:3e:76:95:4a:1a:be:b2:22:a1:17:70:63: dd:09:d2:ad:0f:64:eb:de:00:05:7b:3b:15:0e:fe:42:3c:78: 92:f7:be:a3:f2:29:de:5c:bd:cc:84:0f:29:1e:0c:6f:de:30: 52:df:35:a6:9f:3d:fd:c3:a9:eb:14:04:97:27:b8:1f:bf:68: d5:b7:41:6d:09:4f:a0:cc:7b:ab:5a:fd:ca:b6:fb:76:d3:2e: f3:8e:c6:50:53:2b:19:53:23:70:1e:f5:78:16:1c:d2:0b:fa: ec:88:ad:df:ce:8f:cb:7d:70:d8:9d:ff:ed:78:69:57:ce:c9: f3:56:0a:ed:e8:93:38:fa:2a:42:aa:e8:01:1c:e1:fc:02:df: cf:9b:c4:52:95:78:28:22:30:a5:74:41:1b:a0:69:4b:b5:96: df:d9:ee:0b:6e:51:b4:47:39:90:ee:90:d1:9f:cd:25:92:db: 9f:d8:e3:46:31:82:42:39:64:f3:62:88:99:87:c7:53:1d:f0: 69:4a:1f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkusVu8qbO/gkR6UCOfeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0 YjIxNzEwHhcNMjUxMjExMTgwMTA3WhcNMjUxMjEyMTgwMTA3WjAzMTEwLwYDVQQD EygzZDlhODFlYzkxNGRkZjg3M2Y1NTlmNjMzNDQ2MWY2MjIwMzJiM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3crs5ba1I28bNQvBsVJP1hZn0+L t3mHH8eHPx2DlIMKiw6Yzur4ZfMyEc3dyU6bzRedtRupemKCaR5E+9xUh7DLmMd4 wbzFI6+O00/DViltfCsaBpKhno5GR/v+hljaCb59v9opexdTJMY/tWGeB+ljQRzf DEPkYCNuLisvO+P4541darj7kK+iZsEjvBKdAYja70NcOtBxELQ5laP2YXfb0W9/ qeLmeOb6ND9xZreawdDy7bPhxFEaIKCX00x5/XRTJVQtxhtB/VqifMyTs9v09hS5 goZQTsLHMg756T0jAivKnfSadvr9i/e6yO9LO0u1TcwUZb0qmi+XXUYvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2ageyRTd+HP1WfYzRGH2IgMrPbMB8GA1UdIwQY MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs1yxFfK UqcXMKzJxIDPPDnbI0XNu19nUa7X5IobjqV0QVv3DmayNLTuq2YNUYdC+bbMjyfs rpNT7wpQPnaVShq+siKhF3Bj3QnSrQ9k694ABXs7FQ7+Qjx4kve+o/Ip3ly9zIQP KR4Mb94wUt81pp89/cOp6xQElye4H79o1bdBbQlPoMx7q1r9yrb7dtMu847GUFMr GVMjcB71eBYc0gv67Iit386Py31w2J3/7XhpV87J81YK7eiTOPoqQqroARzh/ALf z5vEUpV4KCIwpXRBG6BpS7WW39nuC25RtEc5kO6Q0Z/NJZLbn9jjRjGCQjlk82KI mYfHUx3waUofiQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:11 2025 by rpki-client