This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json) Hash identifier: AB7zhMxmcP2bu0bZcTXs4VhIAbjBicv/1YP2kLTZW9s= Subject key identifier: 92:FC:3F:E5:4A:0C:DA:EB:4B:12:12:6B:8F:3C:44:C7:2B:7B:2E:CE Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83 Certificate serial: 019B46CB241FFB46D39A48E34791923B03D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 16:01:16 +0000 Manifest this update: Mon 22 Dec 2025 16:01:16 +0000 Manifest next update: Tue 23 Dec 2025 16:01:16 +0000 Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=) 2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=) 3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=) 4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: UyNR4L10omFvwa4bgn+fVNjBfCMKY5k/AVNpmSV6fto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:24:1f:fb:46:d3:9a:48:e3:47:91:92:3b:03:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83 Validity Not Before: Dec 22 16:01:16 2025 GMT Not After : Dec 23 16:01:16 2025 GMT Subject: CN=92fc3fe54a0cdaeb4b12126b8f3c44c72b7b2ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:cd:5f:f0:f1:e9:64:07:95:e4:ca:cd:a5: f8:10:06:62:21:74:2c:bc:b9:9b:b8:b8:b6:45:dc: 38:a6:90:5b:37:8e:74:42:aa:1b:f1:9e:97:5d:dc: e4:28:67:b6:eb:a1:ec:6a:9c:84:a4:f5:0a:fb:94: 84:8f:32:70:3e:79:b8:ab:d6:21:07:a0:4c:48:f6: 5f:32:9b:cf:e8:53:82:93:6f:b6:ca:f9:1d:d3:9f: 09:15:62:a0:6b:f6:9b:f0:a8:f6:b7:68:0d:3a:96: 46:96:1d:e6:d5:01:fe:a1:64:0e:84:9a:c6:ae:b2: 6a:dc:5c:6d:a2:23:a1:8b:2d:b5:12:56:fd:13:d2: 35:31:d2:ed:98:6b:f7:52:f8:1d:a8:d7:4d:12:3d: 33:72:fd:71:45:08:6b:36:1f:5c:c6:51:57:cb:72: b3:f1:d7:47:b6:05:18:00:e1:96:22:7c:2e:98:d2: ca:d4:a2:6d:01:84:e9:c6:73:61:43:1d:10:39:40: 31:66:cd:23:22:5e:1c:c3:a3:c0:af:a9:4e:19:b4: ac:32:3d:61:61:a8:d4:43:51:88:f8:63:61:1f:85: 2f:cb:53:e2:66:49:d7:a9:fe:66:4e:c3:69:3a:b0: ea:57:d1:42:b0:74:ad:a4:eb:d2:05:2f:ea:27:d7: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FC:3F:E5:4A:0C:DA:EB:4B:12:12:6B:8F:3C:44:C7:2B:7B:2E:CE X509v3 Authority Key Identifier: keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:83:3f:82:3b:53:e4:b9:31:93:43:05:ba:e4:8a:42:b9:2d: b8:22:51:71:20:d2:3f:20:87:a1:91:de:f5:ba:40:cd:e7:4a: f4:e8:30:50:73:f4:e2:b0:bf:e0:98:0c:85:ef:fc:36:8c:3f: d7:14:1d:3b:7c:20:92:e0:87:f0:90:89:d1:12:59:ca:8e:d1: aa:20:26:06:84:f7:b9:2d:9c:da:40:be:cd:de:c6:c2:d2:25: ea:d4:3c:5e:f2:93:15:36:0e:96:ac:09:c1:14:66:12:7b:bb: f9:20:77:63:3e:de:28:25:86:8e:4a:a2:4b:3f:f8:0a:e2:ca: 03:12:78:96:24:45:16:d3:cd:a2:5e:00:74:a2:ec:98:9d:47: 50:5e:cf:59:0f:fe:9e:ca:ed:fd:d5:c8:31:11:18:9b:9f:09: 0a:d5:36:8c:8d:df:6c:6b:d1:c6:93:28:a3:5d:f2:fb:99:b9: 71:a3:f7:a1:f2:97:35:ef:38:db:a6:c4:2b:62:10:d2:f9:08: 8b:5e:fb:30:0c:e7:4e:72:67:02:a0:b1:9e:ef:4c:1e:9a:dd: 89:18:85:d7:06:60:c3:d6:18:b5:26:6a:cc:12:df:36:40:40: 1a:3c:bd:f9:fe:9a:f7:44:53:ff:be:b2:af:02:df:8c:40:43: 8a:20:2f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyyQf+0bTmkjjR5GSOwPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz NWFjODMwHhcNMjUxMjIyMTYwMTE2WhcNMjUxMjIzMTYwMTE2WjAzMTEwLwYDVQQD Eyg5MmZjM2ZlNTRhMGNkYWViNGIxMjEyNmI4ZjNjNDRjNzJiN2IyZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqTNX/Dx6WQHleTKzaX4EAZiIXQs vLmbuLi2Rdw4ppBbN450Qqob8Z6XXdzkKGe266HsapyEpPUK+5SEjzJwPnm4q9Yh B6BMSPZfMpvP6FOCk2+2yvkd058JFWKga/ab8Kj2t2gNOpZGlh3m1QH+oWQOhJrG rrJq3FxtoiOhiy21Elb9E9I1MdLtmGv3UvgdqNdNEj0zcv1xRQhrNh9cxlFXy3Kz 8ddHtgUYAOGWInwumNLK1KJtAYTpxnNhQx0QOUAxZs0jIl4cw6PAr6lOGbSsMj1h YajUQ1GI+GNhH4Uvy1PiZknXqf5mTsNpOrDqV9FCsHStpOvSBS/qJ9fElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL8P+VKDNrrSxISa488RMcrey7OMB8GA1UdIwQY MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt OTk0YWY1YzM0NDAyLzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoM/gjtT 5Lkxk0MFuuSKQrktuCJRcSDSPyCHoZHe9bpAzedK9OgwUHP04rC/4JgMhe/8Now/ 1xQdO3wgkuCH8JCJ0RJZyo7RqiAmBoT3uS2c2kC+zd7GwtIl6tQ8XvKTFTYOlqwJ wRRmEnu7+SB3Yz7eKCWGjkqiSz/4CuLKAxJ4liRFFtPNol4AdKLsmJ1HUF7PWQ/+ nsrt/dXIMREYm58JCtU2jI3fbGvRxpMoo13y+5m5caP3ofKXNe8426bEK2IQ0vkI i177MAznTnJnAqCxnu9MHprdiRiF1wZgw9YYtSZqzBLfNkBAGjy9+f6a90RT/76y rwLfjEBDiiAvqg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:47:23 2025 by rpki-client