This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json) Hash identifier: qJqr27fujGUBxWx2bbSKwkwftF6aalAqq9FQzsEWufo= Subject key identifier: 3C:BE:C5:47:C2:C7:EC:D7:99:4B:A7:9D:18:5B:1C:EE:A1:8B:8D:03 Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83 Certificate serial: 019B0EC9F585AA911DB815D678C69081544E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 19:01:15 +0000 Manifest this update: Thu 11 Dec 2025 19:01:15 +0000 Manifest next update: Fri 12 Dec 2025 19:01:15 +0000 Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=) 2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=) 3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=) 4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: jI1wNgfjAwzxiTdjbJtPiUXcpD10WOb4QnRHq+yfb9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:f5:85:aa:91:1d:b8:15:d6:78:c6:90:81:54:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83 Validity Not Before: Dec 11 19:01:15 2025 GMT Not After : Dec 12 19:01:15 2025 GMT Subject: CN=3cbec547c2c7ecd7994ba79d185b1ceea18b8d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:b4:6d:61:f5:b9:21:ef:a4:05:29:0c:a8: cf:4b:90:6d:ad:21:54:27:ca:ae:ab:2a:7f:74:05: 81:26:08:a7:dc:f3:13:b9:1f:b9:57:67:cb:ec:03: 01:c0:53:ef:9a:d6:f2:4b:c3:b5:a8:54:3b:56:cd: 47:fd:43:63:66:78:d2:40:55:e4:71:f4:7e:4e:51: 66:a3:3e:b7:94:76:b4:61:bb:81:50:1b:9a:0d:d6: 38:28:91:fc:7c:4b:43:62:e3:4d:fc:4f:38:87:90: ce:72:2d:df:19:2a:d8:b5:2a:d1:67:27:7f:4e:a8: bf:7e:69:0d:47:32:28:71:1f:67:6f:d7:73:90:32: 78:08:6e:74:b3:26:04:17:6e:41:ea:db:44:59:be: 6b:84:bd:26:1e:ff:33:cf:90:05:b5:18:79:75:b1: 56:c5:6d:e0:26:8a:d7:54:10:93:d5:84:3b:0a:54: c9:74:7d:5d:c7:5c:82:34:99:3c:bb:b4:9f:7a:21: b0:76:c1:f6:b5:35:ff:e5:c2:ec:3b:9c:90:b8:72: 0a:ac:be:db:f5:ee:dd:47:aa:0a:88:2a:a9:59:e6: 2d:c7:7f:83:d6:1d:40:0d:8a:63:f5:d1:87:56:e9: 5c:b1:66:6b:cd:b0:43:67:f9:ba:b9:38:4a:3b:b0: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BE:C5:47:C2:C7:EC:D7:99:4B:A7:9D:18:5B:1C:EE:A1:8B:8D:03 X509v3 Authority Key Identifier: keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d9:19:d5:eb:85:4a:a9:89:3d:58:41:7a:5f:ef:0b:51:8f: dd:ad:2a:49:69:09:7d:8a:0e:87:12:69:68:a3:66:a4:44:ec: e2:82:44:05:67:a2:a8:7f:2b:e4:24:35:a3:0e:1f:bb:d8:1e: 12:37:3d:02:18:37:3b:c3:ff:f7:34:7e:05:8b:2f:de:58:c3: 21:e9:8e:34:e3:56:90:30:a2:03:a6:d0:23:98:a0:d3:0f:e1: cc:4d:9a:8c:9c:08:92:ee:bf:7b:64:3d:ad:a7:47:39:23:34: ab:8a:6c:cf:93:75:4a:35:a7:2d:ca:40:db:5b:2e:28:e5:3a: 7f:d1:c8:5b:b3:7d:87:1a:02:a0:f4:f7:a1:0b:9b:1e:01:e1: 3d:cc:2f:4a:62:d4:2f:e3:3e:91:39:23:39:ff:60:76:07:e7: 1e:9e:f2:39:f9:57:cb:69:9e:a4:f5:47:9f:4a:3e:79:a9:9b: a6:32:94:f9:80:2d:d6:55:19:cf:84:6b:28:35:b3:d7:1f:0b: 58:57:ed:ef:38:16:a9:e6:a1:2d:ef:a9:5e:81:a9:45:d0:f1: 75:3a:41:98:37:48:33:20:5d:95:13:81:10:2c:a3:8b:e2:98: 7c:5a:61:1c:6c:f9:8d:e0:55:5e:eb:e8:ea:ad:54:bb:94:bc: 18:e5:fd:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyfWFqpEduBXWeMaQgVROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz NWFjODMwHhcNMjUxMjExMTkwMTE1WhcNMjUxMjEyMTkwMTE1WjAzMTEwLwYDVQQD EygzY2JlYzU0N2MyYzdlY2Q3OTk0YmE3OWQxODViMWNlZWExOGI4ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLi0bWH1uSHvpAUpDKjPS5BtrSFU J8quqyp/dAWBJgin3PMTuR+5V2fL7AMBwFPvmtbyS8O1qFQ7Vs1H/UNjZnjSQFXk cfR+TlFmoz63lHa0YbuBUBuaDdY4KJH8fEtDYuNN/E84h5DOci3fGSrYtSrRZyd/ Tqi/fmkNRzIocR9nb9dzkDJ4CG50syYEF25B6ttEWb5rhL0mHv8zz5AFtRh5dbFW xW3gJorXVBCT1YQ7ClTJdH1dx1yCNJk8u7SfeiGwdsH2tTX/5cLsO5yQuHIKrL7b 9e7dR6oKiCqpWeYtx3+D1h1ADYpj9dGHVulcsWZrzbBDZ/m6uThKO7D6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy+xUfCx+zXmUunnRhbHO6hi40DMB8GA1UdIwQY MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt OTk0YWY1YzM0NDAyLzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNkZ1euF SqmJPVhBel/vC1GP3a0qSWkJfYoOhxJpaKNmpETs4oJEBWeiqH8r5CQ1ow4fu9ge Ejc9Ahg3O8P/9zR+BYsv3ljDIemONONWkDCiA6bQI5ig0w/hzE2ajJwIku6/e2Q9 radHOSM0q4psz5N1SjWnLcpA21suKOU6f9HIW7N9hxoCoPT3oQubHgHhPcwvSmLU L+M+kTkjOf9gdgfnHp7yOflXy2mepPVHn0o+eambpjKU+YAt1lUZz4RrKDWz1x8L WFft7zgWqeahLe+pXoGpRdDxdTpBmDdIMyBdlROBECyji+KYfFphHGz5jeBVXuvo 6q1Uu5S8GOX9zg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:46 2025 by rpki-client