This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json) Hash identifier: dG8YdJiHiNtQfuMrz0ZQIa0bYjhJz1if3LZmHAGimVg= Subject key identifier: 4E:D0:1C:2D:C7:91:DE:F7:17:E0:CD:9C:2D:F7:EA:31:2E:6C:AB:AA Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Certificate serial: 019B0F00EE7B264111879CB2D0F1C0F45CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft Manifest number: 0878 Signing time: Thu 11 Dec 2025 20:01:17 +0000 Manifest this update: Thu 11 Dec 2025 20:01:17 +0000 Manifest next update: Fri 12 Dec 2025 20:01:17 +0000 Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=) 2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: fwjrtmIINoHXB3cTdJk2G1bKoDR+mr0aJLgL0s9ouZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ee:7b:26:41:11:87:9c:b2:d0:f1:c0:f4:5c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Validity Not Before: Dec 11 20:01:17 2025 GMT Not After : Dec 12 20:01:17 2025 GMT Subject: CN=4ed01c2dc791def717e0cd9c2df7ea312e6cabaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:a1:e2:5d:a4:28:a2:50:8f:cf:92:49:84: d3:a6:6d:83:9c:ea:cd:83:0f:e9:04:28:14:b1:88: ad:65:77:91:e0:ea:0c:3e:1f:c1:e6:53:98:e5:e9: 2f:fe:1b:96:81:73:5e:c5:c9:a6:51:37:93:4b:9f: 92:6e:7c:2a:46:6d:c9:47:d5:ac:53:5d:71:4d:4a: 01:48:c9:e3:42:f9:0b:17:23:52:5d:c5:b8:20:4f: aa:b2:a9:8c:61:e2:15:e5:9d:17:cc:11:55:d5:a2: ae:5f:24:de:f5:28:1c:1a:94:55:a2:50:ce:86:d8: 11:26:8c:e3:d3:a1:ec:6e:23:12:4a:3e:dd:2a:94: 59:4f:14:f8:07:28:7f:6f:9f:13:e5:9d:51:a5:86: 3c:06:66:59:ec:1f:c8:6a:9a:4b:18:1a:b4:16:ee: 39:5f:0f:47:fa:44:07:30:1a:1a:9d:c0:6d:b4:d2: 21:5c:8e:de:5a:9b:a0:e6:34:7c:25:dc:ee:c3:d6: cb:ac:5f:b8:fc:64:c6:94:5a:ca:92:0d:3c:80:5c: af:3d:1d:af:9a:09:11:8f:69:5a:a0:8a:b9:fd:2c: f2:96:f7:9f:95:d4:a5:c7:49:36:cb:45:d0:23:0f: 04:11:79:b9:f1:be:e9:2a:72:3d:63:7c:4c:a1:4e: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:1C:2D:C7:91:DE:F7:17:E0:CD:9C:2D:F7:EA:31:2E:6C:AB:AA X509v3 Authority Key Identifier: keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cd:00:5b:86:39:92:0c:e7:3e:6b:42:48:df:fa:a3:55:71: 64:6d:aa:83:a4:e4:c6:eb:73:35:84:38:51:30:79:b4:60:87: 5a:42:a7:5e:f4:43:b4:98:51:09:a2:66:80:5c:90:34:2e:db: de:33:5b:ac:44:b9:51:14:08:26:d1:4c:3c:a7:a6:79:ae:e0: a6:d4:df:01:16:9e:a0:c1:20:44:fe:28:99:2e:22:52:1d:46: c3:5e:45:11:36:5d:79:b4:68:1f:55:e9:7d:68:8e:9e:98:4e: 43:ee:40:ee:e0:a9:25:b5:4b:a3:7e:05:5f:74:19:37:fe:b7: fb:ec:3f:b0:55:ab:50:2a:ca:b6:65:14:e0:81:a2:ab:f5:fd: b7:57:8a:bf:59:04:5a:74:c2:08:8b:56:4c:e9:c7:0d:e0:81: 7f:7e:ad:ba:3a:00:6b:cb:b3:67:11:b8:ca:31:48:9e:95:6b: 8a:62:ec:05:90:6c:b4:8e:c1:cb:d6:89:bf:ef:95:40:fc:be: 78:68:cc:89:86:a8:f6:13:39:6f:e9:d0:2d:57:be:f0:90:e3: e8:fe:3c:a4:85:79:be:38:ff:c1:fe:22:61:a0:13:44:b9:f8: b3:a3:02:07:2f:f2:7c:bd:26:47:3c:9a:1b:79:80:0d:2d:2f: 2a:0b:00:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAO57JkERh5yy0PHA9Fz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1 NTQzZjYwHhcNMjUxMjExMjAwMTE3WhcNMjUxMjEyMjAwMTE3WjAzMTEwLwYDVQQD Eyg0ZWQwMWMyZGM3OTFkZWY3MTdlMGNkOWMyZGY3ZWEzMTJlNmNhYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Gh4l2kKKJQj8+SSYTTpm2DnOrN gw/pBCgUsYitZXeR4OoMPh/B5lOY5ekv/huWgXNexcmmUTeTS5+SbnwqRm3JR9Ws U11xTUoBSMnjQvkLFyNSXcW4IE+qsqmMYeIV5Z0XzBFV1aKuXyTe9SgcGpRVolDO htgRJozj06HsbiMSSj7dKpRZTxT4Byh/b58T5Z1RpYY8BmZZ7B/IappLGBq0Fu45 Xw9H+kQHMBoancBttNIhXI7eWpug5jR8Jdzuw9bLrF+4/GTGlFrKkg08gFyvPR2v mgkRj2laoIq5/SzylvefldSlx0k2y0XQIw8EEXm58b7pKnI9Y3xMoU56eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7QHC3Hkd73F+DNnC336jEubKuqMB8GA1UdIwQY MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1 LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs0AW4Y5 kgznPmtCSN/6o1VxZG2qg6TkxutzNYQ4UTB5tGCHWkKnXvRDtJhRCaJmgFyQNC7b 3jNbrES5URQIJtFMPKemea7gptTfARaeoMEgRP4omS4iUh1Gw15FETZdebRoH1Xp fWiOnphOQ+5A7uCpJbVLo34FX3QZN/63++w/sFWrUCrKtmUU4IGiq/X9t1eKv1kE WnTCCItWTOnHDeCBf36tujoAa8uzZxG4yjFInpVrimLsBZBstI7By9aJv++VQPy+ eGjMiYao9hM5b+nQLVe+8JDj6P48pIV5vjj/wf4iYaATRLn4s6MCBy/yfL0mRzya G3mADS0vKgsALQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:07 2025 by rpki-client