This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json) Hash identifier: Iz9fk8lfAcYksyqAhGgrBYTKTwHxrTqWn56w7NEJkCo= Subject key identifier: 40:06:1B:38:E5:20:61:64:2B:D3:00:E0:DC:A2:54:C7:B4:16:2F:B8 Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B153A1C47AE04DA030501F0ADC4C0D084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft Manifest number: 1294 Signing time: Sat 13 Dec 2025 01:01:28 +0000 Manifest this update: Sat 13 Dec 2025 01:01:28 +0000 Manifest next update: Sun 14 Dec 2025 01:01:28 +0000 Files and hashes: 1: C9FeLXHlmSb6adQSBmHRmx1p1GQ.roa (hash: wsQwdaHpob1xHgKH8CTJtFsTYcrf5LAWX2Z18JuGPe4=) 2: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (hash: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=) 3: EflVpiVqUjXSXoz-wEEEARW_Q-M.roa (hash: rzQa0HxuFunt0xvTKT2H9/TepJ8izaWUQiSzjphZuj8=) 4: OCS5ZsgkfgGFHyjvRDGX3il90s0.roa (hash: ztfgD2E4GSIn7F6Xbp0anZ7W4HiY4Pvdc6GtCskveFs=) 5: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: 6hpKxKNTvNgq0xoL4bmw49F9IeYJ1Gfk3mN0QJFMWY0=) 6: hdMkPl7s2YB89idhIxYcGPzaiZo.roa (hash: q6te0h/+0cNOVTmrYYD/w25qYeg8iK/SgNvQqCUtOGQ=) 7: oMYlwSnWK6uPik-ogylklgWprko.roa (hash: bn3z21YSv1E9rQu+WAdfxy0yPZJ+K8++ghPX8u1VPlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:3a:1c:47:ae:04:da:03:05:01:f0:ad:c4:c0:d0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Dec 13 01:01:28 2025 GMT Not After : Dec 14 01:01:28 2025 GMT Subject: CN=40061b38e52061642bd300e0dca254c7b4162fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:53:6e:21:1e:d2:c9:e1:01:f8:ae:25:43: d7:ee:83:55:b6:58:86:d4:9f:09:b4:28:9e:e2:84: b8:6f:28:e8:92:5d:01:fc:23:06:f5:2e:ff:d2:31: d4:7c:c7:87:a1:f8:35:f3:7d:34:7f:c5:87:60:54: cf:6a:04:f8:1c:7d:9c:0c:41:ec:ee:97:ae:f7:1a: 1b:bd:c4:d9:23:21:ff:34:c4:44:30:51:05:b6:b2: 8e:c4:80:1b:49:8b:f5:ab:64:51:79:cc:42:23:56: d4:ce:e0:8d:ad:3a:b6:1b:ae:a4:4d:49:80:3a:a5: de:86:57:ca:d7:c8:ac:ce:4d:fa:a4:e7:ca:be:77: dd:cf:92:01:e8:90:47:06:35:f8:d0:98:9f:b0:c9: 44:84:80:74:cb:bd:e4:a6:07:71:ba:c0:f8:5a:5d: a6:2b:b0:cf:8c:f0:41:9a:ed:03:7b:5c:c0:d2:c3: 39:6c:dd:da:03:91:fe:2d:49:6b:c3:87:21:77:4d: 61:e5:c9:ea:00:d9:53:e7:20:94:e7:8d:88:a4:07: 10:8a:b6:94:11:7a:b3:49:19:05:f4:c4:15:fe:02: 54:fc:ab:01:8a:61:bf:d5:6e:d5:a8:a0:26:08:49: 7e:2f:dd:77:e5:cd:67:97:34:b5:c5:26:e6:42:a1: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:06:1B:38:E5:20:61:64:2B:D3:00:E0:DC:A2:54:C7:B4:16:2F:B8 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3e:7a:b1:32:b1:f9:16:c7:66:f1:da:55:ed:2c:ac:58:3d: 04:79:e6:0d:f0:bb:f6:2e:8c:ff:bc:92:77:10:a7:e7:d5:22: 3c:27:ba:31:e3:dc:b0:1f:22:8f:50:22:1a:90:9e:75:18:84: 8b:c1:30:7c:f7:6a:1a:71:1d:e8:83:54:35:af:70:e3:97:28: 70:d6:0d:91:86:04:54:17:09:c4:a4:4b:14:52:4e:bf:b2:4a: 4b:81:bd:a6:85:8c:ef:16:13:ac:54:eb:3a:18:bc:3d:f2:29: d6:cc:2f:0e:07:92:56:41:4a:45:3f:ed:0e:05:e1:75:c2:ee: cf:66:db:3d:70:e6:7f:ba:aa:d8:db:de:9e:be:65:b8:71:f1: aa:c0:1e:f5:6b:3a:b4:b8:98:c3:e7:3b:d5:f1:08:1b:78:56: b0:d1:ae:20:27:74:be:7f:82:cb:4a:bf:58:5e:87:63:22:e8: d7:f5:c4:b3:36:9b:3c:c1:3d:0e:64:9f:b2:1b:c3:25:e0:be: 27:16:bf:3c:e3:ea:8b:85:11:77:00:6a:33:f7:ce:fe:eb:da: 67:99:f3:a8:9f:69:60:e7:cf:90:3e:c3:e4:22:42:97:89:c8: 77:2b:f9:8d:ab:80:11:2f:d3:91:d4:ac:23:7d:6b:a1:5e:b4: bb:d1:47:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsVOhxHrgTaAwUB8K3EwNCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjUxMjEzMDEwMTI4WhcNMjUxMjE0MDEwMTI4WjAzMTEwLwYDVQQD Eyg0MDA2MWIzOGU1MjA2MTY0MmJkMzAwZTBkY2EyNTRjN2I0MTYyZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTNTbiEe0snhAfiuJUPX7oNVtliG 1J8JtCie4oS4byjokl0B/CMG9S7/0jHUfMeHofg18300f8WHYFTPagT4HH2cDEHs 7peu9xobvcTZIyH/NMREMFEFtrKOxIAbSYv1q2RRecxCI1bUzuCNrTq2G66kTUmA OqXehlfK18iszk36pOfKvnfdz5IB6JBHBjX40JifsMlEhIB0y73kpgdxusD4Wl2m K7DPjPBBmu0De1zA0sM5bN3aA5H+LUlrw4chd01h5cnqANlT5yCU542IpAcQiraU EXqzSRkF9MQV/gJU/KsBimG/1W7VqKAmCEl+L9135c1nlzS1xSbmQqGi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAGGzjlIGFkK9MA4NyiVMe0Fi+4MB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz56sTKx +RbHZvHaVe0srFg9BHnmDfC79i6M/7ySdxCn59UiPCe6MePcsB8ij1AiGpCedRiE i8EwfPdqGnEd6INUNa9w45cocNYNkYYEVBcJxKRLFFJOv7JKS4G9poWM7xYTrFTr Ohi8PfIp1swvDgeSVkFKRT/tDgXhdcLuz2bbPXDmf7qq2Nvenr5luHHxqsAe9Ws6 tLiYw+c71fEIG3hWsNGuICd0vn+Cy0q/WF6HYyLo1/XEszabPME9DmSfshvDJeC+ Jxa/POPqi4URdwBqM/fO/uvaZ5nzqJ9pYOfPkD7D5CJCl4nIdyv5jauAES/TkdSs I31roV60u9FHvg== -----END CERTIFICATE-----Generated at Sat Dec 13 06:59:32 2025 by rpki-client