This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft File: uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json) Hash identifier: 5lhfJ4DnFeVJ/MXicfNsltoWrZJb3spqZpgyUHpNTow= Subject key identifier: 95:BF:80:B2:35:20:13:0E:42:11:C0:15:A9:B2:A4:A9:02:74:D5:19 Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Certificate serial: 019B2F3062098E2015C0BE9FE20D3307A5DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft Manifest number: 0248 Signing time: Thu 18 Dec 2025 02:00:58 +0000 Manifest this update: Thu 18 Dec 2025 02:00:58 +0000 Manifest next update: Fri 19 Dec 2025 02:00:58 +0000 Files and hashes: 1: dHqraQM0J28TwBZI9kOV-wg_Nys.roa (hash: 9SP50kXHayfJ5rdM97ecdGjoNLOBx7zfNbIDZBfMyaE=) 2: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: rujzYnL0vovu4LyOxiO/Ncp3BGayeTw20j9ffL4Ra1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:62:09:8e:20:15:c0:be:9f:e2:0d:33:07:a5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c Validity Not Before: Dec 18 02:00:58 2025 GMT Not After : Dec 19 02:00:58 2025 GMT Subject: CN=95bf80b23520130e4211c015a9b2a4a90274d519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:cb:f2:40:71:1f:57:9b:e2:a7:81:21:47: 69:c2:40:86:7e:aa:0e:ea:a4:09:fc:47:92:66:cd: 70:20:50:dd:18:a8:a4:11:92:5d:2b:7a:1c:2d:2e: c9:cb:73:7f:00:2e:d5:74:d5:d4:19:4b:8c:85:52: 3d:65:93:b2:1c:b1:3c:0a:86:ad:1b:cc:fc:3d:23: 5d:ef:29:57:28:dd:bf:5c:7a:17:2f:8b:4d:17:00: 16:0f:73:55:5f:ee:2d:65:cd:59:f1:15:5d:bb:3a: 23:c5:94:11:da:ca:21:ff:f2:cf:b9:80:06:be:53: 09:5b:fa:7f:46:8d:f4:f5:bf:37:c1:f4:79:7c:39: d0:b9:0d:e3:80:6a:60:c6:6b:f2:e5:07:41:05:fc: 69:d9:de:7b:21:72:4d:37:9e:75:c3:0e:b9:96:0b: 77:3c:7b:80:70:06:84:b7:a8:94:19:d6:a4:0c:57: d7:26:7c:7e:84:e9:37:84:f8:e7:3b:70:39:7a:cb: 85:0c:7c:09:5d:69:04:3c:4c:db:29:d9:33:1e:d1: a4:9f:46:84:73:27:a6:22:24:da:2b:f8:21:68:91: 66:3a:78:c7:e6:5a:ea:fb:7d:72:0c:cb:00:9e:20: 44:17:0f:a3:79:5c:13:fb:41:27:b6:2f:f3:8d:fc: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BF:80:B2:35:20:13:0E:42:11:C0:15:A9:B2:A4:A9:02:74:D5:19 X509v3 Authority Key Identifier: keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:24:b6:ee:e4:dd:64:8f:94:bf:29:0d:8d:0b:9e:37:16: 82:3a:0e:cc:0d:11:7e:bc:aa:fb:ff:36:91:7d:ad:b3:1a:4b: 60:43:54:69:2e:40:91:62:6a:c2:55:b3:a2:59:4b:5b:f5:6a: 26:9d:05:65:f0:34:bb:e8:ae:42:25:71:8d:ca:31:32:0e:a1: f6:dd:3e:25:10:4f:16:dc:2e:81:b3:57:f5:bc:dc:48:03:d8: da:20:23:d7:64:ff:04:83:a2:5c:b8:1f:4e:45:5a:25:3f:37: d9:b7:8e:86:3f:8c:ab:fe:1c:02:50:91:f5:e7:4a:5c:7c:15: 94:99:b7:ce:5a:bc:73:f7:d9:15:7e:93:fb:a9:8e:4c:1a:28: 3b:39:b3:96:c3:44:db:81:c0:77:a5:5c:75:e4:99:3d:89:92: 11:c2:88:45:56:95:88:d6:a7:52:fb:7d:f8:19:b1:5f:e7:ac: 57:9a:1a:48:f4:e7:54:42:3c:4a:4a:e9:07:8d:11:b6:36:82: d9:34:6f:1d:c6:24:3b:69:2d:3d:05:39:68:8a:f8:9a:bf:41: 2f:23:91:23:0f:eb:fc:a0:5d:67:99:78:92:60:1c:19:98:70: f2:a2:44:3b:82:d0:18:75:85:08:73:34:b0:48:c0:11:e6:4e: 53:b0:6f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMGIJjiAVwL6f4g0zB6XcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODFiMjRhNmQ2MDMwYmYwODhkZWEzMGM5YTU5MzJmZWJk YzZhN2MwHhcNMjUxMjE4MDIwMDU4WhcNMjUxMjE5MDIwMDU4WjAzMTEwLwYDVQQD Eyg5NWJmODBiMjM1MjAxMzBlNDIxMWMwMTVhOWIyYTRhOTAyNzRkNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnETL8kBxH1eb4qeBIUdpwkCGfqoO 6qQJ/EeSZs1wIFDdGKikEZJdK3ocLS7Jy3N/AC7VdNXUGUuMhVI9ZZOyHLE8Coat G8z8PSNd7ylXKN2/XHoXL4tNFwAWD3NVX+4tZc1Z8RVduzojxZQR2soh//LPuYAG vlMJW/p/Ro309b83wfR5fDnQuQ3jgGpgxmvy5QdBBfxp2d57IXJNN551ww65lgt3 PHuAcAaEt6iUGdakDFfXJnx+hOk3hPjnO3A5esuFDHwJXWkEPEzbKdkzHtGkn0aE cyemIiTaK/ghaJFmOnjH5lrq+31yDMsAniBEFw+jeVwT+0Enti/zjfyaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW/gLI1IBMOQhHAFamypKkCdNUZMB8GA1UdIwQY MBaAFLqBskptYDC/CI3qMMmlky/r3Gp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQt NDhjZDA1ZWNhNzM2LzEvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83MDAzMzMtYWE5Yy00YmQzLTgyMDQtNDhjZDA1ZWNhNzM2 LzEvdW9HeVNtMWdNTDhJamVvd3lhV1RMLXZjYW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/8ktu7k 3WSPlL8pDY0LnjcWgjoOzA0Rfryq+/82kX2tsxpLYENUaS5AkWJqwlWzollLW/Vq Jp0FZfA0u+iuQiVxjcoxMg6h9t0+JRBPFtwugbNX9bzcSAPY2iAj12T/BIOiXLgf TkVaJT832beOhj+Mq/4cAlCR9edKXHwVlJm3zlq8c/fZFX6T+6mOTBooOzmzlsNE 24HAd6VcdeSZPYmSEcKIRVaViNanUvt9+BmxX+esV5oaSPTnVEI8SkrpB40RtjaC 2TRvHcYkO2ktPQU5aIr4mr9BLyORIw/r/KBdZ5l4kmAcGZhw8qJEO4LQGHWFCHM0 sEjAEeZOU7Bv+g== -----END CERTIFICATE-----Generated at Thu Dec 18 04:20:05 2025 by rpki-client