This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json) Hash identifier: uK47EyiqK83kQButUN2LfcvRSSmO4tngyirz6pXHaE0= Subject key identifier: 92:A9:21:43:D9:75:6F:D3:64:B5:63:54:D5:71:C4:76:67:16:A4:8F Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Certificate serial: 019B24E35A0F0354016BD60E665E0B35991E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft Manifest number: CA Signing time: Tue 16 Dec 2025 02:00:38 +0000 Manifest this update: Tue 16 Dec 2025 02:00:38 +0000 Manifest next update: Wed 17 Dec 2025 02:00:38 +0000 Files and hashes: 1: M9ok_oEA-Cq66PnPmgpXlFaH8Sc.roa (hash: Bj68sqknRNEMUK6hrMTUuevwXIra7kusoFg9lZhmyJM=) 2: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: HU4dOB4K2FMwG4wqnMItAE35g9kSj2sd1vPvemVsd8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:5a:0f:03:54:01:6b:d6:0e:66:5e:0b:35:99:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c Validity Not Before: Dec 16 02:00:38 2025 GMT Not After : Dec 17 02:00:38 2025 GMT Subject: CN=92a92143d9756fd364b56354d571c4766716a48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:f2:f3:7f:1b:e1:47:02:49:a8:42:eb:d6: 7e:9e:b8:84:e6:3b:45:6c:82:f3:81:03:b0:f1:4e: 30:65:7b:26:d7:8d:d4:6c:ce:10:5b:73:e0:bf:36: c5:1f:f1:fd:3c:c6:b3:3e:91:10:ca:90:23:62:65: 7e:0a:b5:5e:4d:8c:58:44:bf:40:7e:6f:c3:98:0e: d0:d4:17:92:22:89:dc:67:44:17:d5:3a:bd:b2:db: ee:3c:64:b2:37:08:08:3d:df:9e:1c:93:76:bc:2f: bc:26:79:7f:41:79:0b:6a:bd:db:be:a3:2d:d3:84: fd:91:88:74:81:78:0e:6c:69:54:14:84:24:2e:14: 52:48:91:04:9e:65:41:c9:6c:3b:d3:0c:db:74:54: cd:64:e8:32:30:6b:63:68:41:d6:ff:5b:7c:f2:a3: 33:96:61:c2:23:4e:27:85:5b:29:f0:ae:2d:24:6d: f4:b6:62:79:7f:64:68:fd:ce:33:09:76:40:bf:cc: 30:77:9d:86:7a:b8:16:7d:bf:af:d7:b6:c4:c9:ec: bd:38:61:4a:33:05:c9:86:38:c0:ed:02:f3:ec:b4: de:a2:7a:fd:06:be:44:70:8f:9f:db:cd:c9:28:96: 59:10:6b:46:86:a5:7e:d1:91:e6:6a:ab:2a:cd:9f: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A9:21:43:D9:75:6F:D3:64:B5:63:54:D5:71:C4:76:67:16:A4:8F X509v3 Authority Key Identifier: keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:40:d5:95:c8:ab:f6:13:4a:9c:71:7c:b2:da:fd:58:32:84: cf:91:bc:35:58:9f:56:5c:e6:46:32:3f:a4:59:7f:1f:65:91: e7:d8:d9:3f:65:c7:06:5c:95:d2:a2:be:3b:12:1d:ea:e5:a4: eb:4f:93:df:4d:ef:8c:89:7c:50:84:91:e3:de:dc:e7:ce:54: ad:bf:91:d2:35:12:b1:35:44:4d:ab:e7:af:01:da:2e:7e:bb: d7:d4:33:9c:7c:d0:35:5f:d6:35:09:98:5b:e3:22:b2:fe:10: 13:e2:ec:c3:e6:0a:d9:55:bd:40:bd:33:9e:fd:fb:93:61:e6: 3c:fe:8a:84:cf:f5:b2:93:b0:29:2e:0e:d1:e0:c2:16:f0:10: c0:3b:8e:40:7f:a5:1c:d3:cd:14:5c:0d:89:15:38:91:99:ca: 00:e6:ff:fb:59:ea:a2:7a:54:0f:0e:a8:ed:f7:78:5c:8d:34: c6:73:5f:9a:ee:d0:40:6f:47:75:b9:27:bb:45:43:62:61:61: 38:57:31:7b:75:fe:f9:99:7d:03:3f:88:d3:45:fb:a7:1b:bf: 2e:be:43:b9:7d:c3:a0:00:4c:cc:37:89:5a:b5:f9:c2:0e:08: b5:ac:e9:64:12:e6:66:bb:1b:4b:89:59:0b:8c:d5:af:cc:e5: da:99:6a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk41oPA1QBa9YOZl4LNZkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh YmVlMWMwHhcNMjUxMjE2MDIwMDM4WhcNMjUxMjE3MDIwMDM4WjAzMTEwLwYDVQQD Eyg5MmE5MjE0M2Q5NzU2ZmQzNjRiNTYzNTRkNTcxYzQ3NjY3MTZhNDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcry838b4UcCSahC69Z+nriE5jtF bILzgQOw8U4wZXsm143UbM4QW3PgvzbFH/H9PMazPpEQypAjYmV+CrVeTYxYRL9A fm/DmA7Q1BeSIoncZ0QX1Tq9stvuPGSyNwgIPd+eHJN2vC+8Jnl/QXkLar3bvqMt 04T9kYh0gXgObGlUFIQkLhRSSJEEnmVByWw70wzbdFTNZOgyMGtjaEHW/1t88qMz lmHCI04nhVsp8K4tJG30tmJ5f2Ro/c4zCXZAv8wwd52GergWfb+v17bEyey9OGFK MwXJhjjA7QLz7LTeonr9Br5EcI+f283JKJZZEGtGhqV+0ZHmaqsqzZ95nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKpIUPZdW/TZLVjVNVxxHZnFqSPMB8GA1UdIwQY MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt NDdmNWMxYzUyY2UyLzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUDVlcir 9hNKnHF8str9WDKEz5G8NVifVlzmRjI/pFl/H2WR59jZP2XHBlyV0qK+OxId6uWk 60+T303vjIl8UISR497c585Urb+R0jUSsTVETavnrwHaLn6719QznHzQNV/WNQmY W+Misv4QE+Lsw+YK2VW9QL0znv37k2HmPP6KhM/1spOwKS4O0eDCFvAQwDuOQH+l HNPNFFwNiRU4kZnKAOb/+1nqonpUDw6o7fd4XI00xnNfmu7QQG9Hdbknu0VDYmFh OFcxe3X++Zl9Az+I00X7pxu/Lr5DuX3DoABMzDeJWrX5wg4ItazpZBLmZrsbS4lZ C4zVr8zl2plqaQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:35:04 2025 by rpki-client