This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json) Hash identifier: NtJ3nBO0C3CVRq6x65FvNULI9VDqhDQJ06ezfu6mvXw= Subject key identifier: D0:A1:D3:C2:24:75:CA:3F:77:86:4E:DC:7C:AA:03:95:63:77:7C:77 Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5 Certificate serial: 019B2552622A082D6ECCCB6488F600E09E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft Manifest number: 149D Signing time: Tue 16 Dec 2025 04:01:54 +0000 Manifest this update: Tue 16 Dec 2025 04:01:54 +0000 Manifest next update: Wed 17 Dec 2025 04:01:54 +0000 Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=) 2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: 4XfLI9glHbTIo8jr63XsftLyKZeuJpPBA51UIFRDIfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:62:2a:08:2d:6e:cc:cb:64:88:f6:00:e0:9e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5 Validity Not Before: Dec 16 04:01:54 2025 GMT Not After : Dec 17 04:01:54 2025 GMT Subject: CN=d0a1d3c22475ca3f77864edc7caa039563777c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:f5:e7:6a:a6:95:41:20:6c:1f:dc:5b:73: 5a:8e:8f:ed:26:19:1f:81:3c:8e:af:99:13:9f:b3: 2a:21:1f:42:3a:f6:fb:69:f6:f0:f8:e9:d0:18:ac: 09:5f:58:a0:b5:8d:eb:1b:5c:b1:2c:87:92:09:25: b2:b1:9f:d2:70:00:01:67:82:8b:43:9a:5d:25:6b: 64:8e:ae:4d:84:9a:8c:45:b4:44:25:06:f2:14:c4: ed:4d:86:7e:a6:42:99:52:e6:f9:72:6d:e0:15:41: bf:d9:4f:62:85:3a:65:b5:80:0f:b8:88:76:e2:da: 82:3b:da:e9:b6:fb:8f:85:c7:ab:04:22:35:f3:88: d9:e4:94:f6:05:2a:82:e3:93:6d:73:2a:e7:b9:c9: 65:d0:df:35:d2:69:af:d2:1f:5c:e0:17:ca:53:ef: d2:8d:17:fe:da:3d:a1:ff:4c:72:3e:6e:ce:d1:6e: 58:31:bd:74:1e:38:d3:35:ee:9b:55:ab:33:0d:0c: 92:c7:34:8c:eb:2d:1a:01:aa:65:15:2c:21:3a:72: 97:ce:f4:f7:86:45:fd:c8:da:a5:bc:20:a9:95:d9: 55:eb:9b:38:a0:b3:57:3e:3e:48:7d:04:12:ba:9e: 66:c4:e6:59:8b:73:57:42:05:1f:0e:d6:8e:ef:90: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A1:D3:C2:24:75:CA:3F:77:86:4E:DC:7C:AA:03:95:63:77:7C:77 X509v3 Authority Key Identifier: keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1e:93:cb:71:62:c2:6b:7b:a2:a6:e6:c3:8e:9d:db:de:82: 57:7e:3b:9b:61:64:f1:32:df:53:8e:e6:7a:40:51:17:61:f8: c2:73:27:77:f6:f2:38:d7:f9:b9:37:92:37:7d:b0:ee:5e:2e: ec:3b:d7:73:ed:5f:9f:0a:c2:9c:a6:a5:0a:f7:54:e5:55:c4: 0b:36:66:6e:80:46:36:25:87:4b:53:a9:a4:89:47:38:b2:9c: 8f:9c:cd:4e:d8:f0:0d:22:2b:b0:31:d2:4c:4d:d1:97:df:92: 60:af:39:16:28:af:0c:9a:8f:03:cc:4d:09:c0:30:67:bd:ec: f9:23:c8:cd:ab:f0:66:41:cc:93:81:81:fd:36:f4:69:36:a6: d2:75:72:98:cb:cc:0b:ce:50:ba:e6:7c:f8:ef:6c:55:af:c7: 5b:33:17:4a:01:2e:a7:9c:53:bc:f1:f1:42:f2:a5:c3:5d:d4: 42:f8:3a:8e:3a:e9:fd:f8:dd:2a:5a:32:ed:c2:58:e5:f8:63: fa:29:ff:93:b8:9a:5b:90:68:d8:3f:e2:0a:93:37:0a:9e:f4: 4a:98:48:cb:be:55:cd:7e:c1:c0:f8:d3:d2:03:3e:21:28:31: 58:ec:c5:32:8c:7b:a7:da:19:a3:6a:8f:1f:ea:a9:0a:dc:2f: 49:55:23:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUmIqCC1uzMtkiPYA4J4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj MDEzZDUwHhcNMjUxMjE2MDQwMTU0WhcNMjUxMjE3MDQwMTU0WjAzMTEwLwYDVQQD EyhkMGExZDNjMjI0NzVjYTNmNzc4NjRlZGM3Y2FhMDM5NTYzNzc3Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA3152qmlUEgbB/cW3Najo/tJhkf gTyOr5kTn7MqIR9COvb7afbw+OnQGKwJX1igtY3rG1yxLIeSCSWysZ/ScAABZ4KL Q5pdJWtkjq5NhJqMRbREJQbyFMTtTYZ+pkKZUub5cm3gFUG/2U9ihTpltYAPuIh2 4tqCO9rptvuPhcerBCI184jZ5JT2BSqC45Ntcyrnucll0N810mmv0h9c4BfKU+/S jRf+2j2h/0xyPm7O0W5YMb10HjjTNe6bVaszDQySxzSM6y0aAaplFSwhOnKXzvT3 hkX9yNqlvCCpldlV65s4oLNXPj5IfQQSup5mxOZZi3NXQgUfDtaO75DmQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCh08Ikdco/d4ZO3HyqA5Vjd3x3MB8GA1UdIwQY MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt OGFjMTdlOWM0MGRiLzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR6Ty3Fi wmt7oqbmw46d296CV347m2Fk8TLfU47mekBRF2H4wnMnd/byONf5uTeSN32w7l4u 7DvXc+1fnwrCnKalCvdU5VXECzZmboBGNiWHS1OppIlHOLKcj5zNTtjwDSIrsDHS TE3Rl9+SYK85FiivDJqPA8xNCcAwZ73s+SPIzavwZkHMk4GB/Tb0aTam0nVymMvM C85QuuZ8+O9sVa/HWzMXSgEup5xTvPHxQvKlw13UQvg6jjrp/fjdKloy7cJY5fhj +in/k7iaW5Bo2D/iCpM3Cp70SphIy75VzX7BwPjT0gM+ISgxWOzFMox7p9oZo2qP H+qpCtwvSVUjTw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:30 2025 by rpki-client