This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json) Hash identifier: ajdvFE0XO2xNHHqdZ6PpeLjClh/SdmAjoBCdo7CL88A= Subject key identifier: AA:32:1D:35:BD:47:CF:0F:CF:96:18:ED:3B:E2:F8:8D:6F:28:5D:A0 Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Certificate serial: 019B25F6228FBA105DFD778A3502FC440939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft Manifest number: 0F72 Signing time: Tue 16 Dec 2025 07:00:46 +0000 Manifest this update: Tue 16 Dec 2025 07:00:46 +0000 Manifest next update: Wed 17 Dec 2025 07:00:46 +0000 Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: nPvr8NX15G7N75nVghe9sDZJoDrjl6UpNSGEGOaxR9k=) 2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:22:8f:ba:10:5d:fd:77:8a:35:02:fc:44:09:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Validity Not Before: Dec 16 07:00:46 2025 GMT Not After : Dec 17 07:00:46 2025 GMT Subject: CN=aa321d35bd47cf0fcf9618ed3be2f88d6f285da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:bd:b1:48:8f:97:a6:1c:e0:a4:22:c4:97: 7f:f3:c3:fe:66:f8:5e:28:bb:da:70:74:a2:4b:40: 08:f0:3a:a6:fd:7a:d7:57:ce:e4:04:ae:4a:48:33: 5f:45:d5:cd:e4:5d:89:03:42:63:79:1b:b8:a5:95: d1:27:97:4a:09:96:cc:ea:d3:31:95:6b:4a:fe:c7: f7:d1:7a:fb:c5:b9:9e:bc:a8:a8:5a:0a:c2:28:34: f2:01:43:f1:dd:c2:32:bf:8e:ac:bf:df:88:a8:f7: 41:de:ec:d7:e4:8a:af:0c:db:25:52:ba:87:91:40: 3c:97:c1:a6:f9:de:db:d3:9e:58:ac:a7:9e:fd:8a: d0:e8:d9:5f:c0:88:2c:ef:47:88:a6:b2:15:cc:03: 1f:f2:e5:3d:47:01:6c:1f:30:6b:47:e4:ab:e3:74: 12:45:25:49:ae:ec:39:e4:f3:a5:62:ae:12:65:74: 8c:f3:3e:86:b2:40:47:07:b1:06:16:b9:88:db:9c: 02:46:3c:60:c4:67:4f:10:98:2a:c6:8d:6c:fa:2c: cf:be:a6:de:3d:cd:45:6f:71:51:d5:63:d0:ab:57: a4:09:73:34:cc:ae:ce:6c:7b:8f:36:c9:01:0d:f8: 1f:ca:dd:a7:ae:90:dd:15:a6:39:18:a7:b3:f0:c6: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:32:1D:35:BD:47:CF:0F:CF:96:18:ED:3B:E2:F8:8D:6F:28:5D:A0 X509v3 Authority Key Identifier: keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a3:03:34:0a:e6:f0:ae:d0:0e:30:87:14:54:d5:a3:68:d8: f0:d8:f5:96:72:90:e1:5a:e5:e6:dc:31:ad:f1:7a:71:19:58: d1:63:1d:07:e6:1b:d5:46:3e:14:fb:d9:f6:ea:f1:3d:4d:a5: 95:54:db:6d:a0:ee:2f:c8:c3:27:20:a5:67:37:ac:25:f5:03: 3d:2b:6a:21:a6:d0:8e:07:2c:53:e4:54:b1:f1:0f:dd:93:42: b1:76:d5:70:56:77:f6:02:eb:6b:ee:37:31:24:f8:aa:a6:6a: dc:ae:d1:7b:e5:d1:41:03:ad:c9:9d:a6:ae:27:76:83:f6:69: 0d:74:12:31:ae:6f:c5:10:9f:47:33:02:5f:c3:99:08:12:e6: 31:e0:06:2d:7c:e2:db:87:18:04:6b:25:f4:44:6d:02:a5:10: 62:8e:a8:80:29:34:6e:b1:f9:63:0e:20:09:88:a1:c6:81:eb: 44:24:10:5b:c0:5c:08:a0:03:a6:fc:46:39:fe:7b:bc:0d:1c: 06:87:99:7d:3d:43:c5:ce:06:e6:cd:b8:4e:cf:ac:6b:25:13: b8:e4:a9:87:60:93:e3:57:8b:27:f9:6f:5c:9f:d8:02:63:80: bf:e6:d2:55:c8:f5:cc:34:d1:3c:4e:42:c5:d7:c4:c2:e1:ad: 56:11:67:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9iKPuhBd/XeKNQL8RAk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx MTM2MGUwHhcNMjUxMjE2MDcwMDQ2WhcNMjUxMjE3MDcwMDQ2WjAzMTEwLwYDVQQD EyhhYTMyMWQzNWJkNDdjZjBmY2Y5NjE4ZWQzYmUyZjg4ZDZmMjg1ZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1S9sUiPl6Yc4KQixJd/88P+Zvhe KLvacHSiS0AI8Dqm/XrXV87kBK5KSDNfRdXN5F2JA0JjeRu4pZXRJ5dKCZbM6tMx lWtK/sf30Xr7xbmevKioWgrCKDTyAUPx3cIyv46sv9+IqPdB3uzX5IqvDNslUrqH kUA8l8Gm+d7b055YrKee/YrQ6NlfwIgs70eIprIVzAMf8uU9RwFsHzBrR+Sr43QS RSVJruw55POlYq4SZXSM8z6GskBHB7EGFrmI25wCRjxgxGdPEJgqxo1s+izPvqbe Pc1Fb3FR1WPQq1ekCXM0zK7ObHuPNskBDfgfyt2nrpDdFaY5GKez8MYYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoyHTW9R88Pz5YY7Tvi+I1vKF2gMB8GA1UdIwQY MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt ZDBjZmU0MzAxNmRlLzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6MDNArm 8K7QDjCHFFTVo2jY8Nj1lnKQ4Vrl5twxrfF6cRlY0WMdB+Yb1UY+FPvZ9urxPU2l lVTbbaDuL8jDJyClZzesJfUDPStqIabQjgcsU+RUsfEP3ZNCsXbVcFZ39gLra+43 MST4qqZq3K7Re+XRQQOtyZ2mrid2g/ZpDXQSMa5vxRCfRzMCX8OZCBLmMeAGLXzi 24cYBGsl9ERtAqUQYo6ogCk0brH5Yw4gCYihxoHrRCQQW8BcCKADpvxGOf57vA0c BoeZfT1Dxc4G5s24Ts+sayUTuOSph2CT41eLJ/lvXJ/YAmOAv+bSVcj1zDTRPE5C xdfEwuGtVhFn3g== -----END CERTIFICATE-----Generated at Tue Dec 16 09:01:30 2025 by rpki-client