This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json) Hash identifier: suKcjdj6TVcaVRiOyPIvmuMrQTWFQbzEuzz3cjuEY1w= Subject key identifier: 3C:CF:A2:74:16:1B:6F:BF:40:8E:60:6D:5B:52:D1:81:ED:43:EF:25 Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880 Certificate serial: 019B31C3F890EAE2C077AE297F161658CA6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft Manifest number: 07CF Signing time: Thu 18 Dec 2025 14:01:25 +0000 Manifest this update: Thu 18 Dec 2025 14:01:25 +0000 Manifest next update: Fri 19 Dec 2025 14:01:25 +0000 Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: elZ1fhgx6WBCPqTNmjOs2BrzygmKoThHiIYt1iOFrnU=) 2: z_tXbjwTybgsIu8gcHGw6c-3LCI.roa (hash: +h48Ej53f4z6jTARf/DyDynXjuIZO6RWwEf4zGYnud4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:f8:90:ea:e2:c0:77:ae:29:7f:16:16:58:ca:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880 Validity Not Before: Dec 18 14:01:25 2025 GMT Not After : Dec 19 14:01:25 2025 GMT Subject: CN=3ccfa274161b6fbf408e606d5b52d181ed43ef25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:69:53:9a:3e:a4:ac:49:2e:e8:a9:d7:c3: 01:3d:32:7b:37:03:13:b0:b5:fb:7f:ac:01:66:98: f3:b0:96:39:05:0f:46:84:3c:09:db:03:87:0c:42: 7b:9c:6d:0a:57:19:c4:03:e7:ea:55:3e:6c:13:16: d4:72:36:2f:a9:07:a7:8e:59:d9:6e:c0:f0:db:21: f6:ba:a2:da:9c:1c:a2:6c:20:bc:d7:ff:a4:08:e7: f4:5f:22:67:84:3e:4a:b0:e2:54:bf:39:52:f9:5d: 35:df:01:86:fa:73:e8:ea:a3:f5:40:3a:a4:50:25: 7f:5e:78:4a:a1:ff:c4:7e:4a:fc:b8:db:14:8b:98: 82:09:78:2c:1d:66:b8:0e:a1:48:1a:f7:ae:0c:4d: 54:42:3b:30:c7:3e:1c:54:9f:5a:ea:86:59:92:77: 9b:69:1f:74:a8:00:48:54:82:4e:af:3d:b6:87:58: 7c:d6:b0:7f:f9:82:1c:25:3e:2a:dd:59:65:da:05: 74:1d:b0:f2:69:ba:cb:ab:c5:ff:b9:92:d3:5c:3a: 4e:77:a3:0b:8a:ec:35:f4:4b:85:f5:cb:25:f2:01: 6e:d9:2e:11:60:b8:a3:af:d0:1d:7d:17:55:ac:67: fe:4f:50:f7:fa:31:7c:81:36:69:fd:fa:4b:db:7a: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:A2:74:16:1B:6F:BF:40:8E:60:6D:5B:52:D1:81:ED:43:EF:25 X509v3 Authority Key Identifier: keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e9:24:5a:34:a6:54:7a:20:3e:5e:c9:0a:01:78:30:c1:99: d4:02:26:4b:71:e8:ac:1f:95:3d:1f:ac:18:7c:b9:8f:e8:26: 2d:e3:f2:ff:44:e6:f4:39:cf:a5:d2:f1:d0:60:7c:2f:42:2c: 84:e8:65:af:55:14:93:5a:fe:49:40:a0:b4:a9:04:a1:5c:aa: 5f:be:c2:6e:b1:39:2b:88:79:f6:3a:a3:0a:db:e4:20:24:61: 4e:79:00:32:01:db:73:0f:fa:d5:e9:fb:64:a8:2a:ef:f3:77: 41:07:d2:bb:e1:da:8e:8c:d3:48:45:35:05:ce:ab:c9:95:60: e7:cc:be:7d:42:ad:ff:f4:6d:f4:b3:61:6a:9d:17:80:81:81: 4f:b6:53:ad:c9:2b:c1:c5:70:0e:ed:c9:38:13:bf:3b:ae:5f: ad:78:36:8c:90:d8:ad:af:67:a7:55:0d:8e:14:b4:d3:1e:0f: 46:40:46:59:38:04:9a:27:5e:c3:2f:56:ad:d9:15:a4:eb:69: cf:2e:13:c5:8d:0d:ec:e3:c2:a3:bd:60:a9:7d:ad:dd:f2:0f: 0c:9d:06:38:a1:a5:71:00:cd:c1:de:b0:cd:91:fa:ea:5e:15: 28:b6:0d:d1:ea:f4:24:22:61:3f:7b:c8:ff:be:15:62:dd:1f: 9a:68:06:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw/iQ6uLAd64pfxYWWMpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5 OWY4ODAwHhcNMjUxMjE4MTQwMTI1WhcNMjUxMjE5MTQwMTI1WjAzMTEwLwYDVQQD EygzY2NmYTI3NDE2MWI2ZmJmNDA4ZTYwNmQ1YjUyZDE4MWVkNDNlZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRpU5o+pKxJLuip18MBPTJ7NwMT sLX7f6wBZpjzsJY5BQ9GhDwJ2wOHDEJ7nG0KVxnEA+fqVT5sExbUcjYvqQenjlnZ bsDw2yH2uqLanByibCC81/+kCOf0XyJnhD5KsOJUvzlS+V013wGG+nPo6qP1QDqk UCV/XnhKof/Efkr8uNsUi5iCCXgsHWa4DqFIGveuDE1UQjswxz4cVJ9a6oZZkneb aR90qABIVIJOrz22h1h81rB/+YIcJT4q3Vll2gV0HbDyabrLq8X/uZLTXDpOd6ML iuw19EuF9csl8gFu2S4RYLijr9AdfRdVrGf+T1D3+jF8gTZp/fpL23r/pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzPonQWG2+/QI5gbVtS0YHtQ+8lMB8GA1UdIwQY MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4 LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaekkWjSm VHogPl7JCgF4MMGZ1AImS3HorB+VPR+sGHy5j+gmLePy/0Tm9DnPpdLx0GB8L0Is hOhlr1UUk1r+SUCgtKkEoVyqX77CbrE5K4h59jqjCtvkICRhTnkAMgHbcw/61en7 ZKgq7/N3QQfSu+HajozTSEU1Bc6ryZVg58y+fUKt//Rt9LNhap0XgIGBT7ZTrckr wcVwDu3JOBO/O65frXg2jJDYra9np1UNjhS00x4PRkBGWTgEmidewy9WrdkVpOtp zy4TxY0N7OPCo71gqX2t3fIPDJ0GOKGlcQDNwd6wzZH66l4VKLYN0er0JCJhP3vI /74VYt0fmmgGDw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:25 2025 by rpki-client