This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json) Hash identifier: aeMoPP4wVA5puCfzMAuyaxCuhDQydop23dZUCEcFM5o= Subject key identifier: 31:69:65:45:18:76:72:3B:A1:22:BD:9D:EA:08:D0:EC:FD:A8:09:5E Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Certificate serial: 019B703496EEA2DB8A9643E79FAD8A5D4D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft Manifest number: 17B0 Signing time: Tue 30 Dec 2025 17:00:53 +0000 Manifest this update: Tue 30 Dec 2025 17:00:53 +0000 Manifest next update: Wed 31 Dec 2025 17:00:53 +0000 Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: L8zYK3XWEvXUmP2yQ8Jzo0tPVPkqpdfd4FB2DU5m1BU=) 2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=) 3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:96:ee:a2:db:8a:96:43:e7:9f:ad:8a:5d:4d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f Validity Not Before: Dec 30 17:00:53 2025 GMT Not After : Dec 31 17:00:53 2025 GMT Subject: CN=316965451876723ba122bd9dea08d0ecfda8095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:27:c4:d8:cd:c1:37:cc:c6:67:53:3f:d2: 12:4c:e5:6c:07:0e:78:76:a6:92:cd:d0:96:a5:9d: 72:24:5d:fc:bd:e5:b9:22:30:9d:2b:2c:23:8c:62: 00:13:7f:fe:58:24:af:53:0d:9a:e1:d3:27:87:c8: b5:dd:4e:1f:7b:67:ad:81:2c:39:9b:80:89:1e:d5: 8a:79:60:28:10:ea:21:42:19:c6:9a:1d:2b:d1:6d: f7:0a:38:16:4a:1e:af:81:40:93:28:d6:17:dc:f4: 62:99:39:5f:2b:b1:5f:ae:e9:0d:1b:1c:a2:4f:01: ee:d6:c1:89:de:40:c7:4c:e1:5e:cf:5c:40:9a:29: 3a:2c:66:4a:25:0e:0b:f1:bf:70:4d:87:f4:46:b3: 39:37:be:3e:1a:3a:c3:25:2b:ab:91:83:b2:b6:3c: 2f:2c:d1:08:d7:4b:fd:1f:71:1f:07:0c:25:b9:83: 19:46:a7:b6:21:96:f6:0f:4c:a2:7a:13:91:73:05: d2:e6:a8:b9:39:d9:9a:19:b1:1d:e3:e8:60:c8:83: 50:68:64:ad:a6:04:9d:19:87:f7:9d:54:53:ca:fb: f5:35:a1:e4:76:67:b9:6e:29:f6:75:28:2e:fc:07: 0a:cc:10:e2:ff:07:a4:0e:a2:13:cd:76:e4:6a:6b: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:69:65:45:18:76:72:3B:A1:22:BD:9D:EA:08:D0:EC:FD:A8:09:5E X509v3 Authority Key Identifier: keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:f2:d0:00:bf:07:99:f2:d4:57:13:5b:99:d6:a7:12:8b: 4f:39:ac:fc:50:58:81:e2:c2:a7:5c:a2:a8:eb:de:42:d6:4d: 3c:dd:fe:1b:01:4e:9c:4e:c6:8e:27:ef:52:ef:af:fd:d4:1c: 7f:0a:7a:42:d1:f8:5c:8d:51:aa:32:d4:35:8a:94:0a:26:5f: ad:3a:4a:98:6f:7f:05:c7:ee:73:4f:81:44:61:8f:e5:48:1e: d8:69:30:44:82:31:fb:37:83:05:b8:5a:99:33:39:76:79:2a: 96:0b:32:28:88:58:58:d4:43:6b:c9:ab:b4:ff:b0:c7:7c:71: 42:49:a2:d8:be:9e:18:96:8a:c5:f2:02:95:f6:de:c2:a9:88: cf:cc:73:fd:05:08:b7:c0:6f:85:70:61:d6:cd:c3:81:e5:9a: 8c:54:fe:18:7a:33:11:39:74:7d:64:cc:13:3c:02:b1:66:3a: 25:c3:a5:bb:90:d9:95:f9:15:98:db:c1:5c:ae:2e:89:16:46: 23:83:39:30:e8:f8:e5:f9:c6:a3:14:85:76:0f:92:ad:fe:99: cd:cf:97:78:75:03:8f:35:20:07:9c:f5:a0:40:a7:d6:f7:d0: bb:b4:e8:1d:1f:c7:7a:b1:34:5d:17:ba:2e:2f:99:46:cf:07: 29:11:02:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNJbuotuKlkPnn62KXU1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4 ZDM0NGYwHhcNMjUxMjMwMTcwMDUzWhcNMjUxMjMxMTcwMDUzWjAzMTEwLwYDVQQD EygzMTY5NjU0NTE4NzY3MjNiYTEyMmJkOWRlYTA4ZDBlY2ZkYTgwOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJAnxNjNwTfMxmdTP9ISTOVsBw54 dqaSzdCWpZ1yJF38veW5IjCdKywjjGIAE3/+WCSvUw2a4dMnh8i13U4fe2etgSw5 m4CJHtWKeWAoEOohQhnGmh0r0W33CjgWSh6vgUCTKNYX3PRimTlfK7FfrukNGxyi TwHu1sGJ3kDHTOFez1xAmik6LGZKJQ4L8b9wTYf0RrM5N74+GjrDJSurkYOytjwv LNEI10v9H3EfBwwluYMZRqe2IZb2D0yiehORcwXS5qi5OdmaGbEd4+hgyINQaGSt pgSdGYf3nVRTyvv1NaHkdme5bin2dSgu/AcKzBDi/wekDqITzXbkamu2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFpZUUYdnI7oSK9neoI0Oz9qAleMB8GA1UdIwQY MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt ZGNmYzZhOWUwZGM3LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3 LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel3y0AC/ B5ny1FcTW5nWpxKLTzms/FBYgeLCp1yiqOveQtZNPN3+GwFOnE7GjifvUu+v/dQc fwp6QtH4XI1RqjLUNYqUCiZfrTpKmG9/Bcfuc0+BRGGP5Uge2GkwRIIx+zeDBbha mTM5dnkqlgsyKIhYWNRDa8mrtP+wx3xxQkmi2L6eGJaKxfIClfbewqmIz8xz/QUI t8BvhXBh1s3DgeWajFT+GHozETl0fWTMEzwCsWY6JcOlu5DZlfkVmNvBXK4uiRZG I4M5MOj45fnGoxSFdg+Srf6Zzc+XeHUDjzUgB5z1oECn1vfQu7ToHR/HerE0XRe6 Li+ZRs8HKREC1A== -----END CERTIFICATE-----Generated at Tue Dec 30 23:06:37 2025 by rpki-client