This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json) Hash identifier: FT8e8D01dWmNNXtdAPyWafdNL5aDvkstf9w3vfxbT80= Subject key identifier: 57:DA:5F:F8:04:44:2C:F7:CE:32:D9:4A:78:D7:3E:A0:27:70:6A:B2 Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb Certificate serial: 019B1B04F1331A30D76B746807655DD09386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft Manifest number: 173C Signing time: Sun 14 Dec 2025 04:01:07 +0000 Manifest this update: Sun 14 Dec 2025 04:01:07 +0000 Manifest next update: Mon 15 Dec 2025 04:01:07 +0000 Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=) 2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: O3gw2KvD4HBqyNUaeaGoTb1UMvHTKskQi2C9qhPmiOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:f1:33:1a:30:d7:6b:74:68:07:65:5d:d0:93:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb Validity Not Before: Dec 14 04:01:07 2025 GMT Not After : Dec 15 04:01:07 2025 GMT Subject: CN=57da5ff804442cf7ce32d94a78d73ea027706ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:2d:63:7c:6f:7d:94:a9:47:22:f5:3b:3a: ad:a8:b5:44:18:2d:38:71:4c:55:1a:87:67:8e:0b: fc:94:15:05:63:27:f1:57:33:96:2f:d0:00:7d:c7: 6f:a3:ac:5b:af:1a:2c:31:67:df:cd:fa:19:6f:3d: 67:cd:50:a5:b4:dc:f5:47:54:c6:3b:6d:11:23:d2: 30:56:c4:bd:da:22:f4:11:38:f9:99:a7:cc:46:9f: c2:a1:4e:a9:4e:3c:34:a9:14:9e:22:16:74:98:7a: d4:41:fa:ce:31:50:3f:e7:21:14:9b:2b:3e:1d:7d: fa:6f:18:a7:f2:95:15:be:fd:ca:95:67:6d:8a:3d: 88:a4:07:4d:88:7a:44:07:54:84:e0:f5:e4:76:e0: bd:f7:74:70:83:3c:c7:c1:77:27:86:8b:08:85:3f: d9:02:4d:97:c1:6b:c0:44:b4:cb:e6:f8:40:2c:84: 7b:49:0c:ad:d4:40:c4:11:9d:34:60:cd:85:2e:47: 36:b9:fc:21:42:24:61:18:08:1d:ef:ec:67:6b:85: 3e:1e:f1:cf:4f:13:a2:6a:f2:2b:86:c0:f4:98:65: dd:a7:09:7d:97:75:5b:ae:f9:19:78:bb:63:ec:d4: 9b:61:56:e2:0c:26:8c:0f:f7:3e:15:51:1d:fc:01: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DA:5F:F8:04:44:2C:F7:CE:32:D9:4A:78:D7:3E:A0:27:70:6A:B2 X509v3 Authority Key Identifier: keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3b:d8:ca:2e:cc:97:89:ae:a6:7a:40:01:43:c9:c4:86:f1: 94:ef:5a:f9:61:a8:30:e4:39:79:90:94:f4:63:0b:d0:96:22: 74:e4:bb:71:6f:e6:31:73:fe:81:7f:28:40:a4:d2:33:a6:bf: af:2a:17:61:3a:69:e7:db:ad:73:ff:bb:33:e8:75:6b:1e:d0: 43:23:24:04:a4:c8:f3:0d:12:13:12:3e:99:4e:bd:92:4d:ec: 36:03:7f:ec:a0:5d:e0:91:ce:bb:0d:2c:84:38:be:f0:89:07: 5a:0f:be:57:0a:52:0e:d5:a9:28:71:c9:35:85:36:68:4e:c5: 4c:a6:ef:69:c6:00:cd:0b:ef:16:0e:86:a0:81:5a:8e:77:b8: 3a:a6:b0:1c:9f:01:1f:8a:2a:f8:25:66:af:c3:ad:ad:8e:4b: 66:60:ac:a6:f9:86:07:cf:17:11:62:c8:7c:8e:4c:9b:a8:74: ab:f1:84:86:d4:51:2e:67:2f:1f:ca:e7:35:0c:27:99:e3:35: 6f:d9:f4:e1:82:ff:2f:d3:7c:87:2c:7f:b2:76:1b:85:c7:b8: bc:c0:e2:64:3a:78:a7:5e:78:e5:a8:ab:e8:89:c8:d6:a6:9a: 94:b7:82:bd:31:a9:e1:10:5a:af:ab:19:a0:30:63:63:8d:43: 67:bb:af:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBPEzGjDXa3RoB2Vd0JOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx MTlhYmIwHhcNMjUxMjE0MDQwMTA3WhcNMjUxMjE1MDQwMTA3WjAzMTEwLwYDVQQD Eyg1N2RhNWZmODA0NDQyY2Y3Y2UzMmQ5NGE3OGQ3M2VhMDI3NzA2YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq8tY3xvfZSpRyL1OzqtqLVEGC04 cUxVGodnjgv8lBUFYyfxVzOWL9AAfcdvo6xbrxosMWffzfoZbz1nzVCltNz1R1TG O20RI9IwVsS92iL0ETj5mafMRp/CoU6pTjw0qRSeIhZ0mHrUQfrOMVA/5yEUmys+ HX36bxin8pUVvv3KlWdtij2IpAdNiHpEB1SE4PXkduC993RwgzzHwXcnhosIhT/Z Ak2XwWvARLTL5vhALIR7SQyt1EDEEZ00YM2FLkc2ufwhQiRhGAgd7+xna4U+HvHP TxOiavIrhsD0mGXdpwl9l3VbrvkZeLtj7NSbYVbiDCaMD/c+FVEd/AHi7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfaX/gERCz3zjLZSnjXPqAncGqyMB8GA1UdIwQY MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5 LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjvYyi7M l4mupnpAAUPJxIbxlO9a+WGoMOQ5eZCU9GML0JYidOS7cW/mMXP+gX8oQKTSM6a/ ryoXYTpp59utc/+7M+h1ax7QQyMkBKTI8w0SExI+mU69kk3sNgN/7KBd4JHOuw0s hDi+8IkHWg++VwpSDtWpKHHJNYU2aE7FTKbvacYAzQvvFg6GoIFajne4OqawHJ8B H4oq+CVmr8OtrY5LZmCspvmGB88XEWLIfI5Mm6h0q/GEhtRRLmcvH8rnNQwnmeM1 b9n04YL/L9N8hyx/snYbhce4vMDiZDp4p1545air6InI1qaalLeCvTGp4RBar6sZ oDBjY41DZ7uvHg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:08 2025 by rpki-client