This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json) Hash identifier: zru4HIY1tK4zE+f/qHxK+SEUHWwgi7uhlD+Z2bDf71Q= Subject key identifier: 3C:09:80:FF:F3:D4:A6:16:EA:20:20:43:37:70:35:7E:B1:3B:5C:BA Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019B3E6E3DA9EF76F41B35ADF00BC2459400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft Manifest number: 0B4F Signing time: Sun 21 Dec 2025 01:02:50 +0000 Manifest this update: Sun 21 Dec 2025 01:02:50 +0000 Manifest next update: Mon 22 Dec 2025 01:02:50 +0000 Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=) 2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: PBnCgglpcV+yEje0wniq8FUPWos8QiIYR01yfq8azyU=) 3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:3d:a9:ef:76:f4:1b:35:ad:f0:0b:c2:45:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Dec 21 01:02:50 2025 GMT Not After : Dec 22 01:02:50 2025 GMT Subject: CN=3c0980fff3d4a616ea2020433770357eb13b5cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:f5:ef:76:83:2d:cd:ac:77:aa:0e:9a:a2: b1:74:6f:ad:86:af:cd:f3:a4:87:2e:d0:28:99:33: 19:cf:33:02:52:9e:96:b3:98:f9:68:b6:b7:1c:52: db:41:8a:46:91:a9:88:ca:1c:0f:61:b0:50:2a:c4: 1e:1e:32:c0:c6:d1:da:ca:b5:07:f5:98:5e:fd:41: 69:ce:8c:85:69:6f:25:69:4b:dc:b0:5d:16:26:77: ed:7e:d6:e3:45:b4:5e:9f:eb:d8:dd:db:03:7b:29: 4c:50:62:2a:ee:d4:48:39:c6:c3:4f:4c:35:26:76: 0c:3e:b3:49:08:ce:f9:7f:cc:6e:65:53:1d:d4:fe: 6b:6f:b2:e8:9e:be:34:f2:c7:44:44:be:ae:08:76: 40:28:36:ce:03:3f:8a:91:08:c6:cc:b9:fe:7f:8e: 19:f6:50:9d:e1:85:eb:cd:8b:37:d9:6c:df:d5:b1: 52:71:5a:1b:ef:e8:08:5a:dd:1f:96:73:66:14:18: 71:c6:f1:bb:c3:0b:4a:5b:ef:f4:8d:3c:ba:08:ae: 3c:cb:96:84:24:fc:40:02:57:22:8a:70:ec:30:bb: 56:0f:e4:dc:11:bb:22:1d:0b:ba:cb:1e:0a:25:c6: e0:de:36:12:c6:37:63:f7:42:81:df:c2:01:d4:63: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:09:80:FF:F3:D4:A6:16:EA:20:20:43:37:70:35:7E:B1:3B:5C:BA X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:e0:a4:3b:22:7e:e1:b2:6a:2c:e9:1d:3e:0b:55:ef:f6: f6:96:4c:33:3c:4a:b2:2b:7b:22:09:3c:b9:75:33:39:d2:aa: 26:95:02:97:f4:0c:2e:7a:98:c0:72:1e:98:aa:b4:37:b2:ec: 8e:e5:c3:d9:69:f6:bd:d9:e4:fd:d7:68:f3:d0:7d:5c:76:8e: b4:5e:26:94:6c:1f:a6:a1:ed:3d:5b:6f:69:6e:0a:f7:57:df: 09:d7:e5:35:cb:da:d6:0f:1f:8f:f1:08:be:0c:af:cf:5d:46: 1a:c5:27:bb:47:a3:16:76:4d:e0:55:30:07:b7:88:ca:2f:d0: 47:3d:0d:9d:37:b6:39:60:fd:07:d4:fe:3c:0c:49:15:e0:b8: 38:05:e3:a5:03:0c:e5:e1:d2:6b:85:d9:ac:43:c7:53:af:0f: 74:46:74:c8:2b:1d:e3:37:69:07:2c:9a:35:0d:d8:2f:8f:b2: 04:94:01:38:58:e3:0b:d4:1e:d5:ee:99:9e:ce:65:f7:c3:2f: 2c:34:9c:7e:aa:95:32:15:c5:af:8a:ec:30:3e:9d:3d:ad:6e: 22:1a:8c:aa:5d:26:8f:83:64:21:c3:ef:fe:6d:d7:4c:82:a6: f7:c9:fe:23:77:46:f3:86:21:0a:ef:d2:b4:e4:79:cb:75:c8: 41:12:86:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bj2p73b0GzWt8AvCRZQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjUxMjIxMDEwMjUwWhcNMjUxMjIyMDEwMjUwWjAzMTEwLwYDVQQD EygzYzA5ODBmZmYzZDRhNjE2ZWEyMDIwNDMzNzcwMzU3ZWIxM2I1Y2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPH173aDLc2sd6oOmqKxdG+thq/N 86SHLtAomTMZzzMCUp6Ws5j5aLa3HFLbQYpGkamIyhwPYbBQKsQeHjLAxtHayrUH 9Zhe/UFpzoyFaW8laUvcsF0WJnftftbjRbRen+vY3dsDeylMUGIq7tRIOcbDT0w1 JnYMPrNJCM75f8xuZVMd1P5rb7Lonr408sdERL6uCHZAKDbOAz+KkQjGzLn+f44Z 9lCd4YXrzYs32Wzf1bFScVob7+gIWt0flnNmFBhxxvG7wwtKW+/0jTy6CK48y5aE JPxAAlciinDsMLtWD+TcEbsiHQu6yx4KJcbg3jYSxjdj90KB38IB1GMNkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwJgP/z1KYW6iAgQzdwNX6xO1y6MB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWfgpDsi fuGyaizpHT4LVe/29pZMMzxKsit7Igk8uXUzOdKqJpUCl/QMLnqYwHIemKq0N7Ls juXD2Wn2vdnk/ddo89B9XHaOtF4mlGwfpqHtPVtvaW4K91ffCdflNcva1g8fj/EI vgyvz11GGsUnu0ejFnZN4FUwB7eIyi/QRz0NnTe2OWD9B9T+PAxJFeC4OAXjpQMM 5eHSa4XZrEPHU68PdEZ0yCsd4zdpByyaNQ3YL4+yBJQBOFjjC9Qe1e6Zns5l98Mv LDScfqqVMhXFr4rsMD6dPa1uIhqMql0mj4NkIcPv/m3XTIKm98n+I3dG84YhCu/S tOR5y3XIQRKGKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:23:34 2025 by rpki-client