This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft File: uQs3yxdghhgU8CzzVJfuVlMwZEw.mft (raw, json) Hash identifier: 6XT6it7WhNzfXNH4nzYBPvZyWee0wC2AfFKrTnneBIo= Subject key identifier: A0:AC:43:4A:39:9D:DF:15:53:93:10:C9:15:FB:15:71:02:12:CB:1B Authority key identifier: B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C Certificate issuer: /CN=b90b37cb1760861814f02cf35497ee565330644c Certificate serial: 019B593EC0C37FAF42C909E663B5B5B71E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft Manifest number: 6B Signing time: Fri 26 Dec 2025 06:00:43 +0000 Manifest this update: Fri 26 Dec 2025 06:00:43 +0000 Manifest next update: Sat 27 Dec 2025 06:00:43 +0000 Files and hashes: 1: uQs3yxdghhgU8CzzVJfuVlMwZEw.crl (hash: 7cbDhaNzBbEkkCrDmklx+fGc4ZXD0gQlyvoclpK5uHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c0:c3:7f:af:42:c9:09:e6:63:b5:b5:b7:1e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90b37cb1760861814f02cf35497ee565330644c Validity Not Before: Dec 26 06:00:43 2025 GMT Not After : Dec 27 06:00:43 2025 GMT Subject: CN=a0ac434a399ddf15539310c915fb15710212cb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:1c:b6:96:bc:3f:92:ce:e9:4f:45:70:e5: 27:3b:68:cc:56:61:e6:8a:81:9a:8f:fb:c0:34:39: 62:ac:a4:f0:97:99:af:89:5a:a6:1b:60:a0:7d:0d: 17:bf:6b:6e:56:c2:56:af:be:6d:42:9b:dc:94:e7: ca:74:99:aa:8e:fe:5a:ae:54:de:c7:a6:24:dc:8f: 79:9c:4c:8c:2e:5e:4a:cc:2d:32:83:ba:79:bd:c9: 23:ab:f0:13:65:24:f2:a3:1e:0b:5d:9b:bb:f3:14: 31:2c:7e:53:18:80:71:f4:9f:db:58:43:a1:03:ce: 3a:1f:23:80:4f:6b:fd:33:8e:8b:ab:51:67:ad:dd: 2e:83:b8:f7:51:8e:07:0b:31:8d:0c:00:b1:0a:a5: 20:ab:3a:72:e0:49:b4:ec:3c:a5:51:32:5a:51:e4: c8:6c:54:ae:65:fb:bc:ea:10:a4:5d:96:b1:9d:de: 3b:83:79:0e:55:87:6d:34:19:98:e5:ba:a9:e3:de: 26:56:03:a8:c1:61:cb:50:b3:10:0d:66:09:c6:04: b2:1b:9d:7e:6b:aa:19:2c:a3:ef:c0:9c:80:81:3a: 37:61:f7:4a:f0:b7:89:8a:72:bc:36:b1:0f:45:39: dc:8b:a3:cb:6c:f4:d7:24:0a:20:f1:53:27:30:11: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:43:4A:39:9D:DF:15:53:93:10:C9:15:FB:15:71:02:12:CB:1B X509v3 Authority Key Identifier: keyid:B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e5:81:1c:88:87:79:23:65:00:cb:04:74:d2:b9:60:f6:f8: 0f:51:4d:8d:5e:0e:0c:69:53:22:0d:91:0b:14:0b:e9:70:fd: 41:04:35:4d:c9:df:de:99:7f:73:68:a6:e5:46:e5:44:e9:57: af:5f:0f:42:e3:ba:77:6e:78:f7:de:df:b9:9e:fd:64:39:5f: 6f:68:53:c5:c1:41:16:dd:cf:dc:13:49:ab:6b:e7:e7:c9:b4: ba:7e:51:a2:0b:11:47:52:a3:85:1b:79:bb:1f:ca:7c:55:82: 27:cf:fe:96:16:b2:d6:8f:3e:81:1c:07:29:3d:eb:08:f5:79: bf:e8:21:81:0c:d7:d5:a4:9c:20:bc:bf:16:ff:28:bd:54:e3: fb:1e:76:88:bb:ba:f1:33:a3:e8:8a:92:f4:d5:04:02:05:ae: e3:28:da:a4:40:7f:b3:18:7e:48:9c:46:51:95:4a:e7:a2:11: 28:c6:22:c3:bc:f7:ba:e5:3c:01:0c:b6:32:34:d1:ee:33:d9: 53:0b:7f:5a:16:48:a3:c9:88:38:27:47:4e:bc:9d:45:14:dc: bd:4a:95:ad:c8:8d:20:59:22:ec:63:e6:71:4d:09:77:05:28: 65:c6:58:38:04:d0:13:46:7a:65:64:15:42:1f:3b:eb:35:dc: 32:f8:9b:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsDDf69CyQnmY7W1tx4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGIzN2NiMTc2MDg2MTgxNGYwMmNmMzU0OTdlZTU2NTMz MDY0NGMwHhcNMjUxMjI2MDYwMDQzWhcNMjUxMjI3MDYwMDQzWjAzMTEwLwYDVQQD EyhhMGFjNDM0YTM5OWRkZjE1NTM5MzEwYzkxNWZiMTU3MTAyMTJjYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Ictpa8P5LO6U9FcOUnO2jMVmHm ioGaj/vANDlirKTwl5mviVqmG2CgfQ0Xv2tuVsJWr75tQpvclOfKdJmqjv5arlTe x6Yk3I95nEyMLl5KzC0yg7p5vckjq/ATZSTyox4LXZu78xQxLH5TGIBx9J/bWEOh A846HyOAT2v9M46Lq1Fnrd0ug7j3UY4HCzGNDACxCqUgqzpy4Em07DylUTJaUeTI bFSuZfu86hCkXZaxnd47g3kOVYdtNBmY5bqp494mVgOowWHLULMQDWYJxgSyG51+ a6oZLKPvwJyAgTo3YfdK8LeJinK8NrEPRTnci6PLbPTXJAog8VMnMBGwqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCsQ0o5nd8VU5MQyRX7FXECEssbMB8GA1UdIwQY MBaAFLkLN8sXYIYYFPAs81SX7lZTMGRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDhhZmMtZmExOC00MDM4LWIwNzIt MGIxY2RiMzViZjkwLzEvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hMDhhZmMtZmExOC00MDM4LWIwNzItMGIxY2RiMzViZjkw LzEvdVFzM3l4ZGdoaGdVOEN6elZKZnVWbE13WkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeWBHIiH eSNlAMsEdNK5YPb4D1FNjV4ODGlTIg2RCxQL6XD9QQQ1Tcnf3pl/c2im5UblROlX r18PQuO6d254997fuZ79ZDlfb2hTxcFBFt3P3BNJq2vn58m0un5RogsRR1KjhRt5 ux/KfFWCJ8/+lhay1o8+gRwHKT3rCPV5v+ghgQzX1aScILy/Fv8ovVTj+x52iLu6 8TOj6IqS9NUEAgWu4yjapEB/sxh+SJxGUZVK56IRKMYiw7z3uuU8AQy2MjTR7jPZ Uwt/WhZIo8mIOCdHTrydRRTcvUqVrciNIFki7GPmcU0JdwUoZcZYOATQE0Z6ZWQV Qh876zXcMvibJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client