This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json) Hash identifier: XKHqgggsGBGCKcoZaGgsOW9rzI1eqcQCu48+RdGyFME= Subject key identifier: 15:A2:80:22:65:0F:FE:8A:87:F4:1A:5E:BE:A3:7B:CD:44:62:24:A0 Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de Certificate serial: 019AF208E2F08FAA2BAAFE0E2FEC5140CA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft Manifest number: 1672 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=) 2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 720Beb876zLl504qX4zR7HjF9ezLgSMsdhjoEEF5IOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:f0:8f:aa:2b:aa:fe:0e:2f:ec:51:40:ca:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=15a28022650ffe8a87f41a5ebea37bcd446224a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:62:a3:11:a5:63:5c:33:40:b5:e7:19:6c: b8:7b:27:73:0b:25:16:6d:d4:45:1a:da:5d:e5:bc: 7d:02:56:db:63:2d:be:ed:1f:83:30:fc:c3:b0:c1: ed:d5:7f:bd:ac:5b:52:c6:d5:e3:25:9c:24:56:6a: eb:dd:31:ed:43:6c:65:c9:6f:7b:58:20:ff:0c:da: bd:e5:89:52:6d:eb:75:f8:1b:29:2d:b7:7f:4d:79: 69:ce:84:96:ec:cb:8f:95:62:87:ed:f3:12:2f:df: 1d:6e:6b:89:17:a0:13:e0:78:d9:a1:4c:1a:dc:1c: fe:ad:bb:ef:9f:67:d8:c9:0c:7f:74:c4:c9:c1:ac: 77:a7:e9:60:b0:06:91:f9:ea:e5:2c:e6:dd:9f:93: 8d:13:93:f2:67:6a:37:e3:b1:77:a1:74:7c:62:7b: 2d:1d:02:9d:db:c8:41:da:78:24:dc:16:f0:09:8c: 3c:59:ee:ad:3c:60:d3:4e:38:9c:af:05:a4:b9:94: 20:aa:14:aa:2e:88:63:28:7a:58:bc:4e:af:c0:2d: c7:59:67:d1:eb:7d:3c:f4:4b:8b:ce:4d:54:eb:7e: 72:c5:42:f1:11:d4:2b:f0:ba:7b:d5:62:6a:57:e3: 95:97:88:70:a6:fc:63:dc:1f:2f:29:58:27:bc:56: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A2:80:22:65:0F:FE:8A:87:F4:1A:5E:BE:A3:7B:CD:44:62:24:A0 X509v3 Authority Key Identifier: keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:43:19:5b:57:f8:fe:6f:b5:ce:9d:94:14:2e:3e:47:b9: c5:90:1e:3a:40:c0:e1:04:f2:15:e3:f7:28:cf:3f:e3:81:7d: a4:a1:a6:ca:b7:df:02:77:8b:9d:80:fd:a5:c5:ee:02:49:8d: 33:68:37:67:26:21:f6:88:2e:b7:a3:4e:6e:3f:e7:e1:16:f6: 4b:e8:9d:f4:29:35:0c:3a:eb:ea:2b:5b:df:ef:fc:6d:33:a4: 38:dc:8d:84:52:bd:ad:e0:a6:15:d9:3b:45:b9:4c:7b:70:bd: fe:7a:d8:42:a1:6c:7b:f4:37:e0:f9:3e:54:eb:5b:e0:fb:29: 18:53:bb:ec:f3:6d:01:9b:45:2a:8e:96:41:a8:97:91:40:68: d1:c6:11:11:fd:26:d3:3e:25:b9:af:64:5f:bd:5c:f1:2c:da: c6:04:aa:d9:07:37:60:40:af:02:d9:e0:c1:56:62:67:83:f7: 38:94:c1:52:7e:3d:c6:31:2a:b9:1b:9e:ca:ae:68:5e:c0:a3: cc:8e:1e:2b:15:31:2b:32:68:d8:db:61:69:8a:3c:53:31:1d: df:54:74:ba:59:22:97:a7:a2:dd:80:5e:77:9e:e6:ac:62:cf: ab:6e:86:69:b2:85:eb:62:ee:e3:49:6f:a7:b9:76:d8:2e:ed: d1:ee:d2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOLwj6orqv4OL+xRQMpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi Njk3ZGUwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygxNWEyODAyMjY1MGZmZThhODdmNDFhNWViZWEzN2JjZDQ0NjIyNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgRioxGlY1wzQLXnGWy4eydzCyUW bdRFGtpd5bx9AlbbYy2+7R+DMPzDsMHt1X+9rFtSxtXjJZwkVmrr3THtQ2xlyW97 WCD/DNq95YlSbet1+BspLbd/TXlpzoSW7MuPlWKH7fMSL98dbmuJF6AT4HjZoUwa 3Bz+rbvvn2fYyQx/dMTJwax3p+lgsAaR+erlLObdn5ONE5PyZ2o347F3oXR8Ynst HQKd28hB2ngk3BbwCYw8We6tPGDTTjicrwWkuZQgqhSqLohjKHpYvE6vwC3HWWfR 63089EuLzk1U635yxULxEdQr8Lp71WJqV+OVl4hwpvxj3B8vKVgnvFbfOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWigCJlD/6Kh/QaXr6je81EYiSgMB8GA1UdIwQY MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHxDGVtX +P5vtc6dlBQuPke5xZAeOkDA4QTyFeP3KM8/44F9pKGmyrffAneLnYD9pcXuAkmN M2g3ZyYh9ogut6NObj/n4Rb2S+id9Ck1DDrr6itb3+/8bTOkONyNhFK9reCmFdk7 RblMe3C9/nrYQqFse/Q34Pk+VOtb4PspGFO77PNtAZtFKo6WQaiXkUBo0cYREf0m 0z4lua9kX71c8SzaxgSq2Qc3YECvAtngwVZiZ4P3OJTBUn49xjEquRueyq5oXsCj zI4eKxUxKzJo2NthaYo8UzEd31R0ulkil6ei3YBed57mrGLPq26GabKF62Lu40lv p7l22C7t0e7SNA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:10 2025 by rpki-client