This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json) Hash identifier: R8oNewjAD+q7Ge8RqpC77SqAUIJ1GLLibSLEnNTURq0= Subject key identifier: 46:AF:1E:7B:A3:B4:5E:54:93:85:0F:93:FE:50:93:98:CC:4A:A6:2C Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Certificate serial: 019AF276721FF4EF76EBA5C8DB94A7574104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft Manifest number: 0632 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=) 2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: 8kcga3ctROkpDAhJl3XIf97njln/b5etEFwKA/ECRQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:72:1f:f4:ef:76:eb:a5:c8:db:94:a7:57:41:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=46af1e7ba3b45e5493850f93fe509398cc4aa62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:4c:93:31:2c:86:7c:c1:91:c1:3f:6a:4d: ad:fa:eb:8b:38:fe:70:2b:f3:59:12:20:19:55:82: 8e:f7:91:69:27:68:20:10:1b:6a:f4:53:07:6f:9a: 9e:41:77:9c:43:86:ce:0c:92:db:f8:3c:cd:37:42: 07:95:bf:3d:8f:30:f8:23:fb:1b:83:b6:fd:25:52: b5:88:fc:8c:df:91:8b:46:88:7a:b5:9d:0e:72:14: 54:ca:26:15:ec:d8:04:75:b2:07:47:ba:cf:67:c6: 27:1e:d6:7d:f6:04:78:7a:17:17:44:70:6a:4b:ac: c1:89:1b:29:4e:49:00:37:40:46:be:39:b1:67:75: d9:50:58:56:5c:7b:ad:24:4b:8b:b4:0e:30:70:23: 94:4d:97:83:19:f9:ef:8f:47:a1:a9:38:ad:be:6f: 28:8d:18:d1:ab:ea:0f:5a:48:e2:ed:aa:85:b3:4b: be:57:69:06:01:27:e0:86:10:cf:6a:59:be:23:b5: 2d:92:1d:26:62:bb:45:58:d6:54:04:87:bc:25:b4: 88:74:dc:e6:fb:72:af:91:e4:53:bc:3f:cc:f8:26: ef:6f:08:b7:88:55:32:3a:61:fe:60:4b:69:be:46: 56:21:c6:0a:17:54:ea:f3:07:06:c9:99:b1:22:d9: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:1E:7B:A3:B4:5E:54:93:85:0F:93:FE:50:93:98:CC:4A:A6:2C X509v3 Authority Key Identifier: keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ae:01:85:f9:0b:23:07:9c:49:d1:c9:e2:ed:96:58:d4:36: 7b:8f:68:e2:c8:80:5c:e2:85:6b:3f:02:ec:e4:d0:9a:2d:f3: 73:5f:ad:d0:7c:80:da:44:15:f6:31:e4:4a:fc:51:af:af:7b: 76:0d:ab:eb:d1:98:cf:ea:9c:70:8d:25:68:25:d8:27:cc:fb: 99:1a:9f:55:9b:dc:31:00:a9:12:48:bc:33:df:d9:f8:00:9e: 36:b3:8e:f0:cd:4f:d8:d8:71:8d:e7:e7:b7:33:09:4f:4e:21: 0f:03:27:a6:95:ac:bf:f5:ef:10:67:0a:47:dd:bc:fd:bb:3f: 7c:61:0d:c4:77:89:b3:8c:5f:49:2f:2d:28:0d:a6:d0:23:89: 4b:9e:00:44:e0:40:ae:43:28:4f:8e:0e:c6:f6:23:01:94:5c: 46:93:44:bf:bb:35:73:ce:09:db:ff:ba:cf:26:49:b3:d9:c1: 9a:79:ee:e1:77:56:3f:df:40:b8:c2:c3:c2:c0:3f:4d:02:7a: 60:50:b4:ed:7c:9a:3d:d7:99:e7:eb:cb:94:3d:07:0b:e3:d6: 4e:94:d5:53:24:68:c4:aa:eb:7c:35:84:24:0a:25:71:c5:e9: 56:76:1f:36:fe:d2:33:05:b7:77:b5:c3:01:71:68:c2:fb:e2: a7:27:90:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnIf9O9266XI25SnV0EEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWMxMDU3YmNiOWQxZTBkMTU3NDhiN2YzMmM1OWY4Yzdi NzJhNGUwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD Eyg0NmFmMWU3YmEzYjQ1ZTU0OTM4NTBmOTNmZTUwOTM5OGNjNGFhNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdlMkzEshnzBkcE/ak2t+uuLOP5w K/NZEiAZVYKO95FpJ2ggEBtq9FMHb5qeQXecQ4bODJLb+DzNN0IHlb89jzD4I/sb g7b9JVK1iPyM35GLRoh6tZ0OchRUyiYV7NgEdbIHR7rPZ8YnHtZ99gR4ehcXRHBq S6zBiRspTkkAN0BGvjmxZ3XZUFhWXHutJEuLtA4wcCOUTZeDGfnvj0ehqTitvm8o jRjRq+oPWkji7aqFs0u+V2kGASfghhDPalm+I7Utkh0mYrtFWNZUBIe8JbSIdNzm +3KvkeRTvD/M+Cbvbwi3iFUyOmH+YEtpvkZWIcYKF1Tq8wcGyZmxItl7hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEavHnujtF5Uk4UPk/5Qk5jMSqYsMB8GA1UdIwQY MBaAFFAcEFe8udHg0VdIt/MsWfjHtypOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzkt ZDcxN2U0ZGZjYjNkLzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzktZDcxN2U0ZGZjYjNk LzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK4BhfkL IwecSdHJ4u2WWNQ2e49o4siAXOKFaz8C7OTQmi3zc1+t0HyA2kQV9jHkSvxRr697 dg2r69GYz+qccI0laCXYJ8z7mRqfVZvcMQCpEki8M9/Z+ACeNrOO8M1P2Nhxjefn tzMJT04hDwMnppWsv/XvEGcKR928/bs/fGENxHeJs4xfSS8tKA2m0COJS54AROBA rkMoT44OxvYjAZRcRpNEv7s1c84J2/+6zyZJs9nBmnnu4XdWP99AuMLDwsA/TQJ6 YFC07XyaPdeZ5+vLlD0HC+PWTpTVUyRoxKrrfDWEJAolccXpVnYfNv7SMwW3d7XD AXFowvvipyeQ2A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:29 2025 by rpki-client