This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json) Hash identifier: AE4J6YSITyI5NFfrUIQiER8tWMlQz6lazC3dmH9ZNCk= Subject key identifier: 50:37:B3:0A:E7:40:C3:EB:D0:1C:C8:1B:32:A5:2A:19:C8:E3:85:C5 Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c Certificate serial: 019AF088BC8094EE95E9BD7837E87AE387A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft Manifest number: 0DFB Signing time: Fri 05 Dec 2025 22:01:24 +0000 Manifest this update: Fri 05 Dec 2025 22:01:24 +0000 Manifest next update: Sat 06 Dec 2025 22:01:24 +0000 Files and hashes: 1: gPcTxlbf3arbuyi9zI7DRrews5w.roa (hash: PLKd6xzj3MbPH7j7KxVjpwNPtA1yOPfuOFe/zsglNlc=) 2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: xpsghOOKO1nmnEJOz1taJqbOhKT17sE9E5IQkaIo8EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:bc:80:94:ee:95:e9:bd:78:37:e8:7a:e3:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c Validity Not Before: Dec 5 22:01:24 2025 GMT Not After : Dec 6 22:01:24 2025 GMT Subject: CN=5037b30ae740c3ebd01cc81b32a52a19c8e385c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:35:39:32:04:9b:58:0e:b3:a5:70:b6:09: d1:c0:b6:b1:42:2a:e5:59:91:07:f3:69:7a:9d:25: 81:89:66:bb:36:36:ae:1e:f0:45:bd:b7:f3:25:9d: 64:8b:b1:e1:8b:b4:6d:2f:6d:51:5d:15:29:0e:5f: cf:48:fe:4c:44:e5:07:ff:b7:81:69:a8:ce:7e:f6: be:d5:29:2a:24:71:37:41:c2:ca:be:17:74:31:6b: 6a:a8:f6:92:ce:38:6d:63:26:1c:07:f6:ee:57:90: e9:92:ec:39:74:cd:27:d0:17:09:59:dd:b8:b6:ad: 47:39:b2:5a:81:90:71:5a:74:90:3d:53:db:d6:df: ef:f8:e9:fa:28:49:ad:ad:7d:3b:24:8e:13:02:48: 27:05:af:2b:af:42:64:ec:9f:ec:73:55:f5:6e:6b: 5a:a0:e7:f5:74:78:84:08:2b:9f:ae:9b:c1:d4:00: be:94:c8:67:1a:5e:60:d9:ae:08:73:ea:ed:cb:64: bb:b2:3f:43:ab:2a:dd:74:e1:16:60:9b:d7:37:94: 92:5d:f9:fe:70:71:4b:c1:dd:45:25:e8:ed:be:5e: 21:c7:5d:dc:e9:c2:20:5d:3e:fa:ab:6a:e8:59:01: 4e:6b:44:bf:16:90:c9:fe:a8:85:d1:66:20:7e:3a: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:B3:0A:E7:40:C3:EB:D0:1C:C8:1B:32:A5:2A:19:C8:E3:85:C5 X509v3 Authority Key Identifier: keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ae:8f:69:ed:35:ef:1b:0a:ec:0d:b2:51:05:e0:3f:5e:c7: 97:e3:03:bd:d0:72:c6:3b:a2:2e:b4:df:a4:53:1c:00:b4:99: 37:7f:1d:b1:1d:6f:54:d1:19:fb:f0:3c:8b:76:a8:23:d0:b8: 6f:69:85:3e:88:64:0b:3b:a8:9c:3f:cc:f7:2e:0b:9b:53:36: 67:96:ad:ed:14:c7:21:95:88:c9:5a:35:f7:d4:79:c9:4c:8b: 98:dd:f6:79:e1:7a:96:bd:8e:78:79:c3:88:73:ec:3d:47:8d: 44:40:e1:ea:c6:f8:b6:e5:11:68:43:96:32:28:0c:9a:67:f8: 15:c5:c3:9b:4b:20:97:73:af:40:4b:7b:36:75:04:03:cb:5d: c4:97:8a:42:6b:f5:58:a2:92:47:a7:1f:7b:1e:6a:05:40:e0: 27:23:9b:40:cc:38:0e:24:3c:88:4e:09:66:07:a3:cc:8a:6d: 99:a3:48:98:2d:8f:ad:41:da:11:01:8a:15:54:7f:ab:40:84: 8f:04:21:42:74:e3:8f:f1:8e:a7:9d:bd:64:2d:95:8c:65:13: ee:51:b5:97:71:9a:18:ce:9c:aa:f4:1a:3f:fe:6c:02:c2:69: 0c:f8:e0:88:0f:44:51:a7:2b:e5:a8:01:66:1f:a8:6d:ae:57: 15:bc:dd:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLyAlO6V6b14N+h644egMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGY4NjRiYTBmYTIwNGRlOTNhYzVhYTg0ZjcyOGI2MjIw YzZmN2MwHhcNMjUxMjA1MjIwMTI0WhcNMjUxMjA2MjIwMTI0WjAzMTEwLwYDVQQD Eyg1MDM3YjMwYWU3NDBjM2ViZDAxY2M4MWIzMmE1MmExOWM4ZTM4NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx01OTIEm1gOs6VwtgnRwLaxQirl WZEH82l6nSWBiWa7NjauHvBFvbfzJZ1ki7Hhi7RtL21RXRUpDl/PSP5MROUH/7eB aajOfva+1SkqJHE3QcLKvhd0MWtqqPaSzjhtYyYcB/buV5Dpkuw5dM0n0BcJWd24 tq1HObJagZBxWnSQPVPb1t/v+On6KEmtrX07JI4TAkgnBa8rr0Jk7J/sc1X1bmta oOf1dHiECCufrpvB1AC+lMhnGl5g2a4Ic+rty2S7sj9DqyrddOEWYJvXN5SSXfn+ cHFLwd1FJejtvl4hx13c6cIgXT76q2roWQFOa0S/FpDJ/qiF0WYgfjpDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA3swrnQMPr0BzIGzKlKhnI44XFMB8GA1UdIwQY MBaAFLoPhkug+iBN6TrFqoT3KLYiDG98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMt YjE3YzJhZmZhMzBiLzEvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMtYjE3YzJhZmZhMzBi LzEvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK6Pae01 7xsK7A2yUQXgP17Hl+MDvdByxjuiLrTfpFMcALSZN38dsR1vVNEZ+/A8i3aoI9C4 b2mFPohkCzuonD/M9y4Lm1M2Z5at7RTHIZWIyVo199R5yUyLmN32eeF6lr2OeHnD iHPsPUeNREDh6sb4tuURaEOWMigMmmf4FcXDm0sgl3OvQEt7NnUEA8tdxJeKQmv1 WKKSR6cfex5qBUDgJyObQMw4DiQ8iE4JZgejzIptmaNImC2PrUHaEQGKFVR/q0CE jwQhQnTjj/GOp529ZC2VjGUT7lG1l3GaGM6cqvQaP/5sAsJpDPjgiA9EUacr5agB Zh+oba5XFbzdgA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:58 2025 by rpki-client