This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json) Hash identifier: auUZIJ5FUhPeY/k39KU1dh8INOCFbvGmY709qJEAd2I= Subject key identifier: C2:9C:D1:E3:E5:D9:76:F8:B1:B9:45:BF:27:AA:05:6D:DC:56:C1:B4 Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d Certificate serial: 019AF3524AEBE8A058D4B107BC918AA94460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:00:47 +0000 Manifest this update: Sat 06 Dec 2025 11:00:47 +0000 Manifest next update: Sun 07 Dec 2025 11:00:47 +0000 Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=) 2: F2LdL7ybzfzPSt5t-b18q089jwo.roa (hash: pV75yd4KSNaebS2IQ3XosafJetvCzED1fB/NU7nhrkc=) 3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: zs2Mc3/pEDb/nvmOndey0sRC1hk5gVhGElJ1dsLBo4Q=) 4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4a:eb:e8:a0:58:d4:b1:07:bc:91:8a:a9:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d Validity Not Before: Dec 6 11:00:47 2025 GMT Not After : Dec 7 11:00:47 2025 GMT Subject: CN=c29cd1e3e5d976f8b1b945bf27aa056ddc56c1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:8c:cb:81:29:68:36:07:56:a0:de:0e:8b: 48:f9:45:c5:a9:8a:d6:df:1c:f2:fb:87:4d:5e:09: ca:6e:7b:52:e3:87:45:f4:07:60:3f:d9:35:86:15: 36:51:0c:28:f6:bc:9f:bf:eb:5f:af:86:62:8b:ef: 6f:c8:c3:68:48:2e:77:12:5e:70:10:bd:96:0e:db: 33:b0:f8:09:c5:5d:fc:8b:fb:0f:04:aa:00:3e:1d: a1:97:3c:bb:89:32:90:a9:ae:11:3d:5c:b8:f0:5b: 04:6b:66:5b:4a:18:1b:d9:22:41:0b:51:28:0c:ad: 5a:8c:e2:8f:63:17:9d:ca:d9:67:ec:b2:82:09:9b: bb:77:4e:86:6e:22:93:eb:ff:f8:5d:27:ae:88:80: ce:21:25:e9:9a:a0:c6:a8:c2:ba:c7:06:40:9d:7a: 93:9b:93:2f:ee:66:10:73:50:36:22:b9:d0:88:30: 92:d0:c3:90:93:3a:d9:7a:5f:07:fe:80:43:33:23: 0f:d0:4a:0f:b6:e0:d1:6e:57:2b:54:b6:57:27:41: 15:b9:ef:d1:d7:bd:62:35:f9:c4:a7:05:3e:c4:7e: 16:f6:b4:9b:28:51:24:a8:53:f3:31:fa:ae:71:1f: b9:46:af:25:35:db:c6:d7:3f:a4:88:b7:2f:e3:e2: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:D1:E3:E5:D9:76:F8:B1:B9:45:BF:27:AA:05:6D:DC:56:C1:B4 X509v3 Authority Key Identifier: keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:48:b0:b6:c0:fe:ab:49:40:dd:cd:eb:e7:4b:17:62:97:c3: 6d:7f:06:4f:ae:c0:fb:0b:93:d5:82:75:25:08:e2:cc:8d:68: c5:a0:5c:18:c6:6d:16:77:e1:0e:89:1b:2a:18:ae:a5:a7:f7: 20:fc:8c:53:46:07:f4:1f:26:48:ee:d1:9e:31:b1:c8:87:dc: b7:8b:f5:31:4e:ce:f3:55:82:d8:d3:97:11:35:e0:89:4f:d9: c3:74:e6:44:08:bd:58:0f:fe:0a:a3:3f:ce:f3:a5:09:fe:4e: 49:46:a0:9d:d7:83:db:17:d6:6f:8e:e1:8d:2b:06:a8:23:15: c5:fc:28:1e:b6:15:87:ba:d1:15:42:db:87:91:8d:eb:67:2e: d1:a8:24:80:60:e7:25:9c:54:a2:12:f6:0b:ab:b7:72:f6:37: 3d:a3:56:b1:f9:f4:8c:23:92:2b:b5:a5:0f:72:11:3d:72:e0: bc:f9:ab:8b:df:0e:d3:42:93:2e:84:2f:ba:63:e1:5c:c5:ef: bc:28:2a:ec:0d:f1:d6:19:41:17:f8:06:7e:f2:12:5d:be:21: 4a:78:3a:eb:72:45:a1:29:5b:86:0c:b1:ab:c0:6b:23:4c:db: 6f:12:90:8c:75:56:10:f9:f1:8a:90:be:57:eb:74:ff:65:3d: 80:4e:77:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkrr6KBY1LEHvJGKqURgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm YzUwM2QwHhcNMjUxMjA2MTEwMDQ3WhcNMjUxMjA3MTEwMDQ3WjAzMTEwLwYDVQQD EyhjMjljZDFlM2U1ZDk3NmY4YjFiOTQ1YmYyN2FhMDU2ZGRjNTZjMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAireMy4EpaDYHVqDeDotI+UXFqYrW 3xzy+4dNXgnKbntS44dF9AdgP9k1hhU2UQwo9ryfv+tfr4Zii+9vyMNoSC53El5w EL2WDtszsPgJxV38i/sPBKoAPh2hlzy7iTKQqa4RPVy48FsEa2ZbShgb2SJBC1Eo DK1ajOKPYxedytln7LKCCZu7d06GbiKT6//4XSeuiIDOISXpmqDGqMK6xwZAnXqT m5Mv7mYQc1A2IrnQiDCS0MOQkzrZel8H/oBDMyMP0EoPtuDRblcrVLZXJ0EVue/R 171iNfnEpwU+xH4W9rSbKFEkqFPzMfqucR+5Rq8lNdvG1z+kiLcv4+K6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKc0ePl2Xb4sblFvyeqBW3cVsG0MB8GA1UdIwQY MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0iwtsD+ q0lA3c3r50sXYpfDbX8GT67A+wuT1YJ1JQjizI1oxaBcGMZtFnfhDokbKhiupaf3 IPyMU0YH9B8mSO7RnjGxyIfct4v1MU7O81WC2NOXETXgiU/Zw3TmRAi9WA/+CqM/ zvOlCf5OSUagndeD2xfWb47hjSsGqCMVxfwoHrYVh7rRFULbh5GN62cu0agkgGDn JZxUohL2C6u3cvY3PaNWsfn0jCOSK7WlD3IRPXLgvPmri98O00KTLoQvumPhXMXv vCgq7A3x1hlBF/gGfvISXb4hSng663JFoSlbhgyxq8BrI0zbbxKQjHVWEPnxipC+ V+t0/2U9gE534g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:03 2025 by rpki-client