This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json) Hash identifier: XmHysqGV1JngsnnB3pLcmNu564Yrd3bsjY00oOui79U= Subject key identifier: 26:5D:7D:3E:90:8D:3E:28:D0:E4:AF:6B:D0:E4:1C:81:60:13:38:70 Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2 Certificate serial: 019AF19B714D0CA1458053A8CA1EBEF4FD66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft Manifest number: 0AC5 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: MtchhBtMz6Y+IPFvHq4+DgZ7rHEwDE97wQJv7/z/qhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:71:4d:0c:a1:45:80:53:a8:ca:1e:be:f4:fd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=265d7d3e908d3e28d0e4af6bd0e41c8160133870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:80:1b:7e:e2:51:a0:46:0f:75:81:fb:ac: c0:66:1a:f8:2a:8f:b3:86:87:2d:ab:d9:1a:38:0d: 0d:cd:89:ef:4c:db:e2:25:b1:7b:bb:4d:0b:70:b6: 9f:00:58:cb:ac:97:90:ba:82:38:16:ef:9a:df:80: 87:e8:a2:3b:b4:3c:21:6b:87:9b:be:19:d6:15:48: 46:ff:dd:bb:c4:75:fa:57:4d:43:45:a1:00:71:2b: 8e:11:09:fd:3a:bf:28:f9:38:ca:46:2f:f1:0b:0a: 42:81:9f:7b:d2:a0:4d:c3:10:f4:50:b2:8c:4b:95: 2a:54:a3:86:d9:3b:72:94:6f:32:ed:0a:0a:78:79: 89:b4:d8:a6:a4:02:ac:e4:5e:88:92:f2:c8:81:f5: ba:c6:61:6d:56:53:1e:d4:8d:2a:df:95:2e:19:5c: 7b:4c:6d:14:7b:94:81:91:94:08:78:42:7f:ce:35: 31:48:64:a0:bd:03:0d:43:6e:96:64:1e:48:0c:3b: c8:5c:cf:e3:fa:98:48:e1:e4:17:35:88:2a:28:fd: b5:16:67:b1:23:6f:fb:a6:d5:fb:e2:b3:fc:34:0f: 1c:c3:79:bf:a0:c4:05:49:2e:04:76:cc:28:ef:7a: 54:28:45:d7:6d:06:a9:ad:dd:d1:d8:7e:78:2e:b0: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5D:7D:3E:90:8D:3E:28:D0:E4:AF:6B:D0:E4:1C:81:60:13:38:70 X509v3 Authority Key Identifier: keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1d:b2:f6:b0:6a:57:86:c9:2c:22:d4:41:73:71:fa:46:00: b1:9c:e8:78:4e:c1:fb:cb:8b:c3:86:1f:29:2c:9a:32:a3:8b: 84:d1:94:a5:dd:f1:10:67:9a:c1:3a:32:be:de:da:73:62:08: 6b:52:91:2f:c2:d4:35:69:81:f9:99:f4:e0:30:e1:37:bd:a7: fe:e8:9e:65:c6:13:1e:22:37:a2:25:92:92:da:36:74:a8:58: a0:8a:d2:8f:20:87:2d:6d:7b:60:10:b1:9c:c7:6a:a1:d2:a6: 9a:f3:4a:9d:fb:1f:60:42:15:4d:00:e7:aa:46:31:75:1e:84: ff:93:ec:81:b7:11:d4:c2:21:92:af:42:bf:78:94:cf:43:f5: 86:cc:bb:e5:ff:77:45:60:b0:1a:81:75:dc:54:32:2e:61:de: ef:da:bc:9a:9f:6c:9c:fb:c9:2a:83:a9:9f:d5:37:de:26:02: 73:8e:f7:23:ca:5c:b9:e9:87:7b:a6:b3:46:fc:55:e9:f9:9a: db:78:47:b9:48:ba:ca:8b:5e:f6:74:49:a9:17:c7:b1:41:58: 1b:07:1b:e8:a6:c0:cf:fd:43:1b:5e:0a:a4:2f:1e:bd:aa:94: ad:85:37:bf:5e:f2:6b:c3:e0:0d:72:b3:ba:6a:fb:92:e7:90: da:2f:3c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3FNDKFFgFOoyh6+9P1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk MmI4YjIwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EygyNjVkN2QzZTkwOGQzZTI4ZDBlNGFmNmJkMGU0MWM4MTYwMTMzODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLyAG37iUaBGD3WB+6zAZhr4Ko+z hoctq9kaOA0NzYnvTNviJbF7u00LcLafAFjLrJeQuoI4Fu+a34CH6KI7tDwha4eb vhnWFUhG/927xHX6V01DRaEAcSuOEQn9Or8o+TjKRi/xCwpCgZ970qBNwxD0ULKM S5UqVKOG2TtylG8y7QoKeHmJtNimpAKs5F6IkvLIgfW6xmFtVlMe1I0q35UuGVx7 TG0Ue5SBkZQIeEJ/zjUxSGSgvQMNQ26WZB5IDDvIXM/j+phI4eQXNYgqKP21Fmex I2/7ptX74rP8NA8cw3m/oMQFSS4Edswo73pUKEXXbQaprd3R2H54LrDVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZdfT6QjT4o0OSva9DkHIFgEzhwMB8GA1UdIwQY MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEB2y9rBq V4bJLCLUQXNx+kYAsZzoeE7B+8uLw4YfKSyaMqOLhNGUpd3xEGeawToyvt7ac2II a1KRL8LUNWmB+Zn04DDhN72n/uieZcYTHiI3oiWSkto2dKhYoIrSjyCHLW17YBCx nMdqodKmmvNKnfsfYEIVTQDnqkYxdR6E/5PsgbcR1MIhkq9Cv3iUz0P1hsy75f93 RWCwGoF13FQyLmHe79q8mp9snPvJKoOpn9U33iYCc473I8pcuemHe6azRvxV6fma 23hHuUi6yote9nRJqRfHsUFYGwcb6KbAz/1DG14KpC8evaqUrYU3v17ya8PgDXKz umr7kueQ2i88lA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:39 2025 by rpki-client