This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json) Hash identifier: ta+n3Udl0blzejt1KZxjsXWaE+f7hOzvkglYopbeDaI= Subject key identifier: FA:05:CD:32:2E:FC:83:0B:EA:B0:CF:1B:0E:A4:34:F3:CC:69:28:61 Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Certificate serial: 019AF19B26321377997D95E90EC8FAFC19AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=) 2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: yYUhKkgqyku5g0J4ADuUQrJUti+BW6afvcu6EBJiDUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:26:32:13:77:99:7d:95:e9:0e:c8:fa:fc:19:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=fa05cd322efc830beab0cf1b0ea434f3cc692861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:62:2e:dc:d6:6a:ee:47:a3:99:42:3c:a9: be:bc:ee:10:44:5b:11:e2:16:5a:7e:58:ba:5e:e4: 0c:f8:be:88:27:e0:0d:40:a9:b1:24:f9:07:4a:43: 43:7d:e2:29:76:da:ec:51:f5:2a:89:ac:c3:33:2a: af:6f:d1:be:15:5b:33:8a:13:35:fe:6c:82:5f:85: f8:4a:a0:3f:b8:59:1b:4a:96:de:bd:2c:54:2d:65: 78:8d:df:1a:5a:24:4e:1d:66:ec:d8:01:1f:bb:a8: 47:a4:db:06:40:01:b4:bb:52:c3:ef:e7:aa:48:ad: 52:75:cf:a3:71:69:82:de:6a:02:ff:49:87:be:e6: e9:de:71:f4:80:7f:bc:e5:06:62:76:5b:01:11:4f: c0:b1:eb:c7:77:ad:0b:6e:d1:38:e1:90:96:03:ca: 19:e5:a5:96:1c:f3:f6:6b:5a:b3:2a:dd:15:a6:db: e8:39:d2:34:d6:fb:e3:c8:b0:f7:d7:3b:27:58:7a: 24:1e:87:62:61:f1:dc:b4:e1:00:ec:08:a2:3c:89: 47:3f:1c:b5:65:ef:1e:ce:54:68:07:73:1b:f9:4b: e9:42:18:ea:5e:d4:20:d4:34:99:5a:81:2f:df:70: b2:bf:a7:18:96:eb:ab:45:04:d9:91:9d:e5:ba:bc: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:CD:32:2E:FC:83:0B:EA:B0:CF:1B:0E:A4:34:F3:CC:69:28:61 X509v3 Authority Key Identifier: keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e2:b2:96:fd:a5:76:f1:31:2d:2c:c2:5a:3f:db:29:c4:21: 1a:a6:05:d4:f1:6f:d0:3a:12:1b:86:55:db:e8:59:54:e8:4c: 75:97:21:78:7b:7b:c2:4f:41:c0:e0:c6:cb:48:11:ce:f2:f0: cb:e6:d7:c2:8a:04:99:1c:34:ce:d2:38:0e:4e:6c:bc:12:1c: 8f:ca:1e:ed:6e:a5:9d:e9:c8:f5:79:7e:a8:aa:fc:ac:b8:4d: b0:9a:2e:94:fb:c3:80:38:c5:8d:d8:a8:c7:48:c2:3f:b1:cb: 50:26:de:62:0a:d8:95:6b:59:9f:17:33:7e:ea:26:44:43:f4: a3:78:c9:2c:00:f7:c7:35:60:76:0f:61:84:07:45:66:56:1b: a4:1a:98:e7:0c:8e:b1:c6:87:8c:86:a1:19:db:57:a6:c7:a5: e4:d8:0a:7b:54:74:c0:e4:bf:da:c5:08:ac:a4:96:54:d3:d1: ea:7d:b3:ff:28:17:53:c8:30:b8:d4:b1:48:cc:c5:38:53:13: cb:ea:5c:7c:d1:bb:be:0c:15:1f:ae:54:ae:c2:96:33:b8:ce: c5:7f:24:8a:e8:a8:89:68:6b:18:17:9f:e6:bf:e4:f1:0e:a5: ea:35:a1:06:35:3f:9e:22:f9:10:6e:6b:f7:2a:8d:d8:ab:05: 63:34:54:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyYyE3eZfZXpDsj6/BmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl NWE2MGEwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhmYTA1Y2QzMjJlZmM4MzBiZWFiMGNmMWIwZWE0MzRmM2NjNjkyODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVFiLtzWau5Ho5lCPKm+vO4QRFsR 4hZafli6XuQM+L6IJ+ANQKmxJPkHSkNDfeIpdtrsUfUqiazDMyqvb9G+FVszihM1 /myCX4X4SqA/uFkbSpbevSxULWV4jd8aWiROHWbs2AEfu6hHpNsGQAG0u1LD7+eq SK1Sdc+jcWmC3moC/0mHvubp3nH0gH+85QZidlsBEU/AsevHd60LbtE44ZCWA8oZ 5aWWHPP2a1qzKt0VptvoOdI01vvjyLD31zsnWHokHodiYfHctOEA7AiiPIlHPxy1 Ze8ezlRoB3Mb+UvpQhjqXtQg1DSZWoEv33Cyv6cYluurRQTZkZ3lurzG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoFzTIu/IML6rDPGw6kNPPMaShhMB8GA1UdIwQY MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt Y2QxNGZlMmQ5NTcxLzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOKylv2l dvExLSzCWj/bKcQhGqYF1PFv0DoSG4ZV2+hZVOhMdZcheHt7wk9BwODGy0gRzvLw y+bXwooEmRw0ztI4Dk5svBIcj8oe7W6lnenI9Xl+qKr8rLhNsJoulPvDgDjFjdio x0jCP7HLUCbeYgrYlWtZnxczfuomREP0o3jJLAD3xzVgdg9hhAdFZlYbpBqY5wyO scaHjIahGdtXpsel5NgKe1R0wOS/2sUIrKSWVNPR6n2z/ygXU8gwuNSxSMzFOFMT y+pcfNG7vgwVH65UrsKWM7jOxX8kiuioiWhrGBef5r/k8Q6l6jWhBjU/niL5EG5r 9yqN2KsFYzRUZg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:45 2025 by rpki-client