This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json) Hash identifier: WrJmDQad/BOiqUryJRQHl7TIM6e6oo/XGOL4B0X7jgc= Subject key identifier: 85:67:D2:03:49:2F:B2:0E:EB:1F:A9:C3:14:71:2F:83:AC:46:F6:BB Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Certificate serial: 019AF19AAE26EAB96BEE308F3E9E3CAEE1EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft Manifest number: 0B2F Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=) 2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=) 3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: NHkQ/EBzWHlY2vRdMDCAgJhAYb78O6irb47O/Uh5ZrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ae:26:ea:b9:6b:ee:30:8f:3e:9e:3c:ae:e1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=8567d203492fb20eeb1fa9c314712f83ac46f6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:4f:80:0a:9d:11:02:b0:bb:53:22:b3:5e: dd:fd:70:88:a9:2c:44:5c:27:9d:a4:0a:3c:67:1b: 4c:98:f1:b7:9f:bb:bd:93:60:16:c6:1a:5c:6c:6a: 94:73:75:2a:98:3d:0b:46:1f:d6:02:b6:8b:21:b3: bc:6e:c2:11:a9:35:9d:d2:5f:bc:77:a4:75:a4:3d: 3f:04:7f:72:c4:ee:f1:f5:3f:c9:8e:a4:58:e6:e5: 48:5f:ec:c0:83:53:8a:b1:50:01:92:5d:7d:d9:ff: 11:ca:d0:d8:68:5b:3d:4b:fe:21:f1:30:a0:52:ee: f6:ea:cf:02:cf:39:76:ae:32:44:66:ec:55:65:df: 10:4f:49:bf:8e:e1:10:0c:89:fd:2e:b6:26:7d:0c: 5a:83:29:d5:22:d4:fa:15:c8:2d:1b:f4:02:8d:3b: 01:0f:22:f4:4e:3d:b1:61:ef:bf:ec:70:cb:47:bd: 94:d8:a6:1a:78:51:8b:56:e5:ac:89:1d:c7:58:28: 2f:43:91:1a:e2:d7:67:1d:96:08:9e:87:c2:ec:70: 26:a2:d9:69:e0:df:95:c3:75:44:53:86:80:cf:88: 8f:51:88:5f:19:3f:af:05:6b:a5:19:f2:91:b0:a0: 49:f4:39:e5:8c:a2:37:bd:ba:08:cf:69:37:af:56: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:D2:03:49:2F:B2:0E:EB:1F:A9:C3:14:71:2F:83:AC:46:F6:BB X509v3 Authority Key Identifier: keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:30:41:64:ee:1e:dd:99:b1:e1:1f:9c:20:db:97:71:8c: 14:c6:14:2f:67:f9:31:36:84:6a:01:d3:6c:1f:20:50:d8:1e: 9b:5e:5b:dd:36:47:eb:6f:91:3c:91:5a:fb:9b:e1:09:77:60: d5:b5:e9:2f:8f:a6:98:e0:70:ac:0a:f8:fe:3e:24:96:12:8a: c9:36:af:1b:a5:17:9e:6c:4b:77:6d:c3:7b:76:e5:82:eb:c9: 84:0a:99:d4:d2:9c:d1:67:dc:b8:8d:75:04:dd:66:a0:a9:da: be:7d:54:35:dc:4c:5e:a9:b0:ef:63:26:33:0c:b8:ff:d3:29: e6:23:e2:24:83:70:bc:5c:40:41:28:ce:43:b4:95:ff:84:46: c9:fb:bc:6c:bf:0f:8b:f3:7e:f9:61:19:a5:0e:d4:9d:e6:a2: ab:49:6d:f5:40:f5:b1:42:28:02:f5:ce:a9:f2:35:df:b5:d4: 87:2b:28:e5:bb:56:86:ab:7e:b5:32:4f:6f:1c:ca:56:7f:3c: 66:64:a5:2d:4e:e2:3c:6b:c0:39:ef:25:34:51:7e:a1:fb:a3: 26:6b:c7:bb:70:7d:bf:e1:4e:0a:fd:d6:0d:43:a4:41:e9:6a: 43:db:af:4b:16:9d:d0:4a:93:e8:e0:f4:90:e5:78:de:5c:05: f7:07:6a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq4m6rlr7jCPPp48ruHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm OTc5MjIwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD Eyg4NTY3ZDIwMzQ5MmZiMjBlZWIxZmE5YzMxNDcxMmY4M2FjNDZmNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDpPgAqdEQKwu1Mis17d/XCIqSxE XCedpAo8ZxtMmPG3n7u9k2AWxhpcbGqUc3UqmD0LRh/WAraLIbO8bsIRqTWd0l+8 d6R1pD0/BH9yxO7x9T/JjqRY5uVIX+zAg1OKsVABkl192f8RytDYaFs9S/4h8TCg Uu726s8Czzl2rjJEZuxVZd8QT0m/juEQDIn9LrYmfQxagynVItT6FcgtG/QCjTsB DyL0Tj2xYe+/7HDLR72U2KYaeFGLVuWsiR3HWCgvQ5Ea4tdnHZYInofC7HAmotlp 4N+Vw3VEU4aAz4iPUYhfGT+vBWulGfKRsKBJ9DnljKI3vboIz2k3r1ZxqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVn0gNJL7IO6x+pwxRxL4OsRva7MB8GA1UdIwQY MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3 LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMgwQWTu Ht2ZseEfnCDbl3GMFMYUL2f5MTaEagHTbB8gUNgem15b3TZH62+RPJFa+5vhCXdg 1bXpL4+mmOBwrAr4/j4klhKKyTavG6UXnmxLd23De3blguvJhAqZ1NKc0WfcuI11 BN1moKnavn1UNdxMXqmw72MmMwy4/9Mp5iPiJINwvFxAQSjOQ7SV/4RGyfu8bL8P i/N++WEZpQ7Uneaiq0lt9UD1sUIoAvXOqfI137XUhyso5btWhqt+tTJPbxzKVn88 ZmSlLU7iPGvAOe8lNFF+ofujJmvHu3B9v+FOCv3WDUOkQelqQ9uvSxad0EqT6OD0 kOV43lwF9wdqTA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:13 2025 by rpki-client