This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json) Hash identifier: OcQko7acS+A6254qvGwZikwJlU+eie10a4xlkIHdnmE= Subject key identifier: 1B:8C:BD:B0:F9:CB:47:C8:B4:40:6A:E0:45:39:6A:45:5C:33:38:7D Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0 Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0 Certificate serial: 019AF23F5F63E7F21DC147DB33E3D426FBF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: PJVzFjXmMTijsRr3EO6VTLeFjBB9t6DaLYU4FJC2L7I=) 2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5f:63:e7:f2:1d:c1:47:db:33:e3:d4:26:fb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0 Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=1b8cbdb0f9cb47c8b4406ae045396a455c33387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:e1:42:00:b5:0a:55:1b:02:94:49:9d:15: 5b:03:54:7f:4d:ca:40:d0:6a:5c:3b:b1:3c:94:13: 2e:c0:65:7c:aa:71:a5:c3:09:f4:f7:7c:21:2e:ab: 3a:df:13:7f:4b:ad:f0:b0:9c:d2:14:a7:3f:ea:99: 2e:60:b7:7b:af:34:69:13:02:e0:8c:63:40:d6:0e: ed:78:a5:cb:88:0a:3a:c8:bc:f5:c5:4f:d0:c7:00: 39:0e:3b:7d:4d:68:ed:06:d1:b7:4a:3d:5f:b0:e5: 9a:c2:71:aa:61:24:97:52:be:0a:11:cf:01:17:6d: 4f:bc:f9:04:5b:f1:49:58:18:b0:bb:98:f5:74:9e: 80:d7:30:3b:ee:40:18:14:60:51:5d:9e:23:d2:f2: bb:c3:0e:20:14:8f:a9:55:8f:cb:5b:8b:c0:c6:b8: 07:76:ae:6d:e2:9a:bc:a8:16:82:f4:21:6e:e0:6d: 91:82:64:69:e2:8d:cf:fe:4f:5c:77:06:a1:61:eb: e1:14:b1:44:0d:74:6f:cd:11:29:6b:5d:22:59:77: c4:4c:e2:70:e5:b6:eb:02:22:9c:24:37:d1:fc:c1: 0a:fc:b0:16:87:85:08:ba:93:64:11:f3:a2:1d:a8: 4d:17:91:2a:64:76:71:55:2d:bc:39:b5:f0:61:22: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8C:BD:B0:F9:CB:47:C8:B4:40:6A:E0:45:39:6A:45:5C:33:38:7D X509v3 Authority Key Identifier: keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fb:36:fe:5c:22:03:08:c2:e9:5f:7c:d4:b7:9c:76:3e:3b: ad:a1:7f:93:3f:e7:ce:f2:c5:27:96:33:de:75:98:15:2a:54: dc:66:47:60:76:34:82:87:d0:9a:a8:fd:ef:73:63:66:f0:67: d2:37:8f:e6:2d:ce:0e:19:f4:0d:4e:bf:c1:b8:ac:3f:d2:55: 96:8d:dc:61:ea:ba:80:8c:00:49:50:d0:d2:f5:bf:d0:84:f2: 58:f9:8f:59:12:34:3d:14:d4:e5:a6:ea:fc:88:1b:67:6f:11: 79:b5:0e:8b:4f:55:16:df:dd:d4:9d:8e:dd:9a:6c:43:f6:4e: fe:d4:49:b1:9e:b2:d2:06:b4:e4:fa:3f:ae:48:cf:62:98:b0: 90:6f:ef:f4:9c:c1:74:08:6f:72:c4:f7:b7:e8:1c:94:c1:20: 4e:d2:34:d0:02:48:c7:40:af:f7:e4:3e:ed:bb:46:7d:5f:44: b5:71:00:cb:d2:ef:5f:00:fb:86:4d:00:93:15:a1:8a:5b:ef: a2:e7:1c:ad:12:97:ed:1e:9c:14:0d:52:32:f6:c4:9f:0f:28: 8e:c6:8a:c2:2c:1a:75:dc:74:41:23:0d:86:44:14:83:69:a4: 8b:92:99:ff:7a:f2:ad:6e:8b:d9:22:b5:28:af:27:80:6a:ab: 8f:a6:e5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP19j5/IdwUfbM+PUJvv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDZlMjQ0MzBkYmE4OWJkY2UyMmM2YmYzMjgxOGNiZGU2 YmJjYTAwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD EygxYjhjYmRiMGY5Y2I0N2M4YjQ0MDZhZTA0NTM5NmE0NTVjMzMzODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE7hQgC1ClUbApRJnRVbA1R/TcpA 0GpcO7E8lBMuwGV8qnGlwwn093whLqs63xN/S63wsJzSFKc/6pkuYLd7rzRpEwLg jGNA1g7teKXLiAo6yLz1xU/QxwA5Djt9TWjtBtG3Sj1fsOWawnGqYSSXUr4KEc8B F21PvPkEW/FJWBiwu5j1dJ6A1zA77kAYFGBRXZ4j0vK7ww4gFI+pVY/LW4vAxrgH dq5t4pq8qBaC9CFu4G2RgmRp4o3P/k9cdwahYevhFLFEDXRvzREpa10iWXfETOJw 5bbrAiKcJDfR/MEK/LAWh4UIupNkEfOiHahNF5EqZHZxVS28ObXwYSJ09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuMvbD5y0fItEBq4EU5akVcMzh9MB8GA1UdIwQY MBaAFNVG4kQw26ib3OIsa/MoGMvea7ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjkt ZDA2Y2ZhMjI2YzY0LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjktZDA2Y2ZhMjI2YzY0 LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPs2/lwi AwjC6V981Lecdj47raF/kz/nzvLFJ5Yz3nWYFSpU3GZHYHY0gofQmqj973NjZvBn 0jeP5i3ODhn0DU6/wbisP9JVlo3cYeq6gIwASVDQ0vW/0ITyWPmPWRI0PRTU5abq /IgbZ28RebUOi09VFt/d1J2O3ZpsQ/ZO/tRJsZ6y0ga05Po/rkjPYpiwkG/v9JzB dAhvcsT3t+gclMEgTtI00AJIx0Cv9+Q+7btGfV9EtXEAy9LvXwD7hk0AkxWhilvv ouccrRKX7R6cFA1SMvbEnw8ojsaKwiwaddx0QSMNhkQUg2mki5KZ/3ryrW6L2SK1 KK8ngGqrj6blXA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:44 2025 by rpki-client