This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json) Hash identifier: nfM5+xLZZH4OMpyGVdpBBnWlJNhDW9K3vUbAKb+lAxY= Subject key identifier: CF:77:4C:21:0E:D1:C6:5E:EB:E4:C6:55:B0:5F:D7:A7:A7:41:D5:7F Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078 Certificate serial: 019AF276FA4601C660615CB596390896E850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft Manifest number: 047D Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: c/mdUvRVlbEokT7o03IZqk7nQdxD37L/Kz9P9mnpkdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fa:46:01:c6:60:61:5c:b5:96:39:08:96:e8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078 Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=cf774c210ed1c65eebe4c655b05fd7a7a741d57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:51:80:cb:8a:26:7b:2c:10:12:06:6b:76: 4d:41:a3:c9:8d:f1:a1:15:c6:80:37:ca:3a:c2:22: e3:da:10:07:0d:a6:46:11:94:f5:3d:94:f3:a0:a9: 46:ca:17:03:47:8e:c5:fc:d4:cf:f3:f1:90:c5:49: 22:25:1b:61:ba:02:b2:45:c1:89:75:42:0d:3c:77: a5:d6:b6:e3:09:1d:1c:7a:bd:e1:47:32:15:f5:d8: 33:81:63:b2:79:40:19:b5:63:d3:56:f4:d9:27:06: a6:ab:1b:f3:d4:8a:39:53:8a:e0:06:dc:d3:3b:ef: 55:28:ba:c4:5f:83:7a:7d:85:aa:9e:f7:b7:b4:49: 63:59:8b:9e:e4:a3:77:56:82:45:c2:5f:4c:35:c3: 95:de:43:1d:60:fa:df:77:b0:ab:d0:3c:21:23:91: f9:d5:77:81:e0:40:dc:06:0a:9a:26:ee:bd:e1:4a: f5:a0:dd:cd:e7:77:14:6c:40:5d:a7:6c:a6:21:1d: 46:cd:8c:ce:9c:1d:6b:73:98:ad:e7:c0:a8:17:55: 5c:5c:0c:05:bf:9d:f9:b6:ed:f5:43:60:7a:9c:df: f9:a7:69:79:d6:87:e7:18:95:4c:3a:0a:db:40:b8: a9:88:44:a3:dd:65:16:c3:fc:bd:9d:78:b9:b4:b2: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:4C:21:0E:D1:C6:5E:EB:E4:C6:55:B0:5F:D7:A7:A7:41:D5:7F X509v3 Authority Key Identifier: keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8b:99:ef:17:00:f5:da:c5:0b:5b:0c:8c:e1:ce:c1:9b:8d: fb:a3:dd:c9:b1:60:d3:6d:6a:18:1f:6e:e8:ab:69:89:77:b0: 6d:a1:64:21:1e:58:d2:e3:3d:0a:88:43:6f:d5:32:ac:66:37: d1:54:cb:91:f3:db:c2:1e:06:c4:c2:dd:be:f2:4e:ae:e9:e4: 34:bb:1a:1e:1e:2e:7f:09:b7:92:a7:ee:ef:d8:4d:a0:87:77: 5b:d6:2a:b6:48:dc:44:8e:0b:0a:eb:49:89:d4:18:a5:ce:f5: c8:de:87:76:75:4f:b7:ce:9a:a0:f1:35:5d:29:2b:df:3e:ad: 71:e6:31:cd:87:a2:19:da:e8:43:bd:9a:23:cc:12:96:62:55: 88:91:50:32:75:c5:f9:db:19:f1:e2:3a:1a:dd:3b:bd:bc:72: 41:94:5c:14:8f:a9:80:ec:d1:ed:2a:0d:97:af:74:92:00:5a: ae:58:01:f9:16:ad:e5:66:d9:66:28:ee:da:63:34:6f:a0:86: 2e:e3:32:2d:76:c7:56:fa:65:b0:11:e0:a1:84:09:f3:d5:ac: 64:9f:40:82:eb:f9:c1:26:13:c0:f1:32:19:88:6d:1b:08:27: 90:1d:ba:72:25:e7:fc:78:f9:91:a1:8a:c7:37:29:9c:22:72: 99:39:a5:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvpGAcZgYVy1ljkIluhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTUyNWFlMWE1YWZjZWYxOTNmNWE0MDE3N2JmMjczODg4 MzEwNzgwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EyhjZjc3NGMyMTBlZDFjNjVlZWJlNGM2NTViMDVmZDdhN2E3NDFkNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FRgMuKJnssEBIGa3ZNQaPJjfGh FcaAN8o6wiLj2hAHDaZGEZT1PZTzoKlGyhcDR47F/NTP8/GQxUkiJRthugKyRcGJ dUINPHel1rbjCR0cer3hRzIV9dgzgWOyeUAZtWPTVvTZJwamqxvz1Io5U4rgBtzT O+9VKLrEX4N6fYWqnve3tEljWYue5KN3VoJFwl9MNcOV3kMdYPrfd7Cr0DwhI5H5 1XeB4EDcBgqaJu694Ur1oN3N53cUbEBdp2ymIR1GzYzOnB1rc5it58CoF1VcXAwF v535tu31Q2B6nN/5p2l51ofnGJVMOgrbQLipiESj3WUWw/y9nXi5tLJc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM93TCEO0cZe6+TGVbBf16enQdV/MB8GA1UdIwQY MBaAFLgVJa4aWvzvGT9aQBd78nOIgxB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAt OWVmODM4NDkwMDQyLzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAtOWVmODM4NDkwMDQy LzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvouZ7xcA 9drFC1sMjOHOwZuN+6PdybFg021qGB9u6KtpiXewbaFkIR5Y0uM9CohDb9UyrGY3 0VTLkfPbwh4GxMLdvvJOrunkNLsaHh4ufwm3kqfu79hNoId3W9YqtkjcRI4LCutJ idQYpc71yN6HdnVPt86aoPE1XSkr3z6tceYxzYeiGdroQ72aI8wSlmJViJFQMnXF +dsZ8eI6Gt07vbxyQZRcFI+pgOzR7SoNl690kgBarlgB+Rat5WbZZiju2mM0b6CG LuMyLXbHVvplsBHgoYQJ89WsZJ9Aguv5wSYTwPEyGYhtGwgnkB26ciXn/Hj5kaGK xzcpnCJymTml1w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:42 2025 by rpki-client