This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json) Hash identifier: i3iU/ckOstPurNADGTSmsDm22Luo7WFYjXztPByuIeY= Subject key identifier: 5F:C3:AF:27:28:0F:55:52:9E:AC:0A:FE:0B:8D:1A:85:D9:EF:AB:FE Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1 Certificate serial: 019B35696D006CAD9D523919997845331AC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft Manifest number: 0AF2 Signing time: Fri 19 Dec 2025 07:01:00 +0000 Manifest this update: Fri 19 Dec 2025 07:01:00 +0000 Manifest next update: Sat 20 Dec 2025 07:01:00 +0000 Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=) 2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: eQeKijFSGIkE+LWezX0Pkp77JQ+xKMIxp0c4lvffVLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:6d:00:6c:ad:9d:52:39:19:99:78:45:33:1a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1 Validity Not Before: Dec 19 07:01:00 2025 GMT Not After : Dec 20 07:01:00 2025 GMT Subject: CN=5fc3af27280f55529eac0afe0b8d1a85d9efabfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:3f:c4:d7:9f:16:b5:1e:07:9a:4c:75:2d: 2b:4b:04:3c:ad:f3:4c:34:18:1d:9f:d8:4b:07:51: 6a:79:71:d7:fa:75:68:5a:aa:b4:04:4a:01:28:9a: 15:f3:d6:62:3f:1a:5c:2e:5c:3f:80:56:70:48:86: 51:e1:5f:72:87:da:3a:73:15:a2:83:44:93:90:92: 7a:fc:d0:70:f2:f0:4e:a1:3d:1f:47:78:d0:4f:37: 83:9c:e2:3d:a2:f9:ce:2e:9e:9c:94:7c:4e:0f:ad: 51:3d:84:69:2b:ce:1f:37:37:dc:43:89:4a:9f:dd: 39:de:b6:82:98:f2:39:28:1b:4e:2a:c0:bd:6f:87: e9:8b:c3:3c:cc:f3:4a:f2:15:2c:7f:8a:3f:da:2d: 40:b4:50:82:ff:91:09:4b:b4:c1:04:57:36:a7:19: 94:67:15:94:ab:68:d2:8d:ff:74:73:d0:a6:f3:91: 20:7e:dd:6e:8a:7d:e8:ee:8a:fc:bf:9f:98:73:84: 3d:6d:db:28:1d:30:09:a9:93:24:59:d9:1f:36:ca: d3:35:c6:40:73:5f:41:21:43:20:3a:d4:91:6f:df: ba:3f:0a:f1:90:58:75:c8:5f:09:a6:a8:95:5b:48: 49:91:54:d4:13:04:f5:3e:67:40:6d:13:f5:55:01: ab:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C3:AF:27:28:0F:55:52:9E:AC:0A:FE:0B:8D:1A:85:D9:EF:AB:FE X509v3 Authority Key Identifier: keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:58:db:42:4a:08:fe:76:42:da:ad:cc:13:b7:1d:07:dd:fe: d7:0b:80:f2:04:16:0c:15:45:d6:6b:d6:5e:0b:3b:f8:a2:9b: b4:9c:dc:d9:2c:8f:3f:04:42:60:20:5e:6a:e0:6e:43:5b:f8: 45:8b:b8:ed:87:d8:0e:a2:ee:36:e4:0b:ee:81:19:5e:26:14: f9:4c:19:90:ce:bf:76:05:23:32:aa:87:30:3d:58:dc:88:4f: 7f:91:8f:5c:ec:71:80:a1:6a:2a:69:b6:09:65:73:c4:cb:41: c1:fc:6a:c1:47:1a:f1:24:ef:56:72:d5:16:bd:48:02:69:a6: af:07:6b:77:ce:99:a5:58:35:3f:f5:9c:2b:c0:5c:b7:c6:fd: dc:0f:80:9d:7c:7a:ff:3e:99:55:bc:e1:fd:54:a1:43:79:e8: 18:d4:8f:c5:9c:87:dd:78:6a:af:85:fd:8d:82:be:3c:25:61: f5:da:96:65:25:81:e2:93:5c:1d:0b:5e:84:21:34:8e:21:3e: 95:4f:39:b7:d4:61:2f:21:8e:5c:c8:3b:4b:e3:9c:da:d1:b0: 1d:a9:90:77:a0:3d:1f:12:24:d9:4b:18:29:c5:9d:ff:ca:a4: d2:c0:ff:92:3c:b9:e4:bd:6a:81:da:1e:a4:a6:ab:a2:24:d4: 21:06:72:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aW0AbK2dUjkZmXhFMxrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx ODVlYjEwHhcNMjUxMjE5MDcwMTAwWhcNMjUxMjIwMDcwMTAwWjAzMTEwLwYDVQQD Eyg1ZmMzYWYyNzI4MGY1NTUyOWVhYzBhZmUwYjhkMWE4NWQ5ZWZhYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3es/xNefFrUeB5pMdS0rSwQ8rfNM NBgdn9hLB1FqeXHX+nVoWqq0BEoBKJoV89ZiPxpcLlw/gFZwSIZR4V9yh9o6cxWi g0STkJJ6/NBw8vBOoT0fR3jQTzeDnOI9ovnOLp6clHxOD61RPYRpK84fNzfcQ4lK n9053raCmPI5KBtOKsC9b4fpi8M8zPNK8hUsf4o/2i1AtFCC/5EJS7TBBFc2pxmU ZxWUq2jSjf90c9Cm85Egft1uin3o7or8v5+Yc4Q9bdsoHTAJqZMkWdkfNsrTNcZA c19BIUMgOtSRb9+6PwrxkFh1yF8JpqiVW0hJkVTUEwT1PmdAbRP1VQGrlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/DrycoD1VSnqwK/guNGoXZ76v+MB8GA1UdIwQY MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACljbQkoI /nZC2q3ME7cdB93+1wuA8gQWDBVF1mvWXgs7+KKbtJzc2SyPPwRCYCBeauBuQ1v4 RYu47YfYDqLuNuQL7oEZXiYU+UwZkM6/dgUjMqqHMD1Y3IhPf5GPXOxxgKFqKmm2 CWVzxMtBwfxqwUca8STvVnLVFr1IAmmmrwdrd86ZpVg1P/WcK8Bct8b93A+AnXx6 /z6ZVbzh/VShQ3noGNSPxZyH3Xhqr4X9jYK+PCVh9dqWZSWB4pNcHQtehCE0jiE+ lU85t9RhLyGOXMg7S+Oc2tGwHamQd6A9HxIk2UsYKcWd/8qk0sD/kjy55L1qgdoe pKaroiTUIQZyBw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:30 2025 by rpki-client