This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json) Hash identifier: 6HGOg5sW3ew3psr3rd8HvhldXj9co4dkNWhNlUQ9qY0= Subject key identifier: 62:CF:B3:A2:8A:D3:F1:AF:87:E0:1F:D4:16:41:A1:19:61:6C:89:5C Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1 Certificate serial: 019AF5AE4BD713959294AB5D301A2E90CBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft Manifest number: 0AD1 Signing time: Sat 06 Dec 2025 22:00:31 +0000 Manifest this update: Sat 06 Dec 2025 22:00:31 +0000 Manifest next update: Sun 07 Dec 2025 22:00:31 +0000 Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=) 2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: gDDqDqQsZEerwNRaBt8wZidDNLZz7Xo1LLiufdpsPiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:4b:d7:13:95:92:94:ab:5d:30:1a:2e:90:cb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1 Validity Not Before: Dec 6 22:00:31 2025 GMT Not After : Dec 7 22:00:31 2025 GMT Subject: CN=62cfb3a28ad3f1af87e01fd41641a119616c895c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:2b:77:e7:d0:6a:cb:af:6b:89:e8:db:35: 4b:96:b3:53:e0:f8:8a:f3:fd:00:92:94:d3:67:93: 21:39:a0:6d:c4:ae:5a:91:cc:90:1c:84:19:c4:ad: 10:b4:cc:2f:98:74:27:9a:a4:06:32:da:ea:86:69: 49:59:d6:94:e2:49:bd:0c:2e:87:74:a5:64:af:ea: ca:0c:35:04:a6:df:c2:d7:a4:74:db:bc:79:e0:82: dc:19:94:ed:c7:cf:6e:23:f8:db:ba:43:28:e8:73: 67:0b:94:d0:d0:7c:24:c3:4d:d0:fc:53:47:a3:d0: 21:bd:c3:be:b5:22:2d:f1:0b:34:60:de:6f:22:9f: 15:17:21:e3:da:a9:39:63:b4:15:dd:63:18:6c:00: 8c:54:04:9e:71:51:9a:95:56:4a:56:9c:29:38:2f: 0d:d1:ec:4e:5b:a3:b7:69:09:ee:1f:97:d0:db:a9: 4d:fa:a7:83:0f:e7:84:97:d4:04:c8:82:98:d9:28: e7:3d:a8:90:7a:ac:e6:06:f0:98:24:c9:8e:ff:a1: 45:7b:96:db:6c:5e:39:f4:80:76:6c:c8:36:7b:4e: a9:98:67:eb:08:d5:85:5f:7b:39:e1:49:7d:b9:96: ef:c7:a3:6c:e9:e9:1c:a0:8c:eb:0b:57:c2:d1:91: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:B3:A2:8A:D3:F1:AF:87:E0:1F:D4:16:41:A1:19:61:6C:89:5C X509v3 Authority Key Identifier: keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:15:e8:e2:0a:af:be:45:6e:5c:4f:a5:97:12:d6:b3:0d:0f: fc:96:00:bf:4c:71:19:1c:db:e8:9a:7c:91:ed:0c:37:90:9a: 8e:15:31:af:a3:04:e3:a0:0f:2a:e6:64:de:f2:ca:e2:81:65: 14:aa:f6:9b:2e:7b:5b:ea:cd:f1:14:96:75:51:28:a1:3a:d4: f6:d1:82:ae:f3:b4:8e:67:cf:b7:96:9c:3c:f8:f3:43:5c:90: f1:8a:78:84:e9:f3:28:20:1a:42:4f:40:27:e7:d1:2e:f7:aa: 02:5b:55:54:aa:18:1b:0f:97:14:ef:15:16:14:e9:c9:77:5b: af:e7:80:52:36:34:f3:08:4e:60:27:89:e3:24:7c:1c:66:68: 0a:3a:97:74:5e:22:75:93:c6:3b:05:dc:e9:3c:42:9b:55:f3: 06:f8:c6:c3:2e:ee:a6:3b:2d:a1:34:19:35:17:ab:ab:82:4f: 69:71:00:03:f3:1a:25:0a:67:33:53:80:0c:ca:9c:d5:95:a0: c4:d0:01:2f:7a:f0:3d:34:e0:18:fa:3f:a2:74:7d:83:33:bc: a5:05:a7:d5:02:79:90:0b:b1:40:a8:2c:fd:a5:81:5d:2a:d0: 2f:0f:ea:b5:07:be:c0:7f:f9:15:44:bc:67:92:0f:2a:5e:dd: a0:11:3a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkvXE5WSlKtdMBoukMvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx ODVlYjEwHhcNMjUxMjA2MjIwMDMxWhcNMjUxMjA3MjIwMDMxWjAzMTEwLwYDVQQD Eyg2MmNmYjNhMjhhZDNmMWFmODdlMDFmZDQxNjQxYTExOTYxNmM4OTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMUrd+fQasuva4no2zVLlrNT4PiK 8/0AkpTTZ5MhOaBtxK5akcyQHIQZxK0QtMwvmHQnmqQGMtrqhmlJWdaU4km9DC6H dKVkr+rKDDUEpt/C16R027x54ILcGZTtx89uI/jbukMo6HNnC5TQ0Hwkw03Q/FNH o9AhvcO+tSIt8Qs0YN5vIp8VFyHj2qk5Y7QV3WMYbACMVASecVGalVZKVpwpOC8N 0exOW6O3aQnuH5fQ26lN+qeDD+eEl9QEyIKY2SjnPaiQeqzmBvCYJMmO/6FFe5bb bF459IB2bMg2e06pmGfrCNWFX3s54Ul9uZbvx6Ns6ekcoIzrC1fC0ZF0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLPs6KK0/Gvh+Af1BZBoRlhbIlcMB8GA1UdIwQY MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxXo4gqv vkVuXE+llxLWsw0P/JYAv0xxGRzb6Jp8ke0MN5CajhUxr6ME46APKuZk3vLK4oFl FKr2my57W+rN8RSWdVEooTrU9tGCrvO0jmfPt5acPPjzQ1yQ8Yp4hOnzKCAaQk9A J+fRLveqAltVVKoYGw+XFO8VFhTpyXdbr+eAUjY08whOYCeJ4yR8HGZoCjqXdF4i dZPGOwXc6TxCm1XzBvjGwy7upjstoTQZNRerq4JPaXEAA/MaJQpnM1OADMqc1ZWg xNABL3rwPTTgGPo/onR9gzO8pQWn1QJ5kAuxQKgs/aWBXSrQLw/qtQe+wH/5FUS8 Z5IPKl7doBE6Mw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:44 2025 by rpki-client