This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft File: ubrpYJaypQez1LDCdLwv9Ynp-aI.mft (raw, json) Hash identifier: l+sVHxO9hDgZ4Put9d5GhtS/QzrJRFK/HHTh+yZ1Q/I= Subject key identifier: B6:C8:A0:DD:E7:C2:55:A2:AE:D3:91:32:6E:63:EC:1C:25:D7:39:27 Authority key identifier: B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2 Certificate issuer: /CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2 Certificate serial: 019AF16464E3FE5CEF0DC9584A497FBB3945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft Manifest number: 0167 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: ubrpYJaypQez1LDCdLwv9Ynp-aI.crl (hash: wRFP+1VsTaxb2JWYvaV9OJRVomJmTJb5/p4OzIfd2W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:64:e3:fe:5c:ef:0d:c9:58:4a:49:7f:bb:39:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=b6c8a0dde7c255a2aed391326e63ec1c25d73927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:34:4e:75:62:ba:38:38:8a:ca:c0:e3:2c: 95:48:7c:4a:7c:27:df:2b:e3:b7:2e:49:95:e9:5a: 40:27:39:5f:f3:5f:b6:5d:5e:81:08:dc:88:f3:c9: 53:d5:47:29:d6:37:84:23:4b:12:ba:55:44:92:41: 21:2f:6a:39:65:76:5b:30:86:02:27:2a:80:ea:5d: 46:31:e4:00:af:d3:2b:2d:05:16:ea:1b:a5:79:4d: 5f:60:b8:11:04:d5:f8:c6:7d:37:85:19:32:73:65: 35:2d:93:c6:ad:20:cf:bf:c1:2e:f8:38:0d:ba:37: 24:f8:22:81:09:4a:8f:21:0b:ed:8f:b4:ee:08:35: 94:b1:8f:5b:31:60:2b:71:79:61:41:a6:61:13:c0: 81:8c:a9:c6:f5:b6:8a:a8:88:f9:bb:1a:1a:00:f2: 1b:c6:5e:1a:d2:97:1f:ce:c7:40:37:d2:ad:e1:a4: 40:c2:65:7c:a4:ed:a0:7b:6d:59:6d:c1:89:02:92: a2:71:42:8f:e2:55:76:a5:a7:b5:66:bc:33:29:bc: 32:70:47:8b:c1:87:da:a3:dd:bd:cb:83:3e:c8:93: 34:23:f7:ab:0b:6a:8f:86:13:4c:b4:51:a7:5c:e5: 68:8c:22:45:37:28:a8:a8:44:8b:49:60:07:8b:e2: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:A0:DD:E7:C2:55:A2:AE:D3:91:32:6E:63:EC:1C:25:D7:39:27 X509v3 Authority Key Identifier: keyid:B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:26:fb:b5:3e:81:3f:3d:54:ce:f7:55:4d:c3:26:c3:fc:db: 13:fc:e0:95:d4:74:de:4c:b0:71:1a:08:11:33:71:ad:35:98: fd:35:f8:83:4b:30:b9:ae:ed:83:11:67:d4:57:07:c5:ab:fd: 9f:9b:a3:6b:b9:3a:a6:6d:f0:e3:cd:57:72:20:1c:66:e6:bd: ed:bc:e2:4f:aa:d9:1b:2c:a9:1a:7a:5e:ee:2e:da:b1:21:53: 69:be:78:95:09:9a:49:24:b5:b8:e6:c4:6a:71:d5:e2:31:6e: de:bc:f1:35:9c:20:ba:96:a4:49:ed:b0:4b:6b:0b:13:8b:5c: 7d:e9:a7:d1:b3:10:c4:6b:2a:43:1d:9a:f1:31:15:4a:fe:1f: d5:9a:3b:2b:fe:12:99:09:6a:6e:ec:3e:50:ab:ac:e8:c4:0b: 67:3e:9c:26:ce:4a:37:3f:d6:cc:21:51:48:6e:ed:27:71:2c: 84:b3:ef:b6:91:61:ee:a0:2d:e3:d7:da:55:1c:f6:4a:78:19: a7:c3:e7:57:fe:1c:44:25:6f:0d:00:34:4e:e6:3e:14:a7:1a: 56:2e:56:7f:fe:c7:25:99:e5:00:bf:08:56:51:46:16:76:d0: 20:2d:d5:5c:25:f3:e1:e7:be:cb:95:37:50:18:78:23:d8:25: 4e:eb:e1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGTj/lzvDclYSkl/uzlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YmFlOTYwOTZiMmE1MDdiM2Q0YjBjMjc0YmMyZmY1ODll OWY5YTIwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EyhiNmM4YTBkZGU3YzI1NWEyYWVkMzkxMzI2ZTYzZWMxYzI1ZDczOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWQ0TnViujg4isrA4yyVSHxKfCff K+O3LkmV6VpAJzlf81+2XV6BCNyI88lT1Ucp1jeEI0sSulVEkkEhL2o5ZXZbMIYC JyqA6l1GMeQAr9MrLQUW6huleU1fYLgRBNX4xn03hRkyc2U1LZPGrSDPv8Eu+DgN ujck+CKBCUqPIQvtj7TuCDWUsY9bMWArcXlhQaZhE8CBjKnG9baKqIj5uxoaAPIb xl4a0pcfzsdAN9Kt4aRAwmV8pO2ge21ZbcGJApKicUKP4lV2pae1ZrwzKbwycEeL wYfao929y4M+yJM0I/erC2qPhhNMtFGnXOVojCJFNyioqESLSWAHi+LavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbIoN3nwlWirtORMm5j7Bwl1zknMB8GA1UdIwQY MBaAFLm66WCWsqUHs9SwwnS8L/WJ6fmiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zNGU3NTktYzllMy00NWJhLTg4MWIt MDg3Mzg2NWU0NDMyLzEvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8zNGU3NTktYzllMy00NWJhLTg4MWItMDg3Mzg2NWU0NDMy LzEvdWJycFlKYXlwUWV6MUxEQ2RMd3Y5WW5wLWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxib7tT6B Pz1UzvdVTcMmw/zbE/zgldR03kywcRoIETNxrTWY/TX4g0swua7tgxFn1FcHxav9 n5uja7k6pm3w481XciAcZua97bziT6rZGyypGnpe7i7asSFTab54lQmaSSS1uObE anHV4jFu3rzxNZwgupakSe2wS2sLE4tcfemn0bMQxGsqQx2a8TEVSv4f1Zo7K/4S mQlqbuw+UKus6MQLZz6cJs5KNz/WzCFRSG7tJ3EshLPvtpFh7qAt49faVRz2SngZ p8PnV/4cRCVvDQA0TuY+FKcaVi5Wf/7HJZnlAL8IVlFGFnbQIC3VXCXz4ee+y5U3 UBh4I9glTuvhwA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:37 2025 by rpki-client