This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json) Hash identifier: frJYRkkYLrnB0vO68mAlMN11EvN/Hf2kuCLYWZ6B5go= Subject key identifier: F4:E4:86:1D:A4:44:6A:2B:64:E5:73:DE:32:7A:FC:1B:C4:4A:02:B9 Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Certificate serial: 019AF19B744ADE202A770398D0B11716F86C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: hlfKfB5e3ugxfaONTTEdI8MD+UXLf3YtlR3s9N+Wk2E=) 2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:74:4a:de:20:2a:77:03:98:d0:b1:17:16:f8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=f4e4861da4446a2b64e573de327afc1bc44a02b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:7d:0a:c7:76:18:79:7c:4c:c3:37:fb:d9: f9:2a:17:c9:85:dd:2f:16:5c:eb:d4:f3:c9:04:a8: 43:06:fe:7e:4a:06:70:f9:14:81:ea:05:17:56:77: 4f:bd:b0:e5:f1:31:78:a3:52:f1:54:1f:18:46:22: 6c:7e:1b:c9:fe:db:9a:c3:1d:70:a7:6b:23:ef:46: e7:9c:6e:ee:c4:91:3c:b4:48:4c:33:79:da:d8:ed: c6:2c:45:e6:55:af:42:43:e3:45:02:c9:7d:51:6d: 60:26:b7:41:a2:78:aa:88:85:f5:2e:d4:7d:19:29: 8e:46:b2:3b:56:88:93:54:76:cb:ef:4e:22:ef:2e: 3b:7c:1c:dd:49:e7:aa:c9:88:6a:65:e9:5f:02:e8: 85:c1:68:ef:ca:d9:a4:6d:18:05:1b:dd:14:49:75: c2:fc:e2:2f:81:31:d8:21:ee:66:e5:ad:e7:39:88: ba:fa:93:7d:3f:01:1f:74:c2:3a:1f:26:fa:9d:05: 61:f2:cf:a1:73:1d:6e:a0:36:d3:1e:44:0a:e0:cf: ff:a5:a7:a2:3f:ff:d8:4c:1f:eb:1b:a1:64:c5:cb: 2b:88:bd:b1:55:2c:db:4d:c9:10:f9:01:db:d5:60: e6:9e:5c:e6:f5:94:31:82:07:69:98:ba:0c:8a:81: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:86:1D:A4:44:6A:2B:64:E5:73:DE:32:7A:FC:1B:C4:4A:02:B9 X509v3 Authority Key Identifier: keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:49:3e:f2:2d:65:c0:80:56:75:d7:60:66:9c:c6:53:c7: e4:8d:d9:95:c7:80:c1:21:c5:8a:fa:8a:39:e9:72:d9:d2:c4: 96:78:3e:63:dd:00:f4:7d:b8:68:af:5c:ea:78:ce:22:76:aa: b7:ef:ff:d9:62:7e:33:a5:ff:d4:07:32:dc:aa:41:02:6c:1e: 0d:3c:1b:b7:95:6b:ee:1e:54:14:b5:38:69:1a:18:81:f3:f5: 0d:a3:e9:8b:18:46:9f:5c:12:c5:b7:52:66:25:86:f0:11:f9: f8:de:90:e0:f6:3e:98:f0:cd:7f:03:c4:d4:59:cf:78:f3:5c: 9d:b6:4a:6d:75:0e:cf:f8:3d:de:2e:26:69:23:82:f9:fe:bd: 7d:a0:db:98:6a:21:33:2f:ab:77:fa:65:76:04:20:2c:7a:55: 3b:32:6f:0a:a2:42:ed:5f:bc:ff:e7:af:7d:0b:b1:c0:85:c4: 36:29:24:7f:ef:97:fe:51:ed:be:5d:93:9e:73:6b:cb:f8:8c: 20:79:45:00:68:77:1e:0b:48:9b:5c:78:81:00:72:29:94:d9: b5:2a:6d:cd:9c:cf:e7:e9:fa:83:23:49:1c:f6:2d:c9:24:78: b3:08:1f:23:f1:a8:a2:84:ff:77:06:23:da:96:f1:40:2a:90: 25:04:95:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3RK3iAqdwOY0LEXFvhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4 NjM5NTgwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EyhmNGU0ODYxZGE0NDQ2YTJiNjRlNTczZGUzMjdhZmMxYmM0NGEwMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfB9Csd2GHl8TMM3+9n5KhfJhd0v Flzr1PPJBKhDBv5+SgZw+RSB6gUXVndPvbDl8TF4o1LxVB8YRiJsfhvJ/tuawx1w p2sj70bnnG7uxJE8tEhMM3na2O3GLEXmVa9CQ+NFAsl9UW1gJrdBoniqiIX1LtR9 GSmORrI7VoiTVHbL704i7y47fBzdSeeqyYhqZelfAuiFwWjvytmkbRgFG90USXXC /OIvgTHYIe5m5a3nOYi6+pN9PwEfdMI6Hyb6nQVh8s+hcx1uoDbTHkQK4M//paei P//YTB/rG6FkxcsriL2xVSzbTckQ+QHb1WDmnlzm9ZQxggdpmLoMioHhKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTkhh2kRGorZOVz3jJ6/BvESgK5MB8GA1UdIwQY MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt YmZlMGNjYjc5ZmNjLzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDxJPvIt ZcCAVnXXYGacxlPH5I3ZlceAwSHFivqKOely2dLElng+Y90A9H24aK9c6njOInaq t+//2WJ+M6X/1Acy3KpBAmweDTwbt5Vr7h5UFLU4aRoYgfP1DaPpixhGn1wSxbdS ZiWG8BH5+N6Q4PY+mPDNfwPE1FnPePNcnbZKbXUOz/g93i4maSOC+f69faDbmGoh My+rd/pldgQgLHpVOzJvCqJC7V+8/+evfQuxwIXENikkf++X/lHtvl2TnnNry/iM IHlFAGh3HgtIm1x4gQByKZTZtSptzZzP5+n6gyNJHPYtySR4swgfI/GoooT/dwYj 2pbxQCqQJQSVSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:15 2025 by rpki-client