This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json) Hash identifier: JMy8S6WAKLc81rW8t8c/4LJSjd5+fUtYHi7Lwz+5Lik= Subject key identifier: E9:F9:78:5F:52:CD:31:E2:96:36:F7:4E:41:04:BB:21:82:12:85:22 Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Certificate serial: 019AF1D192C6A47496075F897C52A8401DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft Manifest number: 0A1E Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: gMP+3/2keSJjsg/x2XG+7go8/ZLK9m8SIaj41CgyjeY=) 2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:92:c6:a4:74:96:07:5f:89:7c:52:a8:40:1d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=e9f9785f52cd31e29636f74e4104bb2182128522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:e5:5e:f7:5b:42:d4:ba:1e:94:76:62:1a: 8b:5f:95:e8:a8:ba:c1:89:d7:8d:0c:18:a3:a5:b9: a6:5d:37:16:28:d9:48:c7:59:0d:58:8a:a2:7e:2c: 2f:c0:12:79:13:c2:fd:2a:ac:c4:3c:ec:0f:40:bc: d6:ba:23:6c:38:4c:2b:23:4d:a5:c9:cb:b1:e1:a5: 32:9c:a7:b2:33:db:3c:ac:a3:b0:62:32:72:8d:31: 23:fe:b6:b2:5c:a8:d9:8b:44:2e:29:71:bc:15:c2: 51:cf:5e:c2:85:d4:09:59:75:ee:ae:25:e7:25:07: dc:03:b6:f1:a1:7d:05:70:6c:76:cf:03:cd:ca:06: 3d:94:e8:40:2d:49:ed:51:1a:b7:67:24:13:ef:9c: 9e:02:af:be:54:2f:fc:a9:5e:a8:bf:25:e4:cb:e9: d0:d7:40:46:87:d6:5b:4f:3e:9b:23:55:aa:4d:40: ed:86:c7:78:a7:4a:e1:bc:e2:c0:fa:a2:f1:e2:7e: ba:68:c1:18:7b:86:04:f6:c8:68:84:5d:39:d4:5a: 05:69:92:33:30:60:4c:47:ba:e4:f2:23:78:dc:40: 92:7e:de:e5:8b:ac:e0:e2:3d:0a:a9:ac:78:4e:00: 4f:46:ba:da:c8:2e:66:fc:ee:67:ba:fd:4c:c9:60: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:78:5F:52:CD:31:E2:96:36:F7:4E:41:04:BB:21:82:12:85:22 X509v3 Authority Key Identifier: keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:18:ac:d1:6b:73:19:c2:f4:ab:cf:2d:93:ad:1a:60:95: 5e:50:c5:83:fd:5a:dd:3f:e1:83:81:5f:27:3b:20:1e:6d:a4: 5c:27:cb:2a:bd:46:b0:ac:fb:62:93:ec:77:89:5a:10:ab:ee: b1:52:db:1f:6c:49:43:4e:37:83:e1:fa:89:96:2c:25:81:ca: 32:0d:00:dd:3f:40:48:12:56:dd:a4:4b:a4:a7:ca:1b:7a:23: e9:29:54:30:90:a7:0e:ca:aa:52:c4:ed:6b:69:04:8b:0b:c7: 04:64:fd:2b:55:e9:85:11:54:65:58:e4:9c:91:df:87:56:89: 2d:ba:06:b0:3a:fb:2a:93:03:96:60:15:e2:21:39:19:cd:40: a4:59:2f:b2:fe:2d:ec:91:49:29:5e:25:b2:70:3d:c8:1b:f8: 20:16:48:e5:fc:16:43:43:0c:22:4e:fc:3f:3c:82:54:50:72: d4:9a:1d:75:ec:92:70:63:11:36:1d:68:ac:40:8b:8a:40:62: 69:a2:78:11:2a:5a:4d:5d:9b:1a:65:b4:60:fa:dd:61:ca:af: 35:0f:ae:5f:49:1f:b1:3a:79:02:92:33:a8:82:06:24:02:7c: 4d:8d:43:77:5e:7f:0e:62:e7:55:ba:9b:1e:41:34:aa:bc:44: 38:42:07:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZLGpHSWB1+JfFKoQB30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYmRmMGQ0ZGU0MDA1N2Y1Y2MzZmQxZTcwYmZjMTFmNTM1 MTczOGQwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EyhlOWY5Nzg1ZjUyY2QzMWUyOTYzNmY3NGU0MTA0YmIyMTgyMTI4NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuvlXvdbQtS6HpR2YhqLX5XoqLrB ideNDBijpbmmXTcWKNlIx1kNWIqifiwvwBJ5E8L9KqzEPOwPQLzWuiNsOEwrI02l ycux4aUynKeyM9s8rKOwYjJyjTEj/rayXKjZi0QuKXG8FcJRz17ChdQJWXXuriXn JQfcA7bxoX0FcGx2zwPNygY9lOhALUntURq3ZyQT75yeAq++VC/8qV6ovyXky+nQ 10BGh9ZbTz6bI1WqTUDthsd4p0rhvOLA+qLx4n66aMEYe4YE9shohF051FoFaZIz MGBMR7rk8iN43ECSft7li6zg4j0Kqax4TgBPRrrayC5m/O5nuv1MyWCm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn5eF9SzTHiljb3TkEEuyGCEoUiMB8GA1UdIwQY MBaAFFG98NTeQAV/XMP9HnC/wR9TUXONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYt ZTg4ZDg4NGMyMGVmLzEvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYtZTg4ZDg4NGMyMGVm LzEvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrQYrNFr cxnC9KvPLZOtGmCVXlDFg/1a3T/hg4FfJzsgHm2kXCfLKr1GsKz7YpPsd4laEKvu sVLbH2xJQ043g+H6iZYsJYHKMg0A3T9ASBJW3aRLpKfKG3oj6SlUMJCnDsqqUsTt a2kEiwvHBGT9K1XphRFUZVjknJHfh1aJLboGsDr7KpMDlmAV4iE5Gc1ApFkvsv4t 7JFJKV4lsnA9yBv4IBZI5fwWQ0MMIk78PzyCVFBy1JoddeyScGMRNh1orECLikBi aaJ4ESpaTV2bGmW0YPrdYcqvNQ+uX0kfsTp5ApIzqIIGJAJ8TY1Dd15/DmLnVbqb HkE0qrxEOEIHUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:48 2025 by rpki-client