This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json) Hash identifier: feuxieujXO8FujL66v3udEgoyfP6wulIFcfBcrWHNbY= Subject key identifier: 1B:6D:1B:61:93:D8:EE:3D:69:7A:6B:75:62:55:39:B4:0F:87:23:B8 Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b Certificate serial: 019AF208A74F8084E3843F3351F5BB00010B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=) 2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: CmOehT4sJSNGgOU4M94NQQwI7+za9VU4bKBvgdkJOek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a7:4f:80:84:e3:84:3f:33:51:f5:bb:00:01:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=1b6d1b6193d8ee3d697a6b75625539b40f8723b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:51:11:67:f9:0f:8f:09:d1:0a:f6:c4:8c: b3:0e:fc:2a:c6:9b:17:e7:21:be:86:33:ac:10:0b: 3f:18:95:5a:a5:c3:93:23:0e:fe:b1:9b:a3:51:57: be:64:db:50:2d:a1:50:0e:0d:dd:47:c6:8c:6e:1b: 3c:de:ce:f5:12:60:32:f9:81:e8:00:d6:aa:48:0f: d4:23:4a:00:dd:29:91:16:bb:ce:e8:03:32:c6:66: 1a:55:53:64:19:81:54:06:d2:5a:7d:4a:9b:59:cc: 37:c4:8b:19:aa:7c:55:9a:59:d4:67:80:86:d9:79: 2b:58:76:35:2b:d6:d5:9d:23:ef:75:0a:c0:a3:0c: d8:ad:b9:10:bf:da:8e:8a:f4:1d:23:55:92:23:39: 30:7c:08:d0:2f:56:f6:f8:87:d0:2a:79:43:d3:ed: e7:ea:80:37:1a:77:bb:01:01:6d:7b:95:b2:21:36: b9:41:c9:11:7b:62:dd:e7:5e:75:7f:e0:e3:73:57: f1:c6:91:d5:14:89:e6:f6:52:c8:da:00:4e:09:9d: 9d:3e:37:f6:41:0e:49:1a:55:a5:bd:57:28:ef:2c: c3:0b:4c:50:d4:74:b4:08:f7:8d:61:e1:df:78:50: 0e:5d:81:99:eb:a6:9a:82:06:96:05:ce:ff:79:25: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:1B:61:93:D8:EE:3D:69:7A:6B:75:62:55:39:B4:0F:87:23:B8 X509v3 Authority Key Identifier: keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fa:37:29:62:37:6a:5e:42:76:cb:40:9e:d6:f4:98:b7:45: 39:63:03:4d:b3:3c:47:c8:c7:b3:f6:14:6f:e7:fb:75:76:00: 58:45:d3:f3:48:91:e3:e5:bb:76:9f:92:ff:0b:6e:37:c2:10: 6a:f8:c5:db:bd:c7:d8:65:42:0f:a3:72:76:e1:2b:7e:bd:31: 1c:52:04:6f:5e:c4:0b:b3:7b:86:ba:54:c4:3e:c4:46:75:d4: 0c:a4:82:1e:a5:a1:8e:15:8a:57:c9:67:a1:64:2c:92:9e:3f: c8:3e:af:5c:c1:0d:06:9c:cc:15:be:c7:69:dd:cb:c3:55:11: 41:02:24:ea:9f:79:20:bf:ad:c7:96:35:2a:1c:16:54:93:95: 01:66:56:73:78:6c:2f:a7:bf:f7:e5:ae:a0:e4:00:63:92:7f: b0:0e:9c:5b:0a:78:c8:48:18:17:a2:01:f2:4c:4f:67:1b:55: e4:92:90:34:eb:b0:82:36:62:01:6e:e2:3d:d0:4d:59:b3:27: 68:81:40:09:67:c0:2e:c3:d2:92:cd:a0:54:ab:2b:7a:07:30: 54:c4:33:e4:1c:39:3c:45:b5:94:6c:d7:c6:9a:82:bd:0c:48: 4d:23:48:2c:2c:d4:3e:ab:44:3c:dc:e4:07:e7:df:46:37:78: f1:3d:9a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKdPgITjhD8zUfW7AAELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl ZTc2N2IwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EygxYjZkMWI2MTkzZDhlZTNkNjk3YTZiNzU2MjU1MzliNDBmODcyM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlxREWf5D48J0Qr2xIyzDvwqxpsX 5yG+hjOsEAs/GJVapcOTIw7+sZujUVe+ZNtQLaFQDg3dR8aMbhs83s71EmAy+YHo ANaqSA/UI0oA3SmRFrvO6AMyxmYaVVNkGYFUBtJafUqbWcw3xIsZqnxVmlnUZ4CG 2XkrWHY1K9bVnSPvdQrAowzYrbkQv9qOivQdI1WSIzkwfAjQL1b2+IfQKnlD0+3n 6oA3Gne7AQFte5WyITa5QckRe2Ld5151f+Djc1fxxpHVFInm9lLI2gBOCZ2dPjf2 QQ5JGlWlvVco7yzDC0xQ1HS0CPeNYeHfeFAOXYGZ66aaggaWBc7/eSU6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBttG2GT2O49aXprdWJVObQPhyO4MB8GA1UdIwQY MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct ZjQ2OGVlMzMxNDc0LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0 LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvo3KWI3 al5CdstAntb0mLdFOWMDTbM8R8jHs/YUb+f7dXYAWEXT80iR4+W7dp+S/wtuN8IQ avjF273H2GVCD6NyduErfr0xHFIEb17EC7N7hrpUxD7ERnXUDKSCHqWhjhWKV8ln oWQskp4/yD6vXMENBpzMFb7Had3Lw1URQQIk6p95IL+tx5Y1KhwWVJOVAWZWc3hs L6e/9+WuoOQAY5J/sA6cWwp4yEgYF6IB8kxPZxtV5JKQNOuwgjZiAW7iPdBNWbMn aIFACWfALsPSks2gVKsregcwVMQz5Bw5PEW1lGzXxpqCvQxITSNILCzUPqtEPNzk B+ffRjd48T2aHA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:53 2025 by rpki-client