This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json) Hash identifier: wN0rEw/DFmpgGbGKd043km6xTlHE6snnF6qteXcxE20= Subject key identifier: 9E:DE:BE:3C:12:B8:04:2A:A3:25:63:87:7A:81:B2:00:0F:08:38:E4 Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Certificate serial: 019AF3F7B134982EE82FE216A533E4D1E061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft Manifest number: C4 Signing time: Sat 06 Dec 2025 14:01:27 +0000 Manifest this update: Sat 06 Dec 2025 14:01:27 +0000 Manifest next update: Sun 07 Dec 2025 14:01:27 +0000 Files and hashes: 1: IV6LAMTesDGR72HXRT_RM2ewtd0.roa (hash: Ji82TeFvw2AWO7ouVte9FvWBgNe+1lXjlT4zAWwBKBg=) 2: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: RTWFAgphOIRUyZ4vR8QZkvHtQVtmVtFckUwVXEgW5yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b1:34:98:2e:e8:2f:e2:16:a5:33:e4:d1:e0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Validity Not Before: Dec 6 14:01:27 2025 GMT Not After : Dec 7 14:01:27 2025 GMT Subject: CN=9edebe3c12b8042aa32563877a81b2000f0838e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:d0:4f:03:ac:39:ae:0c:15:25:d7:57:5d: f3:26:b1:55:a1:38:90:89:9d:74:1f:cf:a2:91:6e: 70:0f:6e:77:8f:d3:31:ea:88:1c:c9:a7:32:8c:ac: 27:c9:ea:3d:fa:3f:81:d4:aa:38:27:af:99:82:cb: 5c:33:42:f9:72:e8:ed:3c:0e:bc:d8:b2:0e:a8:26: 81:8f:9b:4d:c6:c0:ec:b5:bd:a5:3f:d1:d0:eb:f9: 40:74:b2:a7:5e:71:85:cd:0b:a1:34:71:88:7a:c8: 62:9b:46:b4:79:a7:f6:a6:3d:81:8c:c4:e6:a2:16: c9:24:aa:77:96:f2:f7:3b:d6:30:cc:d5:7b:b5:84: f7:12:f2:df:50:15:87:87:a0:2f:ee:a9:e4:35:8d: 94:c9:af:4e:91:ce:27:70:df:e7:76:c0:e2:f5:32: b6:62:10:4a:ac:d0:ea:68:8d:13:8d:25:8d:52:a1: 2e:ef:56:7a:44:56:18:65:7b:9c:f5:e9:72:5c:bb: 61:0a:b4:ca:a4:bc:88:b6:ae:cd:11:82:b5:25:83: 93:9e:74:c0:55:a5:f7:bf:0a:c5:b2:d0:5b:17:83: 20:88:e5:e5:f4:38:9d:a9:42:af:d1:8a:76:01:c6: a8:68:51:9a:aa:7e:d4:2a:e3:76:49:4e:0f:2c:1c: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:BE:3C:12:B8:04:2A:A3:25:63:87:7A:81:B2:00:0F:08:38:E4 X509v3 Authority Key Identifier: keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:83:79:c3:0c:73:aa:1b:66:72:e3:d8:41:ed:2f:2f:1d:f0: bb:48:8f:f1:ec:88:72:d4:15:83:02:21:23:07:93:71:7b:98: 63:6d:f7:5a:ea:49:69:ae:8d:4a:9f:ac:fc:30:fa:d3:79:b8: 16:de:f3:04:04:26:3b:52:e9:c8:52:e0:bb:20:04:e2:9a:24: 0b:be:ad:b9:9a:8f:4e:10:da:b0:6e:b0:e0:01:96:2b:4d:a5: 03:68:ba:65:aa:98:0a:e1:7c:9d:0c:75:7c:d7:bd:fb:41:08: 47:5d:39:af:af:ed:d2:56:b3:c8:5a:7d:5b:a5:94:e0:51:61: ac:7f:e2:19:f6:64:74:dd:9d:ab:3e:27:fd:6a:b7:c8:bc:c9: da:e3:8f:e2:88:69:3e:75:ac:14:42:ea:96:1a:68:3b:94:8d: aa:aa:91:ce:c4:9b:a7:3b:89:4f:38:ec:a8:9e:8a:17:54:da: e7:cc:45:a8:64:51:fb:67:e0:a9:a5:ec:25:fa:a3:4e:6d:01: 80:35:40:76:d3:aa:2e:7b:82:9c:1c:a5:a6:7f:8c:b5:52:78: a7:dd:2a:04:85:92:a3:73:a9:96:57:07:a9:82:61:a9:4e:cb: af:8e:80:7f:6a:72:25:df:4e:f6:83:2b:3e:23:b4:d2:af:38: f0:ee:58:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97E0mC7oL+IWpTPk0eBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNDZlZTQ3NTkyNzA0ODA0NWEyZDY2Y2ZiMWM5MjllZGYx YzU3NzkwHhcNMjUxMjA2MTQwMTI3WhcNMjUxMjA3MTQwMTI3WjAzMTEwLwYDVQQD Eyg5ZWRlYmUzYzEyYjgwNDJhYTMyNTYzODc3YTgxYjIwMDBmMDgzOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroLQTwOsOa4MFSXXV13zJrFVoTiQ iZ10H8+ikW5wD253j9Mx6ogcyacyjKwnyeo9+j+B1Ko4J6+ZgstcM0L5cujtPA68 2LIOqCaBj5tNxsDstb2lP9HQ6/lAdLKnXnGFzQuhNHGIeshim0a0eaf2pj2BjMTm ohbJJKp3lvL3O9YwzNV7tYT3EvLfUBWHh6Av7qnkNY2Uya9Okc4ncN/ndsDi9TK2 YhBKrNDqaI0TjSWNUqEu71Z6RFYYZXuc9elyXLthCrTKpLyItq7NEYK1JYOTnnTA VaX3vwrFstBbF4MgiOXl9DidqUKv0Yp2AcaoaFGaqn7UKuN2SU4PLBzauQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7evjwSuAQqoyVjh3qBsgAPCDjkMB8GA1UdIwQY MBaAFP1G7kdZJwSARaLWbPsckp7fHFd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAt MjFmMTVlYWY1ZWUwLzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAtMjFmMTVlYWY1ZWUw LzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIN5wwxz qhtmcuPYQe0vLx3wu0iP8eyIctQVgwIhIweTcXuYY233WupJaa6NSp+s/DD603m4 Ft7zBAQmO1LpyFLguyAE4pokC76tuZqPThDasG6w4AGWK02lA2i6ZaqYCuF8nQx1 fNe9+0EIR105r6/t0lazyFp9W6WU4FFhrH/iGfZkdN2dqz4n/Wq3yLzJ2uOP4ohp PnWsFELqlhpoO5SNqqqRzsSbpzuJTzjsqJ6KF1Ta58xFqGRR+2fgqaXsJfqjTm0B gDVAdtOqLnuCnBylpn+MtVJ4p90qBIWSo3OpllcHqYJhqU7Lr46Af2pyJd9O9oMr PiO00q848O5YgA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:33 2025 by rpki-client