This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json) Hash identifier: sID4niX7sAT4oJFClQhXPKdDJJyfy9Dxs3Lo/55oZAk= Subject key identifier: C7:D1:D4:6C:EA:17:C6:7F:25:B7:C5:DA:F4:D0:84:EE:70:7C:71:59 Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Certificate serial: 019AF577D81852D921A41DDBF7E175878357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft Manifest number: 032E Signing time: Sat 06 Dec 2025 21:01:03 +0000 Manifest this update: Sat 06 Dec 2025 21:01:03 +0000 Manifest next update: Sun 07 Dec 2025 21:01:03 +0000 Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=) 2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: 1Jdck2qQVOit2iaCHd+SC7C6QB/oz20vabxRTSDHfWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d8:18:52:d9:21:a4:1d:db:f7:e1:75:87:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Validity Not Before: Dec 6 21:01:03 2025 GMT Not After : Dec 7 21:01:03 2025 GMT Subject: CN=c7d1d46cea17c67f25b7c5daf4d084ee707c7159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:98:17:4a:af:2d:a7:8e:c2:5e:4f:7d:a7: be:8b:5c:51:a3:22:13:57:f7:91:28:0f:af:34:63: 95:d3:28:ec:31:38:71:d5:3b:eb:b1:c7:4c:23:72: e3:f7:c4:af:f5:aa:b6:2c:a2:ad:64:69:6e:8c:84: 9c:ae:c8:a5:f6:4c:86:f9:4a:3c:f9:fa:68:80:5c: 5c:27:ba:cf:ab:68:ec:bb:f2:9f:a2:3b:91:0c:ff: 0e:55:a8:ad:09:a9:f6:d9:83:58:13:3b:d2:64:70: f0:9e:cc:06:d1:84:b3:47:2a:f6:48:ea:6b:17:7a: 5a:51:3c:f9:c9:cf:74:6b:39:7f:c6:82:ce:e1:83: d0:80:f9:f6:54:35:a0:b9:7f:2a:3f:f1:f9:e2:b2: d6:ca:d4:24:7f:99:52:66:27:9b:7a:87:7c:94:17: 67:b7:3d:d7:49:47:42:1a:0b:61:d0:97:e4:59:82: e0:0d:be:1a:4c:47:69:de:13:b2:3f:b0:d5:7b:53: f1:db:64:64:58:b5:5c:eb:32:26:40:c3:66:fa:1c: 43:72:c7:c0:94:1c:6c:47:79:20:8b:82:00:e7:01: d7:06:6e:e2:a1:11:96:0e:39:10:ae:62:c4:be:6b: 17:fb:54:18:db:9c:d4:1c:a4:1b:13:d9:dd:0d:db: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:D4:6C:EA:17:C6:7F:25:B7:C5:DA:F4:D0:84:EE:70:7C:71:59 X509v3 Authority Key Identifier: keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:00:09:1c:70:bd:59:09:ea:e5:03:9f:fb:63:8f:79:d3:73: d4:dd:bb:b6:ae:7f:5b:aa:5e:96:5c:c0:e4:5e:4e:28:fc:ef: 5b:e7:15:59:5c:d4:69:5d:dc:b0:5b:db:8f:38:97:ed:da:6d: 91:4d:5e:43:3e:f8:c0:fe:9e:78:14:0f:09:c4:71:45:74:08: 22:5c:a1:a0:a9:3d:92:f2:63:74:2e:83:c6:7f:0a:ac:64:08: e3:ec:28:0e:7d:81:84:5d:d1:88:4d:4d:a0:c0:a6:1f:6d:20: 69:fe:b2:f5:f3:94:9e:21:9d:9b:81:86:85:fd:34:4f:39:9f: b6:61:58:b7:c6:6c:1c:0f:04:16:17:b0:80:4c:aa:57:e1:18: 80:fd:ed:9d:25:b8:1f:70:5b:45:80:d7:a7:13:be:7c:14:c4: 93:39:d8:fb:99:5b:3a:3b:65:12:92:3e:b5:4f:64:83:34:0b: 85:5b:69:c4:18:6c:7a:ba:6d:9c:b2:34:13:8b:d6:55:eb:8b: 88:93:fe:45:5d:87:02:1b:52:78:51:9a:80:f9:a3:ed:4e:61: 6f:94:9f:d4:2f:4c:e7:f5:9a:01:fe:76:38:a9:44:96:90:18: 43:1b:d4:9d:a9:9c:d3:27:a2:7e:f5:8a:84:06:ee:d0:a5:c5: 67:45:85:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9gYUtkhpB3b9+F1h4NXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy ODI1ZTcwHhcNMjUxMjA2MjEwMTAzWhcNMjUxMjA3MjEwMTAzWjAzMTEwLwYDVQQD EyhjN2QxZDQ2Y2VhMTdjNjdmMjViN2M1ZGFmNGQwODRlZTcwN2M3MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnouYF0qvLaeOwl5Pfae+i1xRoyIT V/eRKA+vNGOV0yjsMThx1TvrscdMI3Lj98Sv9aq2LKKtZGlujIScrsil9kyG+Uo8 +fpogFxcJ7rPq2jsu/KfojuRDP8OVaitCan22YNYEzvSZHDwnswG0YSzRyr2SOpr F3paUTz5yc90azl/xoLO4YPQgPn2VDWguX8qP/H54rLWytQkf5lSZiebeod8lBdn tz3XSUdCGgth0JfkWYLgDb4aTEdp3hOyP7DVe1Px22RkWLVc6zImQMNm+hxDcsfA lBxsR3kgi4IA5wHXBm7ioRGWDjkQrmLEvmsX+1QY25zUHKQbE9ndDdt0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfR1GzqF8Z/JbfF2vTQhO5wfHFZMB8GA1UdIwQY MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQAJHHC9 WQnq5QOf+2OPedNz1N27tq5/W6pellzA5F5OKPzvW+cVWVzUaV3csFvbjziX7dpt kU1eQz74wP6eeBQPCcRxRXQIIlyhoKk9kvJjdC6Dxn8KrGQI4+woDn2BhF3RiE1N oMCmH20gaf6y9fOUniGdm4GGhf00TzmftmFYt8ZsHA8EFhewgEyqV+EYgP3tnSW4 H3BbRYDXpxO+fBTEkznY+5lbOjtlEpI+tU9kgzQLhVtpxBhserptnLI0E4vWVeuL iJP+RV2HAhtSeFGagPmj7U5hb5Sf1C9M5/WaAf52OKlElpAYQxvUnamc0yeifvWK hAbu0KXFZ0WF3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:14 2025 by rpki-client