This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json) Hash identifier: 5rV0s7fh7IikMY/t/EF488Lo5sIiFHgYofSy0a6M4cc= Subject key identifier: FD:5F:B9:A1:69:A6:5C:A6:75:93:85:C5:A1:F8:C5:4C:93:7D:0E:E5 Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019AF276F163A3BF2A00AE88634F93270300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft Manifest number: 0931 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=) 2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=) 3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=) 4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=) 5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=) 6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: bxbb3YK2zmKIR1b027ybhjXky/2J7XUQO8FI4swe7yA=) 7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:63:a3:bf:2a:00:ae:88:63:4f:93:27:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=fd5fb9a169a65ca6759385c5a1f8c54c937d0ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:52:07:22:9c:a9:a0:13:46:fe:cf:d1:3f: 36:00:9e:18:df:d7:0f:8b:bb:57:2a:9f:69:4f:91: 70:43:19:ad:4c:cd:04:b4:f7:70:cc:ac:23:8e:4b: dd:55:33:ca:c0:03:c1:de:d1:4c:84:3a:07:00:f1: 37:6a:fd:60:97:ff:51:e2:4c:cc:a0:9b:8c:de:02: 0e:ea:53:6c:33:53:fe:51:92:ca:3d:bf:0d:00:9b: ea:24:8f:0a:3b:66:d8:50:39:a6:c0:e3:d0:f6:65: c8:d5:c4:1a:94:99:c1:f2:da:19:bd:3c:cb:83:d4: 2f:46:94:5b:f0:1a:bf:40:38:81:ef:a0:0d:d7:4f: 40:c3:52:1c:b5:91:51:f4:fe:4f:89:fc:69:0b:73: 6f:a1:05:5b:e0:cb:25:76:fa:e6:76:92:c0:0c:46: 3f:f5:3b:2b:98:4f:80:3d:eb:a9:ee:65:5d:17:84: 00:3b:a8:2d:e4:f5:69:cb:6b:61:74:c9:e1:43:2f: a5:6e:d4:92:6b:9f:b4:e7:27:75:a0:83:c6:d5:f3: 38:d1:66:1d:2e:df:5e:ec:ec:e7:b9:26:4b:3f:32: bd:e0:30:4f:c6:e8:d7:40:58:56:a9:3b:68:55:58: 63:9f:29:2f:e6:ff:81:18:47:46:8f:57:cf:da:8b: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:B9:A1:69:A6:5C:A6:75:93:85:C5:A1:F8:C5:4C:93:7D:0E:E5 X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:85:a2:b3:9e:82:54:5a:76:88:76:96:65:26:13:47:09:a6: a5:55:58:28:28:a5:c8:8d:1d:be:86:c0:c2:35:61:7c:88:2c: 60:7a:82:c6:03:4b:94:c4:bd:36:a6:60:f1:7e:72:d9:b4:94: e4:9e:e3:a2:6e:de:24:e8:77:67:ab:27:cd:ae:e2:29:75:56: b9:b7:26:6d:52:1d:4d:b1:59:63:94:e3:5f:b9:d1:91:92:a7: 4f:29:86:b1:90:d0:a8:63:0d:60:cf:56:62:69:54:38:1e:85: 04:b9:91:c2:bc:f5:48:d6:18:a9:66:7f:95:bb:38:1b:89:09: 51:b8:8c:c2:ff:49:ac:a0:16:d2:78:83:f5:39:9f:55:31:4f: 4b:c5:51:e1:be:3e:9d:d9:65:56:40:6a:6d:b0:f2:3d:4d:22: 02:82:6c:35:f7:50:ce:64:96:69:5b:c6:a9:8a:cb:d8:3c:ec: 19:3a:2a:7b:c5:e6:e0:17:43:be:71:68:ff:93:35:d1:b7:a1: d4:4e:ee:26:63:82:a9:62:f0:77:b1:42:c3:7a:03:f7:a4:6f: 46:31:fb:99:a6:c9:0c:fa:c5:76:af:94:06:ac:5a:73:68:27: 74:70:dd:64:07:b6:c0:d8:38:9e:33:76:60:6d:0c:da:af:33: 52:b7:22:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvFjo78qAK6IY0+TJwMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhmZDVmYjlhMTY5YTY1Y2E2NzU5Mzg1YzVhMWY4YzU0YzkzN2QwZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1dSByKcqaATRv7P0T82AJ4Y39cP i7tXKp9pT5FwQxmtTM0EtPdwzKwjjkvdVTPKwAPB3tFMhDoHAPE3av1gl/9R4kzM oJuM3gIO6lNsM1P+UZLKPb8NAJvqJI8KO2bYUDmmwOPQ9mXI1cQalJnB8toZvTzL g9QvRpRb8Bq/QDiB76AN109Aw1IctZFR9P5PifxpC3NvoQVb4MsldvrmdpLADEY/ 9TsrmE+APeup7mVdF4QAO6gt5PVpy2thdMnhQy+lbtSSa5+05yd1oIPG1fM40WYd Lt9e7OznuSZLPzK94DBPxujXQFhWqTtoVVhjnykv5v+BGEdGj1fP2oss/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1fuaFpplymdZOFxaH4xUyTfQ7lMB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYWis56C VFp2iHaWZSYTRwmmpVVYKCilyI0dvobAwjVhfIgsYHqCxgNLlMS9NqZg8X5y2bSU 5J7jom7eJOh3Z6snza7iKXVWubcmbVIdTbFZY5TjX7nRkZKnTymGsZDQqGMNYM9W YmlUOB6FBLmRwrz1SNYYqWZ/lbs4G4kJUbiMwv9JrKAW0niD9TmfVTFPS8VR4b4+ ndllVkBqbbDyPU0iAoJsNfdQzmSWaVvGqYrL2DzsGToqe8Xm4BdDvnFo/5M10beh 1E7uJmOCqWLwd7FCw3oD96RvRjH7mabJDPrFdq+UBqxac2gndHDdZAe2wNg4njN2 YG0M2q8zUrciyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:58 2025 by rpki-client