This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json) Hash identifier: tAr4Uzi6WUXGcYAOnnnQGs+RQ8/mo3sX0tyqdk+wios= Subject key identifier: 5C:FC:20:75:F0:8F:17:4A:9F:DD:C9:01:67:2C:8E:87:AA:2A:2E:EB Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743 Certificate serial: 019AF1D1FB7BAFF04BB3D6137D5760CDA61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft Manifest number: 064E Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: AtmKWb05Ww62dydhV6gEpJgWNw/0ghpWs4C5KvXxzwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:7b:af:f0:4b:b3:d6:13:7d:57:60:cd:a6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=5cfc2075f08f174a9fddc901672c8e87aa2a2eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:bd:08:68:a1:51:c6:36:ef:04:dc:d6:f8: f8:4e:b5:49:d9:73:9d:ed:1d:e5:74:b8:9e:d4:14: 74:cc:b7:e2:b9:84:23:17:1d:59:e4:9d:86:9e:0a: 61:f7:a8:63:eb:d9:df:c0:49:21:c2:7b:c8:d8:5a: 7d:ef:57:df:c7:15:7e:95:6c:8d:9b:ec:17:8c:d7: 8c:99:ad:9d:6a:50:1d:06:a3:cf:70:f6:ea:66:9c: ab:3d:54:5e:1a:d6:0a:0b:d3:73:6a:49:52:b5:36: 30:da:71:89:1f:36:9a:13:4f:9f:ef:7e:fc:cc:61: 0d:a9:56:05:e1:d4:7e:14:74:2f:4e:58:0f:fb:fd: 96:08:e4:44:51:dd:20:7c:3d:18:0c:a0:5b:ec:5c: ec:b0:55:59:dc:c3:ae:a6:d4:26:9b:66:3e:06:5b: 81:b8:90:d0:90:15:a4:4d:4f:0a:5e:3e:f1:d0:f7: 2a:1d:ac:38:5f:fd:58:c2:53:bf:b2:d6:58:e8:f6: 83:ef:7c:bd:5f:bb:5d:df:8a:25:a9:1c:fc:f4:c7: bb:2c:d9:ae:17:6d:2c:27:f7:2a:10:ab:f7:1d:a3: 9e:3e:3a:9f:2d:7e:a1:e4:29:61:75:e9:04:d8:e5: 1e:30:fb:7a:2c:2d:e5:c6:f7:2c:fd:6c:d9:a5:c1: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FC:20:75:F0:8F:17:4A:9F:DD:C9:01:67:2C:8E:87:AA:2A:2E:EB X509v3 Authority Key Identifier: keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:ea:34:47:30:70:49:7b:c6:5c:03:75:6b:23:b8:fa:0b: 60:c1:3f:a6:41:83:c6:48:64:e1:3e:e1:27:09:e3:e0:be:56: d6:3c:03:21:c9:2b:f4:3c:39:28:db:10:07:82:9e:43:46:f5: 00:c0:cb:48:12:64:b2:13:ae:c6:dc:d1:a6:cf:d5:c2:8b:8a: f6:57:12:d7:71:4e:21:04:ca:50:7f:8f:23:6a:96:cd:4a:30: 1a:ea:5c:e1:6e:c9:dc:1b:dc:71:2f:a4:37:a6:91:0e:01:66: 21:22:3e:dd:f7:62:a8:1c:04:7e:4e:d9:45:f0:e1:30:1a:1b: 9a:9a:2d:7a:0e:e5:6a:c1:f8:35:0d:d5:93:a0:65:69:9d:15: 92:e3:1e:2b:cd:6f:8f:ea:77:cf:f1:7b:09:e5:8d:bf:75:1d: 46:aa:8a:a1:22:f2:41:d4:78:9d:45:e8:4c:4c:c5:3a:13:50: 54:9f:26:30:7e:9c:f7:59:d9:90:ce:89:93:7d:be:27:9c:33: 6a:cc:ef:8b:df:a9:8a:a6:a0:57:aa:9c:c3:03:e6:19:db:1c: 3d:f3:ab:ba:b2:df:5d:32:34:a7:b2:cd:3c:51:e1:04:cb:30: 76:c6:6e:77:ee:6d:a1:7e:29:06:97:ef:4e:9a:42:69:cd:d6: cf:dc:85:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ft7r/BLs9YTfVdgzaYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjUxYjQ2NDYxNDc5OTk3NjU3N2Q1ZWY3YTgwNzhlYTgw YzE3NDMwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg1Y2ZjMjA3NWYwOGYxNzRhOWZkZGM5MDE2NzJjOGU4N2FhMmEyZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NO9CGihUcY27wTc1vj4TrVJ2XOd 7R3ldLie1BR0zLfiuYQjFx1Z5J2Gngph96hj69nfwEkhwnvI2Fp971ffxxV+lWyN m+wXjNeMma2dalAdBqPPcPbqZpyrPVReGtYKC9NzaklStTYw2nGJHzaaE0+f7378 zGENqVYF4dR+FHQvTlgP+/2WCOREUd0gfD0YDKBb7FzssFVZ3MOuptQmm2Y+BluB uJDQkBWkTU8KXj7x0PcqHaw4X/1YwlO/stZY6PaD73y9X7td34olqRz89Me7LNmu F20sJ/cqEKv3HaOePjqfLX6h5ClhdekE2OUeMPt6LC3lxvcs/WzZpcED8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz8IHXwjxdKn93JAWcsjoeqKi7rMB8GA1UdIwQY MBaAFIv1G0ZGFHmZdld9XveoB46oDBdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMt ZDBkMzEzNTIwNDMxLzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMtZDBkMzEzNTIwNDMx LzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQLqNEcw cEl7xlwDdWsjuPoLYME/pkGDxkhk4T7hJwnj4L5W1jwDIckr9Dw5KNsQB4KeQ0b1 AMDLSBJkshOuxtzRps/VwouK9lcS13FOIQTKUH+PI2qWzUowGupc4W7J3BvccS+k N6aRDgFmISI+3fdiqBwEfk7ZRfDhMBobmpoteg7lasH4NQ3Vk6BlaZ0VkuMeK81v j+p3z/F7CeWNv3UdRqqKoSLyQdR4nUXoTEzFOhNQVJ8mMH6c91nZkM6Jk32+J5wz aszvi9+piqagV6qcwwPmGdscPfOrurLfXTI0p7LNPFHhBMswdsZud+5toX4pBpfv TppCac3Wz9yFCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:01 2025 by rpki-client