This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json) Hash identifier: HPXhyI7Z+VTsepUCEl03cR3coZPs7Nbxd7Q0UAI3AjM= Subject key identifier: E1:26:87:61:09:74:26:F3:B0:02:34:52:71:4B:20:5E:F7:B0:D9:5F Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743 Certificate serial: 019B3D233EE98467AAE3B8A975C5BD0C89F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft Manifest number: 0675 Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: rOQ6gbBFaVsEtZhEw1KUeIfAYrm92LGcsCwNHwD1OMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3e:e9:84:67:aa:e3:b8:a9:75:c5:bd:0c:89:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743 Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=e1268761097426f3b0023452714b205ef7b0d95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:de:47:3c:7f:8f:9e:61:a7:8d:f3:29:6e: fa:79:c8:fd:03:37:b9:4d:a9:d3:36:05:02:8c:75: a1:20:88:36:21:b1:1f:11:48:75:74:27:bb:dd:80: c9:67:50:d8:5a:60:bb:83:09:4e:c0:a6:10:ae:20: ea:14:07:a8:40:a1:15:4b:69:d8:04:00:a9:38:ee: 98:ae:cd:4b:df:97:1f:50:f0:de:0d:a0:c2:a7:8b: d1:7d:96:45:47:5c:ed:64:ca:1d:5a:d2:d5:ea:18: f9:d1:c8:f6:0d:37:1b:0d:0e:4c:6d:dd:53:3e:02: 49:cb:51:b9:4d:8a:5d:a9:f8:a3:17:76:40:e4:ae: 26:e7:6d:8d:b8:8d:e0:ae:1f:88:9c:c4:81:09:b0: 81:92:c1:3d:c1:05:5c:17:a5:81:33:af:2c:07:6f: 24:3d:a3:8f:19:0c:60:74:fa:1c:3a:24:11:4a:73: fd:b8:95:8e:a7:3e:d3:88:51:f8:8a:42:21:28:c0: 3a:c9:95:f2:22:df:e0:5c:35:bc:e5:93:ee:67:74: f4:71:f3:99:c3:2c:2a:c2:e8:e5:6b:72:17:38:57: 4f:b6:b3:3a:d5:fe:e3:39:ec:4a:74:4e:cc:bb:1a: 18:c4:d3:21:e3:ab:63:ce:18:3d:95:d8:3b:ec:13: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:26:87:61:09:74:26:F3:B0:02:34:52:71:4B:20:5E:F7:B0:D9:5F X509v3 Authority Key Identifier: keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:df:7d:f3:5f:12:ff:d6:8f:ba:f1:75:43:10:ee:28:f2: 7c:5a:86:52:c5:55:a6:14:62:80:3f:67:8c:53:3f:af:1e:f6: 8b:d2:25:45:19:89:04:5c:7e:66:6a:46:36:2f:ea:03:57:b2: 38:05:fc:14:0c:fe:84:ae:80:08:08:35:4f:b5:84:5d:b0:2a: 4b:20:e3:a2:be:c9:c7:7e:5f:20:cd:19:a6:ba:f1:0d:d2:99: 11:14:a0:1f:6d:a1:4b:9b:a2:ec:19:97:ab:ee:6e:fa:6a:c8: ae:f8:ca:cd:fb:5e:13:43:4f:19:d2:61:d7:df:17:ad:1b:c9: 30:a5:a6:08:48:f0:77:c4:b8:c9:93:8b:e1:6f:40:46:14:5c: 08:4e:64:04:a9:6b:58:ac:96:3b:7f:4f:a0:f2:6b:ea:c8:96: 42:0c:cf:c0:82:3d:d6:4d:5e:36:86:75:17:07:df:61:ab:a5: 2a:c8:1a:6e:51:18:d2:cc:e0:c2:08:2b:f9:5d:21:15:4c:2c: 92:26:df:fa:b1:f1:d1:f4:6b:27:a2:38:be:8b:8e:a4:a7:2b: e4:11:23:ec:4a:73:6f:19:e6:61:f3:5e:3a:a5:ea:43:06:17: 09:03:79:9c:66:f2:02:f3:74:fd:c4:88:1e:99:e5:9f:ed:52: 0d:0a:eb:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz7phGeq47ipdcW9DIn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjUxYjQ2NDYxNDc5OTk3NjU3N2Q1ZWY3YTgwNzhlYTgw YzE3NDMwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD EyhlMTI2ODc2MTA5NzQyNmYzYjAwMjM0NTI3MTRiMjA1ZWY3YjBkOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rbeRzx/j55hp43zKW76ecj9Aze5 TanTNgUCjHWhIIg2IbEfEUh1dCe73YDJZ1DYWmC7gwlOwKYQriDqFAeoQKEVS2nY BACpOO6Yrs1L35cfUPDeDaDCp4vRfZZFR1ztZModWtLV6hj50cj2DTcbDQ5Mbd1T PgJJy1G5TYpdqfijF3ZA5K4m522NuI3grh+InMSBCbCBksE9wQVcF6WBM68sB28k PaOPGQxgdPocOiQRSnP9uJWOpz7TiFH4ikIhKMA6yZXyIt/gXDW85ZPuZ3T0cfOZ wywqwujla3IXOFdPtrM61f7jOexKdE7MuxoYxNMh46tjzhg9ldg77BO6MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEmh2EJdCbzsAI0UnFLIF73sNlfMB8GA1UdIwQY MBaAFIv1G0ZGFHmZdld9XveoB46oDBdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMt ZDBkMzEzNTIwNDMxLzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMtZDBkMzEzNTIwNDMx LzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7DfffNf Ev/Wj7rxdUMQ7ijyfFqGUsVVphRigD9njFM/rx72i9IlRRmJBFx+ZmpGNi/qA1ey OAX8FAz+hK6ACAg1T7WEXbAqSyDjor7Jx35fIM0ZprrxDdKZERSgH22hS5ui7BmX q+5u+mrIrvjKzfteE0NPGdJh198XrRvJMKWmCEjwd8S4yZOL4W9ARhRcCE5kBKlr WKyWO39PoPJr6siWQgzPwII91k1eNoZ1FwffYaulKsgablEY0szgwggr+V0hFUws kibf+rHx0fRrJ6I4vouOpKcr5BEj7EpzbxnmYfNeOqXqQwYXCQN5nGbyAvN0/cSI Hpnln+1SDQrrDw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:42 2025 by rpki-client