This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft File: uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json) Hash identifier: kzQMQeQDfUfMTgpQMc6y26aBPrADXrrKL+P4F5JlZpQ= Subject key identifier: AC:62:9D:EA:DB:99:64:0C:47:A8:CB:8B:F9:3B:88:44:02:F4:50:5D Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Certificate serial: 019B30E9382C1FB437289B76AA437316CA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft Manifest number: 1552 Signing time: Thu 18 Dec 2025 10:02:29 +0000 Manifest this update: Thu 18 Dec 2025 10:02:29 +0000 Manifest next update: Fri 19 Dec 2025 10:02:29 +0000 Files and hashes: 1: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: cEkwaTtmOgxKd4KHCtoeFHM66FP/7JeH1bpm/QKoxeI=) 2: um_x7j6zVmhOP4mF-URUgPyGQ3E.roa (hash: wUkyiUgLCwXSzxn/Wm+Q/r/1YAgpYiWS11qqDTfEJoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:38:2c:1f:b4:37:28:9b:76:aa:43:73:16:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Validity Not Before: Dec 18 10:02:29 2025 GMT Not After : Dec 19 10:02:29 2025 GMT Subject: CN=ac629deadb99640c47a8cb8bf93b884402f4505d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:d3:cc:a3:a1:5c:ed:16:1f:a3:6b:b3:43: 7b:9d:6d:59:80:4e:50:20:ca:1e:60:24:bf:f5:10: f3:1b:21:9c:23:9b:49:87:e7:6f:84:26:55:4c:b6: 41:0b:24:79:38:34:01:f7:87:05:78:33:6c:91:be: 25:3b:3b:c1:75:71:51:67:6e:27:97:d7:54:9a:8c: 8a:e7:d6:01:2f:aa:4e:9a:80:0d:af:8f:31:88:5d: 2b:9b:f3:9e:44:b8:be:5b:8b:86:fc:c8:6f:81:53: e8:06:f5:f9:50:b6:de:da:15:41:7b:77:c7:8c:78: 70:cf:df:7c:78:a7:26:2b:0f:d0:9f:ab:be:bb:0c: fc:3c:d3:0b:6b:a0:cb:24:b0:b7:81:b7:76:0f:47: 02:ae:17:67:3d:2e:ee:68:b4:85:71:96:f0:c2:ae: bb:f2:12:32:bc:3a:49:4e:ba:f1:51:f4:5f:95:e4: a7:a5:15:60:f1:08:77:ce:e3:02:5b:76:ed:3d:99: 3d:2d:5c:ff:e7:31:c3:fc:7f:7c:47:75:d6:8f:8e: b7:77:41:c8:0c:9a:2f:d0:d2:3f:98:1f:dd:5d:e0: 1b:d7:06:9c:ba:87:e3:c0:8a:67:40:ab:b6:14:10: 84:09:c5:2e:32:88:23:84:7e:9d:e5:23:a8:2e:0f: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:62:9D:EA:DB:99:64:0C:47:A8:CB:8B:F9:3B:88:44:02:F4:50:5D X509v3 Authority Key Identifier: keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a3:ea:ab:b7:2c:4e:46:38:52:a2:e2:83:a0:4d:f8:24:f4: c1:ba:39:3f:5c:0a:76:de:2c:3c:90:5a:ee:01:4a:80:58:62: bc:ff:24:36:1e:9b:3c:1b:9e:99:4f:a5:93:3b:15:18:18:dc: 04:79:de:3f:0a:3f:b3:f1:b0:34:75:5c:89:f7:6d:90:0a:32: 6e:c4:28:04:1f:65:66:24:bb:13:6b:ca:23:2f:9c:b7:44:55: 6a:8c:a0:3f:9c:c9:64:d2:3a:eb:04:28:96:28:2f:b9:ff:72: 28:91:16:f1:0c:33:0e:94:73:84:ee:87:80:bb:50:0c:95:c5: 49:3b:b2:33:53:07:01:81:df:26:31:f1:c5:0e:e0:55:f3:17: aa:8b:9b:bf:51:08:7f:4e:ff:f5:cf:9c:2e:dc:a0:a8:28:7c: 99:90:25:8a:e3:9c:dc:5d:58:e7:ba:65:ac:dd:86:5a:fc:40: 7c:ba:97:96:4a:b7:be:b1:ea:f7:1c:c3:00:2d:9d:cc:63:73: 5e:ff:c6:f8:3b:b7:16:e3:34:27:c6:88:9a:d2:05:ab:27:59: fe:6c:e1:e5:05:5b:a5:ad:8b:ca:34:d5:be:e0:a0:74:e1:c2: 8f:10:9f:37:c5:71:50:bd:1a:6d:92:a0:1d:b7:a2:56:80:68: f6:d4:07:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6TgsH7Q3KJt2qkNzFsoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWIwM2UyMjg3NWJiMDcwYjFiN2M1OGVhZGEyZTRiYjFh YWJlN2YwHhcNMjUxMjE4MTAwMjI5WhcNMjUxMjE5MTAwMjI5WjAzMTEwLwYDVQQD EyhhYzYyOWRlYWRiOTk2NDBjNDdhOGNiOGJmOTNiODg0NDAyZjQ1MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsETTzKOhXO0WH6Nrs0N7nW1ZgE5Q IMoeYCS/9RDzGyGcI5tJh+dvhCZVTLZBCyR5ODQB94cFeDNskb4lOzvBdXFRZ24n l9dUmoyK59YBL6pOmoANr48xiF0rm/OeRLi+W4uG/MhvgVPoBvX5ULbe2hVBe3fH jHhwz998eKcmKw/Qn6u+uwz8PNMLa6DLJLC3gbd2D0cCrhdnPS7uaLSFcZbwwq67 8hIyvDpJTrrxUfRfleSnpRVg8Qh3zuMCW3btPZk9LVz/5zHD/H98R3XWj463d0HI DJov0NI/mB/dXeAb1wacuofjwIpnQKu2FBCECcUuMogjhH6d5SOoLg+8MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxinerbmWQMR6jLi/k7iEQC9FBdMB8GA1UdIwQY MBaAFLgbA+IodbsHCxt8WOraLkuxqr5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUt YWQyNTY2NDMwNTJiLzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUtYWQyNTY2NDMwNTJi LzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6Pqq7cs TkY4UqLig6BN+CT0wbo5P1wKdt4sPJBa7gFKgFhivP8kNh6bPBuemU+lkzsVGBjc BHnePwo/s/GwNHVcifdtkAoybsQoBB9lZiS7E2vKIy+ct0RVaoygP5zJZNI66wQo ligvuf9yKJEW8QwzDpRzhO6HgLtQDJXFSTuyM1MHAYHfJjHxxQ7gVfMXqoubv1EI f07/9c+cLtygqCh8mZAliuOc3F1Y57plrN2GWvxAfLqXlkq3vrHq9xzDAC2dzGNz Xv/G+Du3FuM0J8aImtIFqydZ/mzh5QVbpa2LyjTVvuCgdOHCjxCfN8VxUL0abZKg HbeiVoBo9tQHqg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:30 2025 by rpki-client