This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json) Hash identifier: oyd2eMvBl3wWCOREaqdL3yNZLI2cbiHUHfCyeuTJdgw= Subject key identifier: 80:A5:43:36:7E:1D:30:82:26:B6:71:8E:C9:1A:28:21:24:47:34:A1 Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a Certificate serial: 019AF540BADFC22802707CE860F7ED0C5871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft Manifest number: 129E Signing time: Sat 06 Dec 2025 20:00:51 +0000 Manifest this update: Sat 06 Dec 2025 20:00:51 +0000 Manifest next update: Sun 07 Dec 2025 20:00:51 +0000 Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=) 2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: 18lN/iNyusMHTgOKvtnAe6P/96gQqyNFTE1n4MSOvZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ba:df:c2:28:02:70:7c:e8:60:f7:ed:0c:58:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a Validity Not Before: Dec 6 20:00:51 2025 GMT Not After : Dec 7 20:00:51 2025 GMT Subject: CN=80a543367e1d308226b6718ec91a2821244734a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:74:f4:00:3a:0e:cd:ab:ef:9f:5b:14:76: 26:9c:c4:19:ad:ad:49:83:db:ff:2a:2d:46:b2:41: 60:83:a4:0d:9e:2b:ff:62:30:f0:f4:3b:14:e5:91: 2f:96:7c:90:d6:27:19:79:bb:7d:df:0b:8b:30:5a: 0b:70:81:6c:ec:fc:b8:54:67:fc:5d:3f:d8:37:fa: 62:6b:77:67:1a:c3:30:0f:d2:9f:40:e7:6c:6e:2b: ec:a7:99:55:b9:c6:21:c4:5f:2a:07:94:11:b0:0f: 01:27:9e:dd:b4:c6:00:cb:f5:7f:ff:74:e1:d2:b1: 88:62:a8:76:4b:0e:0c:f2:f2:c4:78:aa:44:3b:d8: d0:e2:99:7a:1f:3e:a6:18:f6:30:bf:27:97:d3:ff: e1:26:38:ef:f9:5e:38:f4:91:64:1e:08:8c:9c:97: 6c:a0:2c:bb:c1:9b:b9:40:48:b0:41:f6:ae:a1:ec: d5:fa:e1:2a:40:3c:09:22:63:49:90:01:5c:08:a2: 8b:c8:88:37:23:16:f2:92:12:26:de:71:5b:07:a9: b8:59:3c:d8:e3:d9:b1:4a:1e:e0:12:df:08:ec:41: 94:3c:e9:12:63:d0:38:7f:91:1f:7a:21:59:eb:5f: e8:9b:72:3b:d6:e4:ad:47:3a:fc:19:8f:1b:44:76: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A5:43:36:7E:1D:30:82:26:B6:71:8E:C9:1A:28:21:24:47:34:A1 X509v3 Authority Key Identifier: keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:b1:a8:eb:68:b0:9f:dd:89:38:d4:bf:c1:d7:f6:5b:ea: 01:57:c0:a5:81:ee:c6:c5:e8:45:94:7f:20:13:b4:2d:58:ab: e0:9c:cb:3d:83:85:c1:61:9e:e3:22:61:3c:22:dd:fa:e1:c7: 9c:d8:ed:5a:51:98:3c:bb:81:8c:3f:27:59:aa:05:24:01:a4: e5:1d:fb:8e:a6:97:33:d8:b6:70:e2:83:2c:88:87:8c:ee:96: f4:fd:d9:0c:c8:4e:35:32:c9:d6:ce:72:32:86:ff:e3:fa:18: 89:59:c5:aa:d9:43:f4:2a:28:f6:b9:6e:82:dc:8f:89:86:24: 5f:3f:54:ae:35:99:26:5a:51:71:e6:fd:8b:6c:6b:28:da:dc: 22:a6:b9:6c:af:40:a4:6b:9f:f6:aa:ee:ff:b9:28:36:6f:1b: 03:ef:63:c8:32:3c:3c:bf:79:d7:d2:60:46:fc:2d:22:30:e7: 9a:c2:b4:cc:1f:a4:9a:d8:8f:5e:b4:d7:75:0f:18:d2:59:4d: b7:ad:18:4d:c3:73:5b:c6:6e:ad:8c:c3:eb:3c:a4:aa:11:e3: a3:3c:fb:e6:00:17:e9:36:e7:b4:ea:a0:38:a2:51:80:5f:d3: 5b:44:70:a3:60:4b:91:cc:a8:99:14:b9:59:9e:b2:14:95:dd: f7:d1:1c:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLrfwigCcHzoYPftDFhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjVhYTlmZWViMDBhNTEyNzQ4N2YzNDM4NDA3N2FlNzk3 MGY4MWEwHhcNMjUxMjA2MjAwMDUxWhcNMjUxMjA3MjAwMDUxWjAzMTEwLwYDVQQD Eyg4MGE1NDMzNjdlMWQzMDgyMjZiNjcxOGVjOTFhMjgyMTI0NDczNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGt09AA6Ds2r759bFHYmnMQZra1J g9v/Ki1GskFgg6QNniv/YjDw9DsU5ZEvlnyQ1icZebt93wuLMFoLcIFs7Py4VGf8 XT/YN/pia3dnGsMwD9KfQOdsbivsp5lVucYhxF8qB5QRsA8BJ57dtMYAy/V//3Th 0rGIYqh2Sw4M8vLEeKpEO9jQ4pl6Hz6mGPYwvyeX0//hJjjv+V449JFkHgiMnJds oCy7wZu5QEiwQfauoezV+uEqQDwJImNJkAFcCKKLyIg3IxbykhIm3nFbB6m4WTzY 49mxSh7gEt8I7EGUPOkSY9A4f5EfeiFZ61/om3I71uStRzr8GY8bRHbOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIClQzZ+HTCCJrZxjskaKCEkRzShMB8GA1UdIwQY MBaAFLm1qp/usApRJ0h/NDhAd655cPgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMt ODhhMGQ1ZmRjZjliLzEvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMtODhhMGQ1ZmRjZjli LzEvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjOxqOto sJ/diTjUv8HX9lvqAVfApYHuxsXoRZR/IBO0LVir4JzLPYOFwWGe4yJhPCLd+uHH nNjtWlGYPLuBjD8nWaoFJAGk5R37jqaXM9i2cOKDLIiHjO6W9P3ZDMhONTLJ1s5y Mob/4/oYiVnFqtlD9Coo9rlugtyPiYYkXz9UrjWZJlpRceb9i2xrKNrcIqa5bK9A pGuf9qru/7koNm8bA+9jyDI8PL9519JgRvwtIjDnmsK0zB+kmtiPXrTXdQ8Y0llN t60YTcNzW8ZurYzD6zykqhHjozz75gAX6TbntOqgOKJRgF/TW0Rwo2BLkcyomRS5 WZ6yFJXd99EcSA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:50 2025 by rpki-client