This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json) Hash identifier: a26ZFbqb4P7C4S+UsNs8Y1yRxRj1fvICCQUSr5L9W08= Subject key identifier: 08:F8:AF:EB:0A:63:A0:2D:8A:89:05:42:2F:64:BC:46:2A:10:E3:C8 Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B3F483E6848A88EDB38AD759F6E15BBD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:00:57 +0000 Manifest this update: Sun 21 Dec 2025 05:00:57 +0000 Manifest next update: Mon 22 Dec 2025 05:00:57 +0000 Files and hashes: 1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=) 2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=) 3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=) 4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=) 5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=) 6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=) 7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: 1chOWw1KZNUTjjdsKRWep7LPE5ziddT8g+5dNqc/WKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:3e:68:48:a8:8e:db:38:ad:75:9f:6e:15:bb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Dec 21 05:00:57 2025 GMT Not After : Dec 22 05:00:57 2025 GMT Subject: CN=08f8afeb0a63a02d8a8905422f64bc462a10e3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:4d:44:a0:f3:49:55:ee:ba:d1:b1:fc:9f: 43:0d:cf:51:2a:d9:cc:83:4c:dd:7d:29:e6:f9:c6: 80:a8:8d:9f:63:fc:56:1d:84:3d:9a:76:de:df:c9: 5f:02:90:f9:25:6a:f9:d5:7f:e9:87:83:59:66:cc: f7:fa:97:53:c3:97:7b:8c:de:e8:c5:2b:60:db:ea: 16:19:c7:12:61:ad:f7:aa:28:e9:aa:64:aa:5f:c0: 43:f8:a4:4c:92:58:6e:87:44:40:06:2c:a1:d4:7e: b9:e5:52:7f:4a:0f:84:37:21:8d:33:28:39:c9:ba: 36:9d:1f:7b:fd:92:3a:dd:32:f1:d3:12:9c:47:20: a7:3d:aa:31:34:58:11:40:e8:f7:78:1c:be:a9:47: 7a:2f:db:7d:75:48:41:74:ae:ec:55:75:f3:19:60: 18:6f:7b:43:ff:73:98:f4:11:3c:3d:ac:26:30:86: 58:07:41:49:c0:29:eb:ed:62:7f:73:99:a3:1e:bc: ee:c9:29:92:4a:c8:fc:dd:7a:33:42:6a:e8:e9:28: 81:1f:26:98:e4:f4:98:c8:70:de:b9:40:1e:b4:ba: d1:d1:1c:69:e7:21:46:69:70:33:ea:c5:55:96:61: c2:e4:3d:60:9b:5f:39:39:95:95:22:ad:43:3a:19: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:AF:EB:0A:63:A0:2D:8A:89:05:42:2F:64:BC:46:2A:10:E3:C8 X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f2:74:17:03:b5:27:7f:d9:72:7c:2a:2f:ab:79:19:10:13: 8b:b0:38:f1:d7:97:20:63:5b:6e:be:db:71:d8:b1:a5:35:d7: 31:ea:43:b9:fe:17:dc:a7:97:ff:74:66:bf:ed:82:b4:bc:3b: d9:79:26:f7:63:0a:4a:cc:05:c7:9a:eb:e4:8f:1b:7e:25:5f: ce:4e:d5:03:33:67:62:ed:b4:ab:fd:82:8b:5e:47:4a:42:78: 40:cb:e5:27:9f:ac:dd:d0:6a:34:29:29:f6:44:5f:cf:98:c5: 3e:41:7f:89:0c:dd:c0:8a:d6:20:ee:fe:23:91:80:23:e3:77: 5a:44:11:3c:60:4a:6c:ee:cf:83:36:af:51:42:a1:e4:43:dc: 90:6f:ca:0f:3f:8c:05:d8:72:5b:38:fe:59:08:90:52:44:78: 13:e1:bf:35:3b:02:7e:bc:d7:97:ae:56:0d:99:36:6d:1b:3e: 3b:aa:49:c9:5d:c2:a9:40:fa:af:bd:37:c8:fa:af:19:d4:63: 0e:70:89:c2:03:d8:80:e1:f5:f0:0a:38:55:0c:13:7a:c8:1e: 93:45:04:68:e3:52:e6:d7:07:33:5d:30:7d:59:64:6a:e9:b9: 25:79:51:50:aa:fb:0f:f5:4f:10:30:0c:20:e9:67:90:41:69: 56:c9:9c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SD5oSKiO2zitdZ9uFbvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjUxMjIxMDUwMDU3WhcNMjUxMjIyMDUwMDU3WjAzMTEwLwYDVQQD EygwOGY4YWZlYjBhNjNhMDJkOGE4OTA1NDIyZjY0YmM0NjJhMTBlM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoxNRKDzSVXuutGx/J9DDc9RKtnM g0zdfSnm+caAqI2fY/xWHYQ9mnbe38lfApD5JWr51X/ph4NZZsz3+pdTw5d7jN7o xStg2+oWGccSYa33qijpqmSqX8BD+KRMklhuh0RABiyh1H655VJ/Sg+ENyGNMyg5 ybo2nR97/ZI63TLx0xKcRyCnPaoxNFgRQOj3eBy+qUd6L9t9dUhBdK7sVXXzGWAY b3tD/3OY9BE8PawmMIZYB0FJwCnr7WJ/c5mjHrzuySmSSsj83XozQmro6SiBHyaY 5PSYyHDeuUAetLrR0Rxp5yFGaXAz6sVVlmHC5D1gm185OZWVIq1DOhkc8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj4r+sKY6AtiokFQi9kvEYqEOPIMB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/J0FwO1 J3/ZcnwqL6t5GRATi7A48deXIGNbbr7bcdixpTXXMepDuf4X3KeX/3Rmv+2CtLw7 2Xkm92MKSswFx5rr5I8bfiVfzk7VAzNnYu20q/2Ci15HSkJ4QMvlJ5+s3dBqNCkp 9kRfz5jFPkF/iQzdwIrWIO7+I5GAI+N3WkQRPGBKbO7PgzavUUKh5EPckG/KDz+M BdhyWzj+WQiQUkR4E+G/NTsCfrzXl65WDZk2bRs+O6pJyV3CqUD6r703yPqvGdRj DnCJwgPYgOH18Ao4VQwTesgek0UEaONS5tcHM10wfVlkaum5JXlRUKr7D/VPEDAM IOlnkEFpVsmc8A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:55 2025 by rpki-client