This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json) Hash identifier: hjQHKdEnfZLPIchjuMPGMW4+CkuhZW8yOv7MHLM8d9s= Subject key identifier: 86:C7:20:67:95:C9:91:E4:EE:5C:7D:AF:B3:38:53:36:AF:C9:C4:7F Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B5486D9D86696A4037DC9FA836D08EEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 08:01:22 +0000 Manifest this update: Thu 25 Dec 2025 08:01:22 +0000 Manifest next update: Fri 26 Dec 2025 08:01:22 +0000 Files and hashes: 1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=) 2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=) 3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=) 4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=) 5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=) 6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=) 7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: aa/hsSkcEFAVZ51qL2GL86H+Uko1jduMj9PeCKi0q9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:d9:d8:66:96:a4:03:7d:c9:fa:83:6d:08:ee:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Dec 25 08:01:22 2025 GMT Not After : Dec 26 08:01:22 2025 GMT Subject: CN=86c7206795c991e4ee5c7dafb3385336afc9c47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:11:3d:99:4f:e1:ba:37:b0:3b:72:75:be: a6:26:33:ce:2e:77:8e:e7:bb:2f:20:58:f9:a5:f6: 27:b4:30:85:17:74:f7:e8:32:71:56:82:e9:a2:c9: fa:48:53:7c:66:6b:85:b6:5f:5d:06:e3:41:8d:0c: 4d:70:9f:4c:fd:5f:ac:63:b3:a1:1b:bb:c9:4a:6b: 8a:bc:b4:54:76:e9:65:54:39:90:93:e0:a3:2f:13: 3f:c4:26:95:fd:ef:da:ef:9b:93:c9:09:c7:a3:65: 52:a3:0c:4a:9d:e0:8e:5f:3a:d0:03:f7:60:36:74: ad:50:3b:94:6a:49:26:e1:9c:5f:dc:b2:75:ea:ea: c8:9d:c6:af:e4:01:59:4e:5a:cd:a5:3c:76:fb:d8: 5f:58:af:5d:2e:7f:02:17:06:75:ae:94:c4:5e:fc: 1f:38:16:ac:b5:df:2f:d8:5d:cb:e4:e7:76:37:0a: e2:f6:a0:bf:74:9b:51:ab:66:f9:6a:87:b9:9e:51: 78:55:2f:eb:1e:fc:6c:52:78:59:fc:58:94:5c:39: 72:68:70:7b:2a:d3:b1:31:02:7e:4e:50:2e:04:36: a2:5f:06:35:66:d8:38:a8:78:32:4b:f6:39:ff:ce: 94:b6:05:93:af:be:6f:c4:2f:7a:43:ec:5a:7f:d8: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C7:20:67:95:C9:91:E4:EE:5C:7D:AF:B3:38:53:36:AF:C9:C4:7F X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:16:52:8b:8f:8c:7f:d6:47:2f:c5:91:c3:dc:cf:e8:0f:60: ac:a9:e3:39:32:e9:96:57:6a:61:c3:f8:54:ea:4e:82:59:4e: 13:bf:8e:35:2d:32:ff:a9:cb:d3:e0:ef:2a:2c:eb:8e:25:3d: 63:a3:32:1f:2d:2e:51:a6:04:93:55:02:d2:9e:87:78:23:9a: 77:94:b4:45:36:73:17:fd:fb:f6:17:2d:68:0e:fb:06:85:1c: 83:7b:fa:9f:79:10:5a:0f:59:d3:fb:eb:31:f3:43:23:90:f7: 2f:44:b8:cc:3e:1b:fd:5e:a4:e3:2f:51:8b:ce:a1:82:f2:ce: be:29:d4:32:3a:c9:80:27:ff:cb:1c:04:13:6a:54:90:ed:63: 08:ac:34:46:f4:1b:7d:e8:c0:63:28:34:17:27:d2:5a:16:bd: 72:e7:28:35:5c:74:51:69:ae:24:7a:14:5f:2e:23:20:71:04: ad:22:73:0b:c6:0b:92:b1:42:3a:ab:1d:fd:87:1e:e7:91:57: 36:40:aa:49:a7:f8:eb:ce:68:fc:dd:73:c3:ff:f8:8c:c5:bb: 1c:66:64:dd:c9:77:44:38:51:26:ee:6a:9d:21:b2:e3:3d:2c: 47:cd:db:f6:93:52:41:af:98:71:ab:1d:df:06:b1:39:d0:82: ee:3c:19:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhtnYZpakA33J+oNtCO7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjUxMjI1MDgwMTIyWhcNMjUxMjI2MDgwMTIyWjAzMTEwLwYDVQQD Eyg4NmM3MjA2Nzk1Yzk5MWU0ZWU1YzdkYWZiMzM4NTMzNmFmYzljNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLURPZlP4bo3sDtydb6mJjPOLneO 57svIFj5pfYntDCFF3T36DJxVoLposn6SFN8ZmuFtl9dBuNBjQxNcJ9M/V+sY7Oh G7vJSmuKvLRUdullVDmQk+CjLxM/xCaV/e/a75uTyQnHo2VSowxKneCOXzrQA/dg NnStUDuUakkm4Zxf3LJ16urIncav5AFZTlrNpTx2+9hfWK9dLn8CFwZ1rpTEXvwf OBastd8v2F3L5Od2Nwri9qC/dJtRq2b5aoe5nlF4VS/rHvxsUnhZ/FiUXDlyaHB7 KtOxMQJ+TlAuBDaiXwY1Ztg4qHgyS/Y5/86UtgWTr75vxC96Q+xaf9gC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbHIGeVyZHk7lx9r7M4UzavycR/MB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxZSi4+M f9ZHL8WRw9zP6A9grKnjOTLplldqYcP4VOpOgllOE7+ONS0y/6nL0+DvKizrjiU9 Y6MyHy0uUaYEk1UC0p6HeCOad5S0RTZzF/379hctaA77BoUcg3v6n3kQWg9Z0/vr MfNDI5D3L0S4zD4b/V6k4y9Ri86hgvLOvinUMjrJgCf/yxwEE2pUkO1jCKw0RvQb fejAYyg0FyfSWha9cucoNVx0UWmuJHoUXy4jIHEErSJzC8YLkrFCOqsd/Yce55FX NkCqSaf4685o/N1zw//4jMW7HGZk3cl3RDhRJu5qnSGy4z0sR83b9pNSQa+Ycasd 3waxOdCC7jwZnA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:41 2025 by rpki-client