This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json) Hash identifier: jy14DLNppyAZLjcLrgprD/OwGrMWXRImJbMEDzXg0UQ= Subject key identifier: EB:C7:9C:DA:86:B2:E0:87:EF:8B:03:05:20:0B:1E:31:D1:5B:67:66 Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Certificate serial: 019B3BD980BA703DD68AC96D9B528D6A42F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft Manifest number: 0CFF Signing time: Sat 20 Dec 2025 13:01:08 +0000 Manifest this update: Sat 20 Dec 2025 13:01:08 +0000 Manifest next update: Sun 21 Dec 2025 13:01:08 +0000 Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: ElDFUtLaWnLNZEpWq8a76OxNV+he8QNBatGuRMBeMsA=) 2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:80:ba:70:3d:d6:8a:c9:6d:9b:52:8d:6a:42:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Validity Not Before: Dec 20 13:01:08 2025 GMT Not After : Dec 21 13:01:08 2025 GMT Subject: CN=ebc79cda86b2e087ef8b0305200b1e31d15b6766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:1a:4f:e8:9c:96:81:c4:53:1d:80:85:39: f2:95:21:4f:b8:4e:dd:66:25:f6:ed:aa:67:17:0d: 11:6d:9c:74:3c:20:b3:f1:81:03:45:66:c5:56:36: ca:be:53:b4:01:48:b3:4b:4a:f8:b3:a1:8d:d6:47: b1:48:45:86:8c:55:83:76:f4:f2:1a:57:72:ae:f8: bc:eb:13:93:37:3f:49:c9:e2:a9:f3:3c:0a:1e:0f: 8b:a6:33:3c:3c:84:fb:c5:20:d2:32:88:4b:62:c8: fd:8b:57:74:b3:be:fe:de:fb:a9:c7:1b:de:e5:2b: 98:a5:d5:50:eb:bd:d7:a4:6c:f9:78:9a:e2:27:c8: 60:c2:dc:48:21:23:59:48:5d:44:a1:b2:bc:58:c9: 4c:ff:94:5f:41:fa:39:d4:98:cb:b7:3d:5f:8a:e0: 04:f2:e1:e2:00:8d:9c:7e:cf:52:07:59:e0:09:51: c0:fd:3a:6e:a0:39:e9:f5:45:1a:d4:ba:a8:15:9c: a1:57:8c:53:d8:84:20:dc:fe:42:7f:96:33:a4:1f: 30:15:cd:37:30:70:33:d7:2f:83:ab:d8:b0:dd:ac: f3:b7:6b:b3:02:a7:3e:b9:fe:a9:22:75:84:4e:62: 55:30:3b:84:26:78:81:f9:cc:61:d0:4c:7f:3b:86: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:9C:DA:86:B2:E0:87:EF:8B:03:05:20:0B:1E:31:D1:5B:67:66 X509v3 Authority Key Identifier: keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3c:42:28:2d:73:0f:45:b9:89:c7:71:40:b5:f6:f5:99:6d: 71:d1:5e:2e:b8:ba:4a:db:f1:ac:71:fe:c5:4a:aa:0a:35:e9: d9:02:9d:c0:e1:11:22:36:a7:93:f2:10:79:df:30:5e:80:d8: df:94:b6:ae:4e:37:51:09:ea:eb:17:80:c0:e1:c3:d1:60:0b: ad:4c:09:2c:a8:cd:a8:6b:9d:ac:80:cc:f2:77:8b:c9:52:d2: 3d:13:fa:bf:8c:cc:e0:e2:73:73:bf:f6:00:7c:63:bf:c0:b8: 65:49:2f:ab:dc:02:8b:08:8d:09:3d:ac:56:c5:20:b8:9a:cf: a7:b9:22:f7:59:e6:24:7a:c6:96:30:6a:85:4f:45:29:b2:40: 05:f8:df:9c:19:44:46:78:fc:00:0a:6d:25:01:15:77:aa:b5: 96:04:00:9d:15:5c:99:24:1c:f5:f9:8d:86:74:fc:34:26:bc: 21:1f:66:77:b9:f0:59:7e:2b:05:b5:18:b2:37:04:3d:71:a2: b0:61:33:52:06:10:5a:32:a6:a5:52:4a:ca:2c:49:18:b0:cd: 9c:6c:ab:b3:7d:1a:ec:62:44:48:d7:7b:97:38:5a:61:66:31: f4:43:e0:e4:76:07:a7:de:b0:7d:c7:d9:10:bf:b1:d2:ab:80: c2:ac:5e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YC6cD3Wisltm1KNakL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTZkZGRhNDBkNzgyNTU5ZWU2NWU1MGY5MDhlMTY4OWE2 NWE4MDAwHhcNMjUxMjIwMTMwMTA4WhcNMjUxMjIxMTMwMTA4WjAzMTEwLwYDVQQD EyhlYmM3OWNkYTg2YjJlMDg3ZWY4YjAzMDUyMDBiMWUzMWQxNWI2NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYkaT+icloHEUx2AhTnylSFPuE7d ZiX27apnFw0RbZx0PCCz8YEDRWbFVjbKvlO0AUizS0r4s6GN1kexSEWGjFWDdvTy Gldyrvi86xOTNz9JyeKp8zwKHg+LpjM8PIT7xSDSMohLYsj9i1d0s77+3vupxxve 5SuYpdVQ673XpGz5eJriJ8hgwtxIISNZSF1EobK8WMlM/5RfQfo51JjLtz1fiuAE 8uHiAI2cfs9SB1ngCVHA/TpuoDnp9UUa1LqoFZyhV4xT2IQg3P5Cf5YzpB8wFc03 MHAz1y+Dq9iw3azzt2uzAqc+uf6pInWETmJVMDuEJniB+cxh0Ex/O4btiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvHnNqGsuCH74sDBSALHjHRW2dmMB8GA1UdIwQY MBaAFNLm3dpA14JVnuZeUPkI4WiaZagAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAt Y2NmOWI4OWUyMmUyLzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAtY2NmOWI4OWUyMmUy LzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDxCKC1z D0W5icdxQLX29ZltcdFeLri6StvxrHH+xUqqCjXp2QKdwOERIjank/IQed8wXoDY 35S2rk43UQnq6xeAwOHD0WALrUwJLKjNqGudrIDM8neLyVLSPRP6v4zM4OJzc7/2 AHxjv8C4ZUkvq9wCiwiNCT2sVsUguJrPp7ki91nmJHrGljBqhU9FKbJABfjfnBlE Rnj8AAptJQEVd6q1lgQAnRVcmSQc9fmNhnT8NCa8IR9md7nwWX4rBbUYsjcEPXGi sGEzUgYQWjKmpVJKyixJGLDNnGyrs30a7GJESNd7lzhaYWYx9EPg5HYHp96wfcfZ EL+x0quAwqxedg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:58 2025 by rpki-client