This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json) Hash identifier: dzTFo84i+HsXktNimwz9rYKYqzkP+MtPJnJZR8PTvgI= Subject key identifier: B7:37:62:1C:CB:0D:28:D5:32:B5:B8:B8:FA:78:BE:F4:24:EC:07:E8 Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de Certificate serial: 019B3F47DF23A8870DFF160A768F121CD125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft Manifest number: 169A Signing time: Sun 21 Dec 2025 05:00:33 +0000 Manifest this update: Sun 21 Dec 2025 05:00:33 +0000 Manifest next update: Mon 22 Dec 2025 05:00:33 +0000 Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=) 2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: oh06h9PJB7hro930FcOTAqdFIbp4SPZa2zTMiTV9858=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:df:23:a8:87:0d:ff:16:0a:76:8f:12:1c:d1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de Validity Not Before: Dec 21 05:00:33 2025 GMT Not After : Dec 22 05:00:33 2025 GMT Subject: CN=b737621ccb0d28d532b5b8b8fa78bef424ec07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:ad:45:96:7c:00:7d:cd:5e:46:53:d4:7b: fa:88:40:3f:e5:c4:cb:b1:38:52:49:94:2a:d5:5c: db:16:d6:39:f4:7e:9b:9c:bb:57:b4:a2:a1:f7:c7: cc:b9:a6:d2:c2:b5:b9:44:a9:ad:48:14:b0:f5:5f: eb:f9:18:9c:6c:d7:0e:96:a1:70:a1:22:c1:f0:80: ea:c7:c2:bc:13:9f:8b:29:79:cd:0d:bd:4a:84:99: 35:51:df:16:1a:85:d8:31:65:3c:70:3e:e0:ce:7f: ef:2a:8f:e6:1b:38:49:5a:ad:4e:90:4e:33:86:d2: d1:a2:98:f8:96:8b:58:39:dd:88:de:cb:6f:36:df: 01:2e:80:0e:ec:eb:ba:1d:4e:9d:e2:f6:b8:59:cb: 23:ee:f8:7f:b2:6d:99:9a:1d:93:d9:04:d9:34:1a: 6e:bd:97:e1:67:c4:8a:8f:56:ab:10:37:5c:cf:da: 4b:90:90:7f:47:82:7f:00:d6:01:3f:db:72:87:42: ac:82:f0:cc:6e:e8:e3:bc:56:e7:fc:6c:73:86:5c: 65:6c:bf:c0:31:c4:19:5b:98:b6:ad:5e:93:a1:56: a0:eb:cc:3f:be:9a:28:72:06:c1:f9:00:72:83:fb: 17:0c:5b:27:c0:4d:f2:b1:1c:04:02:29:a3:93:db: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:37:62:1C:CB:0D:28:D5:32:B5:B8:B8:FA:78:BE:F4:24:EC:07:E8 X509v3 Authority Key Identifier: keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7f:bb:2f:77:15:24:c5:22:de:02:0d:95:47:f9:4f:7d:1e: cb:01:53:9c:d8:d6:5b:fd:b9:9e:d7:2d:ef:a3:25:b2:66:17: 30:06:d5:18:eb:f3:30:ef:88:f2:26:e3:ca:10:b9:86:a1:2e: 29:fd:ae:89:8c:33:09:b0:8c:11:9b:0b:ab:5b:44:6a:33:f9: e1:3d:25:57:9d:a2:47:82:44:66:f1:5e:e4:cb:f8:fa:6e:65: 93:7c:c9:16:d8:71:e3:3d:8b:80:4f:f9:3f:13:e0:d4:5f:ff: 65:ab:a8:e4:17:69:43:e8:f5:34:80:61:d5:63:cd:73:77:8b: d1:3f:ee:35:b3:79:65:95:9f:53:3b:56:dd:5a:51:5d:4f:9a: af:2b:23:53:bf:a8:30:2c:2a:1c:69:cf:b6:b2:82:b1:0e:53: 8c:1f:fd:7d:4c:ca:68:03:bb:d4:7c:f4:c1:76:35:81:0c:ca: e5:36:e1:10:c6:f3:4e:a7:db:74:18:88:73:6e:cb:e9:19:d6: 39:1f:13:5c:7f:f5:1e:c1:44:50:ab:60:2b:ea:90:bc:00:db: 9c:d8:a9:3e:1c:83:00:54:3d:25:f6:3e:37:14:54:1c:40:2b: b0:92:01:4c:e6:b6:19:e4:6e:1e:59:02:ea:9e:cf:79:7f:74: 20:03:07:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R98jqIcN/xYKdo8SHNElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi Njk3ZGUwHhcNMjUxMjIxMDUwMDMzWhcNMjUxMjIyMDUwMDMzWjAzMTEwLwYDVQQD EyhiNzM3NjIxY2NiMGQyOGQ1MzJiNWI4YjhmYTc4YmVmNDI0ZWMwN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGOtRZZ8AH3NXkZT1Hv6iEA/5cTL sThSSZQq1VzbFtY59H6bnLtXtKKh98fMuabSwrW5RKmtSBSw9V/r+RicbNcOlqFw oSLB8IDqx8K8E5+LKXnNDb1KhJk1Ud8WGoXYMWU8cD7gzn/vKo/mGzhJWq1OkE4z htLRopj4lotYOd2I3stvNt8BLoAO7Ou6HU6d4va4Wcsj7vh/sm2Zmh2T2QTZNBpu vZfhZ8SKj1arEDdcz9pLkJB/R4J/ANYBP9tyh0KsgvDMbujjvFbn/GxzhlxlbL/A McQZW5i2rV6ToVag68w/vpoocgbB+QByg/sXDFsnwE3ysRwEAimjk9tKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc3YhzLDSjVMrW4uPp4vvQk7AfoMB8GA1UdIwQY MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH+7L3cV JMUi3gINlUf5T30eywFTnNjWW/25ntct76MlsmYXMAbVGOvzMO+I8ibjyhC5hqEu Kf2uiYwzCbCMEZsLq1tEajP54T0lV52iR4JEZvFe5Mv4+m5lk3zJFthx4z2LgE/5 PxPg1F//Zauo5BdpQ+j1NIBh1WPNc3eL0T/uNbN5ZZWfUztW3VpRXU+arysjU7+o MCwqHGnPtrKCsQ5TjB/9fUzKaAO71Hz0wXY1gQzK5TbhEMbzTqfbdBiIc27L6RnW OR8TXH/1HsFEUKtgK+qQvADbnNipPhyDAFQ9JfY+NxRUHEArsJIBTOa2GeRuHlkC 6p7PeX90IAMH1w== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:39 2025 by rpki-client