This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json) Hash identifier: QDA+iqER4aEgIKzq/WrRNTgwSvjfDEy0SI87O8tvkfw= Subject key identifier: 86:BB:83:BE:CA:16:2F:FD:FD:41:F3:8E:C1:3B:8D:5C:C5:28:92:E8 Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87 Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87 Certificate serial: 019B495DD55D0ECF33699EF49DEE214196FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft Manifest number: 14E1 Signing time: Tue 23 Dec 2025 04:00:44 +0000 Manifest this update: Tue 23 Dec 2025 04:00:44 +0000 Manifest next update: Wed 24 Dec 2025 04:00:44 +0000 Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: ygrHnLm/z7y2s3tUrrACp9TYNzck/RfYCa7ntburwYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:d5:5d:0e:cf:33:69:9e:f4:9d:ee:21:41:96:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87 Validity Not Before: Dec 23 04:00:44 2025 GMT Not After : Dec 24 04:00:44 2025 GMT Subject: CN=86bb83beca162ffdfd41f38ec13b8d5cc52892e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:d1:6d:07:2c:f2:e7:11:3b:53:3d:2b:94: 00:09:1f:cd:58:72:9b:0e:9b:0e:af:70:56:bb:99: 38:2c:54:df:76:c1:e2:80:0a:73:70:49:c4:c9:14: 8e:df:12:eb:cd:64:6d:fe:93:69:61:a5:39:09:83: 56:34:26:56:e6:f0:6d:7d:85:50:01:24:f3:43:57: 54:b0:07:5e:27:e5:6d:90:4c:1c:a4:a7:4b:7f:2e: 2e:e7:29:96:78:71:39:47:5b:2b:e9:2a:33:41:b9: 43:96:88:b3:ea:9c:8a:10:48:65:35:f3:a5:47:86: fc:e5:e6:4b:96:15:d9:6e:b6:ba:22:31:3c:de:2e: 46:13:57:2c:82:99:1d:7a:a6:d7:90:00:54:94:0d: aa:5b:c0:cf:f5:4c:7d:5e:53:58:1c:93:a2:fb:d3: c9:38:3c:7a:ca:e8:0a:05:2c:ff:d4:7d:d2:cf:11: 01:f7:ab:d5:33:f2:47:34:94:d8:a4:42:80:08:4b: a7:9f:5b:47:19:08:9d:1f:e3:70:40:03:e3:be:2f: a0:6d:f2:8f:58:f3:e6:9c:0f:ac:6c:32:59:f2:ff: be:11:b8:83:e5:c7:a7:cf:6c:10:34:b4:01:5e:c4: c6:88:8a:da:8f:c5:d4:64:a6:15:fb:ba:ba:4e:b9: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:83:BE:CA:16:2F:FD:FD:41:F3:8E:C1:3B:8D:5C:C5:28:92:E8 X509v3 Authority Key Identifier: keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:73:24:99:28:a4:b0:07:c3:e8:46:bb:32:ab:8d:f0:ff: 0e:aa:4e:05:20:8a:6b:e5:47:f3:b6:d0:7e:e5:88:77:8a:1a: b5:dc:55:a4:d6:d8:6b:f1:44:f1:a3:24:29:ce:8c:b3:f9:46: 50:b7:21:8a:d9:da:47:4f:56:52:1f:77:da:b9:ae:6d:ce:ff: 67:97:3b:02:db:07:fc:40:27:08:b2:4b:8f:a4:13:58:e5:8d: 77:1b:d9:46:6a:c1:b7:d5:35:1e:31:eb:bd:41:48:fd:b6:49: 5b:e3:f1:f2:43:2e:b0:8d:18:9e:fe:7a:fc:93:27:ed:30:89: 3b:ce:4b:5d:9a:5c:ff:0a:87:5e:d1:45:ca:df:5d:b6:4a:2e: 25:16:69:9c:85:70:d8:6c:95:54:e5:96:92:3f:85:5f:fb:ec: e7:fd:3e:c9:77:6e:1b:f7:b7:0c:88:3f:36:06:61:a6:f6:a7: 3c:ce:f6:e6:2e:79:6a:31:2b:06:74:96:fe:65:4c:3f:53:f9: 72:4f:eb:6d:e2:58:04:8f:08:24:fa:18:29:3f:aa:33:6d:23: c1:20:ea:3c:f3:2a:f0:ff:44:c2:36:f0:e0:a1:0d:fd:10:b2: 5b:17:3a:1e:a5:ff:02:77:01:df:25:1e:f3:5a:d1:c7:3e:f5: ff:31:f0:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXdVdDs8zaZ70ne4hQZb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWI1MjAyYTBlZDQ2ZjY0MTFlMWVkYTdjN2I1OWRkOGNj NmNkODcwHhcNMjUxMjIzMDQwMDQ0WhcNMjUxMjI0MDQwMDQ0WjAzMTEwLwYDVQQD Eyg4NmJiODNiZWNhMTYyZmZkZmQ0MWYzOGVjMTNiOGQ1Y2M1Mjg5MmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6nRbQcs8ucRO1M9K5QACR/NWHKb DpsOr3BWu5k4LFTfdsHigApzcEnEyRSO3xLrzWRt/pNpYaU5CYNWNCZW5vBtfYVQ ASTzQ1dUsAdeJ+VtkEwcpKdLfy4u5ymWeHE5R1sr6SozQblDloiz6pyKEEhlNfOl R4b85eZLlhXZbra6IjE83i5GE1csgpkdeqbXkABUlA2qW8DP9Ux9XlNYHJOi+9PJ ODx6yugKBSz/1H3SzxEB96vVM/JHNJTYpEKACEunn1tHGQidH+NwQAPjvi+gbfKP WPPmnA+sbDJZ8v++EbiD5cenz2wQNLQBXsTGiIraj8XUZKYV+7q6TrnD9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa7g77KFi/9/UHzjsE7jVzFKJLoMB8GA1UdIwQY MBaAFFAbUgKg7Ub2QR4e2nx7Wd2Mxs2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzct YjE3NmQ2YmI1N2RiLzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzctYjE3NmQ2YmI1N2Ri LzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb1zJJko pLAHw+hGuzKrjfD/DqpOBSCKa+VH87bQfuWId4oatdxVpNbYa/FE8aMkKc6Ms/lG ULchitnaR09WUh932rmubc7/Z5c7AtsH/EAnCLJLj6QTWOWNdxvZRmrBt9U1HjHr vUFI/bZJW+Px8kMusI0Ynv56/JMn7TCJO85LXZpc/wqHXtFFyt9dtkouJRZpnIVw 2GyVVOWWkj+FX/vs5/0+yXduG/e3DIg/NgZhpvanPM725i55ajErBnSW/mVMP1P5 ck/rbeJYBI8IJPoYKT+qM20jwSDqPPMq8P9Ewjbw4KEN/RCyWxc6HqX/AncB3yUe 81rRxz71/zHw3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:22 2025 by rpki-client