This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json) Hash identifier: X2QXOo2GxKNZ2lMkr2KLl4rfH+A4seWSEW38g6Qfulo= Subject key identifier: 1A:6B:93:BC:90:4F:3E:3F:62:FF:42:29:DC:96:D3:D8:6E:1D:AB:94 Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Certificate serial: 019B3DC779B8FDA4AC6E648E97AC7C38BFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft Manifest number: 0659 Signing time: Sat 20 Dec 2025 22:00:41 +0000 Manifest this update: Sat 20 Dec 2025 22:00:41 +0000 Manifest next update: Sun 21 Dec 2025 22:00:41 +0000 Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=) 2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: rwKfaHMpfCG8NbWCNdmrQ7djR0Y8GWH2nB4kXPl7grA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:79:b8:fd:a4:ac:6e:64:8e:97:ac:7c:38:bf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Validity Not Before: Dec 20 22:00:41 2025 GMT Not After : Dec 21 22:00:41 2025 GMT Subject: CN=1a6b93bc904f3e3f62ff4229dc96d3d86e1dab94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:87:e4:64:c1:75:14:b0:8f:fb:31:42:bb: aa:53:c3:91:31:59:5b:93:b6:6f:f8:1f:c0:fc:60: c1:7e:84:ab:1e:23:c8:a1:ea:93:78:5c:78:b5:d4: 5c:8c:32:cf:4a:d0:a8:ff:ca:8f:c7:52:87:15:e2: 7f:45:af:5d:13:41:ea:ce:6a:a8:f9:61:88:39:2b: c3:65:e8:30:93:cc:7a:ca:a0:da:69:7b:30:da:31: 64:90:94:14:df:24:75:f3:ad:ea:6f:53:45:8d:7c: f4:8f:33:dd:c0:a4:5d:00:25:30:75:2c:5e:f6:fd: 38:9c:82:3f:e9:4b:e5:c2:69:6e:c4:24:42:9b:05: 49:a6:c8:a7:b3:29:c7:22:53:0b:28:94:31:b2:da: 6f:f3:11:79:c4:f2:d0:aa:6d:29:9a:eb:66:3c:01: cb:1b:35:45:9e:4c:ae:6b:42:fa:c4:36:33:30:4c: cd:2a:e0:3d:9c:78:03:37:c8:bc:c0:7f:40:70:e4: b4:84:78:05:67:64:dc:9e:3a:fc:85:6e:44:ad:02: d2:34:7e:86:ca:79:99:08:44:49:1e:a5:7d:b0:d1: 8c:63:cc:7d:28:0d:38:70:dd:58:cb:f6:94:f6:bc: a5:c0:56:40:d4:69:f7:da:de:d3:68:05:68:c6:81: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6B:93:BC:90:4F:3E:3F:62:FF:42:29:DC:96:D3:D8:6E:1D:AB:94 X509v3 Authority Key Identifier: keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:3c:d4:4e:8e:3b:a0:6d:29:5a:92:5e:3e:c9:93:0d:45: d6:25:dc:d4:03:1e:9f:93:77:2e:81:a1:ad:c4:a4:a9:85:31: c5:20:57:26:34:e9:c8:54:f5:9e:e6:1a:05:60:45:d3:7a:1a: 32:46:82:3d:4d:dc:77:b7:bc:bf:45:8d:9d:31:96:68:33:92: 78:a1:b1:79:a2:f7:db:a4:9e:d1:fb:a9:98:a9:e2:fb:8f:0d: bb:ee:6f:ce:d8:f8:f3:ba:dd:1b:2e:cd:9c:d6:a3:94:38:47: e5:d5:1a:a1:93:6a:b1:f5:59:bc:8c:2e:a2:99:e7:4e:96:88: c4:a1:56:b4:ea:3f:67:8f:e8:3e:3b:a3:63:db:d6:b4:3e:42: a9:25:f9:3f:80:31:ac:0f:45:24:43:f9:e9:3f:de:76:e1:55: 78:3f:77:08:0a:40:7e:c5:da:aa:14:80:39:6a:0e:6a:1b:23: ea:44:ba:f5:af:96:fd:a0:7d:56:2e:7f:d3:19:37:bd:c7:b3: a5:2f:85:2a:d9:7f:db:f5:d3:70:12:57:b3:af:3e:0a:ab:dd: 79:13:36:39:06:c0:c5:bf:cc:5b:88:22:78:ca:ce:0e:01:8f: 70:a3:79:c4:51:11:94:18:78:cb:db:6a:24:24:05:22:84:6e: 40:bc:b6:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3m4/aSsbmSOl6x8OL/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWMxMDU3YmNiOWQxZTBkMTU3NDhiN2YzMmM1OWY4Yzdi NzJhNGUwHhcNMjUxMjIwMjIwMDQxWhcNMjUxMjIxMjIwMDQxWjAzMTEwLwYDVQQD EygxYTZiOTNiYzkwNGYzZTNmNjJmZjQyMjlkYzk2ZDNkODZlMWRhYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts2H5GTBdRSwj/sxQruqU8ORMVlb k7Zv+B/A/GDBfoSrHiPIoeqTeFx4tdRcjDLPStCo/8qPx1KHFeJ/Ra9dE0Hqzmqo +WGIOSvDZegwk8x6yqDaaXsw2jFkkJQU3yR1863qb1NFjXz0jzPdwKRdACUwdSxe 9v04nII/6UvlwmluxCRCmwVJpsinsynHIlMLKJQxstpv8xF5xPLQqm0pmutmPAHL GzVFnkyua0L6xDYzMEzNKuA9nHgDN8i8wH9AcOS0hHgFZ2Tcnjr8hW5ErQLSNH6G ynmZCERJHqV9sNGMY8x9KA04cN1Yy/aU9rylwFZA1Gn32t7TaAVoxoHDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBprk7yQTz4/Yv9CKdyW09huHauUMB8GA1UdIwQY MBaAFFAcEFe8udHg0VdIt/MsWfjHtypOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzkt ZDcxN2U0ZGZjYjNkLzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzktZDcxN2U0ZGZjYjNk LzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFI81E6O O6BtKVqSXj7Jkw1F1iXc1AMen5N3LoGhrcSkqYUxxSBXJjTpyFT1nuYaBWBF03oa MkaCPU3cd7e8v0WNnTGWaDOSeKGxeaL326Se0fupmKni+48Nu+5vztj487rdGy7N nNajlDhH5dUaoZNqsfVZvIwuopnnTpaIxKFWtOo/Z4/oPjujY9vWtD5CqSX5P4Ax rA9FJEP56T/eduFVeD93CApAfsXaqhSAOWoOahsj6kS69a+W/aB9Vi5/0xk3vcez pS+FKtl/2/XTcBJXs68+CqvdeRM2OQbAxb/MW4gieMrODgGPcKN5xFERlBh4y9tq JCQFIoRuQLy24A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:30 2025 by rpki-client