This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json) Hash identifier: p8VNwe0G5CRizFrvwfAMSQC0pBI6ww2bFDd2jue/Vy0= Subject key identifier: CC:C4:56:06:AC:5A:48:68:B4:45:FA:C7:33:51:13:31:BB:A3:60:13 Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Certificate serial: 019B39EAB56B031F5BAE1AAFECC5FA361638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft Manifest number: 0657 Signing time: Sat 20 Dec 2025 04:00:41 +0000 Manifest this update: Sat 20 Dec 2025 04:00:41 +0000 Manifest next update: Sun 21 Dec 2025 04:00:41 +0000 Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=) 2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: 3Q2RxUFLAWHatH0KjLepleHmF2e3pH5kobqt0tb3Euc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:b5:6b:03:1f:5b:ae:1a:af:ec:c5:fa:36:16:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Validity Not Before: Dec 20 04:00:41 2025 GMT Not After : Dec 21 04:00:41 2025 GMT Subject: CN=ccc45606ac5a4868b445fac733511331bba36013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:61:0c:1a:8a:bf:2f:37:6d:3d:37:ad:3f: 1a:9f:c7:d3:1e:fb:b9:3c:9b:1b:7d:93:dc:80:b9: 30:66:97:5c:f7:bd:b8:d6:7b:5d:99:b6:62:83:cb: df:c4:34:f6:95:54:cd:ea:2a:96:96:a8:8a:5f:a0: 89:e9:4e:ac:83:b3:28:6b:df:8d:29:82:5b:1c:66: 26:99:8a:63:9b:3c:66:be:1b:55:9f:bd:b4:cf:0f: 33:5d:ed:8b:27:3f:34:45:43:71:74:e0:47:12:a7: 1e:88:77:cb:ca:24:2c:15:cd:c9:86:46:e6:f8:bc: a2:4c:79:84:82:79:f9:39:29:62:f0:bd:99:90:a3: e5:d4:e6:45:0e:09:39:c6:e7:48:70:1c:d9:f2:94: 55:8e:4a:92:9e:0c:c7:88:e6:b1:5f:c3:6e:78:4e: 01:78:8a:76:1d:f6:cd:0b:a6:2e:68:7f:8e:51:3c: 43:e6:c9:e4:f6:ab:90:fd:b9:2a:06:73:6f:32:b4: 5b:99:1c:3a:d2:8d:74:85:e1:85:fd:c4:f5:63:0d: ce:c9:5b:b3:19:d4:56:e3:6f:09:93:95:b1:02:9b: e2:8a:ad:ea:8c:45:e3:76:ee:5b:a1:ca:c8:f5:dc: d3:3e:4f:75:81:0b:d1:d7:e2:ae:e2:d9:6f:90:59: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:56:06:AC:5A:48:68:B4:45:FA:C7:33:51:13:31:BB:A3:60:13 X509v3 Authority Key Identifier: keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7d:20:0e:de:6f:7b:b3:61:23:c6:8f:d7:dd:0e:08:8d:3b: 4d:7c:2c:9f:2d:20:b7:2d:e4:c4:52:50:81:01:47:49:58:40: 6e:41:bd:be:04:59:98:0b:93:e2:f3:09:59:9d:a8:93:cc:75: 36:41:6e:e8:db:1a:33:91:54:26:d5:f7:53:8b:a6:34:14:5d: ed:c7:8d:3f:2b:e9:80:bb:eb:68:0e:8c:6c:ef:93:79:fc:4f: 2d:64:46:a3:c3:64:63:3a:14:9e:eb:81:7a:83:01:8c:15:97: bc:6f:a5:45:da:60:2e:68:d7:77:1f:fa:96:09:c0:f2:66:2b: 8a:ed:64:e2:a9:2e:4c:8f:df:ad:aa:cb:4e:dd:32:37:6c:25: 07:b2:73:a0:52:4f:31:56:77:55:bb:83:e7:0b:1c:9c:c5:a0: b7:3b:8c:e1:b7:c2:37:d3:39:cf:19:fa:ba:a8:27:e1:e9:9c: 26:b6:07:b8:2e:31:07:ed:8e:84:52:aa:5f:4f:68:f5:15:61: 3a:c8:27:71:0c:44:8d:1a:54:2f:f0:af:e0:f1:2a:b7:dc:19: 65:4a:8c:35:da:9d:7b:6c:80:9d:ae:0a:bb:f8:20:b9:6b:fe: 43:ca:5c:14:0b:4c:1e:10:cc:89:39:60:98:9f:bd:d4:17:c2: 13:97:59:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56rVrAx9brhqv7MX6NhY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWMxMDU3YmNiOWQxZTBkMTU3NDhiN2YzMmM1OWY4Yzdi NzJhNGUwHhcNMjUxMjIwMDQwMDQxWhcNMjUxMjIxMDQwMDQxWjAzMTEwLwYDVQQD EyhjY2M0NTYwNmFjNWE0ODY4YjQ0NWZhYzczMzUxMTMzMWJiYTM2MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmVhDBqKvy83bT03rT8an8fTHvu5 PJsbfZPcgLkwZpdc97241ntdmbZig8vfxDT2lVTN6iqWlqiKX6CJ6U6sg7Moa9+N KYJbHGYmmYpjmzxmvhtVn720zw8zXe2LJz80RUNxdOBHEqceiHfLyiQsFc3Jhkbm +LyiTHmEgnn5OSli8L2ZkKPl1OZFDgk5xudIcBzZ8pRVjkqSngzHiOaxX8NueE4B eIp2HfbNC6YuaH+OUTxD5snk9quQ/bkqBnNvMrRbmRw60o10heGF/cT1Yw3OyVuz GdRW428Jk5WxApviiq3qjEXjdu5bocrI9dzTPk91gQvR1+Ku4tlvkFnDuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzEVgasWkhotEX6xzNREzG7o2ATMB8GA1UdIwQY MBaAFFAcEFe8udHg0VdIt/MsWfjHtypOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzkt ZDcxN2U0ZGZjYjNkLzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzktZDcxN2U0ZGZjYjNk LzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuH0gDt5v e7NhI8aP190OCI07TXwsny0gty3kxFJQgQFHSVhAbkG9vgRZmAuT4vMJWZ2ok8x1 NkFu6NsaM5FUJtX3U4umNBRd7ceNPyvpgLvraA6MbO+TefxPLWRGo8NkYzoUnuuB eoMBjBWXvG+lRdpgLmjXdx/6lgnA8mYriu1k4qkuTI/frarLTt0yN2wlB7JzoFJP MVZ3VbuD5wscnMWgtzuM4bfCN9M5zxn6uqgn4emcJrYHuC4xB+2OhFKqX09o9RVh OsgncQxEjRpUL/Cv4PEqt9wZZUqMNdqde2yAna4Ku/gguWv+Q8pcFAtMHhDMiTlg mJ+91BfCE5dZww== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:11 2025 by rpki-client