This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json) Hash identifier: 3ZKwTNVLFwjfmb7DiznCsgGbLV/GTy90tLrBgR2zad4= Subject key identifier: 6B:AB:CD:4D:17:08:CE:25:15:EA:48:3A:3E:01:82:7B:0E:60:F8:EA Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f Certificate serial: 019B4A39EDC6029C8121BC2F8ECF274229DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft Manifest number: 1418 Signing time: Tue 23 Dec 2025 08:01:08 +0000 Manifest this update: Tue 23 Dec 2025 08:01:08 +0000 Manifest next update: Wed 24 Dec 2025 08:01:08 +0000 Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=) 2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: 1fGG2GoDWRKmu9mpcfeBW455gzor/B9P7krsD3rS5OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:ed:c6:02:9c:81:21:bc:2f:8e:cf:27:42:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f Validity Not Before: Dec 23 08:01:08 2025 GMT Not After : Dec 24 08:01:08 2025 GMT Subject: CN=6babcd4d1708ce2515ea483a3e01827b0e60f8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:a6:e0:fd:a9:68:02:74:3b:3f:be:53:52: 58:4f:19:49:7e:c8:da:58:cc:83:2e:60:e2:8b:23: da:35:55:44:3d:3e:81:7c:1a:1b:6d:3f:6f:b1:6d: 27:8d:95:e6:15:65:ce:62:51:fa:49:29:b0:3e:18: 05:67:c8:eb:0a:ea:6d:a3:5c:ac:78:ee:cb:43:22: 6a:c2:b7:e2:4c:c8:80:e0:85:ac:23:d6:c4:d8:a7: f5:7b:f6:a5:c5:d6:17:11:d2:da:ae:6c:5c:40:ff: 4b:67:2f:eb:0c:7f:7a:a2:8d:66:20:50:7d:d2:54: 3f:2e:11:7c:62:ff:a2:b2:83:34:44:27:10:57:e2: a6:e2:26:b6:b3:36:1e:60:bd:77:48:86:e9:53:68: 1f:80:b0:ff:b9:b8:d6:12:3d:3f:06:8a:dc:05:e6: ac:22:bd:ad:11:7a:b7:ed:25:3a:9d:3d:5a:e8:01: 35:90:30:6a:92:4e:a7:0e:a7:aa:2c:8e:ef:9c:7f: ea:75:2c:5a:5a:2c:64:70:59:f5:89:0f:7a:8a:ba: 5b:34:a6:f6:8f:e0:22:b7:2b:d9:09:6c:96:88:20: cd:cf:c3:76:e1:a3:c9:8d:a7:ad:ec:bd:d3:17:5a: da:c2:f1:e6:6d:b5:e8:c6:e1:f8:2a:8d:66:3f:61: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:CD:4D:17:08:CE:25:15:EA:48:3A:3E:01:82:7B:0E:60:F8:EA X509v3 Authority Key Identifier: keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ed:31:cc:77:a6:4b:7d:31:f3:aa:a7:e6:46:96:2b:da:c0: 58:c5:e8:be:14:cf:71:95:84:b7:10:a6:b0:a8:9f:01:29:82: 40:dd:44:e2:1f:f8:d0:1c:62:8c:1c:a0:49:7f:db:7a:d6:97: cf:b1:8e:bd:d5:0e:ff:ea:9b:bf:97:5b:18:48:e1:78:a1:b3: 89:cc:0f:4d:f8:38:01:df:0f:7b:56:98:8a:60:df:d2:56:0e: 6f:14:29:9b:c2:60:f5:46:1a:60:17:7b:c9:36:e0:05:92:a4: 08:af:d5:de:5d:46:22:14:32:1b:f3:7d:a9:64:65:88:29:57: 48:03:26:64:ba:aa:df:28:fd:c7:6f:f4:80:69:97:28:dc:39: bd:63:bd:a4:22:b6:03:a3:f6:28:1b:85:ba:88:79:21:91:a8: 46:e9:60:ad:d4:4f:5a:77:9b:a2:9f:d6:7d:05:e1:30:05:7a: a9:2b:6e:fc:db:86:00:c7:e1:29:6d:06:c1:9b:56:43:5c:e7: be:4b:b2:ca:fc:ce:d3:f8:5d:c6:c9:b3:eb:20:d8:b0:1c:0c: b9:43:2c:8a:92:31:42:79:4e:c5:27:01:bd:23:8d:6d:a2:fb: a4:16:7c:49:f3:18:ed:b5:92:c0:f5:bc:f0:2c:b6:eb:eb:74: c1:45:dc:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOe3GApyBIbwvjs8nQineMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOTdjMTU0NTZlYjYwMDQwM2VjZmJiMTZjMjBlMDgxNjA5 NDRmOGYwHhcNMjUxMjIzMDgwMTA4WhcNMjUxMjI0MDgwMTA4WjAzMTEwLwYDVQQD Eyg2YmFiY2Q0ZDE3MDhjZTI1MTVlYTQ4M2EzZTAxODI3YjBlNjBmOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrym4P2paAJ0Oz++U1JYTxlJfsja WMyDLmDiiyPaNVVEPT6BfBobbT9vsW0njZXmFWXOYlH6SSmwPhgFZ8jrCupto1ys eO7LQyJqwrfiTMiA4IWsI9bE2Kf1e/alxdYXEdLarmxcQP9LZy/rDH96oo1mIFB9 0lQ/LhF8Yv+isoM0RCcQV+Km4ia2szYeYL13SIbpU2gfgLD/ubjWEj0/BorcBeas Ir2tEXq37SU6nT1a6AE1kDBqkk6nDqeqLI7vnH/qdSxaWixkcFn1iQ96irpbNKb2 j+AityvZCWyWiCDNz8N24aPJjaet7L3TF1rawvHmbbXoxuH4Ko1mP2F8ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGurzU0XCM4lFepIOj4BgnsOYPjqMB8GA1UdIwQY MBaAFLqXwVRW62AEA+z7sWwg4IFglE+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWIt MmUyY2Q2NDM1MTA2LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWItMmUyY2Q2NDM1MTA2 LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO0xzHem S30x86qn5kaWK9rAWMXovhTPcZWEtxCmsKifASmCQN1E4h/40BxijBygSX/betaX z7GOvdUO/+qbv5dbGEjheKGzicwPTfg4Ad8Pe1aYimDf0lYObxQpm8Jg9UYaYBd7 yTbgBZKkCK/V3l1GIhQyG/N9qWRliClXSAMmZLqq3yj9x2/0gGmXKNw5vWO9pCK2 A6P2KBuFuoh5IZGoRulgrdRPWnebop/WfQXhMAV6qStu/NuGAMfhKW0GwZtWQ1zn vkuyyvzO0/hdxsmz6yDYsBwMuUMsipIxQnlOxScBvSONbaL7pBZ8SfMY7bWSwPW8 8Cy26+t0wUXcXg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:48:03 2025 by rpki-client