This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json) Hash identifier: SG+xnbwMzuo5Pd3YjVaw3c2JGqQIEVyOoinyVnKxZ4E= Subject key identifier: B0:22:3D:E6:CF:27:6B:44:6D:FE:9E:51:B5:74:FF:CE:8E:E7:38:90 Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c Certificate serial: 019B6655E2351BDED373B50DAC9DEC9EBDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft Manifest number: 0E38 Signing time: Sun 28 Dec 2025 19:01:03 +0000 Manifest this update: Sun 28 Dec 2025 19:01:03 +0000 Manifest next update: Mon 29 Dec 2025 19:01:03 +0000 Files and hashes: 1: gPcTxlbf3arbuyi9zI7DRrews5w.roa (hash: PLKd6xzj3MbPH7j7KxVjpwNPtA1yOPfuOFe/zsglNlc=) 2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: t4TfmC6zUZpZaLOQyh6E7UknrbSB0BB2Qp3PEKM+uy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:e2:35:1b:de:d3:73:b5:0d:ac:9d:ec:9e:bd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c Validity Not Before: Dec 28 19:01:03 2025 GMT Not After : Dec 29 19:01:03 2025 GMT Subject: CN=b0223de6cf276b446dfe9e51b574ffce8ee73890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:69:ad:79:95:b4:28:6d:ef:a1:a4:50:83: 74:71:b1:1f:e6:d4:53:c4:c6:7a:a4:a0:c3:2e:40: 76:db:a1:a4:02:35:06:bd:22:b2:6e:83:ca:aa:f7: f1:40:2f:9e:e9:80:2e:43:06:da:d6:da:e1:12:ef: 46:e6:a5:fb:19:6d:79:c6:e8:b9:53:86:6f:b8:fe: 53:22:b6:32:af:7c:79:e8:6c:d5:ee:b0:bb:e3:5f: 7a:a0:5c:2f:63:1f:20:d6:39:b9:fc:e1:75:c5:85: 22:7f:21:0d:b8:3d:15:16:eb:42:81:eb:54:1e:af: 5d:83:05:8e:d3:88:e6:dd:4a:17:c5:ac:af:b4:6d: e1:b6:8b:7f:ac:56:9c:70:c3:67:54:91:15:5d:d8: 91:e4:49:d5:fd:a5:1b:fa:87:fc:5a:01:e7:02:2e: 71:d9:df:36:d9:da:63:04:f5:cc:63:ea:cc:51:a5: df:33:64:ca:5d:b6:21:1a:29:bc:45:69:f9:88:42: 51:18:4f:28:0b:d3:1f:c3:2c:1e:83:eb:7c:e7:11: 78:23:6f:89:64:6a:3a:12:e6:4c:43:a5:b5:17:67: 25:e3:77:18:29:5f:7c:5a:3c:32:cb:05:2d:ea:db: d8:97:38:3a:50:35:c1:eb:80:8d:bb:00:d0:55:6e: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:3D:E6:CF:27:6B:44:6D:FE:9E:51:B5:74:FF:CE:8E:E7:38:90 X509v3 Authority Key Identifier: keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7b:59:74:5b:58:7c:e5:72:01:77:14:a8:92:ac:4b:a2:5e: 48:c9:3f:58:c6:05:46:fe:b3:ca:fd:47:59:6a:09:98:fd:5a: e0:1c:95:92:db:f2:0b:98:ef:94:8d:79:6e:3b:c5:b2:52:f9: de:84:c5:f4:f5:1a:19:cd:2f:03:6e:15:73:2b:33:f1:ea:38: ad:9c:62:0a:5c:55:bf:d7:5d:1b:27:06:d7:e9:21:1d:ac:34: c5:58:02:cc:2d:82:d1:aa:cc:24:47:7b:2e:b5:6d:2a:7d:c0: 27:dc:f8:7c:b9:5b:78:93:32:7e:ca:1c:51:96:b9:8a:13:5a: f6:1f:27:cc:dc:e4:64:b3:7b:c4:e7:6e:31:7c:f3:4a:dc:7e: f4:a3:c8:e6:7a:9d:bc:93:c7:7a:d3:84:cc:dc:fe:e6:b5:2e: b3:32:6b:1e:ad:ba:55:81:0f:41:e6:42:d9:96:53:b7:90:87: 10:17:ae:1d:f4:4a:89:07:8b:f1:e7:fc:27:0a:cc:ee:2c:45: 3c:5c:d8:1d:e3:19:28:c1:3d:f9:19:5c:28:12:78:23:7c:40: 44:90:d6:3c:a1:fa:0d:85:63:33:5a:df:a3:48:41:47:ac:2a: 5b:a9:c3:fc:f2:da:c0:ac:c0:23:5f:37:6f:9e:1a:2e:7f:16: d4:cc:15:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVeI1G97Tc7UNrJ3snr3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGY4NjRiYTBmYTIwNGRlOTNhYzVhYTg0ZjcyOGI2MjIw YzZmN2MwHhcNMjUxMjI4MTkwMTAzWhcNMjUxMjI5MTkwMTAzWjAzMTEwLwYDVQQD EyhiMDIyM2RlNmNmMjc2YjQ0NmRmZTllNTFiNTc0ZmZjZThlZTczODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt1prXmVtCht76GkUIN0cbEf5tRT xMZ6pKDDLkB226GkAjUGvSKyboPKqvfxQC+e6YAuQwba1trhEu9G5qX7GW15xui5 U4ZvuP5TIrYyr3x56GzV7rC74196oFwvYx8g1jm5/OF1xYUifyENuD0VFutCgetU Hq9dgwWO04jm3UoXxayvtG3htot/rFaccMNnVJEVXdiR5EnV/aUb+of8WgHnAi5x 2d822dpjBPXMY+rMUaXfM2TKXbYhGim8RWn5iEJRGE8oC9Mfwyweg+t85xF4I2+J ZGo6EuZMQ6W1F2cl43cYKV98WjwyywUt6tvYlzg6UDXB64CNuwDQVW4m6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAiPebPJ2tEbf6eUbV0/86O5ziQMB8GA1UdIwQY MBaAFLoPhkug+iBN6TrFqoT3KLYiDG98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMt YjE3YzJhZmZhMzBiLzEvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMtYjE3YzJhZmZhMzBi LzEvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHtZdFtY fOVyAXcUqJKsS6JeSMk/WMYFRv6zyv1HWWoJmP1a4ByVktvyC5jvlI15bjvFslL5 3oTF9PUaGc0vA24Vcysz8eo4rZxiClxVv9ddGycG1+khHaw0xVgCzC2C0arMJEd7 LrVtKn3AJ9z4fLlbeJMyfsocUZa5ihNa9h8nzNzkZLN7xOduMXzzStx+9KPI5nqd vJPHetOEzNz+5rUuszJrHq26VYEPQeZC2ZZTt5CHEBeuHfRKiQeL8ef8JwrM7ixF PFzYHeMZKME9+RlcKBJ4I3xARJDWPKH6DYVjM1rfo0hBR6wqW6nD/PLawKzAI183 b54aLn8W1MwV3Q== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:59 2025 by rpki-client