This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json) Hash identifier: RXgi7fzVhoE/Cfl3+nlmWhU5X/Qac+sZnj7GLdKubEg= Subject key identifier: 4E:BF:03:7C:52:66:B6:40:53:E8:94:F2:BC:3B:67:6C:E1:02:62:D3 Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab Certificate serial: 019B3DFEB2EF196BE27D7F0A8C95086D08F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=) 2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: axePxH/HwB8/Ztm8MkS3NRrp3m03LSVc//r7untYk9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b2:ef:19:6b:e2:7d:7f:0a:8c:95:08:6d:08:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=4ebf037c5266b64053e894f2bc3b676ce10262d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:1d:1b:53:cd:2c:65:57:61:91:9c:ca:16: 0a:39:39:d0:9d:e5:c6:a4:8c:a7:f9:bc:7e:5b:80: e9:5c:73:86:71:82:7a:5d:14:81:ef:ff:55:bb:5b: d1:cf:9a:da:4a:d1:dd:45:52:cf:43:e4:e1:37:37: 29:1b:21:e0:0f:55:aa:88:98:1b:2c:91:04:8f:a0: 0d:c2:d6:01:72:33:1f:0c:ba:96:22:e1:3d:58:f7: 68:1c:9d:7d:80:39:1a:bf:1e:d8:16:8f:aa:24:5d: 1f:f8:3c:7c:9a:e2:71:15:62:a0:1b:31:86:ae:c9: 65:4a:b7:e7:e8:65:5f:02:6f:25:55:5f:26:e4:53: c3:79:b0:ee:44:85:f0:18:ed:ca:b6:33:38:c3:86: 77:da:88:57:f3:9e:81:00:92:99:8b:82:83:79:91: da:6a:d2:aa:c9:ac:52:f7:00:03:bc:3f:52:94:77: 02:f4:3e:6f:0a:25:16:89:3a:ad:2c:fd:3b:44:ec: 33:ee:87:c8:b4:dc:5f:9b:9d:54:98:fa:6a:4a:b4: 47:6b:c2:ca:b9:ee:ab:03:8b:06:31:d9:3f:51:a6: ee:93:89:c7:79:0c:9b:a5:54:21:5d:35:c3:3c:af: b7:72:f1:35:c7:f1:9d:81:00:db:76:e9:62:15:ef: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:03:7C:52:66:B6:40:53:E8:94:F2:BC:3B:67:6C:E1:02:62:D3 X509v3 Authority Key Identifier: keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:91:fc:87:e9:ca:ed:64:0c:e3:c6:f9:19:22:56:fb:8c:72: 9c:4e:ca:fa:96:21:8c:83:94:26:7d:4c:b9:e0:54:bf:fc:ff: 72:53:02:94:b0:75:52:21:b0:ba:e6:42:48:8f:92:b0:13:f9: 9a:1d:6b:54:71:9d:00:c0:c0:77:a1:f8:a2:e1:54:6a:0c:9f: 67:86:8c:ae:77:8a:cc:f8:e1:92:cc:80:ab:f2:5c:0e:17:47: fd:1a:9a:bf:1c:02:b4:0c:98:c1:17:f9:35:e3:b2:16:5a:eb: 54:ba:77:7a:24:7e:e4:61:26:e2:79:90:0c:bf:d6:96:ec:9a: f4:33:d6:f0:b3:ff:2e:4c:ac:e4:75:ec:6e:9f:7d:36:bb:c0: 89:70:ba:1f:35:0f:ba:c7:50:03:08:a7:d1:c9:a3:0d:fc:31: f1:e8:8f:b1:3e:e8:7d:49:de:b5:fc:cc:43:09:00:fd:f8:d7: 29:c8:65:d4:4c:af:f3:ac:b6:4a:6b:9f:0f:59:81:3c:44:d1: f9:23:7a:f6:34:3f:76:01:50:92:6f:9f:b9:e0:a0:c9:95:f5: c9:33:3b:31:3e:42:02:b2:05:2b:92:05:3b:f3:47:b6:ad:6a: f0:51:b7:63:f4:c2:54:0f:11:ca:eb:b2:bd:9d:3a:fe:45:06: 9a:49:f6:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rLvGWvifX8KjJUIbQj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy NmNlYWIwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD Eyg0ZWJmMDM3YzUyNjZiNjQwNTNlODk0ZjJiYzNiNjc2Y2UxMDI2MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrodG1PNLGVXYZGcyhYKOTnQneXG pIyn+bx+W4DpXHOGcYJ6XRSB7/9Vu1vRz5raStHdRVLPQ+ThNzcpGyHgD1WqiJgb LJEEj6ANwtYBcjMfDLqWIuE9WPdoHJ19gDkavx7YFo+qJF0f+Dx8muJxFWKgGzGG rsllSrfn6GVfAm8lVV8m5FPDebDuRIXwGO3KtjM4w4Z32ohX856BAJKZi4KDeZHa atKqyaxS9wADvD9SlHcC9D5vCiUWiTqtLP07ROwz7ofItNxfm51UmPpqSrRHa8LK ue6rA4sGMdk/Uabuk4nHeQybpVQhXTXDPK+3cvE1x/GdgQDbduliFe+F6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6/A3xSZrZAU+iU8rw7Z2zhAmLTMB8GA1UdIwQY MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt NmQ3NTUwNTJiYjI0LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0 LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZH8h+nK 7WQM48b5GSJW+4xynE7K+pYhjIOUJn1MueBUv/z/clMClLB1UiGwuuZCSI+SsBP5 mh1rVHGdAMDAd6H4ouFUagyfZ4aMrneKzPjhksyAq/JcDhdH/RqavxwCtAyYwRf5 NeOyFlrrVLp3eiR+5GEm4nmQDL/Wluya9DPW8LP/Lkys5HXsbp99NrvAiXC6HzUP usdQAwin0cmjDfwx8eiPsT7ofUnetfzMQwkA/fjXKchl1Eyv86y2SmufD1mBPETR +SN69jQ/dgFQkm+fueCgyZX1yTM7MT5CArIFK5IFO/NHtq1q8FG3Y/TCVA8Ryuuy vZ06/kUGmkn2Rg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:10 2025 by rpki-client