This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json) Hash identifier: RXapRvnn73QdTAHY4v0wWU2EP7NBtl7b8VVsM7NHxj8= Subject key identifier: F0:E0:95:42:89:E4:4E:A3:83:E6:D2:DE:0E:39:2E:9B:7B:27:EB:78 Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2 Certificate serial: 019B299C042E90492E50A88531096EE79D09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft Manifest number: 0AE2 Signing time: Wed 17 Dec 2025 00:00:49 +0000 Manifest this update: Wed 17 Dec 2025 00:00:49 +0000 Manifest next update: Thu 18 Dec 2025 00:00:49 +0000 Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: n/BgjIgVh+fIFboG4YDkqquKdNDFSW0T3a7tgHuKOSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:04:2e:90:49:2e:50:a8:85:31:09:6e:e7:9d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2 Validity Not Before: Dec 17 00:00:49 2025 GMT Not After : Dec 18 00:00:49 2025 GMT Subject: CN=f0e0954289e44ea383e6d2de0e392e9b7b27eb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:21:2a:72:04:5d:0f:c9:c6:df:84:f7:f6: 9b:92:88:7d:88:b0:12:a1:c9:13:1b:b9:af:b4:91: cb:9c:4a:74:23:92:8d:d4:3f:58:4f:dc:b0:cd:bb: 58:e3:01:a2:c5:d6:b8:ff:16:12:9f:26:96:01:06: 14:67:8a:4c:10:b1:f5:cd:82:61:c5:32:6c:c9:88: 8f:f6:27:38:36:3d:aa:98:34:78:c4:54:ff:70:95: a2:22:76:d5:96:83:cf:12:fd:9b:f7:27:f3:b0:f5: 88:16:ce:fd:41:27:d8:99:fd:15:03:1c:5e:0a:ee: f9:4e:4c:e0:2e:b9:04:6b:27:7d:6d:65:66:c2:47: dc:10:1d:66:04:9c:31:fe:01:e2:8c:85:1b:a9:be: 80:a9:41:a6:8d:d8:f8:52:34:cc:ad:da:2e:45:91: 37:76:f5:83:0b:c6:64:eb:d3:d1:e0:d8:70:bc:90: c8:03:d2:5b:0e:a7:73:86:dd:b7:4f:5b:68:80:cf: bf:5e:8d:06:3d:84:5d:29:f7:d2:de:53:8d:b7:20: 1d:c7:6d:12:c4:12:10:7d:5a:64:70:91:90:c2:14: 4b:ec:9e:ce:13:6f:28:66:f7:6b:a5:26:da:8c:ec: 7b:14:fe:35:53:37:96:f2:2a:52:eb:87:93:74:7e: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:95:42:89:E4:4E:A3:83:E6:D2:DE:0E:39:2E:9B:7B:27:EB:78 X509v3 Authority Key Identifier: keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:32:e1:84:19:75:1f:ad:b4:a8:7d:5e:38:63:5b:c2:cd:31: ac:35:36:0e:98:db:fe:8a:d1:c8:c1:24:76:62:ea:91:2f:33: 06:47:04:66:13:06:4b:49:c5:4e:64:d5:a4:ba:0f:b7:8c:33: 61:01:71:de:30:f6:d3:25:1e:53:9c:2b:25:71:94:2c:a8:99: e3:a7:1c:06:70:01:61:18:cb:dd:16:6a:1d:ec:bd:52:25:8e: 6a:b9:75:d6:a2:16:63:94:53:a9:96:eb:6b:95:c2:33:35:be: 1b:da:6b:b8:20:0b:2d:54:1c:58:12:9c:94:11:fc:19:85:a8: 40:37:ca:ae:16:83:0e:37:4c:dd:c0:cd:a7:be:23:06:e7:32: 78:6a:b4:62:16:59:0d:ec:05:3d:17:67:49:4e:a6:95:52:31: 37:96:ec:1c:a9:b0:bc:6c:53:33:61:da:0b:5b:5a:6e:3e:59: 72:99:bf:32:8a:a7:34:75:d7:f5:69:cd:76:1c:f9:a7:3f:8b: 34:6c:a9:84:37:ab:29:a9:53:17:a7:0b:73:8d:b7:4f:aa:08: 9d:bb:72:95:7a:61:9e:37:2a:27:14:3b:8d:96:e4:52:7e:97: c8:49:e6:30:6c:ef:41:82:ab:70:80:65:b9:14:f8:d8:9a:8a: f3:d1:95:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnAQukEkuUKiFMQlu550JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk MmI4YjIwHhcNMjUxMjE3MDAwMDQ5WhcNMjUxMjE4MDAwMDQ5WjAzMTEwLwYDVQQD EyhmMGUwOTU0Mjg5ZTQ0ZWEzODNlNmQyZGUwZTM5MmU5YjdiMjdlYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUghKnIEXQ/Jxt+E9/abkoh9iLAS ockTG7mvtJHLnEp0I5KN1D9YT9ywzbtY4wGixda4/xYSnyaWAQYUZ4pMELH1zYJh xTJsyYiP9ic4Nj2qmDR4xFT/cJWiInbVloPPEv2b9yfzsPWIFs79QSfYmf0VAxxe Cu75TkzgLrkEayd9bWVmwkfcEB1mBJwx/gHijIUbqb6AqUGmjdj4UjTMrdouRZE3 dvWDC8Zk69PR4NhwvJDIA9JbDqdzht23T1togM+/Xo0GPYRdKffS3lONtyAdx20S xBIQfVpkcJGQwhRL7J7OE28oZvdrpSbajOx7FP41UzeW8ipS64eTdH5rQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDglUKJ5E6jg+bS3g45Lpt7J+t4MB8GA1UdIwQY MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTLhhBl1 H620qH1eOGNbws0xrDU2Dpjb/orRyMEkdmLqkS8zBkcEZhMGS0nFTmTVpLoPt4wz YQFx3jD20yUeU5wrJXGULKiZ46ccBnABYRjL3RZqHey9UiWOarl11qIWY5RTqZbr a5XCMzW+G9pruCALLVQcWBKclBH8GYWoQDfKrhaDDjdM3cDNp74jBucyeGq0YhZZ DewFPRdnSU6mlVIxN5bsHKmwvGxTM2HaC1tabj5Zcpm/MoqnNHXX9WnNdhz5pz+L NGyphDerKalTF6cLc423T6oInbtylXphnjcqJxQ7jZbkUn6XyEnmMGzvQYKrcIBl uRT42JqK89GVSQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:43:36 2025 by rpki-client