This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json) Hash identifier: LThZveAvkub6Ofbe1GgDNFNnPXCvgD0vuTy/u274Jhc= Subject key identifier: 23:CB:BC:92:EE:B8:E3:CE:BC:F0:91:36:56:72:3D:87:6F:1A:47:F7 Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b Certificate serial: 019B3E6C25BE64C39906AFA2A5F72D0D30C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:00:33 +0000 Manifest this update: Sun 21 Dec 2025 01:00:33 +0000 Manifest next update: Mon 22 Dec 2025 01:00:33 +0000 Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=) 2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: XbGuIgF0AYDFeVap9OKe8RFXSH1sijYE1yOQWMS5S5s=) 3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:25:be:64:c3:99:06:af:a2:a5:f7:2d:0d:30:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b Validity Not Before: Dec 21 01:00:33 2025 GMT Not After : Dec 22 01:00:33 2025 GMT Subject: CN=23cbbc92eeb8e3cebcf0913656723d876f1a47f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7a:b7:ba:cf:ad:39:17:67:b2:65:2e:b0:b6: 3e:6b:cd:1e:a7:f4:60:f0:5b:a0:c6:a3:96:26:94: 25:b2:f3:ef:95:00:4a:b0:a6:5f:38:c3:a2:23:d8: 63:19:58:07:f7:28:b8:c9:d5:17:b4:06:fd:b1:be: eb:33:2e:00:de:2b:7b:9d:0d:0b:27:bc:17:4f:54: f1:52:b8:22:b9:a4:38:7e:23:62:03:17:a7:81:7e: 09:40:cf:4f:30:f4:ad:1f:e5:26:cc:52:76:a7:59: f6:64:87:46:6d:cc:06:59:01:2a:72:75:35:9a:8c: f1:9c:4b:75:b8:7d:a1:c9:be:6b:ab:4c:6d:97:8e: e4:95:6f:83:65:9b:f2:1f:15:d7:30:a0:01:fa:cb: a3:8d:d2:b2:d3:66:96:6e:7b:26:46:c9:a9:2a:c6: e1:00:9b:5a:5c:0e:92:83:34:30:ea:ce:d6:d4:d2: 35:48:ef:6f:f7:93:c3:7d:85:6b:23:51:7d:31:c2: 4c:d0:67:36:b9:2f:f1:75:18:f9:32:cc:30:b4:11: 75:ac:d9:11:ce:06:51:72:5a:c2:95:9a:c0:d2:65: f7:23:b8:94:6c:9e:19:d6:82:29:8c:f9:41:3f:18: 29:0c:ff:3a:f7:90:40:52:bd:16:04:3d:c5:f3:ee: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CB:BC:92:EE:B8:E3:CE:BC:F0:91:36:56:72:3D:87:6F:1A:47:F7 X509v3 Authority Key Identifier: keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e6:d3:0c:23:52:34:28:02:da:f2:ec:7b:a5:3d:07:90:9e: 56:7c:24:14:15:d5:46:e4:0e:e8:cc:5b:d0:c3:4a:c5:39:f1: ec:3b:0a:1a:f9:da:39:2a:3d:8f:e0:1a:87:f1:0e:ad:09:f1: 6c:ca:a4:bb:a3:ef:07:b9:c4:72:71:8b:46:51:0e:c0:d8:47: 06:dc:12:73:64:76:b7:c2:b5:56:b9:3d:66:18:04:22:a6:7f: bb:99:3f:0a:16:29:e3:8e:08:7f:a9:b6:74:51:02:62:81:67: e8:ca:e5:e0:92:09:bc:d4:aa:2a:d1:57:cf:bc:e5:91:7d:c8: 0b:c5:fa:4f:55:8b:de:dc:d0:6f:e0:d4:11:8a:b6:ad:51:55: e8:b8:50:a2:31:89:8d:7e:9b:24:82:56:0e:d7:bc:c1:ee:74: e8:eb:91:c4:21:63:19:f8:6e:bf:3d:0e:6c:c2:dd:c2:33:95: 1b:aa:44:14:6f:21:58:25:03:a2:9a:57:93:dd:3e:59:06:eb: ae:c5:c0:40:71:cc:27:d6:bd:d1:af:e2:87:a8:21:31:ef:01: 52:bc:89:7d:40:24:0f:8a:7e:91:f6:65:b8:a5:62:9e:b2:32: 04:73:b3:80:08:8c:bd:45:fe:e8:78:49:f1:e1:35:37:7b:a2: 9e:c0:ec:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bCW+ZMOZBq+ipfctDTDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTZjNzUwODQwZmU1YzAxMDNhN2Y1MTAyMmM3Y2VlYThm ZTk2OWIwHhcNMjUxMjIxMDEwMDMzWhcNMjUxMjIyMDEwMDMzWjAzMTEwLwYDVQQD EygyM2NiYmM5MmVlYjhlM2NlYmNmMDkxMzY1NjcyM2Q4NzZmMWE0N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nq3us+tORdnsmUusLY+a80ep/Rg 8FugxqOWJpQlsvPvlQBKsKZfOMOiI9hjGVgH9yi4ydUXtAb9sb7rMy4A3it7nQ0L J7wXT1TxUrgiuaQ4fiNiAxengX4JQM9PMPStH+UmzFJ2p1n2ZIdGbcwGWQEqcnU1 mozxnEt1uH2hyb5rq0xtl47klW+DZZvyHxXXMKAB+sujjdKy02aWbnsmRsmpKsbh AJtaXA6SgzQw6s7W1NI1SO9v95PDfYVrI1F9McJM0Gc2uS/xdRj5MswwtBF1rNkR zgZRclrClZrA0mX3I7iUbJ4Z1oIpjPlBPxgpDP8695BAUr0WBD3F8+4CvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPLvJLuuOPOvPCRNlZyPYdvGkf3MB8GA1UdIwQY MBaAFFBWx1CED+XAEDp/UQIsfO6o/pabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDct MzIyODI4NmRhNjAxLzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDctMzIyODI4NmRhNjAx LzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+bTDCNS NCgC2vLse6U9B5CeVnwkFBXVRuQO6Mxb0MNKxTnx7DsKGvnaOSo9j+Aah/EOrQnx bMqku6PvB7nEcnGLRlEOwNhHBtwSc2R2t8K1Vrk9ZhgEIqZ/u5k/ChYp444If6m2 dFECYoFn6Mrl4JIJvNSqKtFXz7zlkX3IC8X6T1WL3tzQb+DUEYq2rVFV6LhQojGJ jX6bJIJWDte8we506OuRxCFjGfhuvz0ObMLdwjOVG6pEFG8hWCUDoppXk90+WQbr rsXAQHHMJ9a90a/ih6ghMe8BUryJfUAkD4p+kfZluKVinrIyBHOzgAiMvUX+6HhJ 8eE1N3uinsDsZg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:25 2025 by rpki-client