This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json) Hash identifier: 3hX4Yu2hnGYFXUJc50KUkN5W687LE3CtUhVGWrD+q7c= Subject key identifier: DC:A1:09:B8:19:C2:E0:F2:6C:86:B9:15:03:0D:C9:0A:F9:0C:0E:ED Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4 Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4 Certificate serial: 019B6CC5D3F9B4E9B5116B8F1E130E55AEFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft Manifest number: 0255 Signing time: Tue 30 Dec 2025 01:01:02 +0000 Manifest this update: Tue 30 Dec 2025 01:01:02 +0000 Manifest next update: Wed 31 Dec 2025 01:01:02 +0000 Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: ZjlmABAYQHfn5mXEiXE9T5yUOHKzU8FUqW3ej0xKm74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:d3:f9:b4:e9:b5:11:6b:8f:1e:13:0e:55:ae:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4 Validity Not Before: Dec 30 01:01:02 2025 GMT Not After : Dec 31 01:01:02 2025 GMT Subject: CN=dca109b819c2e0f26c86b915030dc90af90c0eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:80:9d:30:df:42:d8:10:a1:cc:3e:c5:01: fc:a9:43:85:95:b2:2a:2c:7b:8b:d3:32:16:bc:9d: ec:00:dd:71:54:31:1b:a4:10:1e:cc:73:17:8f:38: 1b:00:d0:b8:94:cf:94:9b:f8:ad:f4:6d:60:ad:cf: 2b:7f:fa:76:a3:9c:f5:2b:c4:94:c8:3a:91:72:6e: 76:4f:73:6b:5a:a9:ad:60:b0:23:cf:90:16:8c:37: 6e:29:bb:bf:40:5e:f4:08:ac:40:bb:3e:bc:3a:72: f2:b1:fb:d6:d7:bf:33:e1:b9:46:4b:9a:21:e7:38: 78:21:65:3a:09:ba:89:46:7f:77:0d:68:74:65:df: df:7a:7e:2e:a2:9a:9e:7c:a7:dc:7f:ac:f5:a4:35: 75:27:98:3b:95:ed:80:bc:5f:13:53:22:27:a5:a0: da:54:c9:b8:ea:d3:01:2c:68:f4:0c:41:58:10:35: 3f:ff:89:c7:32:0f:80:bb:f3:9d:09:0b:7b:0d:42: 68:c5:1d:75:19:95:bf:9c:0e:b5:74:8f:33:59:ca: a2:e6:a7:70:bc:51:e3:8f:70:63:ff:11:70:2c:0d: ad:d4:e8:6b:5e:ea:7d:9d:37:9f:22:e7:e6:31:25: f2:f8:ec:76:10:28:31:4f:63:08:b5:f9:59:8e:f0: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A1:09:B8:19:C2:E0:F2:6C:86:B9:15:03:0D:C9:0A:F9:0C:0E:ED X509v3 Authority Key Identifier: keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:38:fe:05:c1:e5:bc:82:17:b0:0a:bd:4d:32:67:9e:6c: b5:a3:d0:fb:7d:fb:71:c2:71:e1:c4:48:ab:25:5e:cc:a8:f6: 08:f1:4e:d6:f1:72:48:ee:7f:9b:66:a6:4f:db:8b:8c:71:73: 4f:86:43:25:24:d0:88:1e:2d:38:3c:e7:1d:98:80:cf:55:ab: 2a:8f:27:82:57:8a:73:cb:58:ce:17:b5:7e:34:f9:6d:df:44: b5:bd:31:88:cc:0a:96:be:fb:59:96:cc:44:d0:7e:ef:1f:85: 2a:98:81:72:05:1b:7a:ee:cb:1b:73:a1:f2:93:41:d0:14:cc: 67:63:fb:a8:4b:ba:8c:f1:f5:4d:c1:f6:c8:e0:70:8c:16:35: f7:c9:6d:62:fd:e2:21:e7:ae:21:6e:3f:57:80:bc:ed:6a:d2: cd:95:17:71:a9:11:c5:07:c9:9a:fe:65:d5:02:6a:16:fa:1c: 35:d5:10:cf:80:bc:7a:ca:9b:ff:3e:44:7d:48:40:d2:2e:1b: 4d:07:55:f3:d3:6b:04:d9:75:4c:e7:29:98:db:c4:12:55:4e: 87:ba:58:2a:97:d8:b6:50:fd:fe:96:77:3e:a8:9e:43:50:28: f5:2f:fe:c6:d1:c1:e2:73:25:d5:89:44:09:20:c9:1f:83:19: c2:4c:c9:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxdP5tOm1EWuPHhMOVa78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGE0ZDIyOTkxN2Q0NjU3MzhhNDgyMWI2ZWVjNWJlYjI0 ZTZlZTQwHhcNMjUxMjMwMDEwMTAyWhcNMjUxMjMxMDEwMTAyWjAzMTEwLwYDVQQD EyhkY2ExMDliODE5YzJlMGYyNmM4NmI5MTUwMzBkYzkwYWY5MGMwZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6+AnTDfQtgQocw+xQH8qUOFlbIq LHuL0zIWvJ3sAN1xVDEbpBAezHMXjzgbANC4lM+Um/it9G1grc8rf/p2o5z1K8SU yDqRcm52T3NrWqmtYLAjz5AWjDduKbu/QF70CKxAuz68OnLysfvW178z4blGS5oh 5zh4IWU6CbqJRn93DWh0Zd/fen4uopqefKfcf6z1pDV1J5g7le2AvF8TUyInpaDa VMm46tMBLGj0DEFYEDU//4nHMg+Au/OdCQt7DUJoxR11GZW/nA61dI8zWcqi5qdw vFHjj3Bj/xFwLA2t1OhrXup9nTefIufmMSXy+Ox2ECgxT2MItflZjvDSXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyhCbgZwuDybIa5FQMNyQr5DA7tMB8GA1UdIwQY MBaAFLoKTSKZF9Rlc4pIIbbuxb6yTm7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQt MDU3YWQ5MzMxZmE4LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQtMDU3YWQ5MzMxZmE4 LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6Y4/gXB 5byCF7AKvU0yZ55staPQ+337ccJx4cRIqyVezKj2CPFO1vFySO5/m2amT9uLjHFz T4ZDJSTQiB4tODznHZiAz1WrKo8ngleKc8tYzhe1fjT5bd9Etb0xiMwKlr77WZbM RNB+7x+FKpiBcgUbeu7LG3Oh8pNB0BTMZ2P7qEu6jPH1TcH2yOBwjBY198ltYv3i IeeuIW4/V4C87WrSzZUXcakRxQfJmv5l1QJqFvocNdUQz4C8esqb/z5EfUhA0i4b TQdV89NrBNl1TOcpmNvEElVOh7pYKpfYtlD9/pZ3PqieQ1Ao9S/+xtHB4nMl1YlE CSDJH4MZwkzJuw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:48 2025 by rpki-client