This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json) Hash identifier: uep6raKCD+pvD0ISmDxDce7n5h/4r4cb04HFb/sPgYs= Subject key identifier: CB:8B:B4:60:C2:0B:25:FF:EA:72:5A:D1:C2:2A:CD:2F:F1:A3:2C:00 Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Certificate serial: 019B4C5F148DD344FD0DC52AC426D969E90A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 18:00:58 +0000 Manifest this update: Tue 23 Dec 2025 18:00:58 +0000 Manifest next update: Wed 24 Dec 2025 18:00:58 +0000 Files and hashes: 1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=) 2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: ot9RhSaXR9D+PtXGGoJH/fe/PQ5RDpVkszjSHqrxEi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:14:8d:d3:44:fd:0d:c5:2a:c4:26:d9:69:e9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Validity Not Before: Dec 23 18:00:58 2025 GMT Not After : Dec 24 18:00:58 2025 GMT Subject: CN=cb8bb460c20b25ffea725ad1c22acd2ff1a32c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:31:1e:9a:8f:ab:5f:b2:03:63:c5:a4:3b: d0:23:a1:72:8b:e1:9c:f3:f5:b2:3b:84:05:5f:19: 83:9a:d3:16:f4:d1:57:91:77:3b:5c:59:2f:3d:cf: 69:99:61:65:ec:ac:ae:5f:73:40:03:88:17:8d:6c: 47:9b:05:35:82:72:3b:7a:c5:b0:78:4e:4b:83:99: a2:fc:25:91:84:51:b0:bb:63:c8:be:3e:3b:ea:7e: b9:62:74:67:9b:76:cc:78:6b:bf:e6:32:ae:69:b4: ba:f4:a3:53:f9:90:84:40:6e:1e:d1:9b:5d:da:cc: 82:c9:b7:0b:3a:34:e3:cb:dc:53:e3:bc:53:e9:60: 29:ba:a8:47:95:eb:01:d1:01:d7:13:ee:fa:84:82: f1:7f:34:f0:cf:e0:5a:c5:bc:79:38:c2:20:84:23: 9f:31:b9:df:34:d6:6a:b9:1a:84:24:34:4e:f9:96: 26:23:cc:f0:ae:8a:e5:1e:92:95:b5:25:6e:53:21: b8:0d:5a:33:ac:d9:38:41:21:d4:4c:4f:8f:73:b9: 70:01:26:43:2f:61:90:70:31:e7:39:6f:59:86:78: 8f:e3:e6:07:39:a8:73:1e:47:16:3d:76:c5:20:49: ec:8b:8d:cb:5c:b7:b2:3c:7c:44:c8:e2:ba:b0:ec: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8B:B4:60:C2:0B:25:FF:EA:72:5A:D1:C2:2A:CD:2F:F1:A3:2C:00 X509v3 Authority Key Identifier: keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:02:73:88:37:2e:90:92:58:67:48:c9:44:4b:6b:9c:66:b5: c4:26:a4:08:e1:5d:7c:02:e7:12:f0:88:c5:59:5f:13:64:c1: 64:f7:1e:a0:23:e6:04:5d:48:13:f8:da:ac:4a:17:86:19:82: c2:cd:00:61:ba:2e:d5:96:dc:73:c9:f7:01:38:8e:bb:f8:3b: 64:6c:d2:e3:b2:6a:b8:ab:df:45:f9:7e:66:18:6d:1d:4b:99: 2a:4f:c3:08:ce:75:35:f2:42:e3:9d:f7:08:cd:30:77:80:1b: 67:a3:60:58:c5:72:f9:c9:42:8b:80:bb:18:87:e3:84:80:a5: 9d:73:e9:9d:28:8e:7d:8a:ce:b6:8f:d6:ac:7a:a0:45:0e:1c: 93:6c:0c:e9:dc:2c:50:0f:04:8b:a0:dd:ee:e1:59:c8:37:61: 58:4d:ea:c6:36:d2:a5:60:16:c2:42:e5:da:31:e8:79:e7:93: c9:76:36:ae:b5:16:26:84:bf:71:a4:ae:0f:9b:a6:3a:84:e2: 90:b0:00:48:c7:98:bb:e0:26:4f:21:c3:7a:30:52:7c:ca:04: 5a:4b:f1:92:bd:e2:55:7b:da:58:2f:28:38:27:b1:6a:cb:b3: 5d:5c:e6:52:08:98:51:a3:b2:ff:73:4e:20:c9:c5:32:00:36: 6a:29:9e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXxSN00T9DcUqxCbZaekKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl NWE2MGEwHhcNMjUxMjIzMTgwMDU4WhcNMjUxMjI0MTgwMDU4WjAzMTEwLwYDVQQD EyhjYjhiYjQ2MGMyMGIyNWZmZWE3MjVhZDFjMjJhY2QyZmYxYTMyYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAYxHpqPq1+yA2PFpDvQI6Fyi+Gc 8/WyO4QFXxmDmtMW9NFXkXc7XFkvPc9pmWFl7KyuX3NAA4gXjWxHmwU1gnI7esWw eE5Lg5mi/CWRhFGwu2PIvj476n65YnRnm3bMeGu/5jKuabS69KNT+ZCEQG4e0Ztd 2syCybcLOjTjy9xT47xT6WApuqhHlesB0QHXE+76hILxfzTwz+Baxbx5OMIghCOf MbnfNNZquRqEJDRO+ZYmI8zwrorlHpKVtSVuUyG4DVozrNk4QSHUTE+Pc7lwASZD L2GQcDHnOW9ZhniP4+YHOahzHkcWPXbFIEnsi43LXLeyPHxEyOK6sOyxqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuLtGDCCyX/6nJa0cIqzS/xoywAMB8GA1UdIwQY MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt Y2QxNGZlMmQ5NTcxLzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQJziDcu kJJYZ0jJREtrnGa1xCakCOFdfALnEvCIxVlfE2TBZPceoCPmBF1IE/jarEoXhhmC ws0AYbou1Zbcc8n3ATiOu/g7ZGzS47JquKvfRfl+ZhhtHUuZKk/DCM51NfJC4533 CM0wd4AbZ6NgWMVy+clCi4C7GIfjhIClnXPpnSiOfYrOto/WrHqgRQ4ck2wM6dws UA8Ei6Dd7uFZyDdhWE3qxjbSpWAWwkLl2jHoeeeTyXY2rrUWJoS/caSuD5umOoTi kLAASMeYu+AmTyHDejBSfMoEWkvxkr3iVXvaWC8oOCexasuzXVzmUgiYUaOy/3NO IMnFMgA2aimesA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:55:46 2025 by rpki-client