This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft File: uBVaw0tuwV8iaumRPWrs_KenhNQ.mft (raw, json) Hash identifier: +LphyobX9rujEXA+VkmbnlMiYFuZlI6ftPLv+GW+2gs= Subject key identifier: D5:E9:A6:CC:5D:E5:DE:5C:45:0D:84:F7:0E:09:47:3B:F0:23:25:B5 Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4 Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4 Certificate serial: 019B3D599FF79A153F42DCE246DA41837DA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:00:42 +0000 Manifest this update: Sat 20 Dec 2025 20:00:42 +0000 Manifest next update: Sun 21 Dec 2025 20:00:42 +0000 Files and hashes: 1: Bd62smJ1C-edCl13IR0Hb5ZPh3I.roa (hash: D8e7F2pk9nxCBOMnmY0ESYCk1Qvc2+eZhlAJre7/lXk=) 2: glpdHMRUe--_MG3TqcToADTZm2g.roa (hash: nYyFnTdPiSLG8Bu+HPTjJb4kOHlPj2DnjVnWwqRkp6Y=) 3: uBVaw0tuwV8iaumRPWrs_KenhNQ.crl (hash: 9LY+ZHKu4webwL+MIwoHhq8vuvJoko5GpjYTGwQ7ieo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9f:f7:9a:15:3f:42:dc:e2:46:da:41:83:7d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4 Validity Not Before: Dec 20 20:00:42 2025 GMT Not After : Dec 21 20:00:42 2025 GMT Subject: CN=d5e9a6cc5de5de5c450d84f70e09473bf02325b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:59:7c:19:c2:1f:0b:87:43:3d:b3:06:a0: ad:b2:ab:d1:3e:4f:ed:39:23:6d:a4:84:6c:11:5f: 84:42:20:cc:39:73:c5:2f:83:e1:31:93:49:6c:fb: 63:d4:a2:4a:a5:6a:97:34:b1:dc:1b:90:b2:78:fc: 7a:fe:0a:21:ca:e7:0d:0a:76:27:86:01:57:3b:7f: 45:c0:d2:b8:54:5b:c6:93:c8:24:f5:73:71:d7:55: 84:62:21:af:3b:05:ba:97:37:c4:3e:1d:a5:8a:97: d5:f2:14:6a:d4:21:89:fb:12:e3:04:83:f9:26:e6: 7e:7f:b4:47:5e:71:61:bd:3d:5a:a0:25:64:b9:bb: 56:50:2a:03:70:69:03:a8:df:16:f1:2a:96:57:8e: f0:5f:46:9c:5c:0c:1a:64:13:7e:2d:8b:5d:01:4b: 94:c3:2b:6c:4e:7c:bf:68:25:49:cb:05:66:d2:0e: 8e:ac:3b:c7:06:68:3d:50:f7:de:4d:cc:06:12:90: f0:38:11:6a:d9:b7:12:fe:49:fc:45:fe:c6:8b:67: e8:3b:5c:5e:ce:bb:ad:67:c2:09:ff:a9:9f:1a:6e: c5:36:ed:b8:ef:69:4d:ce:85:9a:3f:7b:34:25:ba: e8:30:ac:56:08:27:03:75:05:2b:a1:42:99:48:61: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:A6:CC:5D:E5:DE:5C:45:0D:84:F7:0E:09:47:3B:F0:23:25:B5 X509v3 Authority Key Identifier: keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:95:e0:66:78:3a:4b:89:c8:9e:b3:5f:90:ca:34:2d:2d:54: 54:71:b8:0e:82:55:49:06:ab:2a:f7:ee:33:6d:72:e7:e2:a7: ae:93:aa:42:53:b2:9d:f1:1e:b9:c5:8e:e8:02:e0:22:c1:c1: 25:9b:45:1e:d3:b9:1f:e9:b0:08:ab:74:5e:f7:15:12:02:48: 50:22:99:65:c8:88:f4:a4:aa:62:40:8d:b3:5b:8f:ee:73:a2: f3:97:1b:b5:60:43:3a:37:6e:d7:fe:a2:a8:11:70:4d:df:bd: d8:de:09:98:17:45:41:59:03:e0:49:a0:a0:43:6c:f4:33:86: d9:6f:8c:d6:8e:d3:7a:37:91:4f:1d:79:44:bc:a5:c2:8e:e3: 82:05:79:a3:22:78:cf:5e:80:7d:56:e0:76:67:db:36:9a:c9: dc:10:2e:f7:71:1d:a3:b5:f6:16:11:99:1e:ab:76:6d:77:5f: 0b:cd:e8:04:92:6c:c5:8d:ed:37:9a:ef:c7:87:ff:71:7a:ed: f6:63:db:78:5e:b6:c1:49:53:7c:05:a6:de:cc:82:c8:59:d5: db:e4:c9:16:0c:de:57:27:fb:f0:7a:da:ca:94:75:2b:23:47: b2:9c:ef:67:bb:c5:26:47:bc:7d:c1:0b:3e:6a:ee:25:92:b6: e1:0c:87:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZ/3mhU/QtziRtpBg32iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTU1YWMzNGI2ZWMxNWYyMjZhZTk5MTNkNmFlY2ZjYTdh Nzg0ZDQwHhcNMjUxMjIwMjAwMDQyWhcNMjUxMjIxMjAwMDQyWjAzMTEwLwYDVQQD EyhkNWU5YTZjYzVkZTVkZTVjNDUwZDg0ZjcwZTA5NDczYmYwMjMyNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUdZfBnCHwuHQz2zBqCtsqvRPk/t OSNtpIRsEV+EQiDMOXPFL4PhMZNJbPtj1KJKpWqXNLHcG5CyePx6/gohyucNCnYn hgFXO39FwNK4VFvGk8gk9XNx11WEYiGvOwW6lzfEPh2lipfV8hRq1CGJ+xLjBIP5 JuZ+f7RHXnFhvT1aoCVkubtWUCoDcGkDqN8W8SqWV47wX0acXAwaZBN+LYtdAUuU wytsTny/aCVJywVm0g6OrDvHBmg9UPfeTcwGEpDwOBFq2bcS/kn8Rf7Gi2foO1xe zrutZ8IJ/6mfGm7FNu2472lNzoWaP3s0JbroMKxWCCcDdQUroUKZSGGrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXppsxd5d5cRQ2E9w4JRzvwIyW1MB8GA1UdIwQY MBaAFLgVWsNLbsFfImrpkT1q7Pynp4TUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJWYXcwdHV3VjhpYXVtUlBXcnNfS2VuaE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MmEwMWQtZmVlYy00MGZkLTk4ZWQt YmM4YzZkMjg2ZjFjLzEvdUJWYXcwdHV3VjhpYXVtUlBXcnNfS2VuaE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82MmEwMWQtZmVlYy00MGZkLTk4ZWQtYmM4YzZkMjg2ZjFj LzEvdUJWYXcwdHV3VjhpYXVtUlBXcnNfS2VuaE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopXgZng6 S4nInrNfkMo0LS1UVHG4DoJVSQarKvfuM21y5+KnrpOqQlOynfEeucWO6ALgIsHB JZtFHtO5H+mwCKt0XvcVEgJIUCKZZciI9KSqYkCNs1uP7nOi85cbtWBDOjdu1/6i qBFwTd+92N4JmBdFQVkD4EmgoENs9DOG2W+M1o7TejeRTx15RLylwo7jggV5oyJ4 z16AfVbgdmfbNprJ3BAu93Edo7X2FhGZHqt2bXdfC83oBJJsxY3tN5rvx4f/cXrt 9mPbeF62wUlTfAWm3syCyFnV2+TJFgzeVyf78HraypR1KyNHspzvZ7vFJke8fcEL PmruJZK24QyHxg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:00 2025 by rpki-client