This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json) Hash identifier: KZwbjcqkGNA1cB57tIxXAN0mbtcIy9H+x7FQlNP3MF4= Subject key identifier: 78:A8:0B:C6:D4:9B:EF:63:B3:07:EC:02:4A:32:C5:1B:A0:06:C4:53 Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Certificate serial: 019B6CC532FAA8DD7D2EAAB4C201A0015E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft Manifest number: 0E6D Signing time: Tue 30 Dec 2025 01:00:21 +0000 Manifest this update: Tue 30 Dec 2025 01:00:21 +0000 Manifest next update: Wed 31 Dec 2025 01:00:21 +0000 Files and hashes: 1: UEiFsCsSTC0Pg31Jp2WQ3gV01xE.roa (hash: ITQdPL8nWruiENBkvvq4/6T+xWub5wb4OWq1AfgZvKY=) 2: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: NE15YxI6Cn2zt6XOU9eUsCeV65uVbAKLRyp/nNWWFhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:32:fa:a8:dd:7d:2e:aa:b4:c2:01:a0:01:5e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf Validity Not Before: Dec 30 01:00:21 2025 GMT Not After : Dec 31 01:00:21 2025 GMT Subject: CN=78a80bc6d49bef63b307ec024a32c51ba006c453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:56:9e:47:3b:cb:3a:48:f0:54:4b:63:cf: 62:f8:4b:82:2e:58:0e:d4:2a:78:49:1b:60:9d:b6: 0e:c2:ed:4f:4a:6c:d3:da:6c:2a:a7:6f:0e:c2:fe: da:40:b9:d4:58:16:c7:99:0f:bd:1d:20:29:4f:bc: 15:93:30:31:df:d5:9e:b4:68:58:50:32:48:49:fe: 29:57:00:6b:0a:ba:fe:6e:e4:7d:22:0f:af:88:1a: f7:0c:44:19:5a:2b:6d:f0:7d:6b:82:2f:11:25:9c: a7:2c:1f:2f:41:19:60:c6:2d:bf:06:d6:b0:7b:d7: 12:c8:f6:e6:cb:d8:22:fd:a6:4c:65:4f:3c:a4:af: 58:f5:34:31:8d:49:31:d3:1b:ee:7f:26:64:56:fa: fc:8e:6f:f2:ff:7c:c0:bb:57:33:fa:f5:0a:cc:14: 9e:d1:5f:e5:6e:93:fb:5b:4e:11:c8:bc:62:7c:a7: 88:3a:c9:81:2d:21:a7:4f:79:9c:24:3a:cf:bb:12: b9:ad:46:82:df:d8:b8:af:02:ad:8b:00:8c:69:10: 4b:db:18:63:cd:b1:eb:19:51:4a:b5:4d:60:09:c4: 6a:d8:b0:8b:a2:7c:16:b2:ea:4f:81:0a:5e:e7:f4: 4d:67:8c:08:6b:82:c2:f2:10:e4:af:5e:0e:7a:2f: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A8:0B:C6:D4:9B:EF:63:B3:07:EC:02:4A:32:C5:1B:A0:06:C4:53 X509v3 Authority Key Identifier: keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:db:e2:f8:b2:e2:3b:15:36:b5:7b:2e:ea:77:64:89:d6:a4: af:07:96:bc:3d:72:64:1d:11:3f:fd:8a:61:63:f4:9b:11:66: db:9a:14:d3:ce:58:c5:63:ff:55:e8:49:31:82:0a:38:7e:d9: 5a:e6:88:ba:05:12:74:c1:27:2d:5a:6d:30:50:76:4a:bc:56: 0f:35:01:bb:f8:39:6a:7a:9c:f1:8a:fe:52:ab:b0:25:51:9d: bf:f7:5b:4f:4e:0c:1f:68:ec:22:7f:8e:ce:d1:f1:80:8a:13: 78:bc:30:5b:ac:03:1a:0f:b6:89:c0:da:53:26:43:73:b7:7a: 1b:e5:3c:7f:cc:fb:3a:d4:75:23:fe:6f:2f:44:7d:f2:33:f5: ed:62:b1:72:18:b7:30:d9:6a:ea:f2:05:3a:03:d8:8f:c3:2c: 14:25:b0:c9:c0:b9:64:0e:87:9d:25:46:3c:92:c6:d0:d0:6a: 78:3f:03:99:24:06:8c:43:dd:5b:e6:91:75:b2:8f:38:4d:aa: c8:df:7b:1d:1d:bb:c5:ec:ab:49:52:6f:b1:21:12:3f:e4:c2: 85:80:b3:70:d4:5b:fc:6e:f4:ae:66:08:ff:1a:03:cd:de:8c: 8e:b8:5a:ea:72:9d:97:ba:17:92:ec:76:ef:19:45:67:32:0e: c5:42:73:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxTL6qN19Lqq0wgGgAV6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDA2MzJkNGY4MDE1N2Q2OWVmNWI1M2ZlNjI0ZGJmOGFk ZmVmYWYwHhcNMjUxMjMwMDEwMDIxWhcNMjUxMjMxMDEwMDIxWjAzMTEwLwYDVQQD Eyg3OGE4MGJjNmQ0OWJlZjYzYjMwN2VjMDI0YTMyYzUxYmEwMDZjNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY1Wnkc7yzpI8FRLY89i+EuCLlgO 1Cp4SRtgnbYOwu1PSmzT2mwqp28Owv7aQLnUWBbHmQ+9HSApT7wVkzAx39WetGhY UDJISf4pVwBrCrr+buR9Ig+viBr3DEQZWitt8H1rgi8RJZynLB8vQRlgxi2/Btaw e9cSyPbmy9gi/aZMZU88pK9Y9TQxjUkx0xvufyZkVvr8jm/y/3zAu1cz+vUKzBSe 0V/lbpP7W04RyLxifKeIOsmBLSGnT3mcJDrPuxK5rUaC39i4rwKtiwCMaRBL2xhj zbHrGVFKtU1gCcRq2LCLonwWsupPgQpe5/RNZ4wIa4LC8hDkr14Oei+TnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHioC8bUm+9jswfsAkoyxRugBsRTMB8GA1UdIwQY MBaAFLkAYy1PgBV9ae9bU/5iTb+K3++vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEt YjgwZmYyZjE1NTJiLzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEtYjgwZmYyZjE1NTJi LzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9vi+LLi OxU2tXsu6ndkidakrweWvD1yZB0RP/2KYWP0mxFm25oU085YxWP/VehJMYIKOH7Z WuaIugUSdMEnLVptMFB2SrxWDzUBu/g5anqc8Yr+UquwJVGdv/dbT04MH2jsIn+O ztHxgIoTeLwwW6wDGg+2icDaUyZDc7d6G+U8f8z7OtR1I/5vL0R98jP17WKxchi3 MNlq6vIFOgPYj8MsFCWwycC5ZA6HnSVGPJLG0NBqeD8DmSQGjEPdW+aRdbKPOE2q yN97HR27xeyrSVJvsSESP+TChYCzcNRb/G70rmYI/xoDzd6Mjrha6nKdl7oXkux2 7xlFZzIOxUJzGg== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:54 2025 by rpki-client