This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json) Hash identifier: p+3lTE0Wc3YE+YGI8YOo6GDn79akeQ7J8PiTOTzD6h4= Subject key identifier: 5D:BF:FE:8A:8D:02:99:30:CB:51:D8:87:50:8D:5B:46:66:D8:90:07 Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0 Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0 Certificate serial: 019B804C38E809D36A4E8E39CB16D7DD03B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 20:00:37 +0000 Manifest this update: Fri 02 Jan 2026 20:00:37 +0000 Manifest next update: Sat 03 Jan 2026 20:00:37 +0000 Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: M5R/C63lGzbbFm+K8S/Syy/o78jFnhAPtGez39mbcf0=) 2: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (hash: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:38:e8:09:d3:6a:4e:8e:39:cb:16:d7:dd:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0 Validity Not Before: Jan 2 20:00:37 2026 GMT Not After : Jan 3 20:00:37 2026 GMT Subject: CN=5dbffe8a8d029930cb51d887508d5b4666d89007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:7e:47:8b:53:97:70:42:44:38:00:c8:91: 1f:49:1a:14:de:3c:b8:77:f8:2f:04:81:48:ec:3f: f4:c9:17:0e:a4:8d:d8:26:b4:34:c3:41:7f:31:4d: de:7e:2d:4a:01:7c:b2:d7:c0:0a:22:0c:31:d4:10: b9:1c:27:f8:1e:03:a3:1c:71:6c:ad:4f:e2:b7:d8: c3:e8:5a:ee:ea:60:22:47:0f:80:b7:e0:8a:ee:a7: 42:af:9b:a3:f3:fa:dd:be:f4:56:d1:ed:cb:98:a9: db:8f:ee:12:d6:c1:8e:82:1b:82:73:67:76:e7:92: 33:cf:26:09:b8:38:f0:e1:1d:97:dd:41:17:e9:25: 89:59:d6:56:c4:87:d4:f5:c0:21:ad:dc:85:78:4b: cb:64:82:3a:14:f6:3c:f0:b7:f2:54:07:b8:55:0f: 96:25:dc:19:36:66:24:c5:7a:84:65:8b:3c:86:0f: 20:be:fc:01:b8:8d:fd:75:78:f0:07:e4:49:89:6f: 1c:54:57:ec:39:f9:60:6e:12:d3:07:ce:20:ba:a8: 0c:c2:65:18:89:32:00:e2:5d:93:b7:30:3c:05:f1: da:d8:a0:29:2a:66:0a:31:55:5a:91:e7:12:5c:05: f6:60:d5:a6:76:ed:60:eb:b4:0b:f4:f8:e5:e8:b8: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:FE:8A:8D:02:99:30:CB:51:D8:87:50:8D:5B:46:66:D8:90:07 X509v3 Authority Key Identifier: keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:93:07:aa:d3:07:32:bd:f1:b2:01:61:77:4d:4e:f9:cc:bf: 24:48:c5:c5:32:31:4f:5c:0d:d9:de:c7:25:24:50:45:23:1b: 9b:3c:e3:43:59:1a:37:9f:6c:91:f9:5f:12:70:cc:0a:bd:b1: 1c:a1:5f:17:37:2c:5b:68:82:cf:91:f7:e7:d7:0b:2c:7a:17: 40:94:f9:f5:95:27:2c:99:fd:56:e6:1e:9b:62:ab:41:a7:0b: 81:1f:fa:f2:f4:cf:0d:87:5d:72:11:1f:e6:e8:e0:9a:b6:39: 4c:6c:3f:56:6a:8b:4c:9a:28:84:5b:2d:9a:c1:57:61:d2:85: ed:41:6b:45:f6:12:c7:d4:03:fb:77:42:00:0c:fc:83:0a:a3: 0c:45:b4:7e:1c:b2:bb:2b:1d:db:16:f1:d2:c6:e8:5d:78:42: f2:48:da:e5:be:f1:c3:79:07:51:da:eb:37:0a:5e:41:93:60: 8d:47:c3:65:64:86:af:4b:3a:7a:fa:22:6b:6e:77:ac:a6:76: 9e:a5:c8:46:13:f6:cf:0f:7a:b9:7e:c3:00:73:84:95:f6:42: 49:a1:1f:16:7b:8a:96:eb:d9:56:7e:b1:2c:0e:cc:76:10:ce: 6d:f1:dd:52:bb:43:84:5b:cf:bf:a1:e8:49:9a:07:a0:98:87: 4c:4d:df:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATDjoCdNqTo45yxbX3QO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDZlMjQ0MzBkYmE4OWJkY2UyMmM2YmYzMjgxOGNiZGU2 YmJjYTAwHhcNMjYwMTAyMjAwMDM3WhcNMjYwMTAzMjAwMDM3WjAzMTEwLwYDVQQD Eyg1ZGJmZmU4YThkMDI5OTMwY2I1MWQ4ODc1MDhkNWI0NjY2ZDg5MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+5+R4tTl3BCRDgAyJEfSRoU3jy4 d/gvBIFI7D/0yRcOpI3YJrQ0w0F/MU3efi1KAXyy18AKIgwx1BC5HCf4HgOjHHFs rU/it9jD6Fru6mAiRw+At+CK7qdCr5uj8/rdvvRW0e3LmKnbj+4S1sGOghuCc2d2 55IzzyYJuDjw4R2X3UEX6SWJWdZWxIfU9cAhrdyFeEvLZII6FPY88LfyVAe4VQ+W JdwZNmYkxXqEZYs8hg8gvvwBuI39dXjwB+RJiW8cVFfsOflgbhLTB84guqgMwmUY iTIA4l2TtzA8BfHa2KApKmYKMVVakecSXAX2YNWmdu1g67QL9Pjl6Li2QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2//oqNApkwy1HYh1CNW0Zm2JAHMB8GA1UdIwQY MBaAFNVG4kQw26ib3OIsa/MoGMvea7ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjkt ZDA2Y2ZhMjI2YzY0LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjktZDA2Y2ZhMjI2YzY0 LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpMHqtMH Mr3xsgFhd01O+cy/JEjFxTIxT1wN2d7HJSRQRSMbmzzjQ1kaN59skflfEnDMCr2x HKFfFzcsW2iCz5H359cLLHoXQJT59ZUnLJn9VuYem2KrQacLgR/68vTPDYddchEf 5ujgmrY5TGw/VmqLTJoohFstmsFXYdKF7UFrRfYSx9QD+3dCAAz8gwqjDEW0fhyy uysd2xbx0sboXXhC8kja5b7xw3kHUdrrNwpeQZNgjUfDZWSGr0s6evoia253rKZ2 nqXIRhP2zw96uX7DAHOElfZCSaEfFnuKluvZVn6xLA7MdhDObfHdUrtDhFvPv6Ho SZoHoJiHTE3fSA== -----END CERTIFICATE-----Generated at Sat Jan 3 03:56:03 2026 by rpki-client