This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json) Hash identifier: 4V1MTfBmRu8Bf2g8LBTk+AnkhwDqPUhy2qTj4kKDydw= Subject key identifier: 61:BC:4C:68:6A:C3:41:59:4F:F8:45:14:4F:D1:95:7D:68:4D:03:4A Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1 Certificate serial: 019B3D22FAD2F0F66E70C5A14B4DD7094EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft Manifest number: 0AF6 Signing time: Sat 20 Dec 2025 19:01:01 +0000 Manifest this update: Sat 20 Dec 2025 19:01:01 +0000 Manifest next update: Sun 21 Dec 2025 19:01:01 +0000 Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=) 2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: Ktj2MTbGB/Ypazp+uPplCnatKIC+LJnT+jMXnDjiTGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:fa:d2:f0:f6:6e:70:c5:a1:4b:4d:d7:09:4e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1 Validity Not Before: Dec 20 19:01:01 2025 GMT Not After : Dec 21 19:01:01 2025 GMT Subject: CN=61bc4c686ac341594ff845144fd1957d684d034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:0d:6b:7d:f1:f0:6b:95:ae:c2:17:b4:58: 62:72:57:56:24:bd:d9:24:67:a4:45:2a:4e:4b:c6: 66:cc:6d:4d:95:95:d4:de:8f:50:5b:cd:8f:52:26: 2d:73:77:09:55:33:b7:99:c8:0a:fb:b3:eb:27:40: 26:31:0c:ac:35:d3:46:e5:df:a9:d3:09:16:0c:b8: dd:96:58:d1:55:8b:2a:83:4e:e3:50:43:27:1f:5b: 2a:5f:6e:0a:e7:43:02:eb:a3:be:61:d5:0d:4d:2b: 73:b5:7d:af:ba:4d:d4:12:52:61:da:b9:4c:33:53: 2c:09:7e:d6:d9:07:34:bd:72:02:78:8c:b1:88:d0: 6d:d8:37:c9:f3:44:4c:7f:64:72:43:d8:79:75:4a: 71:e2:3a:35:e1:0d:f8:6e:b2:af:42:07:a4:d7:ba: 80:6f:c7:28:76:ef:f8:88:d8:8e:4c:e3:90:3a:b2: 4a:a9:3b:43:91:fe:a1:d1:33:97:b3:7e:1a:29:94: 93:74:2a:1c:14:9c:4a:7c:0d:02:2f:5d:fd:d1:cb: 3e:40:e7:0f:e6:dc:88:d2:2c:d7:5a:c5:5c:be:68: 3c:a0:10:04:de:cc:b3:30:a6:16:f2:27:b5:c8:24: 10:16:b0:5a:0e:37:77:4d:bc:8c:92:25:f1:06:b3: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:4C:68:6A:C3:41:59:4F:F8:45:14:4F:D1:95:7D:68:4D:03:4A X509v3 Authority Key Identifier: keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c4:0a:13:85:0c:02:56:4a:bf:4f:ff:95:9c:fb:44:e3:8b: 5f:03:33:85:11:a7:7f:ad:f1:d6:8b:fb:4e:b3:a8:c0:1d:8d: d3:1c:ec:e7:e6:63:98:81:e5:60:e9:b0:4b:93:32:2c:1e:67: b0:cb:d9:d3:1e:ce:86:55:3b:45:d1:1a:0c:c7:db:d6:4f:e0: e4:e8:4d:1c:1a:68:ac:f0:d1:bf:58:b9:0a:52:d0:5b:9a:f4: f9:7b:fd:f3:e0:ab:05:1d:28:0f:48:8b:b5:c8:8c:c7:04:13: a4:07:ab:e9:df:20:0b:07:81:8c:46:fa:ed:4e:41:30:bb:2c: 9a:42:9d:e4:9f:1e:6b:c3:2e:53:0e:87:c2:c5:58:9f:5c:4b: 8c:66:37:4c:cc:66:61:56:df:17:c3:a1:10:4a:93:61:bc:fa: fb:58:6d:0d:2f:7c:e6:c1:c2:2c:45:3d:f5:16:56:ef:83:ef: 82:e9:ce:65:d6:9d:09:cc:91:41:7d:f0:ef:f1:05:c0:92:04: c3:99:65:8b:c7:27:aa:61:60:06:d8:ef:30:13:71:3e:02:54: b7:c9:53:0a:7c:26:fb:21:0f:ba:2f:9f:27:6a:93:50:21:f2: 30:c7:9c:38:cc:53:1f:aa:5c:de:dd:0e:ce:47:7f:d3:43:24: 3f:5a:72:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvrS8PZucMWhS03XCU6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjM0ODA0ZjliNjZhNzFjMjQ3MjViMmQ3N2Y5NDkxMTIx ODVlYjEwHhcNMjUxMjIwMTkwMTAxWhcNMjUxMjIxMTkwMTAxWjAzMTEwLwYDVQQD Eyg2MWJjNGM2ODZhYzM0MTU5NGZmODQ1MTQ0ZmQxOTU3ZDY4NGQwMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmskNa33x8GuVrsIXtFhicldWJL3Z JGekRSpOS8ZmzG1NlZXU3o9QW82PUiYtc3cJVTO3mcgK+7PrJ0AmMQysNdNG5d+p 0wkWDLjdlljRVYsqg07jUEMnH1sqX24K50MC66O+YdUNTStztX2vuk3UElJh2rlM M1MsCX7W2Qc0vXICeIyxiNBt2DfJ80RMf2RyQ9h5dUpx4jo14Q34brKvQgek17qA b8codu/4iNiOTOOQOrJKqTtDkf6h0TOXs34aKZSTdCocFJxKfA0CL1390cs+QOcP 5tyI0izXWsVcvmg8oBAE3syzMKYW8ie1yCQQFrBaDjd3TbyMkiXxBrO20wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG8TGhqw0FZT/hFFE/RlX1oTQNKMB8GA1UdIwQY MBaAFFGzSAT5tmpxwkclstd/lJESGF6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYt NWE3Mjg5ZWY1ZjYzLzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83NDYwNmYtZDA3MC00MzJkLWE4NmYtNWE3Mjg5ZWY1ZjYz LzEvVWJOSUJQbTJhbkhDUnlXeTEzLVVrUklZWHJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMQKE4UM AlZKv0//lZz7ROOLXwMzhRGnf63x1ov7TrOowB2N0xzs5+ZjmIHlYOmwS5MyLB5n sMvZ0x7OhlU7RdEaDMfb1k/g5OhNHBporPDRv1i5ClLQW5r0+Xv98+CrBR0oD0iL tciMxwQTpAer6d8gCweBjEb67U5BMLssmkKd5J8ea8MuUw6HwsVYn1xLjGY3TMxm YVbfF8OhEEqTYbz6+1htDS985sHCLEU99RZW74PvgunOZdadCcyRQX3w7/EFwJIE w5lli8cnqmFgBtjvMBNxPgJUt8lTCnwm+yEPui+fJ2qTUCHyMMecOMxTH6pc3t0O zkd/00MkP1py9g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:15 2025 by rpki-client