This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json) Hash identifier: aulxe2SlMHlVn9KwRcmpuiEDjoNXXdRZ/mYs1FTs4dE= Subject key identifier: 9C:2C:05:5C:91:97:8C:1A:98:9A:08:7C:58:40:A6:CE:13:54:6C:58 Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Certificate serial: 019B2F6756DBC48C5D41C9579F92E3E11DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 03:01:00 +0000 Manifest this update: Thu 18 Dec 2025 03:01:00 +0000 Manifest next update: Fri 19 Dec 2025 03:01:00 +0000 Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: Pu6nl/WEbMbsWXo1vh3ir0KSXKaWk8r9cEvtvvICPqY=) 2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:56:db:c4:8c:5d:41:c9:57:9f:92:e3:e1:1d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958 Validity Not Before: Dec 18 03:01:00 2025 GMT Not After : Dec 19 03:01:00 2025 GMT Subject: CN=9c2c055c91978c1a989a087c5840a6ce13546c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:5a:95:4c:f9:ac:de:9f:3c:c0:4e:57:15: 40:cc:1f:3d:de:a9:a8:1f:0a:ec:17:f1:18:db:03: c7:c9:f9:a6:8f:fc:08:e4:8a:7e:2b:ab:a0:7e:d1: 26:2d:a6:c3:91:e4:67:31:ac:e3:01:75:6f:a7:3f: 78:f9:c4:6c:94:e6:8a:80:5f:05:ad:ed:de:d3:77: 79:7f:af:e9:b5:d8:b9:cb:6c:13:18:6e:5b:26:1c: 42:b8:e2:9b:96:ae:aa:c5:d1:a9:60:1d:9b:34:22: ed:c6:af:34:25:ec:bb:62:20:62:ae:94:1e:77:5e: f0:63:9f:c4:c6:82:66:7a:05:bc:a3:b7:37:27:5e: 33:d0:cd:76:74:bd:64:b8:48:32:fe:f6:9b:66:58: 12:35:5e:63:62:5c:88:63:24:6a:f7:d8:bf:c5:66: 6a:90:15:47:65:4b:66:34:c4:d3:f9:62:a6:8a:71: a0:22:ac:cd:75:a0:ee:82:ae:22:40:f6:05:64:01: e2:11:9b:22:f6:9f:e3:5a:30:4d:42:aa:fb:cd:a8: a9:f8:6b:ce:26:27:0c:e3:81:2d:1e:f6:2a:92:9f: d8:30:82:da:b6:e7:47:7d:1e:08:ae:dc:e9:10:16: dd:9a:17:98:85:03:26:53:1b:b5:27:69:c8:33:12: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:05:5C:91:97:8C:1A:98:9A:08:7C:58:40:A6:CE:13:54:6C:58 X509v3 Authority Key Identifier: keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:91:5e:c8:71:d5:fb:a0:ed:a0:c6:94:ef:0f:d3:eb:1b:29: 3d:df:9b:06:83:d4:07:07:1a:0d:41:3a:fd:9f:96:22:51:65: 93:ec:e1:b4:52:7a:ad:e6:79:fe:d7:ea:a6:69:ad:8e:df:4f: 06:65:32:cc:69:8b:46:95:4c:3c:4b:57:66:a8:0e:c4:23:97: 4e:f2:48:80:ef:41:68:a3:69:cf:10:57:78:34:c2:d1:81:9a: 5c:69:7a:92:47:4a:88:60:61:d7:4d:ef:ec:6f:bb:5d:a9:62: 6e:ac:d8:33:22:8a:ed:75:5b:0e:0a:9a:af:ca:2a:ff:b7:71: bf:a1:00:d8:d8:d8:bd:a0:6b:c4:a1:a6:a7:2b:d2:22:48:56: bd:8d:94:74:bd:6f:78:96:88:3c:5e:97:ee:c1:55:f9:5c:84: 07:99:02:e2:de:33:57:4e:50:17:60:00:ef:e2:aa:d0:be:9e: a6:ce:87:4e:ba:f1:b4:0e:64:56:42:51:d1:16:fb:be:41:30: bd:1c:cf:97:b8:92:3c:5e:8a:03:21:d1:56:de:01:94:55:2e: be:38:75:c6:bd:d4:9c:42:45:63:6d:66:fd:f8:fc:11:ee:3b: 84:54:8c:61:90:2d:cd:a9:4f:b0:df:a3:22:95:73:64:89:e7: de:ac:8f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ1bbxIxdQclXn5Lj4R3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4 NjM5NTgwHhcNMjUxMjE4MDMwMTAwWhcNMjUxMjE5MDMwMTAwWjAzMTEwLwYDVQQD Eyg5YzJjMDU1YzkxOTc4YzFhOTg5YTA4N2M1ODQwYTZjZTEzNTQ2YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x9alUz5rN6fPMBOVxVAzB893qmo HwrsF/EY2wPHyfmmj/wI5Ip+K6ugftEmLabDkeRnMazjAXVvpz94+cRslOaKgF8F re3e03d5f6/ptdi5y2wTGG5bJhxCuOKblq6qxdGpYB2bNCLtxq80Jey7YiBirpQe d17wY5/ExoJmegW8o7c3J14z0M12dL1kuEgy/vabZlgSNV5jYlyIYyRq99i/xWZq kBVHZUtmNMTT+WKminGgIqzNdaDugq4iQPYFZAHiEZsi9p/jWjBNQqr7zaip+GvO JicM44EtHvYqkp/YMILatudHfR4IrtzpEBbdmheYhQMmUxu1J2nIMxKaTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwsBVyRl4wamJoIfFhAps4TVGxYMB8GA1UdIwQY MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt YmZlMGNjYjc5ZmNjLzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpFeyHHV +6DtoMaU7w/T6xspPd+bBoPUBwcaDUE6/Z+WIlFlk+zhtFJ6reZ5/tfqpmmtjt9P BmUyzGmLRpVMPEtXZqgOxCOXTvJIgO9BaKNpzxBXeDTC0YGaXGl6kkdKiGBh103v 7G+7XalibqzYMyKK7XVbDgqar8oq/7dxv6EA2NjYvaBrxKGmpyvSIkhWvY2UdL1v eJaIPF6X7sFV+VyEB5kC4t4zV05QF2AA7+Kq0L6eps6HTrrxtA5kVkJR0Rb7vkEw vRzPl7iSPF6KAyHRVt4BlFUuvjh1xr3UnEJFY21m/fj8Ee47hFSMYZAtzalPsN+j IpVzZInn3qyPsA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:01 2025 by rpki-client