This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json) Hash identifier: CJ1H91ZX50yFeUwABQqJG1Qp40GVpJ2wuYQiRVuiXmw= Subject key identifier: B0:5D:C2:3B:1A:14:84:AC:F1:11:1F:8C:03:85:2E:F5:D3:5D:FD:C0 Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8 Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8 Certificate serial: 019B413687C8E61322693124AD2D482A2EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft Manifest number: 0E07 Signing time: Sun 21 Dec 2025 14:00:51 +0000 Manifest this update: Sun 21 Dec 2025 14:00:51 +0000 Manifest next update: Mon 22 Dec 2025 14:00:51 +0000 Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=) 2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: Uwx6SAkQ2sA8WOKDD6ghB01pvCjengMNWCLMbmsF+o4=) 3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:87:c8:e6:13:22:69:31:24:ad:2d:48:2a:2e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8 Validity Not Before: Dec 21 14:00:51 2025 GMT Not After : Dec 22 14:00:51 2025 GMT Subject: CN=b05dc23b1a1484acf1111f8c03852ef5d35dfdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:2e:1a:a3:02:f8:c4:39:14:c5:55:e5:9a: 96:3e:77:f5:07:57:0e:9f:02:77:6e:0e:a3:34:1f: ad:c7:7d:eb:a5:27:0f:b6:f5:2d:74:29:39:89:2f: 60:e4:ef:6c:23:56:61:b8:92:b0:e3:12:2a:1d:a3: ab:5f:14:3c:94:84:0e:40:ac:20:53:52:46:d0:00: eb:07:fb:34:a7:2c:75:f9:83:86:c5:06:eb:7e:2b: 98:73:5b:6b:85:cb:cf:3a:03:62:af:82:f7:bb:5e: 71:f8:a5:04:62:2f:17:70:f5:dc:bd:07:ee:e0:92: 8b:81:b1:a2:16:06:b9:19:b2:28:24:a5:47:8b:38: f9:21:3a:dd:da:9c:c5:d4:53:ae:91:da:a3:0c:3b: e1:c4:0a:d4:e5:ab:cd:b1:80:c6:fa:4c:a8:a7:65: 3b:ef:7d:be:91:03:36:99:98:17:54:d5:6b:ff:b2: 01:e8:2e:89:7c:5b:b4:ef:9b:bc:a5:1c:0a:c3:5a: d5:23:ab:6e:f6:41:39:a4:4d:90:72:6e:47:2b:02: 9f:c9:d2:05:8b:7e:f0:35:79:04:90:95:a3:1d:cd: 40:85:36:23:ed:15:5f:be:2c:58:9d:83:2f:d7:d3: b8:47:05:c7:63:68:c1:59:76:ec:f0:93:c8:47:88: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:C2:3B:1A:14:84:AC:F1:11:1F:8C:03:85:2E:F5:D3:5D:FD:C0 X509v3 Authority Key Identifier: keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fd:43:88:cb:2e:98:a1:f8:1f:99:3c:59:45:3a:19:9e:b7: f6:db:31:a8:b1:16:ce:99:cb:14:50:c5:a1:fb:a6:87:ab:07: 5f:88:6e:1d:6f:53:1e:1e:45:23:3a:49:52:a1:78:dd:88:f0: 72:f1:c4:9b:67:ff:72:31:0b:cf:04:8b:f1:12:b8:ea:39:12: f2:79:97:fb:02:bc:e9:92:77:1a:a6:b6:cb:ff:7c:c6:1c:d0: 7d:5f:2b:9c:93:20:b5:77:17:92:6f:34:01:55:34:f2:2b:e6: e4:f6:f5:fe:80:dd:32:bf:81:44:ad:14:b9:0e:d6:3e:d4:68: 40:80:b0:a4:8d:90:a9:d0:e9:6c:a4:07:f3:8a:e7:77:66:65: d9:80:77:72:12:8a:87:7f:38:9b:f5:06:57:d3:8b:75:eb:80: e2:64:c3:b1:7f:c8:de:e5:99:0e:28:4b:89:ed:14:4a:8a:11: e7:38:60:da:a8:12:62:31:04:9f:38:1d:21:02:cd:70:88:b2: 40:b1:93:47:d9:af:b3:cc:51:bc:c6:0e:e2:e6:a1:f9:92:04: 37:27:80:59:fb:dc:02:49:ab:e1:c0:94:fa:ac:9d:d2:98:70: d2:0a:a4:41:a8:05:08:7f:ae:8a:7a:b6:f8:2a:f5:bd:0d:43: d7:10:54:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNofI5hMiaTEkrS1IKi7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm OWRkYTgwHhcNMjUxMjIxMTQwMDUxWhcNMjUxMjIyMTQwMDUxWjAzMTEwLwYDVQQD EyhiMDVkYzIzYjFhMTQ4NGFjZjExMTFmOGMwMzg1MmVmNWQzNWRmZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN0uGqMC+MQ5FMVV5ZqWPnf1B1cO nwJ3bg6jNB+tx33rpScPtvUtdCk5iS9g5O9sI1ZhuJKw4xIqHaOrXxQ8lIQOQKwg U1JG0ADrB/s0pyx1+YOGxQbrfiuYc1trhcvPOgNir4L3u15x+KUEYi8XcPXcvQfu 4JKLgbGiFga5GbIoJKVHizj5ITrd2pzF1FOukdqjDDvhxArU5avNsYDG+kyop2U7 732+kQM2mZgXVNVr/7IB6C6JfFu075u8pRwKw1rVI6tu9kE5pE2Qcm5HKwKfydIF i37wNXkEkJWjHc1AhTYj7RVfvixYnYMv19O4RwXHY2jBWXbs8JPIR4gJUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBdwjsaFISs8REfjAOFLvXTXf3AMB8GA1UdIwQY MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAev1DiMsu mKH4H5k8WUU6GZ639tsxqLEWzpnLFFDFofumh6sHX4huHW9THh5FIzpJUqF43Yjw cvHEm2f/cjELzwSL8RK46jkS8nmX+wK86ZJ3Gqa2y/98xhzQfV8rnJMgtXcXkm80 AVU08ivm5Pb1/oDdMr+BRK0UuQ7WPtRoQICwpI2QqdDpbKQH84rnd2Zl2YB3chKK h384m/UGV9OLdeuA4mTDsX/I3uWZDihLie0USooR5zhg2qgSYjEEnzgdIQLNcIiy QLGTR9mvs8xRvMYO4uah+ZIENyeAWfvcAkmr4cCU+qyd0phw0gqkQagFCH+uinq2 +Cr1vQ1D1xBUvg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:56 2025 by rpki-client