This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json) Hash identifier: bB2NkKCQU2SXjCHNLDpeaZ1B1XP9L+zYRpwphvgoDGw= Subject key identifier: 7A:0F:FA:F2:DB:2A:D0:62:24:D5:52:50:AC:27:FF:B8:26:0C:FF:F3 Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Certificate serial: 019B679F7FB686E50B346F6B55B569314F1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft Manifest number: 0A5B Signing time: Mon 29 Dec 2025 01:01:04 +0000 Manifest this update: Mon 29 Dec 2025 01:01:04 +0000 Manifest next update: Tue 30 Dec 2025 01:01:04 +0000 Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: vbWbuML2n7KfpHjf1Lw2zWRcveffRYFfcvkzsgPNGMw=) 2: prCxRzdOKVY3koTOxcE1wLy92wY.roa (hash: /SPXT+MGYRPaGYNF9H/7HrgrHhVyCw6xaZxVFgwwJJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:7f:b6:86:e5:0b:34:6f:6b:55:b5:69:31:4f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Validity Not Before: Dec 29 01:01:04 2025 GMT Not After : Dec 30 01:01:04 2025 GMT Subject: CN=7a0ffaf2db2ad06224d55250ac27ffb8260cfff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:e0:48:d1:e7:35:7b:00:38:d4:45:80:5d: 6d:f9:ee:76:37:ac:c6:0a:4b:25:d9:49:a6:55:7b: 02:5c:1b:2d:a1:b5:93:56:fa:fb:e6:db:af:71:f3: 2f:12:2f:71:04:29:e9:77:5a:80:69:d7:14:2c:3b: 02:b9:bd:68:d7:18:c4:94:9f:68:81:ef:ab:17:22: 91:8a:8d:10:ad:01:e4:c0:35:d0:2b:df:fc:19:22: 11:fa:d2:3d:d5:65:62:df:37:90:18:71:e2:ea:3f: 35:29:d9:ad:15:e7:59:19:d4:a0:bc:3a:2d:39:bc: 81:0e:8f:82:63:75:5f:1e:0a:29:58:04:56:fa:f5: 46:7c:75:c9:e2:f3:ba:95:7a:dd:18:69:60:d5:4f: 42:70:27:94:81:53:fb:4e:86:ec:a3:8c:7e:1d:42: 9f:8a:8a:4b:c2:67:f3:c5:2a:b4:be:cb:c5:79:79: f0:dc:b8:8e:cd:59:f7:69:39:c6:1b:9b:1c:a9:4d: ad:0a:52:3f:87:7c:d1:5d:33:d2:48:c9:5e:e9:bf: ea:f6:7e:9e:8f:43:1c:0b:94:65:31:e0:19:ea:03: 71:a2:f1:79:08:94:6a:a4:96:7b:88:e1:d2:2e:ad: 8e:13:b8:89:df:71:eb:62:d9:d7:34:5f:a2:df:5e: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:FA:F2:DB:2A:D0:62:24:D5:52:50:AC:27:FF:B8:26:0C:FF:F3 X509v3 Authority Key Identifier: keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cc:4e:66:47:b9:bf:14:c8:fd:f4:62:1b:c2:d5:9f:93:85: a8:37:ff:50:3a:7c:2e:dc:33:e0:de:00:53:5f:4e:92:6b:1b: e2:c6:7e:83:c9:65:b9:80:b8:3b:20:db:d7:d0:d5:2e:91:39: 33:b8:12:2a:42:5f:62:d6:94:d7:bf:bb:1e:53:fe:aa:19:8c: 48:b1:a1:d5:b1:ba:25:b3:3a:6c:1f:f4:da:41:fc:13:ba:e7: 27:7d:36:aa:ba:af:40:99:54:22:bd:b7:65:ad:17:02:04:2e: b2:12:df:89:f3:ca:ac:21:f4:02:d3:70:1b:04:e8:8c:92:da: c8:4f:6c:a0:fd:23:18:af:2d:0a:91:5e:66:6d:39:15:f9:47: 88:98:29:b1:68:8c:28:12:16:6f:9a:b6:3a:6a:9a:e9:82:4a: 61:c9:6a:6b:19:5e:2b:90:b1:c2:ef:b7:e3:c5:19:a4:b6:ca: 3a:e6:0d:e6:1a:97:1e:d0:10:51:a7:f3:b8:51:30:56:55:05: 57:8c:fb:03:83:d5:e7:60:be:d1:05:96:23:ff:b8:3f:3f:19: 75:44:40:a2:29:2c:ec:d9:ce:ec:87:b1:3d:df:89:23:16:14: 30:e7:b0:b0:70:48:99:b1:43:e8:97:a0:90:83:e7:a5:6f:1c: 52:4b:60:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn3+2huULNG9rVbVpMU8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYmRmMGQ0ZGU0MDA1N2Y1Y2MzZmQxZTcwYmZjMTFmNTM1 MTczOGQwHhcNMjUxMjI5MDEwMTA0WhcNMjUxMjMwMDEwMTA0WjAzMTEwLwYDVQQD Eyg3YTBmZmFmMmRiMmFkMDYyMjRkNTUyNTBhYzI3ZmZiODI2MGNmZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UTgSNHnNXsAONRFgF1t+e52N6zG Cksl2UmmVXsCXBstobWTVvr75tuvcfMvEi9xBCnpd1qAadcULDsCub1o1xjElJ9o ge+rFyKRio0QrQHkwDXQK9/8GSIR+tI91WVi3zeQGHHi6j81KdmtFedZGdSgvDot ObyBDo+CY3VfHgopWARW+vVGfHXJ4vO6lXrdGGlg1U9CcCeUgVP7Tobso4x+HUKf iopLwmfzxSq0vsvFeXnw3LiOzVn3aTnGG5scqU2tClI/h3zRXTPSSMle6b/q9n6e j0McC5RlMeAZ6gNxovF5CJRqpJZ7iOHSLq2OE7iJ33HrYtnXNF+i3146PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoP+vLbKtBiJNVSUKwn/7gmDP/zMB8GA1UdIwQY MBaAFFG98NTeQAV/XMP9HnC/wR9TUXONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYt ZTg4ZDg4NGMyMGVmLzEvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYtZTg4ZDg4NGMyMGVm LzEvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8xOZke5 vxTI/fRiG8LVn5OFqDf/UDp8Ltwz4N4AU19Okmsb4sZ+g8lluYC4OyDb19DVLpE5 M7gSKkJfYtaU17+7HlP+qhmMSLGh1bG6JbM6bB/02kH8E7rnJ302qrqvQJlUIr23 Za0XAgQushLfifPKrCH0AtNwGwTojJLayE9soP0jGK8tCpFeZm05FflHiJgpsWiM KBIWb5q2Omqa6YJKYclqaxleK5Cxwu+348UZpLbKOuYN5hqXHtAQUafzuFEwVlUF V4z7A4PV52C+0QWWI/+4Pz8ZdURAoiks7NnO7IexPd+JIxYUMOewsHBImbFD6Jeg kIPnpW8cUktgTQ== -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:45 2025 by rpki-client