This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json) Hash identifier: f2/BWLhW6t2g9w7FWICuq8BEzY9ps+80sFWTL69onoY= Subject key identifier: 58:22:67:07:B9:AA:77:05:88:AD:DF:1C:4D:C4:9F:5E:A9:42:00:71 Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b Certificate serial: 019B3D59F25C4F15988DEEFD0C844664DC5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft Manifest number: 03AB Signing time: Sat 20 Dec 2025 20:01:03 +0000 Manifest this update: Sat 20 Dec 2025 20:01:03 +0000 Manifest next update: Sun 21 Dec 2025 20:01:03 +0000 Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=) 2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: Rl9HsumFIGiFbeVlBllpxizB21xjWHsbXkSn/dfcL3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f2:5c:4f:15:98:8d:ee:fd:0c:84:46:64:dc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b Validity Not Before: Dec 20 20:01:03 2025 GMT Not After : Dec 21 20:01:03 2025 GMT Subject: CN=58226707b9aa770588addf1c4dc49f5ea9420071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:1f:74:b5:9c:97:85:e4:fb:ad:85:ce:ba: ab:f5:fd:df:c1:a0:45:44:e1:9c:3e:1d:e2:1e:70: 39:a3:ac:d3:99:58:40:9b:6f:a2:f7:96:83:9c:56: 24:0e:bb:c4:17:4b:8f:93:79:43:2e:ca:f7:82:12: ac:72:c5:ed:a7:0f:0c:8f:28:36:27:47:0d:09:59: 28:39:60:78:c3:96:b2:88:fe:ce:65:69:5b:e2:df: 5c:c5:18:f4:41:5d:5f:58:9d:50:25:41:6e:7d:05: 6c:cd:7a:84:b6:75:f9:9c:59:92:ad:61:a3:52:b6: 7e:13:29:57:05:2c:79:75:b2:b7:2a:5b:e3:08:34: 25:3b:ff:93:20:53:35:19:66:a4:8b:59:95:52:57: fb:df:04:2f:52:cc:91:3f:9a:83:42:12:c1:f1:53: b9:51:97:03:99:1f:be:50:d1:16:7f:9a:e6:8b:c9: 53:25:bd:fa:85:15:a9:62:61:aa:6c:52:d9:6b:74: a7:25:f7:8e:01:92:85:7b:b1:b8:03:51:8b:76:eb: 90:0d:7f:94:8e:a4:de:50:0d:d0:03:10:bb:3b:f1: 71:40:f7:3a:55:0d:54:da:57:23:9f:e0:ea:01:39: 09:e0:7a:c0:0a:87:72:e4:d3:0d:63:d9:fc:e9:89: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:67:07:B9:AA:77:05:88:AD:DF:1C:4D:C4:9F:5E:A9:42:00:71 X509v3 Authority Key Identifier: keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:48:6c:8b:18:da:6a:e4:84:a0:8c:33:1e:9d:6e:4b:97:7f: 40:4c:82:ce:ca:06:43:76:2b:58:4d:5e:ff:db:0b:fa:d1:31: 7c:d0:e7:c6:48:5c:8f:f6:f8:7d:eb:c0:fb:5e:23:dc:57:87: 78:30:77:12:28:dc:6c:30:01:d7:9e:ba:84:5e:06:b5:58:d3: 42:a2:7e:b0:07:ff:a1:8a:16:95:d6:1a:d5:27:69:e0:4d:83: 0c:a5:81:9b:0c:89:e0:5f:0d:2c:e6:3f:32:53:7f:7f:c6:53: 9a:aa:bc:3f:a1:20:4d:36:46:57:50:30:ee:4d:bf:37:12:b9: 85:7c:dc:2d:61:6a:08:04:86:b3:5c:1d:ea:73:ae:8a:2f:88: 9e:3c:b3:02:83:a0:38:e9:d4:84:8f:39:3b:d0:72:de:c1:79: a0:a2:06:6d:0e:9a:11:be:bb:3f:d2:c5:3f:f9:e5:86:de:ee: e8:fa:81:6e:4e:73:c5:8f:37:f9:b0:4c:5c:75:73:f9:2f:88: ad:28:42:c6:56:bf:2d:9e:14:1c:f0:a6:aa:a7:d5:42:4c:dc: 39:82:8c:92:3e:cc:41:67:47:39:8b:fe:53:20:87:b0:74:d4: 5d:f2:c3:4d:21:cf:2b:de:95:84:c2:c1:0a:f9:19:18:03:e5: b2:3f:cb:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfJcTxWYje79DIRGZNxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl ZTc2N2IwHhcNMjUxMjIwMjAwMTAzWhcNMjUxMjIxMjAwMTAzWjAzMTEwLwYDVQQD Eyg1ODIyNjcwN2I5YWE3NzA1ODhhZGRmMWM0ZGM0OWY1ZWE5NDIwMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywfdLWcl4Xk+62Fzrqr9f3fwaBF ROGcPh3iHnA5o6zTmVhAm2+i95aDnFYkDrvEF0uPk3lDLsr3ghKscsXtpw8Mjyg2 J0cNCVkoOWB4w5ayiP7OZWlb4t9cxRj0QV1fWJ1QJUFufQVszXqEtnX5nFmSrWGj UrZ+EylXBSx5dbK3KlvjCDQlO/+TIFM1GWaki1mVUlf73wQvUsyRP5qDQhLB8VO5 UZcDmR++UNEWf5rmi8lTJb36hRWpYmGqbFLZa3SnJfeOAZKFe7G4A1GLduuQDX+U jqTeUA3QAxC7O/FxQPc6VQ1U2lcjn+DqATkJ4HrACody5NMNY9n86YmzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgiZwe5qncFiK3fHE3En16pQgBxMB8GA1UdIwQY MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct ZjQ2OGVlMzMxNDc0LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0 LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEhsixja auSEoIwzHp1uS5d/QEyCzsoGQ3YrWE1e/9sL+tExfNDnxkhcj/b4fevA+14j3FeH eDB3EijcbDAB1566hF4GtVjTQqJ+sAf/oYoWldYa1Sdp4E2DDKWBmwyJ4F8NLOY/ MlN/f8ZTmqq8P6EgTTZGV1Aw7k2/NxK5hXzcLWFqCASGs1wd6nOuii+InjyzAoOg OOnUhI85O9By3sF5oKIGbQ6aEb67P9LFP/nlht7u6PqBbk5zxY83+bBMXHVz+S+I rShCxla/LZ4UHPCmqqfVQkzcOYKMkj7MQWdHOYv+UyCHsHTUXfLDTSHPK96VhMLB CvkZGAPlsj/Lsw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:16 2025 by rpki-client