This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft File: uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json) Hash identifier: eBKZtzEf7ZgmC8dRYfQfb2IS+ArC8Mz89rrwHaY727w= Subject key identifier: 1A:68:BC:C5:96:AF:A9:29:CC:83:CD:9C:30:85:C3:BA:8C:C3:73:23 Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B Certificate issuer: /CN=b846e854187f9332954c60e08c3351afcdf1085b Certificate serial: 019B5E2E4FB72DE23F1004F1A0537053EC3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft Manifest number: 07CA Signing time: Sat 27 Dec 2025 05:00:51 +0000 Manifest this update: Sat 27 Dec 2025 05:00:51 +0000 Manifest next update: Sun 28 Dec 2025 05:00:51 +0000 Files and hashes: 1: Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa (hash: AfRPI9y7vg4qHFtr0NX2m5ItgCXKXzKTz1NVYhVoflo=) 2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: CpZS4hDO3IgMHD8NmbMpU7y+szfWktr2PGOE0NRbzgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:4f:b7:2d:e2:3f:10:04:f1:a0:53:70:53:ec:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b Validity Not Before: Dec 27 05:00:51 2025 GMT Not After : Dec 28 05:00:51 2025 GMT Subject: CN=1a68bcc596afa929cc83cd9c3085c3ba8cc37323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:66:9a:f6:c7:06:6e:c8:fc:a2:8f:81:07: ee:e1:28:4e:3a:05:df:ae:1b:4a:cb:e1:82:ff:76: 6f:c6:16:04:ea:60:21:34:6f:c2:62:bf:3c:5f:8f: 9e:fb:77:7c:18:90:17:08:a9:b3:1b:29:d3:ed:de: 0e:4e:f7:36:8f:c9:d1:48:29:8f:09:70:51:71:a4: 9e:24:35:6a:dc:7c:df:05:6c:23:a9:5d:35:34:48: cf:d2:54:85:98:7a:1a:77:d2:11:1b:51:10:73:d5: 15:44:a8:d3:3d:a4:1e:cb:91:8b:a5:ed:16:27:63: f7:b8:cb:0b:82:62:e8:84:e4:38:3e:6c:fd:c7:19: 87:7f:87:90:8e:07:ad:c2:4a:17:ff:6a:b2:17:aa: d7:53:9f:af:87:e5:63:2a:4b:0a:d4:f1:0e:f9:a6: 79:db:7a:7c:1f:a1:ff:7d:e2:8d:c6:93:3f:e2:64: 7f:51:87:d9:74:f4:b6:70:14:30:cc:60:d3:78:72: ce:eb:0b:15:cf:c0:ec:e7:fb:6c:f9:2f:95:18:ae: ec:33:a1:51:6e:d8:c3:82:fc:ad:0d:0d:6f:0b:b9: ad:e8:44:75:e4:de:6b:b4:dd:ba:26:d2:40:fe:8d: 27:52:e5:4d:82:1e:04:a6:82:2f:67:86:a3:8c:a1: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:68:BC:C5:96:AF:A9:29:CC:83:CD:9C:30:85:C3:BA:8C:C3:73:23 X509v3 Authority Key Identifier: keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:69:6f:66:f9:24:47:dd:66:69:20:e7:9a:94:ca:38:b4:92: 8b:89:80:c5:76:0b:db:12:6a:03:05:22:e4:62:72:c6:e0:e5: 6f:7f:55:a2:f1:d4:31:fa:6f:6f:72:6b:fe:f3:eb:3f:60:e1: 86:06:07:55:2e:b3:b6:e4:d1:93:3a:3b:43:70:a9:df:5d:e5: e3:59:92:81:fd:2f:96:c3:c6:fb:ea:a8:66:69:5c:ef:2e:a5: 25:0e:cc:4d:34:6e:a0:07:23:a0:db:4e:9f:88:80:27:78:87: d0:af:78:b2:03:b5:db:16:ad:23:82:81:cb:46:4a:67:2b:73: 59:cf:25:45:31:03:87:4b:8b:23:49:f4:26:8f:d2:a9:26:1f: c9:f2:c7:c3:12:8f:86:0e:55:17:2b:91:0a:d6:7e:ee:b5:7c: 99:9d:8d:c2:5c:e6:e0:be:98:68:90:df:b5:81:1c:f3:32:c7: cf:20:f0:6f:a4:60:cd:38:66:0e:36:fb:a2:f2:7b:1e:51:09: 73:74:06:81:be:b3:e6:21:11:6f:8d:4b:85:9f:65:b9:40:23: b1:6a:b6:6f:b3:62:fb:8a:62:2b:8b:a7:3b:b0:73:e9:79:bf: 2b:f9:e2:4d:3f:25:af:50:7f:83:e2:6c:9d:8c:9f:d6:47:d3: 95:c0:c5:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLk+3LeI/EATxoFNwU+w8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDZlODU0MTg3ZjkzMzI5NTRjNjBlMDhjMzM1MWFmY2Rm MTA4NWIwHhcNMjUxMjI3MDUwMDUxWhcNMjUxMjI4MDUwMDUxWjAzMTEwLwYDVQQD EygxYTY4YmNjNTk2YWZhOTI5Y2M4M2NkOWMzMDg1YzNiYThjYzM3MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzVmmvbHBm7I/KKPgQfu4ShOOgXf rhtKy+GC/3ZvxhYE6mAhNG/CYr88X4+e+3d8GJAXCKmzGynT7d4OTvc2j8nRSCmP CXBRcaSeJDVq3HzfBWwjqV01NEjP0lSFmHoad9IRG1EQc9UVRKjTPaQey5GLpe0W J2P3uMsLgmLohOQ4Pmz9xxmHf4eQjgetwkoX/2qyF6rXU5+vh+VjKksK1PEO+aZ5 23p8H6H/feKNxpM/4mR/UYfZdPS2cBQwzGDTeHLO6wsVz8Ds5/ts+S+VGK7sM6FR btjDgvytDQ1vC7mt6ER15N5rtN26JtJA/o0nUuVNgh4EpoIvZ4ajjKG/wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpovMWWr6kpzIPNnDCFw7qMw3MjMB8GA1UdIwQY MBaAFLhG6FQYf5MylUxg4IwzUa/N8QhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMt ZTBlYWIyZjM5NjM3LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMtZTBlYWIyZjM5NjM3 LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWlvZvkk R91maSDnmpTKOLSSi4mAxXYL2xJqAwUi5GJyxuDlb39VovHUMfpvb3Jr/vPrP2Dh hgYHVS6ztuTRkzo7Q3Cp313l41mSgf0vlsPG++qoZmlc7y6lJQ7MTTRuoAcjoNtO n4iAJ3iH0K94sgO12xatI4KBy0ZKZytzWc8lRTEDh0uLI0n0Jo/SqSYfyfLHwxKP hg5VFyuRCtZ+7rV8mZ2Nwlzm4L6YaJDftYEc8zLHzyDwb6RgzThmDjb7ovJ7HlEJ c3QGgb6z5iERb41LhZ9luUAjsWq2b7Ni+4piK4unO7Bz6Xm/K/niTT8lr1B/g+Js nYyf1kfTlcDFfw== -----END CERTIFICATE-----Generated at Sat Dec 27 07:23:23 2025 by rpki-client