This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json) Hash identifier: MrZDmoIydYAPe35EJZb+dBznf5ShSk5kdrI4XBKTUmg= Subject key identifier: 3E:12:3C:45:DA:36:97:C0:15:0D:49:23:F1:ED:80:75:4A:55:67:64 Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Certificate serial: 019B3CEC5E1C9BE8D5679679CB570DAD4345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft Manifest number: 0353 Signing time: Sat 20 Dec 2025 18:01:22 +0000 Manifest this update: Sat 20 Dec 2025 18:01:22 +0000 Manifest next update: Sun 21 Dec 2025 18:01:22 +0000 Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=) 2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: G7V/G0ovKQn4j14G1JeeBgyrA/OtNmPCcyxKn3+sPPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:5e:1c:9b:e8:d5:67:96:79:cb:57:0d:ad:43:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Validity Not Before: Dec 20 18:01:22 2025 GMT Not After : Dec 21 18:01:22 2025 GMT Subject: CN=3e123c45da3697c0150d4923f1ed80754a556764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:28:be:fe:d8:b2:4f:44:62:bf:9f:a9:c3: ec:be:64:d3:4a:1a:b3:b4:56:2b:11:51:df:7d:c4: 6f:6f:d7:b0:3f:57:c5:46:4f:20:1e:28:5a:fd:89: aa:3c:2b:e6:69:11:2b:f5:3d:9a:76:8a:c9:72:d4: 6c:04:be:53:47:45:13:4c:9b:23:ed:58:85:18:d1: 4e:45:98:db:d0:4a:6b:6d:c7:4f:b1:b1:ea:59:57: e7:65:0c:59:2f:bf:cb:85:77:a3:4a:8b:7e:86:ce: d3:f4:43:7d:b3:2d:98:dd:6a:fa:8f:10:4d:25:5e: ed:25:e8:d2:54:79:98:f6:e2:ae:19:78:07:ce:f6: 35:cc:e9:59:13:51:59:3c:40:6a:fd:d7:15:16:36: 97:86:18:bd:7a:90:8d:78:a7:ae:83:05:4a:c9:a9: f0:4b:59:05:b4:4d:61:77:f3:30:3b:38:36:e5:7b: 1f:87:2b:c6:7d:ac:05:28:68:c0:9c:ac:c9:cd:fc: 28:69:ea:fc:cd:99:7b:9e:26:cd:54:c4:d9:39:62: af:33:44:d2:25:13:8a:25:e8:0b:14:da:e0:89:b7: 6a:33:2a:bd:9a:20:77:d3:f9:15:75:ed:98:cd:55: ab:2b:50:9c:4e:3a:d8:46:7c:23:3a:df:56:17:27: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:12:3C:45:DA:36:97:C0:15:0D:49:23:F1:ED:80:75:4A:55:67:64 X509v3 Authority Key Identifier: keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d4:f0:b4:cb:3b:07:13:13:de:91:d6:7f:de:d1:78:77:c7: 36:b9:31:8f:79:b8:03:0f:df:e4:8f:85:6e:1a:00:9a:89:3d: 86:f4:ef:32:c3:06:7b:53:d1:46:e8:b1:be:a0:ef:e3:74:66: 87:aa:12:74:1f:62:64:db:fb:6f:e9:71:85:7f:c4:6a:25:de: aa:0e:ac:72:0b:9e:32:9c:6d:f6:a0:77:3c:63:fd:41:fc:25: 1e:57:71:fb:76:19:06:a4:8c:d0:b8:1a:50:cc:43:1f:f5:4a: af:67:ff:31:5d:b1:35:d3:d3:f2:cb:65:23:2d:ba:8c:ec:80: 33:5f:bc:17:a1:6d:20:27:55:9c:ce:75:38:b4:7d:d5:3f:7f: cf:f2:05:79:66:1e:b8:a2:39:ad:c0:7b:6b:10:be:8d:07:09: 41:88:65:38:5a:ca:3b:44:10:b5:ed:c2:85:4d:26:b7:ce:c6: 18:2a:44:d0:93:7b:66:64:f9:c3:09:99:dc:b3:71:d4:db:8b: 83:39:73:05:fb:79:4e:a7:1f:66:96:3f:2a:36:70:2c:69:c4: 03:81:73:6c:c4:a9:4a:a1:bd:11:13:ec:af:69:11:c2:ac:a2: a3:41:f0:c0:bb:4a:66:4a:c7:5b:3c:b6:1b:12:a3:13:78:be: bc:0a:c4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87F4cm+jVZ5Z5y1cNrUNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy ODI1ZTcwHhcNMjUxMjIwMTgwMTIyWhcNMjUxMjIxMTgwMTIyWjAzMTEwLwYDVQQD EygzZTEyM2M0NWRhMzY5N2MwMTUwZDQ5MjNmMWVkODA3NTRhNTU2NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkAovv7Ysk9EYr+fqcPsvmTTShqz tFYrEVHffcRvb9ewP1fFRk8gHiha/YmqPCvmaREr9T2adorJctRsBL5TR0UTTJsj 7ViFGNFORZjb0EprbcdPsbHqWVfnZQxZL7/LhXejSot+hs7T9EN9sy2Y3Wr6jxBN JV7tJejSVHmY9uKuGXgHzvY1zOlZE1FZPEBq/dcVFjaXhhi9epCNeKeugwVKyanw S1kFtE1hd/MwOzg25XsfhyvGfawFKGjAnKzJzfwoaer8zZl7nibNVMTZOWKvM0TS JROKJegLFNrgibdqMyq9miB30/kVde2YzVWrK1CcTjrYRnwjOt9WFyddXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4SPEXaNpfAFQ1JI/HtgHVKVWdkMB8GA1UdIwQY MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtTwtMs7 BxMT3pHWf97ReHfHNrkxj3m4Aw/f5I+FbhoAmok9hvTvMsMGe1PRRuixvqDv43Rm h6oSdB9iZNv7b+lxhX/EaiXeqg6scgueMpxt9qB3PGP9QfwlHldx+3YZBqSM0Lga UMxDH/VKr2f/MV2xNdPT8stlIy26jOyAM1+8F6FtICdVnM51OLR91T9/z/IFeWYe uKI5rcB7axC+jQcJQYhlOFrKO0QQte3ChU0mt87GGCpE0JN7ZmT5wwmZ3LNx1NuL gzlzBft5TqcfZpY/KjZwLGnEA4FzbMSpSqG9ERPsr2kRwqyio0HwwLtKZkrHWzy2 GxKjE3i+vArEaA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:50 2025 by rpki-client