This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json) Hash identifier: SdpOoalVpzys21QML8X7oEs2KvnLXFjVSHLNtXc0/U4= Subject key identifier: BF:02:86:59:BC:EC:C4:21:D7:91:05:E8:B2:D6:F4:EA:A3:A8:7F:60 Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753 Certificate serial: 019B3C1040F433E424F870C2394FB8DD9A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft Manifest number: 1006 Signing time: Sat 20 Dec 2025 14:00:56 +0000 Manifest this update: Sat 20 Dec 2025 14:00:56 +0000 Manifest next update: Sun 21 Dec 2025 14:00:56 +0000 Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: PJnE44/w9Et3mhMH+S47XoryLV6CmGmhzcjbI4kJ1Bg=) 2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:40:f4:33:e4:24:f8:70:c2:39:4f:b8:dd:9a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753 Validity Not Before: Dec 20 14:00:56 2025 GMT Not After : Dec 21 14:00:56 2025 GMT Subject: CN=bf028659bcecc421d79105e8b2d6f4eaa3a87f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:73:13:6d:e6:d9:5b:f1:7f:bc:a2:ca:ce: dc:c6:98:19:63:d2:c3:7e:11:22:89:a2:40:81:9f: d8:bf:f1:02:33:3d:c9:ad:c5:1b:2a:ba:7b:0a:b1: 90:b5:8a:ba:8f:71:3e:3d:ea:6e:ec:1f:e7:6d:ba: 5e:44:b7:bd:d1:4f:19:cd:74:f9:00:54:46:73:24: 18:c1:8f:03:61:12:22:92:7b:05:7f:f8:11:3b:ed: 35:e5:3a:ab:80:5d:96:7f:0a:79:37:26:f2:11:6b: 90:f9:70:c5:e4:c6:62:cd:d8:ec:ff:f2:16:73:c9: 80:35:c2:09:fd:ca:0c:e3:ba:ee:cf:d3:59:2f:65: 95:e4:f2:a8:1e:d2:92:df:a0:c3:eb:f0:79:69:bb: 28:ec:b5:1e:6f:06:4b:ac:0b:d7:6a:e0:da:5f:8c: 58:3d:3a:1f:61:62:8c:7c:c1:95:5b:95:e9:00:1e: ed:a7:1e:51:f2:8d:c4:1c:1d:57:7a:39:c9:83:49: bf:20:46:87:11:6b:b9:dd:d0:0f:76:0f:1f:06:89: b1:7c:ca:68:27:a3:04:93:d9:2b:13:7e:97:b8:a1: 9e:f7:a1:06:91:1f:a4:39:aa:96:3d:c2:ba:b1:5c: 52:39:97:b5:13:c5:d7:1b:fd:55:f4:7f:b7:01:f3: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:02:86:59:BC:EC:C4:21:D7:91:05:E8:B2:D6:F4:EA:A3:A8:7F:60 X509v3 Authority Key Identifier: keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:01:42:02:26:31:5a:03:59:fd:ff:80:42:a9:ac:cd:db:65: d2:de:b7:fb:a4:0a:cd:96:6c:8e:9d:64:d7:48:bf:95:5e:b4: 1f:8d:29:20:a5:31:fe:c9:f8:3b:86:f0:e1:ba:af:7c:30:91: e9:5a:87:2d:dd:33:3f:80:40:b9:b7:9d:9b:5c:9f:1a:b0:98: 6d:7f:dd:d2:0e:ef:61:a7:fe:cc:d1:b4:1e:69:a8:52:f3:2a: 8a:79:58:7d:c7:08:43:33:30:96:b6:f1:b8:d9:6b:61:ce:06: 63:e3:3f:a6:9a:36:87:7d:8f:66:28:7f:8b:19:73:76:ca:ec: 3c:29:88:fc:12:02:c0:e8:48:ba:28:c1:75:31:fc:d3:fd:57: 2a:c0:cf:f6:d1:2d:b1:f0:e4:ee:d2:59:38:37:08:62:50:63: 3b:58:03:37:a5:2b:ed:17:7e:b2:c5:d5:50:9e:99:75:ea:19: 98:fd:9e:4c:ff:05:e6:2b:57:9f:c8:f1:a9:83:31:ce:00:4d: 7e:19:14:1a:b7:c2:bd:fd:5d:c7:9d:eb:7c:4f:4d:cf:ac:a0: 9f:c9:c3:e7:fb:42:dc:db:a1:9e:e2:35:32:23:26:89:36:37: cc:9c:db:22:0f:ed:95:df:4b:81:42:91:b1:90:07:2c:d3:15: e5:09:40:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EED0M+Qk+HDCOU+43ZpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1 MjA3NTMwHhcNMjUxMjIwMTQwMDU2WhcNMjUxMjIxMTQwMDU2WjAzMTEwLwYDVQQD EyhiZjAyODY1OWJjZWNjNDIxZDc5MTA1ZThiMmQ2ZjRlYWEzYTg3ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvylzE23m2Vvxf7yiys7cxpgZY9LD fhEiiaJAgZ/Yv/ECMz3JrcUbKrp7CrGQtYq6j3E+Pepu7B/nbbpeRLe90U8ZzXT5 AFRGcyQYwY8DYRIiknsFf/gRO+015TqrgF2Wfwp5NybyEWuQ+XDF5MZizdjs//IW c8mANcIJ/coM47ruz9NZL2WV5PKoHtKS36DD6/B5abso7LUebwZLrAvXauDaX4xY PTofYWKMfMGVW5XpAB7tpx5R8o3EHB1XejnJg0m/IEaHEWu53dAPdg8fBomxfMpo J6MEk9krE36XuKGe96EGkR+kOaqWPcK6sVxSOZe1E8XXG/1V9H+3AfN0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8Chlm87MQh15EF6LLW9OqjqH9gMB8GA1UdIwQY MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAFCAiYx WgNZ/f+AQqmszdtl0t63+6QKzZZsjp1k10i/lV60H40pIKUx/sn4O4bw4bqvfDCR 6VqHLd0zP4BAubedm1yfGrCYbX/d0g7vYaf+zNG0HmmoUvMqinlYfccIQzMwlrbx uNlrYc4GY+M/ppo2h32PZih/ixlzdsrsPCmI/BICwOhIuijBdTH80/1XKsDP9tEt sfDk7tJZODcIYlBjO1gDN6Ur7Rd+ssXVUJ6ZdeoZmP2eTP8F5itXn8jxqYMxzgBN fhkUGrfCvf1dx53rfE9Nz6ygn8nD5/tC3NuhnuI1MiMmiTY3zJzbIg/tld9LgUKR sZAHLNMV5QlA3g== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:07 2025 by rpki-client