This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json) Hash identifier: eOrjoDzv9XKCYEbKgdYHA0nb6Zyor7t4h8Ylg9e5GD0= Subject key identifier: BD:24:46:95:CD:28:76:C7:5C:A7:2D:91:71:C7:24:54:AF:4E:6B:6A Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019B39EAFCD66965CE1E072288C91996837A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft Manifest number: 0956 Signing time: Sat 20 Dec 2025 04:00:59 +0000 Manifest this update: Sat 20 Dec 2025 04:00:59 +0000 Manifest next update: Sun 21 Dec 2025 04:00:59 +0000 Files and hashes: 1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=) 2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=) 3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=) 4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=) 5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=) 6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: NMvxEV8JZgRh6JGwZizaYsn9dq1+Q7u8JZn+BfLgqGs=) 7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:fc:d6:69:65:ce:1e:07:22:88:c9:19:96:83:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Dec 20 04:00:59 2025 GMT Not After : Dec 21 04:00:59 2025 GMT Subject: CN=bd244695cd2876c75ca72d9171c72454af4e6b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:07:36:42:0b:66:d8:3f:34:ef:6b:0f:55: 99:78:82:82:a7:f4:2c:28:fb:96:3b:7b:6e:5b:25: 30:8c:b2:81:ff:2a:e9:ba:bd:14:fe:34:85:47:5d: 93:6f:1c:38:df:69:99:b5:e6:20:83:d1:4a:f9:52: 02:ff:c7:c5:dc:7f:5b:78:87:eb:4a:30:4d:15:b7: 71:2c:41:8d:2e:fa:49:9e:f7:7c:ed:1b:1a:15:d5: c2:8b:4b:fe:3b:64:91:6a:fa:b5:82:44:5d:4a:41: 01:8d:71:c4:a7:f8:36:3d:e0:b5:45:8e:2f:b7:c0: 16:4d:e0:a6:b8:4f:a5:6c:8c:0a:64:99:49:f6:fa: b4:82:bc:70:74:36:08:a8:d6:c7:ac:de:9b:fe:1f: df:1e:89:90:c3:bb:d6:4f:16:a6:db:0c:f0:fd:30: f7:e7:b1:f6:11:ca:f9:12:5b:0c:51:81:77:76:c9: 2c:56:26:2f:ca:03:b3:ab:c3:a3:a7:1c:35:2e:a3: 80:6d:6f:5b:ec:f0:1b:5d:ef:8e:32:66:95:2b:17: 01:66:3f:d1:c9:0b:5b:be:e6:f0:aa:cc:a2:7c:1a: 18:a3:4b:bd:d3:bd:4e:94:b8:99:ff:dc:e2:68:a0: 40:96:bf:1a:fe:48:7d:94:15:0a:a1:5d:ca:10:00: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:46:95:CD:28:76:C7:5C:A7:2D:91:71:C7:24:54:AF:4E:6B:6A X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:37:ad:16:6c:63:f7:ae:42:8e:18:26:c5:32:3d:90:1f:26: f5:c0:e7:4e:d9:be:81:43:e3:7d:bf:43:ab:04:89:6a:bc:f0: 53:30:37:e7:fd:ae:cc:e5:0f:23:fc:73:c8:57:55:24:64:4f: b8:b3:ff:cb:35:d1:8a:e7:a8:94:26:8e:31:4c:c5:a0:03:5d: e4:b7:b6:e0:dd:f8:84:91:62:9d:94:46:ce:eb:40:c6:64:18: 8d:8f:70:f3:7e:91:2d:42:a8:ed:21:5b:ca:24:c2:34:76:07: 4e:cf:ff:0e:3e:e1:96:8f:9c:0c:7c:46:f9:ec:e3:60:a1:ea: 08:5d:1c:56:71:38:88:a4:c5:46:bb:e5:04:2f:ff:c7:be:90: 0d:67:d5:8c:5e:69:8d:d2:fb:d6:a2:6b:72:08:9c:6b:4e:c0: 4e:12:f7:ae:00:56:ba:ee:6d:c0:e3:9b:1c:69:1b:6f:1a:3f: 26:ca:04:8e:49:3e:3b:32:e8:2b:1a:04:c5:d2:84:f0:a7:0f: 16:33:2b:65:14:5c:ab:31:60:90:da:bb:be:7b:99:b7:34:a4: 8c:84:78:6e:d0:a4:d4:da:76:d4:3f:f1:7e:22:cc:bf:58:f9: e2:d2:55:9d:96:0f:89:6c:21:1c:93:61:50:bc:b8:e8:bb:a9: c2:05:32:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56vzWaWXOHgciiMkZloN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjUxMjIwMDQwMDU5WhcNMjUxMjIxMDQwMDU5WjAzMTEwLwYDVQQD EyhiZDI0NDY5NWNkMjg3NmM3NWNhNzJkOTE3MWM3MjQ1NGFmNGU2YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h4HNkILZtg/NO9rD1WZeIKCp/Qs KPuWO3tuWyUwjLKB/yrpur0U/jSFR12Tbxw432mZteYgg9FK+VIC/8fF3H9beIfr SjBNFbdxLEGNLvpJnvd87RsaFdXCi0v+O2SRavq1gkRdSkEBjXHEp/g2PeC1RY4v t8AWTeCmuE+lbIwKZJlJ9vq0grxwdDYIqNbHrN6b/h/fHomQw7vWTxam2wzw/TD3 57H2Ecr5ElsMUYF3dsksViYvygOzq8Ojpxw1LqOAbW9b7PAbXe+OMmaVKxcBZj/R yQtbvubwqsyifBoYo0u9071OlLiZ/9ziaKBAlr8a/kh9lBUKoV3KEAA7rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0kRpXNKHbHXKctkXHHJFSvTmtqMB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDetFmxj 965CjhgmxTI9kB8m9cDnTtm+gUPjfb9DqwSJarzwUzA35/2uzOUPI/xzyFdVJGRP uLP/yzXRiueolCaOMUzFoANd5Le24N34hJFinZRGzutAxmQYjY9w836RLUKo7SFb yiTCNHYHTs//Dj7hlo+cDHxG+ezjYKHqCF0cVnE4iKTFRrvlBC//x76QDWfVjF5p jdL71qJrcgica07AThL3rgBWuu5twOObHGkbbxo/JsoEjkk+OzLoKxoExdKE8KcP FjMrZRRcqzFgkNq7vnuZtzSkjIR4btCk1Np21D/xfiLMv1j54tJVnZYPiWwhHJNh ULy46LupwgUy4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:35:48 2025 by rpki-client