This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json) Hash identifier: HytfUr3JZZeqI7/TuvI1T8KULQeP6H6YYRuqJWwXWE4= Subject key identifier: 51:38:CD:4C:7B:5F:77:16:1A:87:25:0B:FC:41:1F:47:B8:3D:55:DF Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743 Certificate serial: 019B6B7BA6B156B15B26F9D01D37853571F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft Manifest number: 068D Signing time: Mon 29 Dec 2025 19:00:24 +0000 Manifest this update: Mon 29 Dec 2025 19:00:24 +0000 Manifest next update: Tue 30 Dec 2025 19:00:24 +0000 Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: 9kZcSkxXAPGyE062ckVKhUiJ3hXJqinIDaHEUItjOAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7b:a6:b1:56:b1:5b:26:f9:d0:1d:37:85:35:71:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743 Validity Not Before: Dec 29 19:00:24 2025 GMT Not After : Dec 30 19:00:24 2025 GMT Subject: CN=5138cd4c7b5f77161a87250bfc411f47b83d55df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:09:fe:c0:61:33:59:2d:1d:5a:ad:c8:77: 4a:df:0c:af:29:50:80:8f:c2:46:ae:56:19:7b:b5: 2b:15:ce:42:d0:47:4e:f0:e7:17:4a:06:4c:87:5b: db:e0:ca:e7:83:11:30:3b:7f:68:bc:39:ab:9c:64: 71:0c:63:02:53:84:83:4d:da:b7:81:80:0e:1e:02: 10:6d:37:c2:2e:61:87:1c:4c:d7:9b:87:cf:84:8c: 2b:a8:2f:6e:02:8e:7c:4f:b0:52:c0:8f:93:60:eb: 7b:53:db:f0:e9:29:72:60:9f:8f:9e:9a:82:0a:9b: 46:ac:33:79:73:9a:17:db:3a:88:3e:a4:e6:d7:88: 4c:a5:e7:83:67:b4:df:db:23:38:e8:92:fd:d2:71: e3:aa:6d:f9:cf:74:9b:af:6c:21:5b:2d:01:75:f1: 95:15:a7:1b:5a:56:b2:96:02:73:1b:51:71:a3:77: ae:c9:1f:dd:15:9c:d0:20:d9:cf:73:d8:d0:7e:69: 2f:f7:af:e4:a5:36:9d:bb:9c:ff:e2:13:0f:6b:a6: db:b1:da:a5:9e:44:59:ba:a7:f9:c6:4f:88:de:a2: f5:e7:97:cf:cf:9b:ea:f8:72:05:03:7a:5b:87:3a: 00:86:9e:ca:67:58:38:34:07:34:9a:ab:88:34:99: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:CD:4C:7B:5F:77:16:1A:87:25:0B:FC:41:1F:47:B8:3D:55:DF X509v3 Authority Key Identifier: keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:b2:8e:f5:44:34:8c:9d:e8:33:d7:42:5b:04:42:24:f5: 9c:58:5a:72:f0:17:74:dc:02:97:d5:91:a8:38:b3:df:21:40: c2:00:7a:a2:9c:68:9f:50:3e:a2:0c:0e:03:df:d4:22:5f:8b: 3e:f8:f3:50:16:0c:e7:2b:c4:11:d2:31:f8:54:4c:32:ed:27: da:43:cd:c1:ea:63:67:29:f1:13:e1:ee:ec:57:b2:a0:cb:85: 9f:5d:ac:61:09:ce:95:9c:a5:16:35:f5:79:72:2b:b8:b5:65: f3:3b:2a:fd:0b:1e:ab:96:61:be:89:32:a0:b8:3b:13:32:c9: 97:59:94:dd:e9:aa:7d:ca:78:38:76:c7:14:6d:d4:24:82:5e: 1a:54:a9:f5:1c:bf:39:f1:d3:65:9d:f6:64:4f:b2:af:66:f4: 9a:55:0b:c7:b5:93:e5:9a:cb:a7:c9:1f:05:93:dc:1e:0c:bb: 6f:46:1a:72:1f:d8:1d:49:4f:bd:d1:2f:90:ae:82:37:76:99: 02:ba:70:d8:eb:4a:13:ed:d3:6d:51:ad:b8:a3:27:a2:60:b5: 22:90:8d:f1:fb:10:1c:e8:73:90:2c:71:06:81:29:d2:8c:d8: 41:48:2d:26:3f:1b:ba:9d:b2:d4:cd:56:88:07:4d:4e:1c:00: 5d:98:49:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtre6axVrFbJvnQHTeFNXHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZjUxYjQ2NDYxNDc5OTk3NjU3N2Q1ZWY3YTgwNzhlYTgw YzE3NDMwHhcNMjUxMjI5MTkwMDI0WhcNMjUxMjMwMTkwMDI0WjAzMTEwLwYDVQQD Eyg1MTM4Y2Q0YzdiNWY3NzE2MWE4NzI1MGJmYzQxMWY0N2I4M2Q1NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPgJ/sBhM1ktHVqtyHdK3wyvKVCA j8JGrlYZe7UrFc5C0EdO8OcXSgZMh1vb4MrngxEwO39ovDmrnGRxDGMCU4SDTdq3 gYAOHgIQbTfCLmGHHEzXm4fPhIwrqC9uAo58T7BSwI+TYOt7U9vw6SlyYJ+PnpqC CptGrDN5c5oX2zqIPqTm14hMpeeDZ7Tf2yM46JL90nHjqm35z3Sbr2whWy0BdfGV FacbWlaylgJzG1Fxo3euyR/dFZzQINnPc9jQfmkv96/kpTadu5z/4hMPa6bbsdql nkRZuqf5xk+I3qL155fPz5vq+HIFA3pbhzoAhp7KZ1g4NAc0mquINJnQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE4zUx7X3cWGoclC/xBH0e4PVXfMB8GA1UdIwQY MBaAFIv1G0ZGFHmZdld9XveoB46oDBdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMt ZDBkMzEzNTIwNDMxLzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMtZDBkMzEzNTIwNDMx LzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRKyjvVE NIyd6DPXQlsEQiT1nFhacvAXdNwCl9WRqDiz3yFAwgB6opxon1A+ogwOA9/UIl+L PvjzUBYM5yvEEdIx+FRMMu0n2kPNwepjZynxE+Hu7FeyoMuFn12sYQnOlZylFjX1 eXIruLVl8zsq/Qseq5ZhvokyoLg7EzLJl1mU3emqfcp4OHbHFG3UJIJeGlSp9Ry/ OfHTZZ32ZE+yr2b0mlULx7WT5ZrLp8kfBZPcHgy7b0Yach/YHUlPvdEvkK6CN3aZ Arpw2OtKE+3TbVGtuKMnomC1IpCN8fsQHOhzkCxxBoEp0ozYQUgtJj8bup2y1M1W iAdNThwAXZhJbg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:24 2025 by rpki-client