This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft File: uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json) Hash identifier: e8aXrwBo+VcOKfEhwQBF7Jt+Qo1WJBumqEFLJRx1ClU= Subject key identifier: E4:E3:88:62:2A:43:96:00:67:D4:32:D4:DF:61:8D:5E:F0:25:5B:4D Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Certificate serial: 019B4DE15FD85FE05EA173F371621A10F6D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft Manifest number: 1561 Signing time: Wed 24 Dec 2025 01:02:54 +0000 Manifest this update: Wed 24 Dec 2025 01:02:54 +0000 Manifest next update: Thu 25 Dec 2025 01:02:54 +0000 Files and hashes: 1: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: MFuC92WsXiQZPikndQGVrc6w9h+EgreZFFOqxbddukE=) 2: um_x7j6zVmhOP4mF-URUgPyGQ3E.roa (hash: wUkyiUgLCwXSzxn/Wm+Q/r/1YAgpYiWS11qqDTfEJoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:5f:d8:5f:e0:5e:a1:73:f3:71:62:1a:10:f6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Validity Not Before: Dec 24 01:02:54 2025 GMT Not After : Dec 25 01:02:54 2025 GMT Subject: CN=e4e388622a43960067d432d4df618d5ef0255b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:48:05:ed:87:81:88:29:d9:26:14:52:e0: 90:3c:53:fe:62:c0:74:bd:3a:96:08:e2:8b:60:d1: 9b:a6:e8:8d:c5:6b:6a:87:e7:03:c5:8b:09:b5:88: 5c:f7:e6:d2:ab:08:e9:d6:69:02:be:51:24:45:1a: 95:8b:73:45:2e:e4:4d:14:8f:f4:0d:66:bc:b7:95: b9:31:b1:95:2a:93:ab:30:33:f2:c8:28:18:63:0c: 95:8e:2d:aa:c3:82:dc:4e:63:d4:1b:65:3f:5e:e3: 50:29:d4:c0:ae:7f:16:8d:53:b3:9a:48:96:19:63: 9a:8e:0d:e0:f0:58:55:2f:eb:a5:bb:fe:3a:78:ee: fa:3c:f8:2d:8b:11:00:67:bb:bc:b8:dd:41:96:e5: 51:02:68:4e:54:54:ec:d3:c9:0c:6b:55:fc:1f:09: af:56:1c:bc:23:84:71:83:dc:b9:2e:fc:9d:81:c6: 29:c4:f3:b4:f4:72:ef:42:fc:75:e0:e7:ca:be:bb: 06:52:aa:b8:d4:53:19:a3:8b:33:10:69:83:37:0f: 30:c5:a9:59:1b:a9:a4:b3:2f:71:c6:d5:af:12:eb: ff:ec:28:13:b5:67:fc:da:82:f9:58:2b:a9:d0:62: 7f:fc:2e:64:a1:af:70:dd:1c:2e:5a:c4:e4:a5:04: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:88:62:2A:43:96:00:67:D4:32:D4:DF:61:8D:5E:F0:25:5B:4D X509v3 Authority Key Identifier: keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d8:86:30:8b:f9:ef:4d:16:05:48:a1:1e:7a:76:95:ea:04: c8:fa:8f:a6:ff:1d:1a:10:be:eb:04:04:14:59:91:10:5d:a8: 0d:10:98:9d:00:e8:26:44:8e:e7:d9:44:8f:30:65:a2:f1:d6: 96:dc:81:a3:a3:fe:00:2e:c0:eb:75:1f:78:77:b8:9e:64:a5: 16:f9:9e:72:fe:97:46:52:4a:2c:3e:67:1b:ae:21:f1:2d:cc: a4:24:20:83:cf:c2:80:1f:87:fc:1a:cb:7a:c8:4f:24:41:1c: 7f:0f:3b:50:af:73:4d:8b:12:ed:52:1f:44:dc:41:4e:87:5a: 07:58:fc:a3:e3:2c:b3:1e:09:95:0b:61:30:b4:88:4c:1b:1f: 17:4b:8b:ff:75:fe:44:91:89:79:7a:23:9c:50:af:8a:b2:4d: e7:40:44:5b:a7:06:c4:2b:fd:da:36:4a:20:09:ee:d2:49:9f: 39:5f:19:6f:c6:d2:21:6c:4a:a6:d0:8f:72:42:1e:31:f2:92: 1a:de:09:d7:8c:d5:81:5a:9a:e1:f2:ad:c4:66:59:36:32:12: 93:4a:a4:9c:e6:14:06:21:9a:9b:6e:15:94:07:f1:03:42:18: 84:68:91:c2:ab:52:21:83:d5:b8:48:53:6a:3d:37:3c:eb:55: f2:86:d1:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4V/YX+BeoXPzcWIaEPbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWIwM2UyMjg3NWJiMDcwYjFiN2M1OGVhZGEyZTRiYjFh YWJlN2YwHhcNMjUxMjI0MDEwMjU0WhcNMjUxMjI1MDEwMjU0WjAzMTEwLwYDVQQD EyhlNGUzODg2MjJhNDM5NjAwNjdkNDMyZDRkZjYxOGQ1ZWYwMjU1YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWpIBe2HgYgp2SYUUuCQPFP+YsB0 vTqWCOKLYNGbpuiNxWtqh+cDxYsJtYhc9+bSqwjp1mkCvlEkRRqVi3NFLuRNFI/0 DWa8t5W5MbGVKpOrMDPyyCgYYwyVji2qw4LcTmPUG2U/XuNQKdTArn8WjVOzmkiW GWOajg3g8FhVL+ulu/46eO76PPgtixEAZ7u8uN1BluVRAmhOVFTs08kMa1X8Hwmv Vhy8I4Rxg9y5LvydgcYpxPO09HLvQvx14OfKvrsGUqq41FMZo4szEGmDNw8wxalZ G6mksy9xxtWvEuv/7CgTtWf82oL5WCup0GJ//C5koa9w3RwuWsTkpQS5XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTjiGIqQ5YAZ9Qy1N9hjV7wJVtNMB8GA1UdIwQY MBaAFLgbA+IodbsHCxt8WOraLkuxqr5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUt YWQyNTY2NDMwNTJiLzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUtYWQyNTY2NDMwNTJi LzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitiGMIv5 700WBUihHnp2leoEyPqPpv8dGhC+6wQEFFmREF2oDRCYnQDoJkSO59lEjzBlovHW ltyBo6P+AC7A63UfeHe4nmSlFvmecv6XRlJKLD5nG64h8S3MpCQgg8/CgB+H/BrL eshPJEEcfw87UK9zTYsS7VIfRNxBTodaB1j8o+Mssx4JlQthMLSITBsfF0uL/3X+ RJGJeXojnFCvirJN50BEW6cGxCv92jZKIAnu0kmfOV8Zb8bSIWxKptCPckIeMfKS Gt4J14zVgVqa4fKtxGZZNjISk0qknOYUBiGam24VlAfxA0IYhGiRwqtSIYPVuEhT aj03POtV8obR0Q== -----END CERTIFICATE-----Generated at Wed Dec 24 10:35:56 2025 by rpki-client