This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json) Hash identifier: yOFVmNVOc9kSZNiRJ4/slu08sd7j8JtJoGiLlanFImA= Subject key identifier: C3:7C:EA:BB:BA:32:0A:9C:D1:F3:04:2B:67:9C:3E:47:34:82:92:B0 Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a Certificate serial: 019B53E1FF86A0BFEE6A316B74D720EAED59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft Manifest number: 12CF Signing time: Thu 25 Dec 2025 05:01:18 +0000 Manifest this update: Thu 25 Dec 2025 05:01:18 +0000 Manifest next update: Fri 26 Dec 2025 05:01:18 +0000 Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=) 2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: TZFeatNuvJ7Fa/qTo+23EOw+/zSxwbaoIcMFf7ijMEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:ff:86:a0:bf:ee:6a:31:6b:74:d7:20:ea:ed:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a Validity Not Before: Dec 25 05:01:18 2025 GMT Not After : Dec 26 05:01:18 2025 GMT Subject: CN=c37ceabbba320a9cd1f3042b679c3e47348292b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:8b:ab:ae:12:2e:b7:f2:4f:e8:3a:98:17: e1:b6:14:9c:11:f2:5b:44:87:ec:26:0b:72:cd:d5: 89:7e:52:21:e1:dd:02:36:b4:98:4d:69:6f:d4:e9: 05:15:00:02:c4:c3:b6:45:2d:d3:d0:a4:c3:83:ad: dc:a0:27:1e:4e:6d:f0:d5:c7:a4:b8:d0:e2:92:a2: 6d:89:06:cd:e5:2b:4d:c5:b7:aa:08:78:42:5d:1d: 50:78:15:51:f2:52:35:66:60:76:1e:99:36:f4:4d: cd:50:72:74:dd:07:dd:df:86:ba:b0:35:25:23:39: b6:f2:cf:d0:fb:d6:00:6f:71:5a:a2:ac:71:58:e3: ab:88:3c:02:9c:cd:81:a8:fb:5b:04:61:54:c9:fa: 54:26:e7:3e:55:94:c2:ff:14:b9:ac:53:72:00:31: 7e:9e:dd:15:9c:93:ef:b5:9f:ce:82:d9:64:6d:2c: b9:36:45:36:fe:1b:a2:e6:21:cf:93:5c:1e:b0:22: 1a:bf:d4:d3:ec:68:af:fa:62:74:40:cf:15:28:81: 3e:94:ca:7b:19:3d:c4:fc:06:8d:d8:92:57:fe:3f: 65:1a:55:25:bd:37:0d:7a:0b:7e:64:c9:0c:e9:00: c0:a2:54:51:85:0b:9c:91:88:c6:7d:1d:2d:80:f9: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:EA:BB:BA:32:0A:9C:D1:F3:04:2B:67:9C:3E:47:34:82:92:B0 X509v3 Authority Key Identifier: keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:39:54:cb:7e:90:c6:4a:01:af:c1:4a:37:30:d4:1f:4a:d7: f4:ec:21:0b:3a:b7:9e:e7:6b:40:38:b9:2a:62:f1:3d:e3:65: ac:30:74:bd:aa:09:ea:35:b4:4f:c1:a8:d3:a4:3e:31:32:05: 8e:16:2d:b2:40:70:6d:30:f1:6c:67:3a:9f:60:18:83:57:c7: ba:f6:b1:32:91:28:1c:b3:c3:5b:43:30:55:9f:b8:85:ca:d5: cc:01:42:a9:36:46:92:ec:28:92:5a:05:1a:03:3b:dd:04:9f: f9:a8:db:7b:49:4f:0c:75:0b:71:26:3d:b7:16:c0:80:37:69: 3e:7d:ff:14:fa:5c:98:03:9e:49:38:8c:5c:4f:ac:d5:92:a6: 35:56:dd:d5:ed:43:8e:30:ef:3a:9c:1a:f7:89:73:d8:66:6f: e8:aa:7f:aa:4d:cb:a3:4d:32:67:bc:d5:f8:6d:dd:c2:1c:f4: ed:30:ff:08:43:a6:f3:1a:f9:cd:86:64:2b:7c:d8:2a:5e:31: 87:e0:25:0d:c7:74:dd:8e:77:6d:a2:b5:e1:9b:cb:3d:6b:00: f0:1c:6f:c2:cb:95:3e:b8:46:a0:aa:52:40:07:26:74:71:f4: a5:50:5c:77:1d:55:5a:a9:8c:00:0f:d1:e2:c3:61:cd:29:a6: 4f:b2:43:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4f+GoL/uajFrdNcg6u1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjVhYTlmZWViMDBhNTEyNzQ4N2YzNDM4NDA3N2FlNzk3 MGY4MWEwHhcNMjUxMjI1MDUwMTE4WhcNMjUxMjI2MDUwMTE4WjAzMTEwLwYDVQQD EyhjMzdjZWFiYmJhMzIwYTljZDFmMzA0MmI2NzljM2U0NzM0ODI5MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwOLq64SLrfyT+g6mBfhthScEfJb RIfsJgtyzdWJflIh4d0CNrSYTWlv1OkFFQACxMO2RS3T0KTDg63coCceTm3w1cek uNDikqJtiQbN5StNxbeqCHhCXR1QeBVR8lI1ZmB2Hpk29E3NUHJ03Qfd34a6sDUl Izm28s/Q+9YAb3FaoqxxWOOriDwCnM2BqPtbBGFUyfpUJuc+VZTC/xS5rFNyADF+ nt0VnJPvtZ/OgtlkbSy5NkU2/hui5iHPk1wesCIav9TT7Giv+mJ0QM8VKIE+lMp7 GT3E/AaN2JJX/j9lGlUlvTcNegt+ZMkM6QDAolRRhQuckYjGfR0tgPlNzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN86ru6Mgqc0fMEK2ecPkc0gpKwMB8GA1UdIwQY MBaAFLm1qp/usApRJ0h/NDhAd655cPgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMt ODhhMGQ1ZmRjZjliLzEvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMyY2UtZjVkMi00MzkzLWFiMjMtODhhMGQ1ZmRjZjli LzEvdWJXcW4tNndDbEVuU0g4ME9FQjNybmx3LUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0zlUy36Q xkoBr8FKNzDUH0rX9OwhCzq3nudrQDi5KmLxPeNlrDB0vaoJ6jW0T8Go06Q+MTIF jhYtskBwbTDxbGc6n2AYg1fHuvaxMpEoHLPDW0MwVZ+4hcrVzAFCqTZGkuwokloF GgM73QSf+ajbe0lPDHULcSY9txbAgDdpPn3/FPpcmAOeSTiMXE+s1ZKmNVbd1e1D jjDvOpwa94lz2GZv6Kp/qk3Lo00yZ7zV+G3dwhz07TD/CEOm8xr5zYZkK3zYKl4x h+AlDcd03Y53baK14ZvLPWsA8BxvwsuVPrhGoKpSQAcmdHH0pVBcdx1VWqmMAA/R 4sNhzSmmT7JDQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:29:34 2025 by rpki-client