This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json) Hash identifier: 3C5IVox1/9leKmA16Fnd23FZuK7iyiTc0MtpccRhyc0= Subject key identifier: 2C:B3:47:A3:5F:FA:31:9F:22:CE:26:B1:DC:36:2E:9E:9D:4A:44:59 Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0 Certificate serial: 019B3B6BDC7B60C0F76FC2E5CB35D8351303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 11:01:23 +0000 Manifest this update: Sat 20 Dec 2025 11:01:23 +0000 Manifest next update: Sun 21 Dec 2025 11:01:23 +0000 Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: kNsxdx9R5ICyU8UWkt6VUo7ohkeuVCOHW+xqUEwIX7w=) 2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=) 3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=) 4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:dc:7b:60:c0:f7:6f:c2:e5:cb:35:d8:35:13:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0 Validity Not Before: Dec 20 11:01:23 2025 GMT Not After : Dec 21 11:01:23 2025 GMT Subject: CN=2cb347a35ffa319f22ce26b1dc362e9e9d4a4459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:b4:c7:05:c2:c5:da:aa:87:60:24:eb:96: 14:a1:07:11:60:e9:57:a1:93:0a:e2:2a:d1:33:6f: a6:34:8e:13:de:4b:62:33:39:0d:ff:50:2f:01:fb: 36:61:5c:9d:ab:85:f9:7f:49:54:b8:60:30:50:e0: 08:d1:d4:91:09:56:11:8d:e9:56:e3:71:71:32:2b: 3e:3b:27:18:27:cd:8d:4e:32:30:b8:28:42:a6:bc: ef:dd:11:98:9b:8e:b3:49:0e:62:df:dc:96:86:b6: a4:e1:24:da:72:63:fc:98:f2:fa:b7:ea:f8:61:95: 6f:4c:7b:f4:64:b0:b6:39:fc:ea:2d:8a:75:09:6f: f2:f7:2d:ab:b2:3a:47:ce:31:82:46:e6:88:e1:58: 0d:29:81:72:d9:84:7a:63:31:a7:86:be:07:d5:50: bd:59:4f:7b:31:92:d0:8e:61:ad:f7:25:26:fa:d2: 45:46:17:0b:e7:3c:ef:69:14:ba:41:3d:ee:b8:be: bc:e1:ac:0e:d2:8e:24:47:f1:e5:1e:9b:17:99:be: d7:6a:9b:28:43:53:a9:41:58:b7:be:04:23:69:9e: 14:50:e4:3a:29:4e:5d:a3:39:7b:ba:3f:f7:0e:b0: 72:37:f9:89:5d:da:42:97:08:7c:b8:c0:dc:c5:cb: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B3:47:A3:5F:FA:31:9F:22:CE:26:B1:DC:36:2E:9E:9D:4A:44:59 X509v3 Authority Key Identifier: keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:32:34:31:5f:8e:3b:8b:6e:2e:77:93:39:f0:f0:93:62:c9: 46:73:11:c6:6a:a1:62:2c:f5:7b:24:f5:ab:ac:73:56:48:49: 78:c2:93:fc:bb:a0:35:bc:ba:2d:18:9f:23:7d:76:5f:d2:e2: 86:7a:35:71:47:ba:59:25:cf:f6:36:7d:41:6f:91:be:da:62: ae:27:c3:81:27:ed:b4:8a:73:a8:57:bb:79:82:f0:29:2e:ff: 96:f8:b9:4c:aa:6d:b3:1b:86:59:b3:e0:35:e5:04:49:70:65: 79:7c:7f:ea:3e:66:f3:3b:e7:53:94:b7:55:a2:f1:b7:32:2b: b9:51:7b:b8:6f:fe:29:f1:1d:3d:cd:80:c2:84:09:0a:76:fc: 4f:af:87:07:93:3c:ee:8b:e7:73:70:f4:6e:54:b6:2a:03:42: 7c:d5:36:b6:c3:a2:52:e9:59:41:e6:62:90:cd:86:e0:18:c7: 02:4e:22:3f:bb:06:e4:22:51:f8:f8:1b:41:16:91:36:96:71: a3:d0:14:42:5a:a1:6b:e1:f1:3b:62:9a:cf:76:87:e5:f1:94: ee:68:0e:b7:22:c4:78:db:7b:f6:0b:23:ec:20:6c:ca:ec:e4: b7:97:dc:82:55:46:74:17:8b:f2:01:c9:2e:13:a4:dd:b1:d4: 52:5e:31:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a9x7YMD3b8LlyzXYNRMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi MzEyZjAwHhcNMjUxMjIwMTEwMTIzWhcNMjUxMjIxMTEwMTIzWjAzMTEwLwYDVQQD EygyY2IzNDdhMzVmZmEzMTlmMjJjZTI2YjFkYzM2MmU5ZTlkNGE0NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0960xwXCxdqqh2Ak65YUoQcRYOlX oZMK4irRM2+mNI4T3ktiMzkN/1AvAfs2YVydq4X5f0lUuGAwUOAI0dSRCVYRjelW 43FxMis+OycYJ82NTjIwuChCprzv3RGYm46zSQ5i39yWhrak4STacmP8mPL6t+r4 YZVvTHv0ZLC2OfzqLYp1CW/y9y2rsjpHzjGCRuaI4VgNKYFy2YR6YzGnhr4H1VC9 WU97MZLQjmGt9yUm+tJFRhcL5zzvaRS6QT3uuL684awO0o4kR/HlHpsXmb7Xapso Q1OpQVi3vgQjaZ4UUOQ6KU5dozl7uj/3DrByN/mJXdpClwh8uMDcxcukEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyzR6Nf+jGfIs4msdw2Lp6dSkRZMB8GA1UdIwQY MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzI0MV+O O4tuLneTOfDwk2LJRnMRxmqhYiz1eyT1q6xzVkhJeMKT/LugNby6LRifI312X9Li hno1cUe6WSXP9jZ9QW+RvtpirifDgSfttIpzqFe7eYLwKS7/lvi5TKptsxuGWbPg NeUESXBleXx/6j5m8zvnU5S3VaLxtzIruVF7uG/+KfEdPc2AwoQJCnb8T6+HB5M8 7ovnc3D0blS2KgNCfNU2tsOiUulZQeZikM2G4BjHAk4iP7sG5CJR+PgbQRaRNpZx o9AUQlqha+HxO2Kaz3aH5fGU7mgOtyLEeNt79gsj7CBsyuzkt5fcglVGdBeL8gHJ LhOk3bHUUl4xiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:34:30 2025 by rpki-client