This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json) Hash identifier: JpKLsQ9EIQushig++gz5SrSpCyKUc5MbXrZUZ09Cd0k= Subject key identifier: 80:49:48:77:44:56:63:5E:FB:AA:CA:99:77:04:01:CF:1E:20:AA:D8 Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B10EF966252B84DD3CB2243B5D1E3128E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 05:01:35 +0000 Manifest this update: Fri 12 Dec 2025 05:01:35 +0000 Manifest next update: Sat 13 Dec 2025 05:01:35 +0000 Files and hashes: 1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=) 2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=) 3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=) 4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=) 5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=) 6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=) 7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: NYD73eKDkiuuQ9EvXiUuD9pZfS3xzNVjwBziZS+ID3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:96:62:52:b8:4d:d3:cb:22:43:b5:d1:e3:12:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Dec 12 05:01:35 2025 GMT Not After : Dec 13 05:01:35 2025 GMT Subject: CN=804948774456635efbaaca99770401cf1e20aad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:46:da:77:df:e3:ba:bb:8b:97:8b:0a:43: 97:86:51:3c:61:4d:4a:9e:49:a7:6b:c7:e8:3b:e8: f6:37:0e:50:48:df:59:31:73:7a:be:c9:59:e6:1a: 02:78:9f:c7:d7:6d:d7:10:65:e3:c2:5c:cf:f6:4c: 34:05:77:2d:b6:17:bd:b6:0f:4b:81:1b:cc:91:65: 92:df:06:96:b0:09:5f:10:fd:33:51:33:42:8b:3a: 82:a0:8e:0d:7c:a5:6c:bf:fa:0e:7c:b0:57:8f:de: 71:17:31:be:4c:71:2a:e4:b1:66:2f:ec:27:12:63: 65:0e:64:62:2a:e9:9a:9a:5d:7d:eb:15:78:33:c5: 5b:4b:53:15:63:a3:0c:e2:2b:57:28:3f:86:96:91: 45:ac:7e:b8:bb:35:e6:b3:5d:52:8f:69:75:e1:d1: ce:9a:fa:73:69:57:7f:f7:64:69:bc:14:1f:66:ce: 4e:3f:47:8f:a7:e2:75:5a:c5:29:45:1b:c2:f4:5d: 67:d3:b8:cf:d8:79:0d:11:62:a7:1a:c0:6c:c9:d0: 6b:f2:7b:c0:a1:f8:9e:65:aa:ab:c3:7d:cf:c7:60: af:69:2b:e8:d9:07:2f:37:f2:c7:83:01:41:ea:b5: 1c:1d:7b:70:1c:d9:d9:00:1f:eb:4d:9d:64:2e:8e: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:49:48:77:44:56:63:5E:FB:AA:CA:99:77:04:01:CF:1E:20:AA:D8 X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:61:85:5d:d6:00:d9:9a:45:4d:15:54:f6:ea:03:15:05: 7c:f6:02:ec:08:76:50:16:2e:bf:d2:fd:c8:ab:97:5e:d7:4b: 21:53:e1:41:e8:eb:43:67:99:74:e4:b3:58:0e:21:78:8b:48: a1:96:2a:8c:9b:e8:df:bb:6c:22:8d:55:80:b4:f2:e2:1b:8e: d6:2c:45:7e:36:db:c7:d9:70:8d:3d:f6:6b:d1:ba:e8:36:f6: 63:fa:7c:47:56:e4:c5:ca:f0:9a:e1:e9:b9:49:28:f6:06:b4: fa:2a:21:8c:5c:d4:f3:a0:35:be:87:55:fc:74:70:f2:72:47: 04:1b:54:f5:26:43:f4:b8:4c:48:8d:58:55:c1:c7:4a:c7:bb: 67:9f:cd:2e:23:4e:b8:84:3e:1b:e8:c7:46:02:5e:95:31:53: a6:73:b1:72:90:60:89:14:a3:7f:7e:75:ba:c5:9b:79:b0:ab: ef:5d:d6:d6:3f:2c:fd:7a:ae:f7:b2:19:27:1a:26:d5:b5:78: b8:8d:59:16:ef:55:18:e2:b8:cb:0e:82:c6:69:33:3f:d0:ba: ed:9c:5c:1e:e8:4f:f1:78:c5:6e:be:b3:da:9a:ac:10:1a:0c: 4d:b5:12:cf:2b:6a:3d:df:83:9e:d8:00:4d:7f:7d:7b:7d:13: fd:60:5d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ75ZiUrhN08siQ7XR4xKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjUxMjEyMDUwMTM1WhcNMjUxMjEzMDUwMTM1WjAzMTEwLwYDVQQD Eyg4MDQ5NDg3NzQ0NTY2MzVlZmJhYWNhOTk3NzA0MDFjZjFlMjBhYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SxG2nff47q7i5eLCkOXhlE8YU1K nkmna8foO+j2Nw5QSN9ZMXN6vslZ5hoCeJ/H123XEGXjwlzP9kw0BXctthe9tg9L gRvMkWWS3waWsAlfEP0zUTNCizqCoI4NfKVsv/oOfLBXj95xFzG+THEq5LFmL+wn EmNlDmRiKumaml196xV4M8VbS1MVY6MM4itXKD+GlpFFrH64uzXms11Sj2l14dHO mvpzaVd/92RpvBQfZs5OP0ePp+J1WsUpRRvC9F1n07jP2HkNEWKnGsBsydBr8nvA ofieZaqrw33Px2CvaSvo2QcvN/LHgwFB6rUcHXtwHNnZAB/rTZ1kLo4cpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBJSHdEVmNe+6rKmXcEAc8eIKrYMB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWodhhV3W ANmaRU0VVPbqAxUFfPYC7Ah2UBYuv9L9yKuXXtdLIVPhQejrQ2eZdOSzWA4heItI oZYqjJvo37tsIo1VgLTy4huO1ixFfjbbx9lwjT32a9G66Db2Y/p8R1bkxcrwmuHp uUko9ga0+iohjFzU86A1vodV/HRw8nJHBBtU9SZD9LhMSI1YVcHHSse7Z5/NLiNO uIQ+G+jHRgJelTFTpnOxcpBgiRSjf351usWbebCr713W1j8s/Xqu97IZJxom1bV4 uI1ZFu9VGOK4yw6CxmkzP9C67ZxcHuhP8XjFbr6z2pqsEBoMTbUSzytqPd+DntgA TX99e30T/WBd7A== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:43 2025 by rpki-client