This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json) Hash identifier: L8MDWEariF9ECosZ4zd4ZuFYVhxUhfpguvjYutJB5s8= Subject key identifier: AB:E8:67:56:B3:FE:6D:2C:6D:E9:11:AA:68:F7:7A:02:16:06:01:B4 Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de Certificate serial: 019B41364F6874811727F98A99C066D01A2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft Manifest number: 169B Signing time: Sun 21 Dec 2025 14:00:36 +0000 Manifest this update: Sun 21 Dec 2025 14:00:36 +0000 Manifest next update: Mon 22 Dec 2025 14:00:36 +0000 Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=) 2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: AwBQUjjKlz4l1w+yMCzt3wVn3JztmU0QsR1Yto1gBYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:4f:68:74:81:17:27:f9:8a:99:c0:66:d0:1a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de Validity Not Before: Dec 21 14:00:36 2025 GMT Not After : Dec 22 14:00:36 2025 GMT Subject: CN=abe86756b3fe6d2c6de911aa68f77a02160601b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:ad:82:17:26:e1:de:15:23:d3:0a:b7:6e: 9e:db:d1:89:fc:a2:6a:82:e4:f9:3f:1c:26:b3:6f: 8e:20:e0:eb:e2:8a:4c:5c:c1:e6:bd:ad:09:5a:38: 82:5d:cd:67:5f:1f:91:4a:c7:ac:a4:34:23:55:ce: 58:90:b2:b9:69:3c:2d:25:9e:b4:25:7c:1c:76:b2: 6b:9c:02:b3:6f:c5:b6:79:52:54:84:5c:67:63:8e: 22:6e:86:32:9d:32:2e:0e:00:f4:15:f5:41:8b:84: 3c:be:29:f8:b6:fe:c3:49:25:c3:f1:90:ef:4a:c6: 0e:e7:3a:67:b4:11:02:38:49:ab:8a:43:b5:79:1d: b2:31:66:a1:3b:d6:41:64:f6:31:0c:78:18:bd:8b: c3:48:52:09:58:55:5d:9d:ca:e6:cc:7c:92:65:76: 8b:45:7c:60:8f:fc:95:ae:9d:46:d8:06:54:9a:24: d3:0e:4d:db:ad:9c:46:00:ee:2b:f3:71:96:98:26: 60:aa:c7:9e:d8:77:04:20:ea:5d:3d:dc:91:c5:e0: c8:29:b9:4b:3c:67:69:dd:6e:aa:01:95:fe:42:d5: b9:3e:03:07:5c:ab:42:ae:c9:bb:45:5c:ce:e8:e8: 83:24:4c:59:78:76:35:90:e0:64:7a:55:aa:0b:62: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:67:56:B3:FE:6D:2C:6D:E9:11:AA:68:F7:7A:02:16:06:01:B4 X509v3 Authority Key Identifier: keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ea:0b:08:bb:c5:ab:43:ed:09:2d:38:25:8a:18:41:ee:aa: af:5a:ea:db:c2:dc:cd:9c:03:ea:53:83:07:68:13:e1:11:b2: 24:51:78:bd:11:d7:fe:02:59:b7:b5:88:67:1e:13:eb:49:78: 18:77:a7:79:f0:9c:d1:81:07:c3:93:27:dd:f5:fc:8f:7c:42: 5a:2a:0f:d0:d8:4d:e3:7f:8e:07:b2:31:57:4c:b4:db:b5:5c: cd:1e:a3:42:87:f2:4e:79:cf:02:3d:19:9c:20:c5:5c:3c:00: b0:c3:ba:c2:8f:9c:23:b7:ad:91:99:de:31:c1:8c:04:ab:37: d9:eb:7e:ac:6c:8e:52:f4:16:b4:11:31:84:2a:bb:7a:0e:2c: b6:82:c1:44:1f:77:ac:ab:a3:33:8a:03:97:11:b1:fe:f2:d1: 04:79:a5:d4:04:a8:72:de:af:eb:f8:79:85:07:d0:d3:8c:6c: 52:57:35:22:2c:37:4b:e9:78:24:e5:c0:76:5a:86:92:bf:5b: 8d:38:29:6b:2e:98:97:64:c3:eb:cc:15:ac:12:b5:53:10:16: d7:bd:04:39:50:36:56:1e:e7:0f:ac:8f:12:3b:87:9a:7e:87: bc:2d:3e:ba:e8:c0:13:64:e7:60:db:ff:20:c8:42:f3:03:89: a0:86:62:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNk9odIEXJ/mKmcBm0BovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi Njk3ZGUwHhcNMjUxMjIxMTQwMDM2WhcNMjUxMjIyMTQwMDM2WjAzMTEwLwYDVQQD EyhhYmU4Njc1NmIzZmU2ZDJjNmRlOTExYWE2OGY3N2EwMjE2MDYwMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFytghcm4d4VI9MKt26e29GJ/KJq guT5Pxwms2+OIODr4opMXMHmva0JWjiCXc1nXx+RSsespDQjVc5YkLK5aTwtJZ60 JXwcdrJrnAKzb8W2eVJUhFxnY44iboYynTIuDgD0FfVBi4Q8vin4tv7DSSXD8ZDv SsYO5zpntBECOEmrikO1eR2yMWahO9ZBZPYxDHgYvYvDSFIJWFVdncrmzHySZXaL RXxgj/yVrp1G2AZUmiTTDk3brZxGAO4r83GWmCZgqsee2HcEIOpdPdyRxeDIKblL PGdp3W6qAZX+QtW5PgMHXKtCrsm7RVzO6OiDJExZeHY1kOBkelWqC2L2UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvoZ1az/m0sbekRqmj3egIWBgG0MB8GA1UdIwQY MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquoLCLvF q0PtCS04JYoYQe6qr1rq28LczZwD6lODB2gT4RGyJFF4vRHX/gJZt7WIZx4T60l4 GHenefCc0YEHw5Mn3fX8j3xCWioP0NhN43+OB7IxV0y027VczR6jQofyTnnPAj0Z nCDFXDwAsMO6wo+cI7etkZneMcGMBKs32et+rGyOUvQWtBExhCq7eg4stoLBRB93 rKujM4oDlxGx/vLRBHml1ASoct6v6/h5hQfQ04xsUlc1Iiw3S+l4JOXAdlqGkr9b jTgpay6Yl2TD68wVrBK1UxAW170EOVA2Vh7nD6yPEjuHmn6HvC0+uujAE2TnYNv/ IMhC8wOJoIZilQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:16 2025 by rpki-client