This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json) Hash identifier: zsbbIuubFxt1OsBeXpOTHg9oMFJHNLSYzWptKVw/rOM= Subject key identifier: BD:A6:53:05:DE:84:B2:6F:94:4A:AE:CA:98:90:5C:F6:02:BF:91:7B Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de Certificate serial: 019B10EF53A43C9E0DD48590C186D3D19EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft Manifest number: 1682 Signing time: Fri 12 Dec 2025 05:01:18 +0000 Manifest this update: Fri 12 Dec 2025 05:01:18 +0000 Manifest next update: Sat 13 Dec 2025 05:01:18 +0000 Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=) 2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: IKsiwCTOv69MP9LXNDR1BqgnwSi+OcRGvqXngHPox7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:53:a4:3c:9e:0d:d4:85:90:c1:86:d3:d1:9e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de Validity Not Before: Dec 12 05:01:18 2025 GMT Not After : Dec 13 05:01:18 2025 GMT Subject: CN=bda65305de84b26f944aaeca98905cf602bf917b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:71:d8:ad:9a:66:e1:9b:d1:98:95:7a:20: 01:fe:6e:a8:e1:d2:ca:8c:ee:5c:d2:e2:97:80:c3: 54:3c:39:fe:ed:9b:9a:e7:fe:2e:f8:37:78:89:9f: d2:81:54:42:52:8e:cb:fe:60:3f:fe:54:54:c5:b7: 26:3c:64:f3:13:c3:87:21:df:7c:af:c7:a7:6f:7d: 02:74:89:c6:ec:4e:dd:be:55:c9:5c:b0:b2:ef:c6: 1e:4b:4b:2b:be:ce:a7:b9:0f:58:70:48:c7:d7:a8: e3:33:d0:a9:aa:09:b0:ef:93:32:42:c1:ce:b8:06: 2f:ce:10:fb:2f:0f:70:64:0d:c8:43:99:46:85:5c: fb:9e:d4:1d:63:3c:3e:2b:e8:cf:4c:2d:d7:f4:e1: 9b:d6:c6:a0:a8:8e:29:8b:96:9a:7c:70:ab:65:c2: 21:19:34:d3:6c:ff:82:28:f7:0f:ba:21:80:4b:bb: 32:40:07:2f:97:93:49:41:9b:3d:c2:96:d6:fc:69: 0d:43:04:41:85:c2:72:a3:c3:57:f7:4d:40:bf:a8: 16:4a:06:3b:bf:eb:c4:0c:6d:56:bb:3a:9c:dc:72: 91:fb:d6:cd:6e:b7:9c:1d:25:6f:23:c9:cc:15:af: 6d:0f:45:1f:bf:9f:5c:fa:2e:63:3e:11:a0:5b:8b: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:53:05:DE:84:B2:6F:94:4A:AE:CA:98:90:5C:F6:02:BF:91:7B X509v3 Authority Key Identifier: keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:95:7f:9c:04:77:2b:9e:ab:4f:6d:f3:64:b6:e8:d0:f7:56: 97:70:8b:d5:9a:c7:14:a9:23:dc:78:44:d2:19:01:f2:ad:e8: bd:3a:21:ce:9f:e7:de:3a:2d:5c:0f:ca:5c:39:d3:02:0d:17: f9:19:83:e5:70:41:cb:c7:9a:ec:9e:e0:d8:57:a3:d4:2e:ae: 86:53:ef:45:1c:9b:28:26:c3:2b:aa:28:0a:3c:cc:99:ff:80: 43:26:57:19:6e:42:28:ba:52:f3:07:15:91:fc:cf:a4:eb:a3: 1e:0c:98:04:28:e0:45:60:be:28:87:7e:85:3c:20:43:75:b1: c0:7f:9a:9f:7e:4e:22:1f:4d:47:66:16:06:1a:ba:13:8a:9b: 02:2e:88:68:41:7b:64:8f:83:b2:b7:91:55:55:03:5f:ca:9f: 5b:ed:0f:93:a1:71:0d:78:5f:48:06:45:a4:ca:b9:5f:f2:ae: ce:14:c7:19:39:ce:81:b3:f3:6b:78:95:c6:bd:9f:b8:7f:15: 00:c5:3f:d2:26:8e:84:75:2a:1b:c7:aa:ba:3b:ce:1e:a1:a1: a0:fa:a1:88:07:b9:6e:4d:c6:82:70:a7:14:7a:c6:76:05:48: 31:54:0c:b4:ca:a9:da:dc:78:84:26:7d:92:12:46:78:ca:3f: 03:89:2e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ71OkPJ4N1IWQwYbT0Z7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi Njk3ZGUwHhcNMjUxMjEyMDUwMTE4WhcNMjUxMjEzMDUwMTE4WjAzMTEwLwYDVQQD EyhiZGE2NTMwNWRlODRiMjZmOTQ0YWFlY2E5ODkwNWNmNjAyYmY5MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNx2K2aZuGb0ZiVeiAB/m6o4dLK jO5c0uKXgMNUPDn+7Zua5/4u+Dd4iZ/SgVRCUo7L/mA//lRUxbcmPGTzE8OHId98 r8enb30CdInG7E7dvlXJXLCy78YeS0srvs6nuQ9YcEjH16jjM9Cpqgmw75MyQsHO uAYvzhD7Lw9wZA3IQ5lGhVz7ntQdYzw+K+jPTC3X9OGb1sagqI4pi5aafHCrZcIh GTTTbP+CKPcPuiGAS7syQAcvl5NJQZs9wpbW/GkNQwRBhcJyo8NX901Av6gWSgY7 v+vEDG1Wuzqc3HKR+9bNbrecHSVvI8nMFa9tD0Ufv59c+i5jPhGgW4tgiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2mUwXehLJvlEquypiQXPYCv5F7MB8GA1UdIwQY MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZV/nAR3 K56rT23zZLbo0PdWl3CL1ZrHFKkj3HhE0hkB8q3ovTohzp/n3jotXA/KXDnTAg0X +RmD5XBBy8ea7J7g2Fej1C6uhlPvRRybKCbDK6ooCjzMmf+AQyZXGW5CKLpS8wcV kfzPpOujHgyYBCjgRWC+KId+hTwgQ3WxwH+an35OIh9NR2YWBhq6E4qbAi6IaEF7 ZI+DsreRVVUDX8qfW+0Pk6FxDXhfSAZFpMq5X/KuzhTHGTnOgbPza3iVxr2fuH8V AMU/0iaOhHUqG8equjvOHqGhoPqhiAe5bk3GgnCnFHrGdgVIMVQMtMqp2tx4hCZ9 khJGeMo/A4kudg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:28:16 2025 by rpki-client