This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json) Hash identifier: V7drkXHy5scOHXA980+yq3GyDbPUki45gsJRfRriVNc= Subject key identifier: BB:BD:C5:59:69:F5:A9:7C:51:4E:0D:1D:A5:85:7A:CA:F2:5D:3F:E2 Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d Certificate serial: 019B1DCF34F98C472F7243AF75A6D4997BD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 17:01:17 +0000 Manifest this update: Sun 14 Dec 2025 17:01:17 +0000 Manifest next update: Mon 15 Dec 2025 17:01:17 +0000 Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=) 2: F2LdL7ybzfzPSt5t-b18q089jwo.roa (hash: pV75yd4KSNaebS2IQ3XosafJetvCzED1fB/NU7nhrkc=) 3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: uhH7xcQUd0K/Rh8zC2AV1WwClSim4IKW0WAT7CBif+8=) 4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:34:f9:8c:47:2f:72:43:af:75:a6:d4:99:7b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d Validity Not Before: Dec 14 17:01:17 2025 GMT Not After : Dec 15 17:01:17 2025 GMT Subject: CN=bbbdc55969f5a97c514e0d1da5857acaf25d3fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:1f:80:3d:c9:86:8d:a1:30:7e:29:12:df: 72:4e:c4:a5:ea:ce:15:28:75:0c:57:60:96:f9:07: d6:0d:fa:25:05:4d:6b:58:79:17:ba:3a:ad:82:b0: f1:e0:15:e3:3b:c9:64:50:d9:1e:95:0a:64:7c:fc: fc:63:58:a6:37:23:2a:3d:cf:d4:be:af:3b:be:7b: 96:56:d9:e6:8a:44:6f:65:85:29:1a:54:2c:01:c9: 24:0b:13:87:d3:f0:45:5e:28:0d:9d:e9:5f:8b:28: 90:d2:6a:5e:39:ca:a0:9d:d7:e2:33:08:6b:1c:a8: fe:ec:48:00:5e:91:f7:27:61:f0:ca:a1:bb:ca:7f: 21:5e:4b:80:e6:ab:eb:71:6f:eb:83:e1:04:19:41: 84:49:3a:26:73:6c:bd:72:fe:3d:80:4e:52:fb:d4: 0b:6f:49:77:e2:a9:42:f3:cc:0f:46:f0:9d:61:c7: 84:d3:d0:56:e7:0a:7b:76:f7:6c:81:89:12:a4:48: 2f:5a:68:8f:27:0f:90:cb:56:f1:64:70:44:cb:90: 8b:a8:b0:70:6c:a0:be:cf:9b:78:e5:9b:e4:d0:91: d8:76:b8:6b:78:44:91:20:a7:72:74:12:6e:79:a6: 00:52:6c:bf:78:d4:f2:c9:8d:10:b8:b1:e3:ec:8c: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:C5:59:69:F5:A9:7C:51:4E:0D:1D:A5:85:7A:CA:F2:5D:3F:E2 X509v3 Authority Key Identifier: keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d8:cb:3e:c5:ba:a3:42:01:ac:c2:f5:87:7b:b0:1e:80:31: 5e:b5:34:9f:ed:e3:2b:a4:ce:a8:0d:45:30:93:a7:4f:19:5a: 8b:da:4e:00:41:07:11:5f:e9:d2:ab:40:6f:2e:03:81:18:0a: 53:a0:8d:b8:66:31:f3:d2:2c:b4:1d:eb:92:ca:28:22:5e:8e: 08:b7:aa:e3:57:fb:47:12:30:87:8e:86:0f:1d:c1:b4:87:77: 84:1f:82:56:52:9d:fc:ca:ab:72:ff:68:bb:8b:43:8b:a1:b5: 8c:20:33:ec:c8:a3:d3:8e:5f:a3:5f:fc:d2:32:1d:da:bd:11: 0a:86:27:8a:61:1f:94:15:85:15:58:c2:2b:9a:fa:48:4b:fa: 5d:70:7b:75:a4:b2:fb:e2:71:a1:9a:fa:d5:b8:e8:32:05:74: c1:54:6d:c6:a4:ff:a3:db:94:a6:a0:d8:88:cf:56:20:05:37: c7:f1:e9:55:8f:d3:0d:4e:37:6b:48:31:54:50:72:c6:a6:42: f4:65:f9:bc:9f:1e:11:65:74:5c:fc:35:68:0d:2b:7b:f7:f0: 38:e3:af:d0:28:cd:b9:de:75:ed:6b:ca:49:e2:36:94:9b:20: d4:64:26:90:1c:ab:d3:fa:a9:70:02:56:e6:4a:37:da:cd:2a: 14:a4:09:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzzT5jEcvckOvdabUmXvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm YzUwM2QwHhcNMjUxMjE0MTcwMTE3WhcNMjUxMjE1MTcwMTE3WjAzMTEwLwYDVQQD EyhiYmJkYzU1OTY5ZjVhOTdjNTE0ZTBkMWRhNTg1N2FjYWYyNWQzZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VMfgD3Jho2hMH4pEt9yTsSl6s4V KHUMV2CW+QfWDfolBU1rWHkXujqtgrDx4BXjO8lkUNkelQpkfPz8Y1imNyMqPc/U vq87vnuWVtnmikRvZYUpGlQsAckkCxOH0/BFXigNnelfiyiQ0mpeOcqgndfiMwhr HKj+7EgAXpH3J2HwyqG7yn8hXkuA5qvrcW/rg+EEGUGESTomc2y9cv49gE5S+9QL b0l34qlC88wPRvCdYceE09BW5wp7dvdsgYkSpEgvWmiPJw+Qy1bxZHBEy5CLqLBw bKC+z5t45Zvk0JHYdrhreESRIKdydBJueaYAUmy/eNTyyY0QuLHj7Iy7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu9xVlp9al8UU4NHaWFesryXT/iMB8GA1UdIwQY MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9jLPsW6 o0IBrML1h3uwHoAxXrU0n+3jK6TOqA1FMJOnTxlai9pOAEEHEV/p0qtAby4DgRgK U6CNuGYx89IstB3rksooIl6OCLeq41f7RxIwh46GDx3BtId3hB+CVlKd/Mqrcv9o u4tDi6G1jCAz7Mij045fo1/80jId2r0RCoYnimEflBWFFVjCK5r6SEv6XXB7daSy ++JxoZr61bjoMgV0wVRtxqT/o9uUpqDYiM9WIAU3x/HpVY/TDU43a0gxVFByxqZC 9GX5vJ8eEWV0XPw1aA0re/fwOOOv0CjNud517WvKSeI2lJsg1GQmkByr0/qpcAJW 5ko32s0qFKQJCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:35:18 2025 by rpki-client