This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json) Hash identifier: IxyAntvLV3IZdFpYygQDGEn6jrFYe1ZZmERLsj5qVk8= Subject key identifier: 66:BB:0B:96:D5:EB:47:E9:92:3F:00:31:35:3D:9B:1E:22:12:83:41 Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2 Certificate serial: 019B183AA23A54AE329503296E5E664D9E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft Manifest number: 0AD9 Signing time: Sat 13 Dec 2025 15:00:54 +0000 Manifest this update: Sat 13 Dec 2025 15:00:54 +0000 Manifest next update: Sun 14 Dec 2025 15:00:54 +0000 Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: n30p5P4qM5Jam77uf8A7sN3/CdMpx8CaxQpJtO4AY2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:a2:3a:54:ae:32:95:03:29:6e:5e:66:4d:9e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2 Validity Not Before: Dec 13 15:00:54 2025 GMT Not After : Dec 14 15:00:54 2025 GMT Subject: CN=66bb0b96d5eb47e9923f0031353d9b1e22128341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:f3:fe:1b:0e:cc:d7:b9:a6:a8:f4:fa:8a: 1e:c1:82:ea:21:39:ec:f4:f8:97:0d:60:40:f4:28: 40:30:9d:b5:a5:d7:91:a3:5f:ad:17:9d:8b:d5:8f: 74:eb:a0:cd:5d:bb:fd:71:be:52:17:bd:31:4e:8c: 31:de:37:47:be:26:cd:6c:06:68:fb:27:9b:c1:1f: 5d:32:e2:0f:53:12:01:bb:64:d8:4d:2a:c5:86:59: 2c:ff:4c:b4:da:9a:81:de:85:4c:4f:5b:c4:96:20: 62:29:2b:e1:3d:5f:16:18:da:42:ce:38:e4:09:d7: 8a:45:8a:dc:5f:dc:2b:49:9d:7f:7f:82:3d:5b:f1: 11:04:12:23:a0:2a:f6:4d:f0:92:37:33:a8:f5:02: 2a:46:37:f3:f1:e8:44:6e:69:8e:76:ef:e9:1d:62: b0:7d:69:27:bd:12:a5:81:c1:61:d8:bc:24:dc:e6: c5:ee:4b:3b:d3:fa:e2:76:3d:98:8e:bf:71:ba:c8: 2b:5c:c3:34:1a:a3:f6:bd:52:9b:26:55:e8:7e:82: d1:39:92:36:2e:1b:71:1e:e7:55:13:20:80:22:08: 66:33:a9:55:f7:85:d6:32:77:a9:83:24:af:76:9d: 70:f6:29:a9:02:27:d0:11:6b:f8:55:eb:92:ff:87: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BB:0B:96:D5:EB:47:E9:92:3F:00:31:35:3D:9B:1E:22:12:83:41 X509v3 Authority Key Identifier: keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:90:45:54:3a:f0:76:93:11:fc:e4:b9:24:55:1b:92:8c:44: 1d:2b:5a:4c:4e:88:c7:b8:a7:a7:3e:f9:21:6d:9c:84:5f:a3: 7e:5b:59:84:e6:89:14:49:44:e6:85:6a:31:3a:38:d2:51:1b: 84:08:4e:0b:cd:5e:d1:32:5c:e8:b6:45:8e:0c:41:5f:e6:ef: e6:06:a2:f5:fb:aa:64:ae:a5:b1:af:97:ba:3d:b4:c6:f0:a2: 3d:29:8d:ed:7d:59:e9:ee:ac:ea:f8:7e:e6:3d:d5:61:bc:d5: d4:50:f5:75:15:73:5e:4d:a7:82:1e:74:88:ce:19:f0:01:13: 4c:23:59:17:8f:55:24:52:ef:25:c9:46:dc:4a:33:fe:ad:16: 25:f4:59:af:d9:9b:3c:aa:6f:2d:e0:3e:d8:fc:9a:9b:20:e6: da:46:53:76:99:1c:33:08:f3:82:f6:6d:ef:19:40:2b:f6:28: 1b:36:74:b3:50:19:ff:fc:95:ce:cf:59:f3:86:a1:f2:54:73: 14:ee:4e:40:68:ee:30:f1:ab:cf:cf:70:2c:42:1b:f7:a5:36: fb:d6:63:74:66:00:14:58:75:26:a5:f5:2f:bb:e5:97:d0:5a: 6e:4b:b3:75:76:6d:e3:5e:8d:96:f7:1a:5a:e6:0c:8c:90:28: aa:a1:00:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOqI6VK4ylQMpbl5mTZ5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk MmI4YjIwHhcNMjUxMjEzMTUwMDU0WhcNMjUxMjE0MTUwMDU0WjAzMTEwLwYDVQQD Eyg2NmJiMGI5NmQ1ZWI0N2U5OTIzZjAwMzEzNTNkOWIxZTIyMTI4MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w/z/hsOzNe5pqj0+ooewYLqITns 9PiXDWBA9ChAMJ21pdeRo1+tF52L1Y9066DNXbv9cb5SF70xTowx3jdHvibNbAZo +yebwR9dMuIPUxIBu2TYTSrFhlks/0y02pqB3oVMT1vEliBiKSvhPV8WGNpCzjjk CdeKRYrcX9wrSZ1/f4I9W/ERBBIjoCr2TfCSNzOo9QIqRjfz8ehEbmmOdu/pHWKw fWknvRKlgcFh2Lwk3ObF7ks70/ridj2Yjr9xusgrXMM0GqP2vVKbJlXofoLROZI2 LhtxHudVEyCAIghmM6lV94XWMnepgySvdp1w9impAifQEWv4VeuS/4cthwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa7C5bV60fpkj8AMTU9mx4iEoNBMB8GA1UdIwQY MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZBFVDrw dpMR/OS5JFUbkoxEHStaTE6Ix7inpz75IW2chF+jfltZhOaJFElE5oVqMTo40lEb hAhOC81e0TJc6LZFjgxBX+bv5gai9fuqZK6lsa+Xuj20xvCiPSmN7X1Z6e6s6vh+ 5j3VYbzV1FD1dRVzXk2ngh50iM4Z8AETTCNZF49VJFLvJclG3Eoz/q0WJfRZr9mb PKpvLeA+2PyamyDm2kZTdpkcMwjzgvZt7xlAK/YoGzZ0s1AZ//yVzs9Z84ah8lRz FO5OQGjuMPGrz89wLEIb96U2+9ZjdGYAFFh1JqX1L7vll9BabkuzdXZt416Nlvca WuYMjJAoqqEAVg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:07 2025 by rpki-client