This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json) Hash identifier: OH5jrGCFAGI3mmoD9a5XTvTfJ9SyVcv/VbLXXN1bf+o= Subject key identifier: 65:64:78:D6:73:91:96:3C:BC:57:FC:DE:75:69:5E:CC:41:E2:B0:09 Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4 Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4 Certificate serial: 019B5976308D8CDB20D5AED747777631B43C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft Manifest number: 024B Signing time: Fri 26 Dec 2025 07:01:16 +0000 Manifest this update: Fri 26 Dec 2025 07:01:16 +0000 Manifest next update: Sat 27 Dec 2025 07:01:16 +0000 Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: f90gaHDTrgnX+a/6+DekE2o1jjZTnLn9Vo/0nvTuWyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:30:8d:8c:db:20:d5:ae:d7:47:77:76:31:b4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4 Validity Not Before: Dec 26 07:01:16 2025 GMT Not After : Dec 27 07:01:16 2025 GMT Subject: CN=656478d67391963cbc57fcde75695ecc41e2b009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:9b:e8:28:6d:c4:d0:d8:c9:0c:17:0c:2a: 80:09:fc:e6:e5:c2:4b:84:9f:ad:e6:3f:7f:9c:41: 33:a0:1a:1b:c5:56:e1:0c:f6:8c:e1:36:6c:e4:d6: 3f:00:66:6a:4b:95:40:64:24:d5:26:6f:c4:c1:c4: 59:21:5a:da:f7:6c:63:ba:2d:43:57:a4:1d:d0:e3: 31:f3:62:ff:a0:f0:1e:30:b5:32:b3:c0:be:d6:c5: 57:35:0b:e9:bd:95:74:1b:f7:ad:9f:ac:b2:64:b1: 0f:8b:2e:12:61:c0:8f:d4:46:5e:83:ce:53:53:e4: 17:59:07:f1:0d:ae:48:39:12:ee:43:f7:2a:9f:87: 08:30:0c:6f:1a:da:33:f1:78:3b:e0:c6:ad:5d:db: 01:e1:34:86:05:1c:4d:4f:6f:10:a7:14:16:b8:8b: 42:a1:03:6a:3e:bb:7a:c9:4b:3c:6e:1a:24:ce:67: cf:82:f0:ca:78:0c:d8:9f:ca:e9:30:9d:29:71:35: 0a:ab:ad:d0:59:b0:d6:f9:22:7c:22:07:56:fd:ef: 3a:4a:cf:d2:3f:24:27:e0:41:d5:36:8c:f8:85:61: 8d:36:09:93:a7:5e:19:95:32:37:0c:f6:d2:8f:df: 7a:21:28:ce:b0:ee:9c:f5:ee:44:31:45:6e:d3:b9: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:64:78:D6:73:91:96:3C:BC:57:FC:DE:75:69:5E:CC:41:E2:B0:09 X509v3 Authority Key Identifier: keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b6:c1:d2:75:e2:33:aa:db:4f:06:50:cb:92:81:e8:50:c6: b3:2e:e1:56:55:f3:bd:5f:ec:63:9a:81:ab:e6:ed:be:8b:52: ae:23:11:8e:81:7d:e5:79:24:9a:50:7c:0f:da:6e:ed:c3:b2: 5f:25:33:a2:fe:51:05:ab:29:09:77:9a:a8:34:5d:81:4a:0c: 7d:67:48:0b:bc:7d:e1:de:e0:0e:7d:de:22:1f:33:ba:6a:64: c3:85:64:86:1d:e0:af:07:f7:e9:ee:b2:04:8f:5e:b7:95:95: 24:8c:43:dc:39:9f:23:e6:6b:ca:32:83:27:4a:ca:ad:da:3b: 2f:84:aa:82:2d:fb:39:a1:98:35:f3:c3:24:6e:09:2f:dd:0a: 4c:fe:05:c0:8b:42:35:93:56:08:d1:88:a5:bd:af:75:1b:4c: 18:8c:d0:a8:15:5d:12:aa:4a:1f:e1:68:10:c6:b3:77:1e:77: a7:7d:6b:5f:8b:c4:77:6d:e4:f8:36:1e:5e:37:ea:44:ff:04: d3:5a:94:a8:29:e2:0d:a1:be:ca:e4:5c:b8:e7:e8:65:a4:f7: f7:55:3f:33:52:ee:47:d1:7c:b4:c2:61:df:9d:72:6c:53:92: de:3d:cc:2e:f0:26:ac:e4:c1:46:ea:fc:db:3d:de:f1:f8:38: 9c:4e:6f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdjCNjNsg1a7XR3d2MbQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMGE0ZDIyOTkxN2Q0NjU3MzhhNDgyMWI2ZWVjNWJlYjI0 ZTZlZTQwHhcNMjUxMjI2MDcwMTE2WhcNMjUxMjI3MDcwMTE2WjAzMTEwLwYDVQQD Eyg2NTY0NzhkNjczOTE5NjNjYmM1N2ZjZGU3NTY5NWVjYzQxZTJiMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2b6ChtxNDYyQwXDCqACfzm5cJL hJ+t5j9/nEEzoBobxVbhDPaM4TZs5NY/AGZqS5VAZCTVJm/EwcRZIVra92xjui1D V6Qd0OMx82L/oPAeMLUys8C+1sVXNQvpvZV0G/etn6yyZLEPiy4SYcCP1EZeg85T U+QXWQfxDa5IORLuQ/cqn4cIMAxvGtoz8Xg74MatXdsB4TSGBRxNT28QpxQWuItC oQNqPrt6yUs8bhokzmfPgvDKeAzYn8rpMJ0pcTUKq63QWbDW+SJ8IgdW/e86Ss/S PyQn4EHVNoz4hWGNNgmTp14ZlTI3DPbSj996ISjOsO6c9e5EMUVu07nfOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVkeNZzkZY8vFf83nVpXsxB4rAJMB8GA1UdIwQY MBaAFLoKTSKZF9Rlc4pIIbbuxb6yTm7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQt MDU3YWQ5MzMxZmE4LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQtMDU3YWQ5MzMxZmE4 LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLbB0nXi M6rbTwZQy5KB6FDGsy7hVlXzvV/sY5qBq+btvotSriMRjoF95XkkmlB8D9pu7cOy XyUzov5RBaspCXeaqDRdgUoMfWdIC7x94d7gDn3eIh8zumpkw4Vkhh3grwf36e6y BI9et5WVJIxD3DmfI+ZryjKDJ0rKrdo7L4Sqgi37OaGYNfPDJG4JL90KTP4FwItC NZNWCNGIpb2vdRtMGIzQqBVdEqpKH+FoEMazdx53p31rX4vEd23k+DYeXjfqRP8E 01qUqCniDaG+yuRcuOfoZaT391U/M1LuR9F8tMJh351ybFOS3j3MLvAmrOTBRur8 2z3e8fg4nE5vBQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:22 2025 by rpki-client