This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json) Hash identifier: ifuAqP/i31Cw+WePp2MwdDSsme5TA6/0hIaOMduyq3M= Subject key identifier: 4F:1F:7A:EA:EF:69:E2:95:79:E2:B3:CA:62:D4:68:19:53:ED:A0:CF Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Certificate serial: 019B0E926EE6BFD908CCCA8D6B13269861E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft Manifest number: 0B3E Signing time: Thu 11 Dec 2025 18:00:36 +0000 Manifest this update: Thu 11 Dec 2025 18:00:36 +0000 Manifest next update: Fri 12 Dec 2025 18:00:36 +0000 Files and hashes: 1: UKpsyLZnsONm3nziQLW_Dy86-kc.roa (hash: sOSR0eDOaucZOE58pbyPZwUjeC+8MtIsg4Yj+A0vOoE=) 2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=) 3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: iDq2aImZiq6Z2/uB8fIPq0zCWDNDyaiGNjjZD7TbgHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:6e:e6:bf:d9:08:cc:ca:8d:6b:13:26:98:61:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922 Validity Not Before: Dec 11 18:00:36 2025 GMT Not After : Dec 12 18:00:36 2025 GMT Subject: CN=4f1f7aeaef69e29579e2b3ca62d4681953eda0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:9c:f9:e2:56:07:1d:d7:78:4e:84:11:11: c3:b5:85:ca:0d:d9:57:44:15:75:0f:27:17:e3:90: 74:00:f7:cc:09:f1:f7:8c:94:9d:9d:c1:20:5b:a1: 47:2a:79:ff:7a:e2:43:c7:a0:94:41:71:55:a4:96: f7:89:73:e0:7a:a6:04:29:34:b3:34:7b:f2:1b:eb: d7:df:63:66:af:e9:3a:1b:9d:53:21:3b:3c:b8:06: 44:64:38:b4:12:3a:2b:92:3c:86:c8:1f:34:b0:5b: e6:b1:41:55:c0:50:af:dc:98:32:97:1b:ac:53:26: 0e:6a:98:0e:b1:a3:aa:c6:ac:25:c7:74:55:09:62: e4:67:04:d3:62:88:cc:f6:c5:18:9d:cd:91:4d:1c: 0d:0a:eb:84:42:c3:96:62:cb:f5:20:b3:80:4a:67: 59:35:82:e8:d1:16:e4:06:58:72:66:a1:ab:d5:01: 91:48:6a:0d:ab:2a:c5:5a:a7:0b:05:26:6b:8e:09: 9e:21:ce:3e:29:a2:4e:e7:af:b7:30:ba:ca:fa:96: 8e:80:1c:7b:6a:f1:02:76:4c:a9:06:d3:b4:ef:42: 63:0e:91:ca:ac:9d:a6:f8:c0:c4:ea:bd:0d:1f:c0: 62:1e:c6:45:23:22:81:fe:3d:cb:93:b8:ca:34:e3: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:7A:EA:EF:69:E2:95:79:E2:B3:CA:62:D4:68:19:53:ED:A0:CF X509v3 Authority Key Identifier: keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:6e:72:b1:88:60:3e:d4:3d:10:6c:fd:07:ef:9f:42:06: 6a:f4:9b:78:ee:0a:8a:1a:14:a5:05:45:ab:50:ea:e1:e2:31: 30:70:26:d9:d1:fe:9f:ec:fb:67:e9:30:15:d6:67:45:49:48: 6e:9b:e6:3f:2b:bf:bc:fb:8c:96:f4:44:e0:14:c1:cb:ac:33: fa:16:aa:ad:69:fb:72:ce:3e:15:e5:a7:be:35:7a:04:96:7f: 1c:9e:38:c4:5d:99:16:0b:bf:df:f0:f4:91:8a:93:0e:fe:ec: 42:d7:0f:68:35:ea:14:98:34:6c:3c:15:8a:8f:5e:be:23:c4: e1:9f:03:7a:6c:b2:01:7d:6f:43:3a:c3:0c:49:c7:1f:e8:39: 7d:d4:d3:c5:3a:63:04:ba:f7:94:8c:92:5e:70:80:80:40:ab: 48:32:e8:cf:44:fd:e3:bb:52:09:65:7d:83:2f:e4:03:57:68: 3a:01:12:e5:06:e0:cb:c6:e4:76:10:fc:0c:a4:53:89:7c:cf: c1:5b:13:33:27:2b:51:2d:f8:4a:0b:08:0f:79:8b:59:2a:9a: c6:c3:02:56:97:d5:84:45:54:eb:66:a9:d6:dc:84:41:b4:a5: eb:a2:ad:dc:1c:7b:f3:74:c7:12:5d:52:ac:76:c3:1b:78:a6: c4:6a:6c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkm7mv9kIzMqNaxMmmGHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm OTc5MjIwHhcNMjUxMjExMTgwMDM2WhcNMjUxMjEyMTgwMDM2WjAzMTEwLwYDVQQD Eyg0ZjFmN2FlYWVmNjllMjk1NzllMmIzY2E2MmQ0NjgxOTUzZWRhMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BOc+eJWBx3XeE6EERHDtYXKDdlX RBV1DycX45B0APfMCfH3jJSdncEgW6FHKnn/euJDx6CUQXFVpJb3iXPgeqYEKTSz NHvyG+vX32Nmr+k6G51TITs8uAZEZDi0EjorkjyGyB80sFvmsUFVwFCv3Jgylxus UyYOapgOsaOqxqwlx3RVCWLkZwTTYojM9sUYnc2RTRwNCuuEQsOWYsv1ILOASmdZ NYLo0RbkBlhyZqGr1QGRSGoNqyrFWqcLBSZrjgmeIc4+KaJO56+3MLrK+paOgBx7 avECdkypBtO070JjDpHKrJ2m+MDE6r0NH8BiHsZFIyKB/j3Lk7jKNOPwTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8feurvaeKVeeKzymLUaBlT7aDPMB8GA1UdIwQY MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt N2JjNzNlZWUxNDQ3LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3 LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI5ucrGI YD7UPRBs/Qfvn0IGavSbeO4KihoUpQVFq1Dq4eIxMHAm2dH+n+z7Z+kwFdZnRUlI bpvmPyu/vPuMlvRE4BTBy6wz+haqrWn7cs4+FeWnvjV6BJZ/HJ44xF2ZFgu/3/D0 kYqTDv7sQtcPaDXqFJg0bDwVio9eviPE4Z8DemyyAX1vQzrDDEnHH+g5fdTTxTpj BLr3lIySXnCAgECrSDLoz0T947tSCWV9gy/kA1doOgES5Qbgy8bkdhD8DKRTiXzP wVsTMycrUS34SgsID3mLWSqaxsMCVpfVhEVU62ap1tyEQbSl66Kt3Bx783THEl1S rHbDG3imxGpsfw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:30 2025 by rpki-client