This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft File: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json) Hash identifier: vnVcQk8n0BvUVXPqrnRU5M4Z/yyeRYPOWUFk3LJiUSU= Subject key identifier: 84:F0:85:4E:FC:EB:DB:D3:1D:B0:DC:E0:97:5C:80:5B:CB:69:86:BA Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6 Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6 Certificate serial: 019B3757FAACC6A2752065E3B8E910A0F9A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 16:01:11 +0000 Manifest this update: Fri 19 Dec 2025 16:01:11 +0000 Manifest next update: Sat 20 Dec 2025 16:01:11 +0000 Files and hashes: 1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=) 2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=) 3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=) 4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=) 5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: 9Aqq6rmyg8bluo1PgISqGAxVxRWL7Jj9x0JuxZWvC3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:fa:ac:c6:a2:75:20:65:e3:b8:e9:10:a0:f9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6 Validity Not Before: Dec 19 16:01:11 2025 GMT Not After : Dec 20 16:01:11 2025 GMT Subject: CN=84f0854efcebdbd31db0dce0975c805bcb6986ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:33:08:52:c5:84:5b:e4:09:c7:ce:b0:f6: a2:40:ac:f1:16:c1:7f:05:44:28:a0:46:f6:6c:61: 7f:5c:db:6a:8c:eb:92:e1:91:c2:a1:0e:77:97:c8: 3b:0c:0b:3e:82:d3:e1:e7:0c:1b:d1:ff:8a:fb:b7: 02:a6:da:6e:19:13:eb:75:cf:bd:ab:38:a8:cf:3b: 18:1e:98:62:83:64:53:49:ba:af:b1:a7:16:50:ef: 0b:a5:62:7e:f3:1b:f0:c3:5b:a8:ac:11:6b:64:0b: bd:b9:cb:39:28:ab:fd:11:38:e8:1a:74:6b:fe:ed: 8a:67:3e:98:82:3f:86:2a:dd:c5:08:af:31:4a:91: 98:0a:e0:71:50:35:11:7b:3b:90:32:04:f3:80:51: 42:c4:fb:57:a8:31:d3:13:40:cb:de:8d:5f:02:81: 90:61:cf:5b:69:05:07:0e:9b:b0:b5:dd:60:bf:3b: 1b:be:6b:19:9c:83:fc:d9:2e:e8:3c:5b:4f:6f:44: 66:ac:ff:bb:03:7b:29:9a:c8:7f:d4:11:64:ed:52: a0:83:b6:dc:7d:d0:47:d3:4b:6b:f3:ec:3f:f6:28: e4:ff:e3:43:3a:03:cb:c4:6e:14:ee:8d:ca:38:cd: 4d:bf:6f:06:8c:78:8a:a5:74:30:4c:9f:d0:dc:a8: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F0:85:4E:FC:EB:DB:D3:1D:B0:DC:E0:97:5C:80:5B:CB:69:86:BA X509v3 Authority Key Identifier: keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:1e:9f:9c:39:fa:7e:70:83:21:7c:1a:f9:69:e2:e7:59: 01:0b:8f:21:d3:4e:a2:d7:f5:ce:84:e8:3d:f4:f3:16:26:92: a9:b2:51:e7:88:e5:d9:7f:e7:13:37:86:ca:c2:ac:5e:79:94: 1a:e3:c9:78:92:d8:fa:cf:48:2a:b7:e8:b7:b3:4d:8c:47:cd: 51:7b:f0:db:e4:7a:6d:fd:07:bd:de:4a:32:49:f3:e6:64:94: 2d:c5:36:73:f6:e0:97:8d:55:7d:f9:e3:0b:51:d6:a7:2e:24: 79:51:c7:fe:d8:a1:6b:ae:32:09:4e:88:16:27:02:4f:a4:4c: c8:1d:3a:ed:6b:52:db:de:01:70:d4:9f:fd:72:d9:56:db:7d: 19:cd:45:f2:a7:8d:9a:28:25:2a:d6:e0:c1:e4:d8:b3:e5:8e: 5c:bc:20:1e:f2:5d:6c:90:4c:1b:94:c5:5a:be:d7:ae:22:43: 77:cb:70:65:28:76:36:f8:1f:15:48:b9:42:78:18:f7:ea:db: f1:78:a3:9d:1c:4f:26:8e:08:69:26:29:7c:e2:b9:70:7a:f7: 2b:22:f7:12:b9:fb:86:09:3a:7f:fc:51:da:63:a7:84:ff:5d: 36:ae:b3:bc:84:6d:b1:c0:86:fa:27:7e:e1:f8:b6:d3:5b:0f: 22:49:5f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/qsxqJ1IGXjuOkQoPmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1 ZWNiYjYwHhcNMjUxMjE5MTYwMTExWhcNMjUxMjIwMTYwMTExWjAzMTEwLwYDVQQD Eyg4NGYwODU0ZWZjZWJkYmQzMWRiMGRjZTA5NzVjODA1YmNiNjk4NmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbEzCFLFhFvkCcfOsPaiQKzxFsF/ BUQooEb2bGF/XNtqjOuS4ZHCoQ53l8g7DAs+gtPh5wwb0f+K+7cCptpuGRPrdc+9 qziozzsYHphig2RTSbqvsacWUO8LpWJ+8xvww1uorBFrZAu9ucs5KKv9ETjoGnRr /u2KZz6Ygj+GKt3FCK8xSpGYCuBxUDURezuQMgTzgFFCxPtXqDHTE0DL3o1fAoGQ Yc9baQUHDpuwtd1gvzsbvmsZnIP82S7oPFtPb0RmrP+7A3spmsh/1BFk7VKgg7bc fdBH00tr8+w/9ijk/+NDOgPLxG4U7o3KOM1Nv28GjHiKpXQwTJ/Q3KiVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITwhU7869vTHbDc4JdcgFvLaYa6MB8GA1UdIwQY MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt M2I0Y2I5NzVhOWJjLzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhQen5w5 +n5wgyF8Gvlp4udZAQuPIdNOotf1zoToPfTzFiaSqbJR54jl2X/nEzeGysKsXnmU GuPJeJLY+s9IKrfot7NNjEfNUXvw2+R6bf0Hvd5KMknz5mSULcU2c/bgl41Vffnj C1HWpy4keVHH/tiha64yCU6IFicCT6RMyB067WtS294BcNSf/XLZVtt9Gc1F8qeN miglKtbgweTYs+WOXLwgHvJdbJBMG5TFWr7XriJDd8twZSh2NvgfFUi5QngY9+rb 8XijnRxPJo4IaSYpfOK5cHr3KyL3Ern7hgk6f/xR2mOnhP9dNq6zvIRtscCG+id+ 4fi201sPIklfrA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:27:04 2025 by rpki-client