This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json) Hash identifier: 9YPZdqID2HubAkgT/7qTUhhxX0oHGNoFybjaYk11A9g= Subject key identifier: AD:0B:3B:CA:B5:32:58:22:DB:13:21:5A:9F:52:1E:25:19:68:02:DA Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078 Certificate serial: 019B0F6E7B0C6936FEE43595ABA1BE0A2B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft Manifest number: 048C Signing time: Thu 11 Dec 2025 22:00:57 +0000 Manifest this update: Thu 11 Dec 2025 22:00:57 +0000 Manifest next update: Fri 12 Dec 2025 22:00:57 +0000 Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: KRCJzjnEyd1G2yOG+VqDSto5OtIw0ZdBlCZCK2MAI0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:7b:0c:69:36:fe:e4:35:95:ab:a1:be:0a:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078 Validity Not Before: Dec 11 22:00:57 2025 GMT Not After : Dec 12 22:00:57 2025 GMT Subject: CN=ad0b3bcab5325822db13215a9f521e25196802da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:05:00:d0:11:07:8f:c1:a4:68:34:bd:c4: 98:9c:89:53:35:16:12:60:c6:13:07:9c:2b:e0:c2: db:46:a1:8d:ed:31:b2:42:d1:a2:e2:82:c3:e2:17: a2:79:ae:28:84:7f:8c:dc:92:7d:21:95:84:6b:d1: a5:68:a2:e4:82:51:ef:a8:8e:2b:56:e2:1a:1c:eb: 93:c4:2d:f4:b6:21:d3:e8:b0:f2:14:9f:37:e1:ab: 14:3a:cc:10:71:07:6d:7d:eb:41:27:79:a7:6b:60: 96:bf:2b:83:c0:bd:e0:56:80:4d:8c:d6:4b:3b:b6: 08:2e:d5:47:13:f2:24:4e:41:c5:2b:55:57:e1:82: d0:df:89:47:cf:2d:8b:d3:26:76:75:7c:62:16:27: 83:ed:a8:66:36:26:0a:9e:e4:3e:57:29:78:76:ad: b0:a9:c7:00:70:a4:07:30:ac:5e:eb:94:b8:ed:4c: 97:b4:31:b3:8b:bd:12:ff:69:40:ae:5f:96:85:af: 77:35:a0:e5:7c:e0:07:16:45:de:00:bc:ee:6b:19: ad:ce:92:9f:31:ac:8d:1e:95:8c:fd:0d:ea:0c:ba: 09:ea:40:3d:f8:b7:b5:8d:90:45:16:97:ea:b6:c5: 49:dd:22:8f:63:33:ec:c4:9d:6a:bd:47:c5:74:7a: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:3B:CA:B5:32:58:22:DB:13:21:5A:9F:52:1E:25:19:68:02:DA X509v3 Authority Key Identifier: keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:2c:f6:e5:a7:75:2f:0b:9b:9a:f2:e1:b1:72:3f:a9:54: 21:2c:11:99:23:c1:bb:70:b3:d2:9c:1f:f4:c2:25:6c:ae:e2: 2c:55:8a:4e:fa:57:78:e6:9a:e9:15:39:ae:23:ea:10:b6:11: 91:7a:5d:66:58:03:45:59:4a:10:b9:0d:9c:e6:ff:75:f5:00: 5f:ba:cd:27:e6:d3:43:fa:f6:37:34:13:ae:3c:8e:50:41:7a: 79:4b:f9:d3:93:46:67:eb:8e:66:f1:62:9b:9e:c1:88:b0:4a: ff:d4:cd:5d:55:b1:e3:83:54:af:39:75:4e:7e:93:c7:c5:d1: 5a:a5:4f:c5:47:93:ff:ae:10:b5:ea:85:77:b0:cc:fa:5a:71: ff:b6:e6:9b:50:e8:eb:f2:4c:c2:2f:d1:25:25:ea:fb:35:dc: 4f:4e:b7:8a:a7:ff:5f:05:bc:9f:61:84:63:15:90:de:5d:a8: 46:68:f1:29:84:cb:a6:f9:da:f6:94:06:c4:2d:39:07:37:df: ae:b8:d4:b1:56:7d:72:a2:fe:1d:db:7c:6c:0e:22:82:a0:4d: 45:74:28:f5:35:22:03:f1:17:74:68:f0:a9:ae:35:91:21:b8: 8a:a6:b1:74:8a:dc:a9:4d:34:91:69:55:9c:be:72:30:b6:b2: 65:89:72:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnsMaTb+5DWVq6G+CisKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTUyNWFlMWE1YWZjZWYxOTNmNWE0MDE3N2JmMjczODg4 MzEwNzgwHhcNMjUxMjExMjIwMDU3WhcNMjUxMjEyMjIwMDU3WjAzMTEwLwYDVQQD EyhhZDBiM2JjYWI1MzI1ODIyZGIxMzIxNWE5ZjUyMWUyNTE5NjgwMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinIFANARB4/BpGg0vcSYnIlTNRYS YMYTB5wr4MLbRqGN7TGyQtGi4oLD4heiea4ohH+M3JJ9IZWEa9GlaKLkglHvqI4r VuIaHOuTxC30tiHT6LDyFJ834asUOswQcQdtfetBJ3mna2CWvyuDwL3gVoBNjNZL O7YILtVHE/IkTkHFK1VX4YLQ34lHzy2L0yZ2dXxiFieD7ahmNiYKnuQ+Vyl4dq2w qccAcKQHMKxe65S47UyXtDGzi70S/2lArl+Wha93NaDlfOAHFkXeALzuaxmtzpKf MayNHpWM/Q3qDLoJ6kA9+Le1jZBFFpfqtsVJ3SKPYzPsxJ1qvUfFdHq0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0LO8q1Mlgi2xMhWp9SHiUZaALaMB8GA1UdIwQY MBaAFLgVJa4aWvzvGT9aQBd78nOIgxB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAt OWVmODM4NDkwMDQyLzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAtOWVmODM4NDkwMDQy LzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX8s9uWn dS8Lm5ry4bFyP6lUISwRmSPBu3Cz0pwf9MIlbK7iLFWKTvpXeOaa6RU5riPqELYR kXpdZlgDRVlKELkNnOb/dfUAX7rNJ+bTQ/r2NzQTrjyOUEF6eUv505NGZ+uOZvFi m57BiLBK/9TNXVWx44NUrzl1Tn6Tx8XRWqVPxUeT/64QteqFd7DM+lpx/7bmm1Do 6/JMwi/RJSXq+zXcT063iqf/XwW8n2GEYxWQ3l2oRmjxKYTLpvna9pQGxC05Bzff rrjUsVZ9cqL+Hdt8bA4igqBNRXQo9TUiA/EXdGjwqa41kSG4iqaxdIrcqU00kWlV nL5yMLayZYlyVA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:14 2025 by rpki-client