This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json) Hash identifier: K8fvxCVcKDyiSOY2Qlor4cyHTN70GPtJWFje0C5rPDA= Subject key identifier: 7B:4B:9D:4D:C3:51:66:7E:87:D5:BC:C1:FF:0B:A0:DB:B2:7A:51:69 Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 Certificate issuer: /CN=b81525ae1a5afcef193f5a40177bf27388831078 Certificate serial: 019B4B4D0109C9CB73F2262CF6B277E28798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft Manifest number: 04AB Signing time: Tue 23 Dec 2025 13:01:36 +0000 Manifest this update: Tue 23 Dec 2025 13:01:36 +0000 Manifest next update: Wed 24 Dec 2025 13:01:36 +0000 Files and hashes: 1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: ubbJilcP/UqHzMK71f6KfYiW2Kzzm15QuFpj+GmdmLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:01:09:c9:cb:73:f2:26:2c:f6:b2:77:e2:87:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078 Validity Not Before: Dec 23 13:01:36 2025 GMT Not After : Dec 24 13:01:36 2025 GMT Subject: CN=7b4b9d4dc351667e87d5bcc1ff0ba0dbb27a5169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:e3:71:a2:eb:1f:7c:27:de:fd:75:53:19: c4:44:bb:76:a3:62:83:96:8f:76:44:9e:f7:84:33: c8:04:6a:59:ff:43:06:c0:b2:b6:8f:d5:dc:2f:55: 4c:c5:37:ff:ad:01:12:84:9d:2c:c9:74:26:d3:b1: c0:18:d5:22:5e:f1:40:df:ab:33:af:c0:c1:10:23: ce:c1:e4:0b:9c:af:d5:c5:39:1b:e0:0b:22:55:c7: b9:7c:61:09:99:9b:a3:b5:89:32:ff:f7:d3:c9:de: c0:f8:8c:e5:d8:e0:cf:95:ec:ff:98:0a:f7:d9:50: eb:6a:c2:71:90:91:ee:a7:67:b9:a4:b3:52:94:e9: ec:0b:a1:fe:2a:54:7d:14:11:12:e8:5e:46:f8:18: fa:a5:68:5b:49:2c:ce:12:b9:8e:69:04:f4:74:cc: e1:5e:ca:f0:a8:e6:94:d5:06:f4:d6:f0:ac:a3:d0: 73:a2:81:9c:4f:1e:43:cf:5c:cc:79:ec:42:21:f5: 6e:0e:31:24:77:21:39:d4:01:4f:07:2b:82:64:39: a1:6e:4f:f9:fa:f5:f6:10:86:46:e5:67:19:95:c5: 62:44:9d:4a:71:55:b9:ba:54:04:2a:14:2d:59:a3: 17:ee:68:bc:29:f4:a3:70:d4:6a:1d:1e:96:98:e2: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4B:9D:4D:C3:51:66:7E:87:D5:BC:C1:FF:0B:A0:DB:B2:7A:51:69 X509v3 Authority Key Identifier: keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bf:5f:99:2e:c8:7c:6e:8f:de:13:06:2d:e2:cb:69:ee:6a: 28:27:9f:7c:cb:38:78:fc:77:5b:ab:23:5f:d5:47:35:0b:83: ec:b7:7a:8c:c6:1a:5a:5a:1e:78:c2:af:1c:35:aa:b5:e2:13: 0b:2c:ac:8f:e0:7b:18:e6:95:39:47:b6:4d:4f:03:87:e7:ac: d4:82:b8:e2:e4:c5:61:ba:a7:cf:82:21:e4:e3:c4:eb:8b:69: 6c:57:40:ce:80:d9:be:9d:c3:b1:73:d3:d5:06:a3:c1:dc:d3: 6f:64:91:cc:aa:5e:21:ee:1a:9d:6b:f8:e1:a1:a8:68:a5:11: 24:92:c6:b3:cb:da:5e:ac:7d:58:37:e4:bd:41:c8:fc:09:17: 40:76:35:70:35:80:ac:fa:10:dc:94:20:7b:a8:6e:bf:87:e8: 1f:4b:c7:37:d6:30:57:f7:b2:95:f7:91:bf:ea:9e:52:09:97: db:aa:d5:64:74:f8:31:9a:1e:6f:05:75:c9:c8:3d:a4:0b:f9: 79:df:57:6d:5b:02:30:95:43:19:f3:79:45:f2:76:4a:98:bc: 6d:9e:e6:96:a1:2b:e4:ea:a3:1b:5d:35:44:b7:2e:de:e8:e8: 75:6f:47:04:64:fb:55:d3:cd:e6:62:b5:a7:2d:86:c6:a8:01: d5:77:d3:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTQEJyctz8iYs9rJ34oeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTUyNWFlMWE1YWZjZWYxOTNmNWE0MDE3N2JmMjczODg4 MzEwNzgwHhcNMjUxMjIzMTMwMTM2WhcNMjUxMjI0MTMwMTM2WjAzMTEwLwYDVQQD Eyg3YjRiOWQ0ZGMzNTE2NjdlODdkNWJjYzFmZjBiYTBkYmIyN2E1MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0LjcaLrH3wn3v11UxnERLt2o2KD lo92RJ73hDPIBGpZ/0MGwLK2j9XcL1VMxTf/rQEShJ0syXQm07HAGNUiXvFA36sz r8DBECPOweQLnK/VxTkb4AsiVce5fGEJmZujtYky//fTyd7A+Izl2ODPlez/mAr3 2VDrasJxkJHup2e5pLNSlOnsC6H+KlR9FBES6F5G+Bj6pWhbSSzOErmOaQT0dMzh XsrwqOaU1Qb01vCso9BzooGcTx5Dz1zMeexCIfVuDjEkdyE51AFPByuCZDmhbk/5 +vX2EIZG5WcZlcViRJ1KcVW5ulQEKhQtWaMX7mi8KfSjcNRqHR6WmOKm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtLnU3DUWZ+h9W8wf8LoNuyelFpMB8GA1UdIwQY MBaAFLgVJa4aWvzvGT9aQBd78nOIgxB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAt OWVmODM4NDkwMDQyLzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mNzA0YTgtOGQ3Ni00MjJlLWI5NjAtOWVmODM4NDkwMDQy LzEvdUJVbHJocGFfTzhaUDFwQUYzdnljNGlERUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsb9fmS7I fG6P3hMGLeLLae5qKCeffMs4ePx3W6sjX9VHNQuD7Ld6jMYaWloeeMKvHDWqteIT Cyysj+B7GOaVOUe2TU8Dh+es1IK44uTFYbqnz4Ih5OPE64tpbFdAzoDZvp3DsXPT 1QajwdzTb2SRzKpeIe4anWv44aGoaKURJJLGs8vaXqx9WDfkvUHI/AkXQHY1cDWA rPoQ3JQge6huv4foH0vHN9YwV/eylfeRv+qeUgmX26rVZHT4MZoebwV1ycg9pAv5 ed9XbVsCMJVDGfN5RfJ2Spi8bZ7mlqEr5OqjG101RLcu3ujodW9HBGT7VdPN5mK1 py2GxqgB1XfTzg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:34 2025 by rpki-client