This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json) Hash identifier: VJQtdy8hQ4+e3GOEOLK3tlnhvSb2EPTou/uQab/2EOg= Subject key identifier: 6B:60:7C:C8:CE:85:B9:F0:3C:2B:2B:0E:D3:D0:8D:BF:E5:14:3B:3E Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7 Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7 Certificate serial: 019B386A19CEC454C7FE90D63760A3FDB5B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft Manifest number: 0C0A Signing time: Fri 19 Dec 2025 21:00:35 +0000 Manifest this update: Fri 19 Dec 2025 21:00:35 +0000 Manifest next update: Sat 20 Dec 2025 21:00:35 +0000 Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: WXOclwHIk9X3EN94VmP3N1pP+bkEIUhIcW7ilvelmR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:19:ce:c4:54:c7:fe:90:d6:37:60:a3:fd:b5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7 Validity Not Before: Dec 19 21:00:35 2025 GMT Not After : Dec 20 21:00:35 2025 GMT Subject: CN=6b607cc8ce85b9f03c2b2b0ed3d08dbfe5143b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:a9:50:2a:b9:8b:f3:5c:1b:e7:2c:90:a1: f2:40:19:7a:99:19:a4:c1:a5:ee:09:f5:64:ba:4d: 2b:04:4b:7d:b3:b3:ae:b2:f3:99:fd:24:3d:95:13: d3:f9:d6:1e:db:e9:af:d3:f8:ac:c4:e2:88:65:eb: 67:2c:d0:74:49:fc:ff:de:82:fa:66:b4:c4:55:80: c6:c4:9b:f0:b5:bf:5d:3f:7a:f0:04:60:d6:01:c2: ec:bd:7b:de:d2:8e:66:a0:79:49:eb:1d:9f:66:a3: 89:36:46:0f:e0:26:19:75:86:5b:9a:70:81:21:d6: 41:13:14:a9:e6:68:dd:ff:65:f6:d4:69:fd:21:0e: 99:a0:8c:d6:5f:8d:87:21:fc:9d:bb:bf:36:2b:09: f3:05:79:86:ea:5d:52:56:45:35:a1:71:a2:2f:b4: 35:1e:1f:c3:0d:40:0f:15:f5:96:64:75:5f:4d:d5: 63:12:7b:ac:4e:e0:60:99:cd:55:19:a0:9d:b3:d3: a6:2e:57:66:d1:23:ee:f5:eb:62:b7:1e:94:ee:5f: 2e:13:57:80:3e:2f:99:d7:a4:75:6c:ad:a9:7f:f2: 3e:a9:40:88:63:4c:c3:8c:50:a5:d6:95:e7:f2:3b: b8:23:56:a4:19:a3:f7:b1:1f:34:e6:cf:70:d0:62: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:7C:C8:CE:85:B9:F0:3C:2B:2B:0E:D3:D0:8D:BF:E5:14:3B:3E X509v3 Authority Key Identifier: keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:45:8f:73:12:2c:85:d4:ce:fc:ac:0d:8a:0b:fc:67:ab:30: 84:3b:23:46:c9:f0:5e:66:b3:dd:68:45:d2:83:f1:01:a2:3a: 94:93:2e:f7:09:e9:97:14:a7:cb:6f:18:4b:f4:92:cb:d4:cd: 0e:35:6a:14:f2:92:58:ff:78:e1:ac:f4:0f:bd:d0:28:82:fa: 19:c7:bf:5e:14:4e:3d:12:55:ab:8d:97:94:0b:98:52:5d:2d: 0a:8c:62:28:7a:25:3a:75:8e:25:40:bb:38:17:0d:ac:8c:9d: 06:13:53:55:40:9b:3d:6c:84:9a:84:55:4d:5e:31:01:f9:ee: 5a:70:33:af:77:70:db:2a:54:8b:3a:44:d0:d6:4f:1d:16:9e: 61:66:24:f7:cc:57:e1:a5:ec:ac:91:7b:69:0a:fd:a4:b3:ed: 08:1c:3e:7d:1f:8b:cd:9e:7c:b9:48:78:10:e4:e9:14:e0:a2: ea:8d:ab:44:3e:97:3c:39:a1:40:44:d7:55:5f:2c:82:a6:12: e1:dd:c3:ef:91:cc:35:12:c9:32:f7:77:31:a0:0a:27:78:3b: 7e:3c:7e:42:54:54:73:be:c2:b9:0d:e3:7b:a2:31:31:c3:67: 5f:66:9c:fe:4a:9a:98:c7:98:06:bb:0b:5a:b8:20:95:8b:29: 6b:1d:78:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahnOxFTH/pDWN2Cj/bW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjhlNjZmYWQ4MTQ2NDU5ODRmZDRlYWFkMzEzYjZmZTAw NTg5YjcwHhcNMjUxMjE5MjEwMDM1WhcNMjUxMjIwMjEwMDM1WjAzMTEwLwYDVQQD Eyg2YjYwN2NjOGNlODViOWYwM2MyYjJiMGVkM2QwOGRiZmU1MTQzYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv46pUCq5i/NcG+cskKHyQBl6mRmk waXuCfVkuk0rBEt9s7OusvOZ/SQ9lRPT+dYe2+mv0/isxOKIZetnLNB0Sfz/3oL6 ZrTEVYDGxJvwtb9dP3rwBGDWAcLsvXve0o5moHlJ6x2fZqOJNkYP4CYZdYZbmnCB IdZBExSp5mjd/2X21Gn9IQ6ZoIzWX42HIfydu782KwnzBXmG6l1SVkU1oXGiL7Q1 Hh/DDUAPFfWWZHVfTdVjEnusTuBgmc1VGaCds9OmLldm0SPu9etitx6U7l8uE1eA Pi+Z16R1bK2pf/I+qUCIY0zDjFCl1pXn8ju4I1akGaP3sR805s9w0GLYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtgfMjOhbnwPCsrDtPQjb/lFDs+MB8GA1UdIwQY MBaAFLm45m+tgUZFmE/U6q0xO2/gBYm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYt MmE2MWM0ZTNlMDU3LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYtMmE2MWM0ZTNlMDU3 LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0WPcxIs hdTO/KwNigv8Z6swhDsjRsnwXmaz3WhF0oPxAaI6lJMu9wnplxSny28YS/SSy9TN DjVqFPKSWP944az0D73QKIL6Gce/XhROPRJVq42XlAuYUl0tCoxiKHolOnWOJUC7 OBcNrIydBhNTVUCbPWyEmoRVTV4xAfnuWnAzr3dw2ypUizpE0NZPHRaeYWYk98xX 4aXsrJF7aQr9pLPtCBw+fR+LzZ58uUh4EOTpFOCi6o2rRD6XPDmhQETXVV8sgqYS 4d3D75HMNRLJMvd3MaAKJ3g7fjx+QlRUc77CuQ3je6IxMcNnX2ac/kqamMeYBrsL WrgglYspax14gg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:46:45 2025 by rpki-client