This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json) Hash identifier: /RqUr255BYN/UWIKpOxBBP2gPIazsm0eu95NPgKprbA= Subject key identifier: 84:A5:50:70:63:9A:E5:28:15:DC:78:65:B6:D9:A5:EB:31:DE:31:6E Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b Certificate serial: 019B5A51400433B514CF47C0B043EEDCD8EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft Manifest number: 03BA Signing time: Fri 26 Dec 2025 11:00:32 +0000 Manifest this update: Fri 26 Dec 2025 11:00:32 +0000 Manifest next update: Sat 27 Dec 2025 11:00:32 +0000 Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=) 2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: nheMlhqpgm3jCPd41CBKbDfYAAFWDutchL5geV9FWuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:40:04:33:b5:14:cf:47:c0:b0:43:ee:dc:d8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b Validity Not Before: Dec 26 11:00:32 2025 GMT Not After : Dec 27 11:00:32 2025 GMT Subject: CN=84a55070639ae52815dc7865b6d9a5eb31de316e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:2a:5e:6d:a0:7b:43:20:35:f9:cc:8e:aa: 4e:f3:00:01:e9:5b:09:88:15:32:93:71:d7:bd:96: 18:ec:fa:2a:d3:e0:fc:63:a3:f4:5e:0c:ca:71:23: f5:75:ee:f8:d0:f5:eb:df:31:44:2d:c0:76:69:25: 56:fc:ec:28:60:be:fc:85:c1:3b:e6:13:b2:22:d8: 7d:ba:87:9d:b6:1f:3a:be:9d:a9:0b:2d:57:b8:d2: 92:98:2b:13:7a:da:81:af:3f:bc:b0:ab:21:23:f0: db:42:09:5f:80:7e:21:11:65:3b:db:66:78:e6:9f: e2:62:fe:08:89:62:cb:cd:ab:d2:07:5f:22:6a:ad: 8f:84:de:a0:af:ce:f2:d0:9a:07:a2:c2:62:74:7f: e4:56:c4:01:00:ef:c5:81:e5:7b:5a:4d:d9:5e:c3: 87:ff:72:7a:69:9a:20:b3:0e:a9:d3:e6:6f:84:56: ba:9b:8a:f5:cf:87:f7:ef:43:22:50:c9:ca:d8:da: e8:6a:3e:34:48:7a:d1:b2:24:cb:fa:36:74:3f:97: 6e:a2:09:a5:b8:c2:cb:7d:44:16:57:a7:04:64:aa: b2:4d:e0:35:de:07:10:a5:fa:02:88:44:91:8d:6e: 57:0c:03:cf:d2:cf:95:62:33:81:9b:4e:e3:c2:3f: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:50:70:63:9A:E5:28:15:DC:78:65:B6:D9:A5:EB:31:DE:31:6E X509v3 Authority Key Identifier: keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:59:9d:f2:a3:1b:c3:80:7a:89:9e:e7:8a:d4:21:67:be:87: 1a:23:7a:31:f0:f9:23:0b:aa:c1:9f:84:18:47:96:0f:d4:af: d8:e5:ab:03:6b:39:5d:6c:3e:57:d4:35:1e:ef:2e:cc:b9:ab: 74:18:24:eb:b6:36:57:71:15:e7:79:8f:98:40:b4:6c:6c:b9: 3d:2c:41:73:c6:e3:fe:98:c6:aa:6c:d7:38:1f:e9:77:9c:a6: e7:4c:81:f2:03:73:b9:89:0c:19:41:66:15:7e:eb:db:34:8d: dc:18:53:68:c2:aa:5f:27:0c:30:84:30:b4:95:68:2a:63:cc: d2:07:48:ef:1d:69:68:d4:99:05:2c:88:00:6d:8c:a2:bf:39: bf:72:70:6b:49:6a:8e:cc:67:f3:5f:2a:01:db:de:c1:6e:3f: 50:e8:9e:0c:4b:a3:5b:33:19:92:ef:7a:63:4b:0b:7a:27:33: 2d:37:fe:63:aa:39:65:82:19:f6:03:4e:d3:67:c5:1c:66:4d: e9:b1:4b:ad:a7:24:45:56:4f:d3:76:cc:ab:ed:cd:72:d8:cc: 21:cd:04:80:bf:5e:10:ef:67:c4:79:68:d1:03:78:45:16:57: e3:a3:b9:92:08:f0:2b:be:31:97:28:3b:77:4a:d3:a5:d1:3a: 64:99:c1:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUAEM7UUz0fAsEPu3NjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl ZTc2N2IwHhcNMjUxMjI2MTEwMDMyWhcNMjUxMjI3MTEwMDMyWjAzMTEwLwYDVQQD Eyg4NGE1NTA3MDYzOWFlNTI4MTVkYzc4NjViNmQ5YTVlYjMxZGUzMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquAqXm2ge0MgNfnMjqpO8wAB6VsJ iBUyk3HXvZYY7Poq0+D8Y6P0XgzKcSP1de740PXr3zFELcB2aSVW/OwoYL78hcE7 5hOyIth9uoedth86vp2pCy1XuNKSmCsTetqBrz+8sKshI/DbQglfgH4hEWU722Z4 5p/iYv4IiWLLzavSB18iaq2PhN6gr87y0JoHosJidH/kVsQBAO/FgeV7Wk3ZXsOH /3J6aZogsw6p0+ZvhFa6m4r1z4f370MiUMnK2Nroaj40SHrRsiTL+jZ0P5duogml uMLLfUQWV6cEZKqyTeA13gcQpfoCiESRjW5XDAPP0s+VYjOBm07jwj/4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISlUHBjmuUoFdx4ZbbZpesx3jFuMB8GA1UdIwQY MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct ZjQ2OGVlMzMxNDc0LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0 LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1md8qMb w4B6iZ7nitQhZ76HGiN6MfD5IwuqwZ+EGEeWD9Sv2OWrA2s5XWw+V9Q1Hu8uzLmr dBgk67Y2V3EV53mPmEC0bGy5PSxBc8bj/pjGqmzXOB/pd5ym50yB8gNzuYkMGUFm FX7r2zSN3BhTaMKqXycMMIQwtJVoKmPM0gdI7x1paNSZBSyIAG2Mor85v3Jwa0lq jsxn818qAdvewW4/UOieDEujWzMZku96Y0sLeiczLTf+Y6o5ZYIZ9gNO02fFHGZN 6bFLrackRVZP03bMq+3NctjMIc0EgL9eEO9nxHlo0QN4RRZX46O5kgjwK74xlyg7 d0rTpdE6ZJnB7g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client