This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json) Hash identifier: 13hVol1bS5YtHAI5DSlnTxEhZRRVeHOJ1HJm7ayXuCc= Subject key identifier: AD:DF:DA:2C:65:46:AB:43:EC:8E:74:86:B7:8B:89:99:F5:6A:2E:D7 Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Certificate serial: 019B21E2F44ECD91262ABB4A7A2D0F151D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft Manifest number: 0345 Signing time: Mon 15 Dec 2025 12:01:20 +0000 Manifest this update: Mon 15 Dec 2025 12:01:20 +0000 Manifest next update: Tue 16 Dec 2025 12:01:20 +0000 Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=) 2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: +WjOOYP5xATtftqmqR3dFYXcn+Lg/SjUHClJYQioXD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:f4:4e:cd:91:26:2a:bb:4a:7a:2d:0f:15:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Validity Not Before: Dec 15 12:01:20 2025 GMT Not After : Dec 16 12:01:20 2025 GMT Subject: CN=addfda2c6546ab43ec8e7486b78b8999f56a2ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:d3:38:53:0a:c2:1c:15:d8:c9:c3:26:4a: 3e:b1:e4:8c:49:0b:18:53:bc:fd:db:5c:1c:6a:ce: 66:a0:25:60:8f:8f:8d:41:1c:c3:57:de:4b:e0:a7: 18:27:e1:d8:67:6c:15:f0:cf:bd:52:08:e2:49:cb: 66:90:05:f1:ae:f1:30:02:86:81:ac:38:25:77:b3: ee:ed:b4:cb:b2:c1:48:9c:11:5b:02:c1:c3:b5:1b: ea:88:e9:d5:d1:ff:b8:e3:45:5a:12:27:8c:bd:61: 3b:94:be:0a:38:e7:17:e8:16:36:d3:9f:41:80:40: b3:1c:1d:c9:9b:2e:9a:8f:66:5c:8f:75:d5:71:94: f8:ce:b4:0a:ab:67:96:f7:46:08:d2:b8:19:86:69: 7f:f4:1f:6e:90:bb:38:45:43:4c:f4:5d:f4:e4:78: d3:c3:cc:32:ee:1b:0e:76:37:28:48:de:41:42:d8: 68:69:c2:d6:01:dc:08:ea:eb:27:d0:50:a4:d4:06: aa:dd:09:2c:dd:38:88:09:c2:ec:58:ab:5b:25:e5: dc:59:d1:4c:6b:11:35:b3:d4:7b:20:24:b8:de:e4: cb:9e:ac:8c:87:59:20:01:ce:01:bd:a3:71:09:5a: 50:bd:ca:8a:e5:c0:cc:07:dc:7d:66:04:0d:14:f7: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DF:DA:2C:65:46:AB:43:EC:8E:74:86:B7:8B:89:99:F5:6A:2E:D7 X509v3 Authority Key Identifier: keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:14:25:cc:a5:58:ea:bc:59:e4:a3:fb:0f:8e:85:f5:46:2a: cd:be:b7:55:d5:45:29:1f:27:e5:40:5f:60:94:9a:c4:0e:d1: 8e:49:44:41:03:74:de:50:a9:51:63:b5:c1:c8:92:40:0f:2c: 7d:35:b9:a3:c7:26:aa:32:0a:92:5d:31:03:66:70:b5:6a:59: dd:ac:cf:14:ea:ae:12:60:c6:62:3c:79:b8:fa:be:33:cc:ee: 4b:08:76:7b:0b:9c:7a:a3:56:19:cd:ca:d8:4d:8e:27:59:57: e6:38:2e:8b:e6:1f:f2:d1:70:f3:fe:87:27:07:38:ca:75:9a: 54:26:bb:3f:03:08:50:70:bf:a0:a8:0f:d9:f5:0a:84:ff:c8: 9a:61:3d:e4:1c:a8:c3:93:19:78:f3:af:68:0b:23:01:61:7d: 48:b9:b9:09:a5:00:9d:7d:3c:d3:51:cb:be:43:63:34:90:02: ff:a7:8c:1b:83:38:3d:09:22:97:f4:3e:de:a8:d9:a7:3c:f3: 34:09:33:63:62:6e:1f:d8:f3:27:2d:fa:59:26:11:26:c7:ff: 10:44:25:4d:1a:49:e9:10:1e:0d:a4:25:a0:32:61:34:13:9c: e9:ea:0e:c1:a6:91:f3:ff:74:9e:73:4e:1e:bd:e4:0d:4c:73: 10:d8:bb:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4vROzZEmKrtKei0PFR03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy ODI1ZTcwHhcNMjUxMjE1MTIwMTIwWhcNMjUxMjE2MTIwMTIwWjAzMTEwLwYDVQQD EyhhZGRmZGEyYzY1NDZhYjQzZWM4ZTc0ODZiNzhiODk5OWY1NmEyZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/TOFMKwhwV2MnDJko+seSMSQsY U7z921wcas5moCVgj4+NQRzDV95L4KcYJ+HYZ2wV8M+9UgjiSctmkAXxrvEwAoaB rDgld7Pu7bTLssFInBFbAsHDtRvqiOnV0f+440VaEieMvWE7lL4KOOcX6BY2059B gECzHB3Jmy6aj2Zcj3XVcZT4zrQKq2eW90YI0rgZhml/9B9ukLs4RUNM9F305HjT w8wy7hsOdjcoSN5BQthoacLWAdwI6usn0FCk1Aaq3Qks3TiICcLsWKtbJeXcWdFM axE1s9R7ICS43uTLnqyMh1kgAc4BvaNxCVpQvcqK5cDMB9x9ZgQNFPeezQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3f2ixlRqtD7I50hreLiZn1ai7XMB8GA1UdIwQY MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERQlzKVY 6rxZ5KP7D46F9UYqzb63VdVFKR8n5UBfYJSaxA7RjklEQQN03lCpUWO1wciSQA8s fTW5o8cmqjIKkl0xA2ZwtWpZ3azPFOquEmDGYjx5uPq+M8zuSwh2ewuceqNWGc3K 2E2OJ1lX5jgui+Yf8tFw8/6HJwc4ynWaVCa7PwMIUHC/oKgP2fUKhP/ImmE95Byo w5MZePOvaAsjAWF9SLm5CaUAnX0801HLvkNjNJAC/6eMG4M4PQkil/Q+3qjZpzzz NAkzY2JuH9jzJy36WSYRJsf/EEQlTRpJ6RAeDaQloDJhNBOc6eoOwaaR8/90nnNO Hr3kDUxzENi7qw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:44:55 2025 by rpki-client