This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json) Hash identifier: 5lb4VOgnvFktK1dozzRVnVBfODyr/++eOhj+tV8kLLw= Subject key identifier: C3:AC:F6:AA:56:5D:5A:AC:F2:47:17:BA:E4:57:45:26:EF:11:BD:41 Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0 Certificate serial: 019AF01AC5971BDD5367A63D3CFD5B8608BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft Manifest number: 16F3 Signing time: Fri 05 Dec 2025 20:01:17 +0000 Manifest this update: Fri 05 Dec 2025 20:01:17 +0000 Manifest next update: Sat 06 Dec 2025 20:01:17 +0000 Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: VzKZcIKIinIUMMgW8WXfycqjXhPxxmyBwSuFgh/LMCo=) 2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=) 3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=) 4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:c5:97:1b:dd:53:67:a6:3d:3c:fd:5b:86:08:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0 Validity Not Before: Dec 5 20:01:17 2025 GMT Not After : Dec 6 20:01:17 2025 GMT Subject: CN=c3acf6aa565d5aacf24717bae4574526ef11bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:30:3a:d4:4d:f5:53:8b:7d:ee:4a:c2:f0: 6f:2d:c5:b5:bc:6b:f7:28:2b:e1:b4:37:75:4a:17: 17:47:11:ea:ac:b5:ab:4f:33:94:8e:17:6b:51:e7: ea:7b:c4:40:b6:d7:61:ef:f3:0c:c2:99:5d:35:45: 1d:9d:db:4c:43:ff:b7:57:89:1d:3e:8e:1f:f1:5b: a8:7c:38:22:4f:72:8a:23:3b:d0:c5:9c:4a:b1:98: 50:13:56:6b:46:36:3c:6a:11:01:b3:9b:fd:32:f4: 3b:b3:e0:9c:29:29:ab:75:3a:96:86:b9:33:63:7f: ca:f8:2e:31:4a:a3:0e:1e:33:80:35:59:cd:9b:27: 51:64:fd:82:21:68:00:61:a3:82:63:db:ea:84:40: 72:34:ed:4f:b3:46:91:38:12:ea:e8:58:49:57:d7: 54:49:eb:ba:e0:63:40:f1:bb:50:6c:ef:ed:cf:17: 64:1f:bf:da:fb:db:ea:b9:03:66:78:81:a6:07:9d: 9f:34:3d:2c:08:e8:53:5a:ee:0c:f1:75:55:2b:82: 6e:7d:c0:64:78:5f:34:92:c0:1a:eb:59:6c:be:65: 9d:d6:c9:30:db:70:6e:43:bc:17:6c:10:c5:25:45: af:e1:0e:49:ef:c5:8e:0d:98:c9:67:5d:1b:89:b0: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AC:F6:AA:56:5D:5A:AC:F2:47:17:BA:E4:57:45:26:EF:11:BD:41 X509v3 Authority Key Identifier: keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f6:0f:2a:95:ae:fd:a6:78:0b:51:2d:17:68:be:b0:51:01: 7d:01:6e:9e:b5:a1:21:65:db:ca:9a:f2:1c:dc:1a:c5:4a:16: 43:9e:b8:31:30:32:da:87:99:11:91:c4:dc:d7:35:bc:54:cc: a3:78:74:80:ef:60:01:bc:2f:08:9f:e5:b7:89:03:0b:48:db: 7d:13:a6:b2:5b:6b:89:48:9d:cd:b9:65:9c:45:7e:7f:df:c5: c2:3d:61:f3:82:6b:65:92:4f:a5:70:3b:93:fd:e7:a0:92:d4: 5b:2c:b4:15:ce:bd:a1:0c:23:29:38:ef:20:71:d6:a5:a1:52: 29:0a:31:46:d8:ed:7c:c3:62:83:df:6e:03:79:5a:e4:53:03: 3a:d9:24:3a:55:42:08:e9:89:02:4e:03:d0:38:70:4f:35:14: c1:f8:4a:cf:23:47:12:3b:c4:0b:68:28:92:e5:1b:51:4a:4b: 7d:fe:3c:48:f0:aa:56:b0:06:9a:eb:1a:cc:5d:07:28:bf:97: 00:2f:c9:aa:56:1b:74:08:90:32:77:64:1d:ce:c2:16:ce:cc: 4e:84:47:c4:a2:d4:33:70:1a:12:0e:36:f6:2c:0a:bb:83:68: 08:5c:cc:75:3f:cd:06:1a:b5:89:2d:88:e4:14:1c:ed:cc:53: e7:14:bf:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGsWXG91TZ6Y9PP1bhgi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi MzEyZjAwHhcNMjUxMjA1MjAwMTE3WhcNMjUxMjA2MjAwMTE3WjAzMTEwLwYDVQQD EyhjM2FjZjZhYTU2NWQ1YWFjZjI0NzE3YmFlNDU3NDUyNmVmMTFiZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArycwOtRN9VOLfe5KwvBvLcW1vGv3 KCvhtDd1ShcXRxHqrLWrTzOUjhdrUefqe8RAttdh7/MMwpldNUUdndtMQ/+3V4kd Po4f8VuofDgiT3KKIzvQxZxKsZhQE1ZrRjY8ahEBs5v9MvQ7s+CcKSmrdTqWhrkz Y3/K+C4xSqMOHjOANVnNmydRZP2CIWgAYaOCY9vqhEByNO1Ps0aROBLq6FhJV9dU Seu64GNA8btQbO/tzxdkH7/a+9vquQNmeIGmB52fND0sCOhTWu4M8XVVK4JufcBk eF80ksAa61lsvmWd1skw23BuQ7wXbBDFJUWv4Q5J78WODZjJZ10bibDXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOs9qpWXVqs8kcXuuRXRSbvEb1BMB8GA1UdIwQY MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvYPKpWu /aZ4C1EtF2i+sFEBfQFunrWhIWXbypryHNwaxUoWQ564MTAy2oeZEZHE3Nc1vFTM o3h0gO9gAbwvCJ/lt4kDC0jbfROmsltriUidzbllnEV+f9/Fwj1h84JrZZJPpXA7 k/3noJLUWyy0Fc69oQwjKTjvIHHWpaFSKQoxRtjtfMNig99uA3la5FMDOtkkOlVC COmJAk4D0DhwTzUUwfhKzyNHEjvEC2gokuUbUUpLff48SPCqVrAGmusazF0HKL+X AC/JqlYbdAiQMndkHc7CFs7MToRHxKLUM3AaEg429iwKu4NoCFzMdT/NBhq1iS2I 5BQc7cxT5xS/pA== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:42 2025 by rpki-client