This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json) Hash identifier: 3nK6iMvnuTgq6rDtCfAvrPetBcDK4gr7uNgD5liMt6w= Subject key identifier: CB:49:A1:F3:F2:C6:32:03:B1:74:CB:4E:AE:3D:53:73:D5:44:BF:C8 Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Certificate serial: 019AF5408C8891909A94833A98BF4E014833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 20:00:39 +0000 Manifest this update: Sat 06 Dec 2025 20:00:39 +0000 Manifest next update: Sun 07 Dec 2025 20:00:39 +0000 Files and hashes: 1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=) 2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: At4UfDaRtSgT1Mr52s+9EkkTJKbA4+/hjdreleMuoY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:8c:88:91:90:9a:94:83:3a:98:bf:4e:01:48:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Validity Not Before: Dec 6 20:00:39 2025 GMT Not After : Dec 7 20:00:39 2025 GMT Subject: CN=cb49a1f3f2c63203b174cb4eae3d5373d544bfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:90:2d:86:c7:5e:24:83:5c:89:89:27:33: c4:60:5e:85:df:29:2e:40:9f:55:64:74:9f:61:a1: 19:40:91:b4:57:3a:c1:12:50:48:ae:25:e2:d2:4f: 77:b7:b3:c6:eb:b5:bc:04:0a:33:f6:98:fc:d6:0c: 9e:2e:47:9c:a0:fb:5b:1c:45:16:e6:34:76:9c:e2: 75:fd:44:fd:77:e3:4d:29:87:41:df:0c:9b:74:64: bc:31:5c:5d:01:d5:a5:fc:03:44:a9:51:ee:f8:86: 02:0a:6a:87:f3:3b:18:74:aa:5d:85:77:f0:bb:5f: 0a:67:ec:b1:68:5f:fc:98:dc:24:2e:c2:c8:91:04: a7:00:4f:14:ea:c7:4e:bc:ac:9b:c4:a1:19:23:ce: ba:d2:2d:98:17:ce:5a:8a:f0:01:92:8b:81:10:b8: 15:a3:d5:fc:fc:bf:29:2e:d0:fa:62:58:cd:8e:a3: b1:e5:4d:03:9f:6f:e0:65:50:ce:81:57:c2:46:cb: 53:34:21:12:a2:f7:f2:51:00:ea:5d:fa:b0:4c:07: 7c:17:5b:19:a6:af:35:f2:88:8d:ef:70:38:1f:83: 05:72:02:ec:34:a6:1a:44:28:d4:9f:55:c1:1a:32: c9:e1:1e:a1:b5:55:89:f0:67:26:96:3a:4a:ef:69: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:A1:F3:F2:C6:32:03:B1:74:CB:4E:AE:3D:53:73:D5:44:BF:C8 X509v3 Authority Key Identifier: keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5b:3d:89:8b:13:15:26:20:d0:20:5d:a2:8d:ec:76:dc:7f: 15:ba:73:7a:94:94:b1:d4:97:4b:27:02:87:2f:c2:75:d8:60: a9:57:51:5a:9d:15:23:ba:03:b6:64:7b:9a:ec:be:56:eb:69: 14:e1:9e:19:f7:06:db:c3:c7:4b:77:32:b3:f2:a8:b3:53:3b: 8b:10:43:85:c7:0e:7e:3d:70:56:90:a9:09:8c:e5:ff:a7:8f: f4:16:3e:e6:dc:54:f5:2d:4d:38:34:35:49:80:16:5c:61:56: 9a:f3:e3:d6:e7:cd:81:00:58:01:32:a2:a1:fe:35:f7:92:1d: 8e:41:db:53:4d:79:09:4d:c6:07:e4:27:b2:a5:05:f4:dd:5f: d9:2d:6f:0b:c1:06:9b:51:84:c6:94:cb:b0:c0:63:99:49:97: 02:a7:9f:e9:00:20:7a:b6:34:3f:56:cc:64:c9:0b:82:0b:a4: 9d:f3:9f:0e:ae:65:ba:0f:2f:24:0c:91:db:31:4b:cb:bd:e4: 41:6c:54:b5:c4:26:b0:82:f3:ce:11:d5:d7:ce:4b:f5:be:96: 67:d9:63:3f:fe:bb:d0:92:3b:c1:39:ba:8e:36:75:0b:bd:bc: bf:fb:dc:9d:90:14:a0:47:86:1f:57:82:1d:49:c0:1d:f4:63: 32:7f:3f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIyIkZCalIM6mL9OAUgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5 ZTRjOWUwHhcNMjUxMjA2MjAwMDM5WhcNMjUxMjA3MjAwMDM5WjAzMTEwLwYDVQQD EyhjYjQ5YTFmM2YyYzYzMjAzYjE3NGNiNGVhZTNkNTM3M2Q1NDRiZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGiQLYbHXiSDXImJJzPEYF6F3yku QJ9VZHSfYaEZQJG0VzrBElBIriXi0k93t7PG67W8BAoz9pj81gyeLkecoPtbHEUW 5jR2nOJ1/UT9d+NNKYdB3wybdGS8MVxdAdWl/ANEqVHu+IYCCmqH8zsYdKpdhXfw u18KZ+yxaF/8mNwkLsLIkQSnAE8U6sdOvKybxKEZI8660i2YF85aivABkouBELgV o9X8/L8pLtD6YljNjqOx5U0Dn2/gZVDOgVfCRstTNCESovfyUQDqXfqwTAd8F1sZ pq818oiN73A4H4MFcgLsNKYaRCjUn1XBGjLJ4R6htVWJ8GcmljpK72lOiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtJofPyxjIDsXTLTq49U3PVRL/IMB8GA1UdIwQY MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt OTliNGQ0YWNlNjkzLzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVs9iYsT FSYg0CBdoo3sdtx/FbpzepSUsdSXSycChy/CddhgqVdRWp0VI7oDtmR7muy+Vutp FOGeGfcG28PHS3cys/Kos1M7ixBDhccOfj1wVpCpCYzl/6eP9BY+5txU9S1NODQ1 SYAWXGFWmvPj1ufNgQBYATKiof4195IdjkHbU015CU3GB+QnsqUF9N1f2S1vC8EG m1GExpTLsMBjmUmXAqef6QAgerY0P1bMZMkLgguknfOfDq5lug8vJAyR2zFLy73k QWxUtcQmsILzzhHV185L9b6WZ9ljP/670JI7wTm6jjZ1C728v/vcnZAUoEeGH1eC HUnAHfRjMn8/uw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:37 2025 by rpki-client