This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json) Hash identifier: Wdw51Xs8NXuhelws9DJF5/Pdc7yp4HVD2CctNQUsecg= Subject key identifier: 2A:C2:58:8B:21:82:99:CC:D0:1F:24:05:97:E5:1F:E1:D5:1F:E7:FE Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Certificate serial: 019AF12EFF8384449B637517E1B8D77099B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:03:00 +0000 Manifest this update: Sat 06 Dec 2025 01:03:00 +0000 Manifest next update: Sun 07 Dec 2025 01:03:00 +0000 Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=) 2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=) 3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: fI1EEg2JBUdabzNT2gonrJxBM4dLgFuJdOm1Xztalyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ff:83:84:44:9b:63:75:17:e1:b8:d7:70:99:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Validity Not Before: Dec 6 01:03:00 2025 GMT Not After : Dec 7 01:03:00 2025 GMT Subject: CN=2ac2588b218299ccd01f240597e51fe1d51fe7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:5a:35:f8:97:43:6f:4b:79:55:c8:c6:17: d1:75:2b:b2:8c:24:70:bd:9d:82:64:50:fa:05:5d: b6:6c:7a:7f:99:8e:e2:0c:96:83:ed:31:c0:ad:b9: 81:9d:2f:33:0a:2e:7c:7e:da:fe:20:8d:c5:81:88: 4d:55:93:c6:20:22:d4:fa:86:2e:8c:e0:3c:ba:fe: 99:bc:29:94:c3:15:e5:04:d4:7e:4b:60:5b:8d:0b: 2d:59:07:85:12:44:29:bc:5a:3c:d2:4d:1d:04:97: f5:9d:09:96:bf:14:78:67:2e:26:ed:34:85:17:04: 98:9f:46:cc:9f:35:db:68:44:c9:2d:36:f3:5c:a0: 50:15:6c:cb:9f:f5:27:45:56:c1:bc:92:78:9a:98: 29:00:fe:f8:03:b3:00:3e:95:54:14:95:7c:a7:cb: 0e:c6:b8:5e:be:23:56:9d:77:35:e8:b8:19:d9:2f: bd:9b:d6:22:c6:bf:47:f3:f6:3b:c0:ff:99:d6:b3: 2f:41:fc:27:af:1b:ed:fa:0d:2c:f8:79:f6:9a:66: 7a:8d:57:ca:37:17:a5:bd:be:a1:c0:9b:cd:f9:a7: e6:41:be:26:7d:19:8a:a9:ab:bf:98:d7:68:9b:e8: 7b:56:ca:0f:77:2b:43:1d:08:54:3a:22:2d:1d:57: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:58:8B:21:82:99:CC:D0:1F:24:05:97:E5:1F:E1:D5:1F:E7:FE X509v3 Authority Key Identifier: keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:44:73:fb:73:91:3d:fd:29:67:fa:f9:41:19:72:77:f9:e3: 22:aa:63:7c:88:e8:5b:83:05:a8:b6:b6:70:ed:a2:96:28:8c: 0d:3d:af:53:ec:c6:5e:7e:41:6f:bd:37:44:69:7d:c9:ec:98: e5:c5:89:3f:6f:e8:d5:9e:b5:cb:67:7f:53:4d:b5:8c:73:e8: 34:4b:52:56:ef:63:df:dc:3f:17:d4:90:3c:0c:c9:fb:00:10: e9:92:0f:cc:fc:2c:a2:d3:5d:f2:48:6e:85:77:2d:86:94:0b: 56:36:d1:fa:6e:87:02:8e:57:0e:2a:96:66:a4:91:7b:d4:5e: 30:1c:f0:8f:76:3f:ad:cc:40:65:06:ed:7d:b6:e1:b4:d7:8d: fa:f6:44:7c:5e:a3:1e:73:bf:c5:9c:d9:f2:29:1d:5a:29:8a: b3:ba:4d:cb:6a:3f:20:f0:b1:fc:42:0d:65:09:33:2c:4b:62: cb:d2:f5:3b:95:0f:a2:2b:9d:69:e7:79:45:c1:b5:3c:ba:a4: 24:00:bb:8e:56:74:20:80:2f:45:c3:e3:0a:e8:a0:76:73:a4: 13:b8:63:fd:6b:53:48:fa:2d:14:59:b5:c3:fb:9d:45:5d:df: 6f:91:f5:4c:c6:11:a2:4a:c1:0c:68:10:47:35:bc:96:97:6e: 49:17:36:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLv+DhESbY3UX4bjXcJm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4 MzljZjEwHhcNMjUxMjA2MDEwMzAwWhcNMjUxMjA3MDEwMzAwWjAzMTEwLwYDVQQD EygyYWMyNTg4YjIxODI5OWNjZDAxZjI0MDU5N2U1MWZlMWQ1MWZlN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ShaNfiXQ29LeVXIxhfRdSuyjCRw vZ2CZFD6BV22bHp/mY7iDJaD7THArbmBnS8zCi58ftr+II3FgYhNVZPGICLU+oYu jOA8uv6ZvCmUwxXlBNR+S2BbjQstWQeFEkQpvFo80k0dBJf1nQmWvxR4Zy4m7TSF FwSYn0bMnzXbaETJLTbzXKBQFWzLn/UnRVbBvJJ4mpgpAP74A7MAPpVUFJV8p8sO xrheviNWnXc16LgZ2S+9m9Yixr9H8/Y7wP+Z1rMvQfwnrxvt+g0s+Hn2mmZ6jVfK Nxelvb6hwJvN+afmQb4mfRmKqau/mNdom+h7VsoPdytDHQhUOiItHVcqxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrCWIshgpnM0B8kBZflH+HVH+f+MB8GA1UdIwQY MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt NTI2ZjdjYzUyOWI3LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3 LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkRz+3OR Pf0pZ/r5QRlyd/njIqpjfIjoW4MFqLa2cO2iliiMDT2vU+zGXn5Bb703RGl9yeyY 5cWJP2/o1Z61y2d/U021jHPoNEtSVu9j39w/F9SQPAzJ+wAQ6ZIPzPwsotNd8khu hXcthpQLVjbR+m6HAo5XDiqWZqSRe9ReMBzwj3Y/rcxAZQbtfbbhtNeN+vZEfF6j HnO/xZzZ8ikdWimKs7pNy2o/IPCx/EINZQkzLEtiy9L1O5UPoiudaed5RcG1PLqk JAC7jlZ0IIAvRcPjCuigdnOkE7hj/WtTSPotFFm1w/udRV3fb5H1TMYRokrBDGgQ RzW8lpduSRc2lA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:25 2025 by rpki-client