This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json) Hash identifier: Z2POubnJIsXvnFvtN/XNCJL2AZgbofe+aY+bPESSZnY= Subject key identifier: CE:60:71:9F:7B:14:CC:7E:8A:AB:5C:6C:54:39:B6:19:65:64:05:7C Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479 Certificate serial: 019AF5098765E4CDB0D38C768FB6178AEEDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft Manifest number: 017E Signing time: Sat 06 Dec 2025 19:00:33 +0000 Manifest this update: Sat 06 Dec 2025 19:00:33 +0000 Manifest next update: Sun 07 Dec 2025 19:00:33 +0000 Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: uNqOdiSnIPXBjh0wEoqSGDIhezg3aWvZLEC3x549Q6M=) 2: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (hash: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:87:65:e4:cd:b0:d3:8c:76:8f:b6:17:8a:ee:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259796c5f60c55501e458008611623b5049d479 Validity Not Before: Dec 6 19:00:33 2025 GMT Not After : Dec 7 19:00:33 2025 GMT Subject: CN=ce60719f7b14cc7e8aab5c6c5439b6196564057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:36:34:6f:53:85:e8:a2:7e:c1:ba:ff:e6: 0f:3c:c0:96:42:63:0b:95:28:3c:e5:6e:d1:24:7c: 78:9a:e7:e4:2e:3f:54:5d:66:44:87:5e:d8:2f:fb: a4:a7:d2:37:1e:78:0e:be:85:68:ff:17:5c:7d:bb: 51:45:af:4e:87:82:ea:6d:93:e5:c1:61:dd:85:f6: ca:f7:36:da:bc:33:41:6d:f2:89:bc:5c:3b:38:cf: 4a:35:5a:23:1d:f4:4b:fe:cb:88:42:60:c0:91:87: d3:7b:67:47:16:df:32:d1:2a:79:7e:41:b5:bc:5e: 9c:40:2a:97:f5:06:e6:84:3e:d6:92:b8:5f:35:bc: 17:09:99:70:02:73:22:1b:23:46:8b:a2:ba:36:f7: 0a:d1:a1:b1:14:da:18:32:6d:7d:d9:e8:e4:51:27: e1:a1:0b:94:90:10:10:57:48:31:f9:e7:1a:f0:51: a8:86:5f:45:50:3d:cc:49:ef:08:02:67:f2:07:7b: d5:82:1a:cb:bc:bc:b2:34:b3:76:41:63:de:9c:fd: 5e:8c:0e:cb:d9:22:c3:4b:a4:ac:56:f4:1e:5f:b1: 0a:62:52:da:91:2b:1b:c0:b0:0f:de:52:a4:6e:95: 93:cd:09:91:42:24:96:74:bd:5d:34:9f:dd:54:63: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:60:71:9F:7B:14:CC:7E:8A:AB:5C:6C:54:39:B6:19:65:64:05:7C X509v3 Authority Key Identifier: keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2e:46:1f:6e:72:35:c6:8a:48:99:a2:7a:5c:ae:f5:a3:f3: 66:35:09:0e:a0:3c:69:8c:54:a7:08:2a:64:d1:20:3f:0f:54: 06:52:30:5e:a9:74:63:46:23:87:0e:8d:18:f4:61:0f:19:52: ec:a3:e1:de:1f:5f:9a:ae:46:38:e1:cf:3c:48:28:4d:08:97: 67:91:5c:10:b5:08:cb:cd:7d:c5:04:05:14:fe:ad:07:55:83: 0f:5e:2f:ea:db:ed:af:74:dc:f1:72:74:11:89:53:41:f9:7c: 8d:a8:17:e8:2d:0c:a1:e7:ce:b1:13:a2:9d:9e:17:70:dd:51: 03:d7:8c:32:8b:cd:cd:75:88:ab:71:02:76:6c:8f:54:db:30: 4f:d6:96:6b:98:9a:41:04:c1:56:2c:1a:c2:e8:ae:d7:2d:2d: cd:c8:e1:b2:57:95:35:2d:1e:6d:12:c7:5d:44:ec:2c:4c:97: 54:b2:9b:1d:ad:5b:36:28:f4:e6:68:4f:2a:e0:15:71:0e:78: 95:bf:89:53:40:bd:c8:2c:35:f7:e3:a5:0c:f7:ab:6b:47:75: 9a:4a:19:5e:5e:d1:71:1e:9e:fe:a4:cf:67:1b:96:a6:42:98: 99:da:3f:66:b4:b7:f1:58:91:f4:cf:ab:41:8a:af:d5:b8:2e: 0d:4b:6d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYdl5M2w04x2j7YXiu7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTk3OTZjNWY2MGM1NTUwMWU0NTgwMDg2MTE2MjNiNTA0 OWQ0NzkwHhcNMjUxMjA2MTkwMDMzWhcNMjUxMjA3MTkwMDMzWjAzMTEwLwYDVQQD EyhjZTYwNzE5ZjdiMTRjYzdlOGFhYjVjNmM1NDM5YjYxOTY1NjQwNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q42NG9TheiifsG6/+YPPMCWQmML lSg85W7RJHx4mufkLj9UXWZEh17YL/ukp9I3HngOvoVo/xdcfbtRRa9Oh4LqbZPl wWHdhfbK9zbavDNBbfKJvFw7OM9KNVojHfRL/suIQmDAkYfTe2dHFt8y0Sp5fkG1 vF6cQCqX9QbmhD7WkrhfNbwXCZlwAnMiGyNGi6K6NvcK0aGxFNoYMm192ejkUSfh oQuUkBAQV0gx+eca8FGohl9FUD3MSe8IAmfyB3vVghrLvLyyNLN2QWPenP1ejA7L 2SLDS6SsVvQeX7EKYlLakSsbwLAP3lKkbpWTzQmRQiSWdL1dNJ/dVGPrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5gcZ97FMx+iqtcbFQ5thllZAV8MB8GA1UdIwQY MBaAFFJZeWxfYMVVAeRYAIYRYjtQSdR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYt ZThiYmI1NTE5MjM2LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYtZThiYmI1NTE5MjM2 LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbS5GH25y NcaKSJmielyu9aPzZjUJDqA8aYxUpwgqZNEgPw9UBlIwXql0Y0Yjhw6NGPRhDxlS 7KPh3h9fmq5GOOHPPEgoTQiXZ5FcELUIy819xQQFFP6tB1WDD14v6tvtr3Tc8XJ0 EYlTQfl8jagX6C0MoefOsROinZ4XcN1RA9eMMovNzXWIq3ECdmyPVNswT9aWa5ia QQTBViwawuiu1y0tzcjhsleVNS0ebRLHXUTsLEyXVLKbHa1bNij05mhPKuAVcQ54 lb+JU0C9yCw19+OlDPera0d1mkoZXl7RcR6e/qTPZxuWpkKYmdo/ZrS38ViR9M+r QYqv1bguDUttWg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:01 2025 by rpki-client