This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft File: ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft (raw, json) Hash identifier: ei3vpbCpDmYKlru0QiSpk8L8oDk3kCgTor7p+0P+oqg= Subject key identifier: 86:F2:3C:81:D4:90:A9:A4:5B:02:91:E0:AC:CE:BE:79:42:27:99:DC Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26 Certificate issuer: /CN=50bb4c781a5b393ff07fb405e528179f5ab87726 Certificate serial: 019AF2768CEB6481565D893FD926D186F6F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl (hash: 9Zz7i8xofphh/mzs56NYdOWpXmk0l7a/coBBlXl9Djg=) 2: osNkGM30SnMymb2Awx_H5QpAsjo.roa (hash: HAaDhq9nK6jC5S5RvUgE6hoFlbMOsKI55ry4MCnd8LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8c:eb:64:81:56:5d:89:3f:d9:26:d1:86:f6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=86f23c81d490a9a45b0291e0accebe79422799dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:16:ba:85:a3:8c:40:3c:14:6c:f4:53:09: 94:74:a4:d4:e7:6e:9f:18:6b:98:b9:cb:2c:80:0c: ae:1b:e3:98:1e:82:c4:bd:d1:11:5b:d9:43:d7:ad: 6b:ba:a7:e4:f4:fd:45:37:bb:4f:e6:41:ee:90:1f: 0c:5c:69:10:46:a5:70:1d:e7:6c:a7:07:d8:5c:13: a0:ee:72:eb:fa:70:4b:8b:cb:f3:fc:13:dd:ca:e9: 9b:61:72:f3:b7:8d:26:e6:9c:2f:fe:8c:7f:49:15: 53:42:dd:f0:21:73:cb:d9:b8:34:45:11:95:00:4d: cf:96:09:f8:ef:5d:23:54:c4:ac:04:bd:ea:53:89: 6f:11:99:51:d7:d4:11:f3:27:78:56:d8:81:13:9a: 72:ca:55:bb:80:66:4c:fc:dc:7a:58:70:80:9d:c2: 71:e4:a3:42:41:f8:c8:5d:14:d8:0f:c5:0a:3c:a9: cd:ea:da:5a:53:3e:a3:ff:ce:31:d7:f0:26:3e:fe: 16:d1:62:41:34:62:3f:c5:c4:52:73:80:19:f6:46: 9a:bf:f9:d5:e9:66:d5:a3:28:67:2f:94:d2:55:6d: 2e:33:c7:77:7e:29:de:bd:5b:1b:f2:d4:08:9b:22: 8b:39:66:87:30:97:9f:9f:64:25:db:ad:a1:57:71: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:3C:81:D4:90:A9:A4:5B:02:91:E0:AC:CE:BE:79:42:27:99:DC X509v3 Authority Key Identifier: keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c5:ff:6f:4f:b0:35:e6:e9:b3:89:4a:8e:f0:0b:97:51:c5: a2:de:4c:70:ef:8c:c5:9d:41:b5:b1:89:39:2d:a3:94:a1:83: 0e:00:0a:85:af:95:e6:d5:c1:8f:25:d1:29:a8:5a:97:49:aa: 41:b7:b0:40:53:d7:dc:03:6c:fd:14:35:0f:3e:5b:5d:23:6f: f9:b5:12:27:6b:97:ac:5b:f2:5d:9d:91:26:54:d0:98:b6:37: 42:e2:5d:c2:bb:d9:07:88:4b:3a:5b:ea:84:8f:e7:6c:f3:08: 9c:4c:10:57:93:1b:12:48:30:67:f5:7b:80:52:19:4b:36:ad: ac:12:98:5c:53:0a:1b:2e:c2:48:3f:51:9e:80:c1:c1:ab:71: 14:f2:84:8d:63:c3:1b:35:dc:a1:75:61:29:e7:2c:92:6a:a4: 96:ff:84:b9:79:dc:08:28:3e:a3:75:61:09:ec:76:9b:a5:08: 07:30:83:52:e6:6c:59:15:66:fa:df:41:87:06:2c:df:a4:3a: 93:87:89:89:21:1a:39:9f:d8:af:cd:68:96:14:b6:a2:35:fd: 92:cc:b1:6b:86:e9:e7:49:63:a6:2b:5d:db:fb:b8:89:f4:45: 10:8c:fe:a3:86:36:a3:ce:4a:99:be:cc:63:f3:78:f7:fe:18: a8:22:ba:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydozrZIFWXYk/2SbRhvb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYmI0Yzc4MWE1YjM5M2ZmMDdmYjQwNWU1MjgxNzlmNWFi ODc3MjYwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg4NmYyM2M4MWQ0OTBhOWE0NWIwMjkxZTBhY2NlYmU3OTQyMjc5OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJoWuoWjjEA8FGz0UwmUdKTU526f GGuYucssgAyuG+OYHoLEvdERW9lD161ruqfk9P1FN7tP5kHukB8MXGkQRqVwHeds pwfYXBOg7nLr+nBLi8vz/BPdyumbYXLzt40m5pwv/ox/SRVTQt3wIXPL2bg0RRGV AE3Plgn4710jVMSsBL3qU4lvEZlR19QR8yd4VtiBE5pyylW7gGZM/Nx6WHCAncJx 5KNCQfjIXRTYD8UKPKnN6tpaUz6j/84x1/AmPv4W0WJBNGI/xcRSc4AZ9kaav/nV 6WbVoyhnL5TSVW0uM8d3finevVsb8tQImyKLOWaHMJefn2Ql262hV3GrdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbyPIHUkKmkWwKR4KzOvnlCJ5ncMB8GA1UdIwQY MBaAFFC7THgaWzk/8H+0BeUoF59auHcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQt Yjg3ZjkxYzI5YjllLzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQtYjg3ZjkxYzI5Yjll LzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcX/b0+w Nebps4lKjvALl1HFot5McO+MxZ1BtbGJOS2jlKGDDgAKha+V5tXBjyXRKahal0mq QbewQFPX3ANs/RQ1Dz5bXSNv+bUSJ2uXrFvyXZ2RJlTQmLY3QuJdwrvZB4hLOlvq hI/nbPMInEwQV5MbEkgwZ/V7gFIZSzatrBKYXFMKGy7CSD9RnoDBwatxFPKEjWPD GzXcoXVhKecskmqklv+EuXncCCg+o3VhCex2m6UIBzCDUuZsWRVm+t9BhwYs36Q6 k4eJiSEaOZ/Yr81olhS2ojX9ksyxa4bp50ljpitd2/u4ifRFEIz+o4Y2o85Kmb7M Y/N49/4YqCK6xA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:32 2025 by rpki-client