This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json) Hash identifier: LmLAyPnMXUiso45d03ZmfFvSqSVSNn2OOiuoBCcNIvs= Subject key identifier: 09:43:84:14:DB:AE:6E:3E:C5:E9:9D:3F:27:35:F4:8E:2F:63:12:33 Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057 Certificate serial: 019AF12D6B1D9A8C6779607E9C24D61617BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft Manifest number: 1395 Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: eefdT5yHzmCrlo8DsganTrId/z0sOO9jHQ09zFCDzY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6b:1d:9a:8c:67:79:60:7e:9c:24:d6:16:17:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=09438414dbae6e3ec5e99d3f2735f48e2f631233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:45:22:10:8b:1d:d7:fd:d4:4a:fc:48:d8: a9:5f:84:12:f0:b1:26:8c:ce:50:57:32:f0:88:a4: 15:f4:fb:7e:cd:6c:54:58:55:c5:d3:15:77:58:3a: 54:7d:ec:90:af:93:c0:3e:c7:b5:09:2b:1c:4f:a2: 92:a3:a5:ed:eb:dd:16:c0:4c:83:37:fd:c0:21:d9: bc:05:b1:b9:ae:76:22:34:64:9b:f2:b2:b5:c8:7c: 10:47:07:2b:74:59:a5:f1:38:6e:37:27:31:a0:7e: ce:2a:5b:d5:5e:cf:02:00:df:a2:10:0d:9e:74:8d: dc:6d:2a:a8:ba:84:b3:ed:c8:f8:aa:09:de:37:ad: 63:22:6f:e8:86:d7:06:00:49:2e:44:5a:89:be:f1: 84:24:07:1f:40:50:fe:09:18:63:e3:61:45:0b:be: dc:61:2e:b5:8b:bb:13:13:63:84:cb:75:c9:f6:d4: 66:9e:92:c8:a9:23:39:c5:b0:98:a8:e4:86:88:a6: fa:3b:e9:60:02:56:f9:50:05:e2:83:e8:71:56:7f: 2a:1b:5d:4e:21:09:61:a5:07:6a:51:9b:11:dc:77: 8c:77:1f:48:cb:6c:d3:3e:14:4a:4d:ad:5d:75:ec: d0:10:c1:d9:bd:5d:06:85:de:43:16:58:1d:5d:01: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:84:14:DB:AE:6E:3E:C5:E9:9D:3F:27:35:F4:8E:2F:63:12:33 X509v3 Authority Key Identifier: keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a9:c8:9b:cd:14:51:b3:8a:43:86:2b:34:e8:a1:6a:70:4d: ae:49:61:6d:2f:cb:6b:57:6f:a2:16:d6:56:61:82:69:a4:4d: b8:48:54:f1:00:46:bc:73:75:0b:39:4a:c0:ad:48:71:f6:47: c8:b3:70:2e:c8:e3:da:a3:3b:f4:61:bd:61:c4:8a:9f:da:e3: af:42:5d:a0:7c:be:07:e4:33:2a:b5:c8:46:42:a3:56:5c:bf: d4:d7:12:98:2d:f6:2e:8a:d7:e2:49:81:e7:76:18:5b:a8:5e: 5b:53:aa:23:95:7a:0a:c7:2e:16:50:2c:ce:99:99:30:21:0f: ca:bc:90:5a:09:07:5f:30:e2:92:a2:f5:65:ff:b7:6c:29:56: 75:8e:09:a9:6e:c3:6e:7e:31:7e:4e:2a:4d:9f:49:dc:10:75: d8:52:6b:7c:54:cb:4c:8a:8c:ba:09:64:b0:39:53:cf:1a:b8: 33:3c:f3:f4:ab:37:78:78:64:6c:ea:c7:89:56:38:66:5e:34: 4e:38:29:85:c2:87:a6:4b:80:06:a6:0e:43:68:ee:60:9b:66: e4:73:c3:1a:de:18:d8:e8:a2:b2:44:50:75:3f:63:41:8f:46: 03:62:21:c7:1b:70:18:66:f2:95:3b:a8:ed:08:ef:d7:6b:aa: 14:04:8e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWsdmoxneWB+nCTWFhe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4 OGQwNTcwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EygwOTQzODQxNGRiYWU2ZTNlYzVlOTlkM2YyNzM1ZjQ4ZTJmNjMxMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq25FIhCLHdf91Er8SNipX4QS8LEm jM5QVzLwiKQV9Pt+zWxUWFXF0xV3WDpUfeyQr5PAPse1CSscT6KSo6Xt690WwEyD N/3AIdm8BbG5rnYiNGSb8rK1yHwQRwcrdFml8ThuNycxoH7OKlvVXs8CAN+iEA2e dI3cbSqouoSz7cj4qgneN61jIm/ohtcGAEkuRFqJvvGEJAcfQFD+CRhj42FFC77c YS61i7sTE2OEy3XJ9tRmnpLIqSM5xbCYqOSGiKb6O+lgAlb5UAXig+hxVn8qG11O IQlhpQdqUZsR3HeMdx9Iy2zTPhRKTa1ddezQEMHZvV0Ghd5DFlgdXQFYEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlDhBTbrm4+xemdPyc19I4vYxIzMB8GA1UdIwQY MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2 LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqnIm80U UbOKQ4YrNOihanBNrklhbS/La1dvohbWVmGCaaRNuEhU8QBGvHN1CzlKwK1IcfZH yLNwLsjj2qM79GG9YcSKn9rjr0JdoHy+B+QzKrXIRkKjVly/1NcSmC32LorX4kmB 53YYW6heW1OqI5V6CscuFlAszpmZMCEPyryQWgkHXzDikqL1Zf+3bClWdY4JqW7D bn4xfk4qTZ9J3BB12FJrfFTLTIqMuglksDlTzxq4Mzzz9Ks3eHhkbOrHiVY4Zl40 TjgphcKHpkuABqYOQ2juYJtm5HPDGt4Y2OiiskRQdT9jQY9GA2IhxxtwGGbylTuo 7Qjv12uqFASO0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:36 2025 by rpki-client