This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json) Hash identifier: 45bEy39hrjOBzXchUA+1GUpyEcNSWp/2V5ptAbvXxMo= Subject key identifier: 19:7D:91:87:3C:9A:0F:86:EA:1D:01:65:E8:1C:14:F0:DB:26:44:75 Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19 Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19 Certificate serial: 019AF50995EE49A13413F275B46E98E8E4CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 19:00:37 +0000 Manifest this update: Sat 06 Dec 2025 19:00:37 +0000 Manifest next update: Sun 07 Dec 2025 19:00:37 +0000 Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: ClTQrNoozFKDw8I1AFR0cv4qaUXzBPsZ0Uk39dAtg0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:95:ee:49:a1:34:13:f2:75:b4:6e:98:e8:e4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19 Validity Not Before: Dec 6 19:00:37 2025 GMT Not After : Dec 7 19:00:37 2025 GMT Subject: CN=197d91873c9a0f86ea1d0165e81c14f0db264475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:df:ae:07:7a:5d:0e:87:ba:41:ec:d1:ac: ab:64:8c:b7:90:56:57:4a:1f:89:0f:27:d0:32:09: 72:c0:d5:19:37:a3:ea:34:bc:58:a8:27:ed:3d:e4: 25:c2:01:bc:aa:49:b6:8a:97:e5:11:bc:d3:54:51: de:8e:ef:f9:be:d5:de:80:0a:4c:ac:2d:1e:f1:95: 1b:2e:65:f0:9d:14:3a:18:9e:93:e9:da:a3:9f:99: 16:7b:7b:61:54:95:42:42:f8:08:2a:27:91:4b:2a: c4:a4:1f:94:f5:ad:70:92:d7:41:7d:dd:0b:20:95: 04:c9:08:59:af:e5:ea:52:05:7a:8b:2e:33:29:83: a0:5d:29:12:cf:4c:3a:51:f9:7c:cc:2a:08:d9:f9: 5c:b0:5d:7a:c0:61:58:37:30:48:17:ce:91:f1:fe: 26:c2:da:b2:f7:ee:04:b3:3e:79:39:de:03:75:00: 63:b1:6b:3d:7a:77:b4:74:ce:bc:27:97:1e:1b:e9: 51:45:4d:1f:d1:5f:1c:74:14:73:f6:fd:7d:76:89: 91:b2:c3:88:dd:14:2d:c0:ba:cc:63:59:42:ef:71: 80:4b:15:dd:71:77:08:41:65:a9:f1:3d:08:73:99: d4:89:a6:e2:23:fb:16:d3:15:66:f2:d7:2f:9c:71: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7D:91:87:3C:9A:0F:86:EA:1D:01:65:E8:1C:14:F0:DB:26:44:75 X509v3 Authority Key Identifier: keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d9:35:4e:f1:14:85:70:3d:00:ce:3e:9a:7a:cc:8a:0d:fa: 87:3c:7f:62:35:48:7a:bb:57:e0:66:f3:07:d0:39:94:27:d2: b0:c9:53:0a:03:88:b3:c3:8d:86:2f:08:f4:3d:50:2e:bc:21: 0b:ae:10:c9:74:06:b5:5b:f5:d1:12:9e:30:93:8b:8e:cb:c5: a1:76:d5:59:fb:ba:12:39:b9:6b:37:1e:0d:42:f4:91:e6:0c: 2f:51:8e:cc:c9:25:aa:a1:9c:50:d9:34:56:27:53:3b:a3:66: 9f:2e:3e:b7:56:bf:35:c2:fc:45:21:38:ad:18:90:f2:8b:c2: 75:6b:3b:11:d8:3e:3a:ea:74:24:57:42:19:cb:f5:d3:7e:3f: fe:aa:e4:2f:b5:81:b9:dd:f7:71:f8:61:1d:11:ce:b1:3e:27: 34:32:85:ab:30:c7:66:86:b0:7d:c8:0e:89:c8:6c:f2:2b:53: 69:a0:86:0e:a1:49:2c:2b:88:80:20:31:dc:ec:96:7f:e0:13: 99:bb:91:08:1f:3c:37:36:0c:b2:8c:6a:2d:52:00:67:f7:59: f5:d9:04:8b:9d:3e:95:dc:c3:68:b6:63:f1:cc:7f:0e:5d:43: 22:f2:4c:ee:e5:62:70:35:5b:6b:20:98:91:18:c8:66:e2:8c: 5e:12:ed:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZXuSaE0E/J1tG6Y6OTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTlkOWY1YWYzY2VlNDQyMDE0YjczNTk2MWM3M2I5Njky NjBlMTkwHhcNMjUxMjA2MTkwMDM3WhcNMjUxMjA3MTkwMDM3WjAzMTEwLwYDVQQD EygxOTdkOTE4NzNjOWEwZjg2ZWExZDAxNjVlODFjMTRmMGRiMjY0NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLfrgd6XQ6HukHs0ayrZIy3kFZX Sh+JDyfQMglywNUZN6PqNLxYqCftPeQlwgG8qkm2ipflEbzTVFHeju/5vtXegApM rC0e8ZUbLmXwnRQ6GJ6T6dqjn5kWe3thVJVCQvgIKieRSyrEpB+U9a1wktdBfd0L IJUEyQhZr+XqUgV6iy4zKYOgXSkSz0w6Ufl8zCoI2flcsF16wGFYNzBIF86R8f4m wtqy9+4Esz55Od4DdQBjsWs9ene0dM68J5ceG+lRRU0f0V8cdBRz9v19domRssOI 3RQtwLrMY1lC73GASxXdcXcIQWWp8T0Ic5nUiabiI/sW0xVm8tcvnHGNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl9kYc8mg+G6h0BZegcFPDbJkR1MB8GA1UdIwQY MBaAFLpZ2fWvPO5EIBS3NZYcc7lpJg4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUt ZDIwM2UyMDAxOGY1LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUtZDIwM2UyMDAxOGY1 LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9k1TvEU hXA9AM4+mnrMig36hzx/YjVIertX4GbzB9A5lCfSsMlTCgOIs8ONhi8I9D1QLrwh C64QyXQGtVv10RKeMJOLjsvFoXbVWfu6Ejm5azceDUL0keYML1GOzMklqqGcUNk0 VidTO6Nmny4+t1a/NcL8RSE4rRiQ8ovCdWs7Edg+Oup0JFdCGcv1034//qrkL7WB ud33cfhhHRHOsT4nNDKFqzDHZoawfcgOichs8itTaaCGDqFJLCuIgCAx3OyWf+AT mbuRCB88NzYMsoxqLVIAZ/dZ9dkEi50+ldzDaLZj8cx/Dl1DIvJM7uVicDVbayCY kRjIZuKMXhLt7w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:33 2025 by rpki-client