This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json) Hash identifier: ck3iwp6hcQtouIL/wozEV8tc/W3ITdeO+HO42wwHG8w= Subject key identifier: 98:DE:50:AD:4C:33:2F:7D:76:12:72:EA:6E:84:A8:C5:3B:7D:AD:D6 Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Certificate serial: 019AF19B6F749FCB59B36376244E7018B335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft Manifest number: 1574 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: JKTlTMWLBQZzBscziFBkihsPiqh3KguOf3rhTMkaidA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6f:74:9f:cb:59:b3:63:76:24:4e:70:18:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=98de50ad4c332f7d761272ea6e84a8c53b7dadd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:24:9b:84:09:b4:24:75:30:e0:c4:3e:1a: 9e:45:ca:81:cb:53:0f:6d:7c:73:ca:1d:89:a7:47: 3b:90:7f:0f:09:32:05:40:88:5e:00:0f:5a:c9:45: 3c:0f:4e:54:42:e5:16:b8:41:78:fe:72:b1:88:80: aa:db:50:58:ce:1f:bd:10:85:a5:d8:53:2f:96:11: 0b:8e:b2:c2:67:4a:f3:56:7f:55:3e:cd:89:05:a9: 53:e9:50:fa:fd:94:16:5d:a0:75:15:9c:5c:4c:c3: c3:59:15:94:79:28:2e:f6:02:08:5e:96:84:3c:50: 8d:20:f0:93:ce:82:9e:45:c1:44:65:bf:55:87:17: f3:58:59:4e:78:6f:6c:d2:bf:fd:92:a3:32:ce:80: 67:d1:bd:33:12:96:b2:1a:51:2a:37:bd:fb:a7:2f: 98:9f:4e:de:68:66:36:ef:9b:92:0e:54:69:be:de: 13:17:f7:d6:56:e1:c6:b0:0a:c8:2d:d4:ec:92:06: 9e:2d:46:fe:1b:be:dc:d5:ee:b3:96:81:f2:29:02: e6:f2:7b:a7:5c:bf:d6:13:32:9f:02:02:88:f6:26: 87:32:34:11:43:02:11:7c:ab:1b:85:e3:0e:95:3f: 75:07:8e:3a:b0:73:f6:17:64:2c:45:d1:b2:b8:f3: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:50:AD:4C:33:2F:7D:76:12:72:EA:6E:84:A8:C5:3B:7D:AD:D6 X509v3 Authority Key Identifier: keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:45:56:a5:e5:4f:6b:a4:b4:a7:79:ec:7d:e8:5f:fb:69:01: 3b:60:69:3f:f9:cb:ff:41:c8:85:a2:56:38:da:5e:ca:f6:e8: 98:4e:7a:55:8c:83:07:6e:13:b0:b9:ef:c9:28:9f:21:ab:0a: 30:62:88:cb:04:14:7f:1a:2a:a4:ba:3b:22:44:cb:ae:1c:0e: 2d:e9:43:dc:45:3e:d6:8c:48:55:7c:7a:b8:47:a9:1a:f1:5e: 7a:ee:19:e1:4b:5b:a9:7a:18:9c:1c:c2:f2:f5:f8:6b:07:db: d2:85:32:58:e2:ac:cc:7b:73:94:2b:5f:36:1d:1b:23:fb:ab: 0e:ef:5a:d2:5d:b0:32:c1:3d:63:64:9d:ac:04:f8:64:b4:27: 4e:bb:02:8e:f0:09:ba:e8:61:b1:22:88:46:f7:10:5d:1b:9b: 1c:45:9d:32:e3:9b:13:1b:7e:55:c2:e3:e2:24:13:31:f1:04: 48:3b:75:c2:38:be:a0:36:a9:ec:a6:fc:29:f1:a2:52:ab:a1: 0e:e8:d0:2b:74:31:bc:9b:d0:34:f4:12:19:d8:f8:77:89:c6: e5:5e:76:a4:09:39:1f:05:21:f0:19:42:70:4f:37:60:82:0f: 1d:dc:44:53:84:62:b7:4e:02:78:39:e2:13:63:5d:23:0d:6f: 89:18:36:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm290n8tZs2N2JE5wGLM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTUwYjJhNTFjOGY1YWRiOTM3YjIyYTkwYzcyMGY2YjA0 ZjI5NzMwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD Eyg5OGRlNTBhZDRjMzMyZjdkNzYxMjcyZWE2ZTg0YThjNTNiN2RhZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQQkm4QJtCR1MODEPhqeRcqBy1MP bXxzyh2Jp0c7kH8PCTIFQIheAA9ayUU8D05UQuUWuEF4/nKxiICq21BYzh+9EIWl 2FMvlhELjrLCZ0rzVn9VPs2JBalT6VD6/ZQWXaB1FZxcTMPDWRWUeSgu9gIIXpaE PFCNIPCTzoKeRcFEZb9VhxfzWFlOeG9s0r/9kqMyzoBn0b0zEpayGlEqN737py+Y n07eaGY275uSDlRpvt4TF/fWVuHGsArILdTskgaeLUb+G77c1e6zloHyKQLm8nun XL/WEzKfAgKI9iaHMjQRQwIRfKsbheMOlT91B446sHP2F2QsRdGyuPPV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjeUK1MMy99dhJy6m6EqMU7fa3WMB8GA1UdIwQY MBaAFIPlCypRyPWtuTeyKpDHIPawTylzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2Et YjgzOWQ5MjAyMTA2LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2EtYjgzOWQ5MjAyMTA2 LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEVWpeVP a6S0p3nsfehf+2kBO2BpP/nL/0HIhaJWONpeyvbomE56VYyDB24TsLnvySifIasK MGKIywQUfxoqpLo7IkTLrhwOLelD3EU+1oxIVXx6uEepGvFeeu4Z4UtbqXoYnBzC 8vX4awfb0oUyWOKszHtzlCtfNh0bI/urDu9a0l2wMsE9Y2SdrAT4ZLQnTrsCjvAJ uuhhsSKIRvcQXRubHEWdMuObExt+VcLj4iQTMfEESDt1wji+oDap7Kb8KfGiUquh DujQK3QxvJvQNPQSGdj4d4nG5V52pAk5HwUh8BlCcE83YIIPHdxEU4Rit04CeDni E2NdIw1viRg2LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:13 2025 by rpki-client