This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json) Hash identifier: PLITpbrIIy/nx98nsO8z8O4lW6OflrKd2vqyVrHnarw= Subject key identifier: 09:BC:7C:A1:CC:32:16:28:F8:06:14:11:DD:F3:8D:35:F0:5D:82:56 Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019AF0F5DCEF48FAFAC88C2D672DE1E70B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft Manifest number: 0B28 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: ASEUU1b9MC+8bkQd3brvna+aDbo3dcQA398E1GofPsM=) 2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=) 3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dc:ef:48:fa:fa:c8:8c:2d:67:2d:e1:e7:0b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=09bc7ca1cc321628f8061411ddf38d35f05d8256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:6d:05:dd:1a:98:ca:b7:4a:37:a4:bf:66: ea:74:cc:f8:3b:81:bd:47:44:c4:10:ed:46:91:e9: 76:1e:e2:3c:6f:de:6e:61:e3:41:6d:be:a5:91:29: 63:45:1d:ff:a9:93:c9:5f:60:45:a8:47:26:a4:16: b8:4a:ed:24:8d:24:da:a8:0f:7a:dd:f3:96:45:b3: 22:5b:64:fc:5d:18:3b:e9:0b:69:20:5f:ed:a9:2a: b8:c5:a8:bf:f3:98:ee:ef:75:ec:6a:06:d7:5b:18: cd:fa:53:f5:8a:9d:e1:11:9d:7d:94:b3:c1:cb:5c: 34:6d:cb:36:c3:67:4c:d2:29:9b:69:2c:16:ca:78: 07:bc:82:81:89:9f:d7:e2:8d:de:40:c4:c8:ea:ee: b4:84:11:63:2c:24:3f:b3:43:79:98:82:2d:fc:e0: ac:ae:9f:e7:3e:f7:30:e0:a9:23:1f:3b:b8:98:1b: fe:73:2f:0b:2c:19:70:77:3e:c6:2e:5f:2a:07:48: 3c:ef:46:a2:20:88:60:c9:31:33:bf:33:0b:d7:9b: 4b:20:17:e3:ea:25:2f:55:4c:a7:d3:5c:ad:92:03: 52:41:17:aa:c6:05:bb:04:3b:44:eb:2d:7c:b4:83: a7:4b:9f:c1:20:40:0a:14:bf:6b:73:01:ae:2b:86: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BC:7C:A1:CC:32:16:28:F8:06:14:11:DD:F3:8D:35:F0:5D:82:56 X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:67:5b:df:a3:77:7d:bf:b4:d3:e8:cf:44:0f:32:bb:cc:30: 85:6e:c4:72:a7:5d:11:50:39:09:b3:44:46:3e:8d:d3:12:ec: 1b:73:67:50:24:14:ec:95:2d:a0:8d:ef:ab:ef:f3:2f:be:10: a0:b4:30:50:f7:3c:72:0f:cd:32:5c:e8:6f:f9:58:2b:7e:3c: 38:c2:bb:22:96:33:f8:f9:be:23:37:84:3c:cf:f6:15:c9:91: 53:b6:56:c0:b0:37:54:75:60:dd:d5:50:f7:97:e1:ab:5a:78: 9f:95:a8:84:f9:53:83:52:35:d9:9f:c2:aa:86:27:fc:2a:d0: 4f:39:0f:b9:20:dc:ba:21:bc:db:a9:1b:88:39:fc:66:f1:e6: ad:84:ce:52:13:fa:00:7c:97:6e:45:0e:6b:be:19:c6:28:0f: 50:a4:bc:3f:fb:6d:4b:3b:06:ab:da:1d:d5:82:25:fd:02:7d: 60:ca:7f:1c:a4:3b:b0:5c:17:cb:f7:3e:8d:f1:c0:9d:90:89: a2:61:22:d9:04:40:ed:23:c1:c6:b5:36:89:40:fc:f5:35:7f: 81:0d:ba:5a:f2:de:f4:31:4a:af:cf:81:8f:48:1d:9b:f4:b1: 2a:bc:d4:4e:94:93:69:3c:cb:ee:5b:01:c8:97:2f:ac:bb:a0: 2b:9c:7b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dzvSPr6yIwtZy3h5ws9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EygwOWJjN2NhMWNjMzIxNjI4ZjgwNjE0MTFkZGYzOGQzNWYwNWQ4MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmttBd0amMq3Sjekv2bqdMz4O4G9 R0TEEO1Gkel2HuI8b95uYeNBbb6lkSljRR3/qZPJX2BFqEcmpBa4Su0kjSTaqA96 3fOWRbMiW2T8XRg76QtpIF/tqSq4xai/85ju73XsagbXWxjN+lP1ip3hEZ19lLPB y1w0bcs2w2dM0imbaSwWyngHvIKBiZ/X4o3eQMTI6u60hBFjLCQ/s0N5mIIt/OCs rp/nPvcw4KkjHzu4mBv+cy8LLBlwdz7GLl8qB0g870aiIIhgyTEzvzML15tLIBfj 6iUvVUyn01ytkgNSQReqxgW7BDtE6y18tIOnS5/BIEAKFL9rcwGuK4YHvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm8fKHMMhYo+AYUEd3zjTXwXYJWMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGdb36N3 fb+00+jPRA8yu8wwhW7EcqddEVA5CbNERj6N0xLsG3NnUCQU7JUtoI3vq+/zL74Q oLQwUPc8cg/NMlzob/lYK348OMK7IpYz+Pm+IzeEPM/2FcmRU7ZWwLA3VHVg3dVQ 95fhq1p4n5WohPlTg1I12Z/CqoYn/CrQTzkPuSDcuiG826kbiDn8ZvHmrYTOUhP6 AHyXbkUOa74ZxigPUKS8P/ttSzsGq9od1YIl/QJ9YMp/HKQ7sFwXy/c+jfHAnZCJ omEi2QRA7SPBxrU2iUD89TV/gQ26WvLe9DFKr8+Bj0gdm/SxKrzUTpSTaTzL7lsB yJcvrLugK5x7Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:25 2025 by rpki-client