This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json) Hash identifier: ecgpS8+55mFPbani75Ij9P4mBGLJPH0dFQ40+XOiOi0= Subject key identifier: 45:EC:E3:73:58:DD:2D:F8:A7:3C:A0:DC:DE:89:47:AB:6C:A5:B5:EC Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8 Certificate serial: 019AF12E26791E74DBEEF653EC47CEA41D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft Manifest number: 133C Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: bAAZZtX/2BrbNCsPcDmORDvDMmGsj5CAo8DxNRNtg78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:26:79:1e:74:db:ee:f6:53:ec:47:ce:a4:1d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8 Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=45ece37358dd2df8a73ca0dcde8947ab6ca5b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:1d:dd:7d:9f:86:f1:56:4e:50:58:b9:d6: d5:c3:92:73:d4:b0:71:c4:15:87:16:b9:6e:28:7c: 27:93:64:4c:71:05:34:3e:47:a0:80:fc:7e:db:15: cc:58:04:59:c5:18:b4:86:ea:3e:b4:27:b5:18:12: 89:58:aa:8f:40:76:61:0d:2d:6b:c0:85:c4:80:ff: 0e:26:01:75:27:4e:28:a0:0f:77:5d:52:ba:b4:a9: e7:8b:a6:ec:4d:33:70:45:47:96:32:c9:c0:25:d1: 27:a0:fa:cc:15:a8:06:35:c1:a7:3f:4b:d3:7b:68: dd:e8:ce:93:7a:00:48:9b:56:cb:e4:ee:a8:ac:65: 82:d1:3b:74:31:ee:bf:36:c7:00:20:63:20:97:75: b7:53:5c:e8:41:92:1f:d7:0a:d1:70:58:e0:1b:07: ad:45:1d:81:5a:00:17:0b:26:f5:5d:e9:a7:2b:0f: ad:9b:cd:4c:68:de:a9:74:32:6e:25:0b:ee:a6:51: 52:78:c2:cb:6d:a5:5e:26:db:fd:b4:11:3c:91:a6: dd:da:a1:d8:a0:cf:0d:1d:25:87:96:a1:69:e4:6d: 37:4d:89:2a:94:44:1f:31:44:81:84:30:7a:08:bb: c0:39:36:b6:76:3c:4b:db:01:22:ec:9e:04:ae:c0: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EC:E3:73:58:DD:2D:F8:A7:3C:A0:DC:DE:89:47:AB:6C:A5:B5:EC X509v3 Authority Key Identifier: keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f3:a7:85:e5:61:1f:9b:ae:8a:9e:e9:69:ce:a1:2c:04:47: 53:45:2c:8a:43:8a:3d:72:cc:0a:76:ee:bf:4a:c4:79:d5:c0: bb:f1:b0:57:c5:55:36:73:d6:6c:3f:e5:ee:7f:38:00:16:ac: 79:fb:ac:60:b4:07:90:b7:5e:96:89:4a:0f:fa:30:14:b0:70: 08:3e:ba:3c:0e:2f:e1:37:c2:98:53:72:66:f9:5c:1b:d5:b7: 7f:dc:9b:a0:a4:3d:f3:fa:21:bf:5c:71:2b:d3:a4:8d:13:3e: 46:37:20:5e:38:ed:02:b5:c4:ab:dd:52:7a:b7:ce:cb:93:dd: 34:39:d0:d9:ab:b6:46:78:71:75:97:17:61:48:04:e0:00:f2: 7a:e4:8c:5d:39:e5:f7:05:ee:7e:59:4a:16:34:a9:18:4d:17: 0c:52:d4:b3:ba:15:7e:a4:85:98:9f:95:42:71:87:f8:33:4e: 63:4f:32:a7:6d:59:69:c4:b2:74:0d:53:5c:12:c0:99:4b:5a: e5:fe:98:fa:3b:bd:d6:14:a7:9b:a0:6f:c8:fc:f8:cc:56:b8: 7a:19:58:23:17:de:7b:41:d2:ec:0d:e6:f8:89:a8:f9:23:fc: 10:06:72:f9:95:ff:6d:0f:b5:81:21:79:ae:25:76:92:e3:37: 27:4e:64:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiZ5HnTb7vZT7EfOpB1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTgyNzU1NzI0MzQ4OTNiOWNiZDE0ZTRhZGU3MDg5Mjll NDY3ZjgwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg0NWVjZTM3MzU4ZGQyZGY4YTczY2EwZGNkZTg5NDdhYjZjYTViNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Ed3X2fhvFWTlBYudbVw5Jz1LBx xBWHFrluKHwnk2RMcQU0PkeggPx+2xXMWARZxRi0huo+tCe1GBKJWKqPQHZhDS1r wIXEgP8OJgF1J04ooA93XVK6tKnni6bsTTNwRUeWMsnAJdEnoPrMFagGNcGnP0vT e2jd6M6TegBIm1bL5O6orGWC0Tt0Me6/NscAIGMgl3W3U1zoQZIf1wrRcFjgGwet RR2BWgAXCyb1XemnKw+tm81MaN6pdDJuJQvuplFSeMLLbaVeJtv9tBE8kabd2qHY oM8NHSWHlqFp5G03TYkqlEQfMUSBhDB6CLvAOTa2djxL2wEi7J4ErsCPgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXs43NY3S34pzyg3N6JR6tspbXsMB8GA1UdIwQY MBaAFLpYJ1VyQ0iTucvRTkrecIkp5Gf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTIt MjYyNTU3Yzc0ZDRjLzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTItMjYyNTU3Yzc0ZDRj LzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafOnheVh H5uuip7pac6hLARHU0UsikOKPXLMCnbuv0rEedXAu/GwV8VVNnPWbD/l7n84ABas efusYLQHkLdelolKD/owFLBwCD66PA4v4TfCmFNyZvlcG9W3f9yboKQ98/ohv1xx K9OkjRM+RjcgXjjtArXEq91SerfOy5PdNDnQ2au2RnhxdZcXYUgE4ADyeuSMXTnl 9wXufllKFjSpGE0XDFLUs7oVfqSFmJ+VQnGH+DNOY08yp21ZacSydA1TXBLAmUta 5f6Y+ju91hSnm6BvyPz4zFa4ehlYIxfee0HS7A3m+Imo+SP8EAZy+ZX/bQ+1gSF5 riV2kuM3J05k+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:19 2025 by rpki-client