This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json) Hash identifier: qp4cUtbBxLfaI6ZnntQMpi9tbZtn8qrNLkackzNI4Vc= Subject key identifier: 42:C9:F0:8E:DA:7E:91:82:26:DA:01:B9:E3:49:85:2F:5C:10:8D:B2 Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Certificate serial: 019B3BD91DB50542FA8DEE011EE2B405A315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft Manifest number: 0919 Signing time: Sat 20 Dec 2025 13:00:43 +0000 Manifest this update: Sat 20 Dec 2025 13:00:43 +0000 Manifest next update: Sun 21 Dec 2025 13:00:43 +0000 Files and hashes: 1: 0_BivZleQqQTDIIA1zuJgrTZcsU.roa (hash: 1e4TcEyXBttiFq9j+bwnnfrMc5xlrfiEhLRAJpiXu2M=) 2: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: 6Z9PJiE5+ZR0oZRMZKpdRi9Rg5jUUQpRaPOw7Bzed04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:1d:b5:05:42:fa:8d:ee:01:1e:e2:b4:05:a3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Validity Not Before: Dec 20 13:00:43 2025 GMT Not After : Dec 21 13:00:43 2025 GMT Subject: CN=42c9f08eda7e918226da01b9e349852f5c108db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:b8:a8:22:43:f8:ff:f4:72:24:d7:b7:30: 02:77:ca:78:cf:6a:ca:0e:8b:20:5b:94:18:0d:83: 41:5e:c2:0f:0b:76:a3:56:20:f3:ef:12:04:87:f7: 3f:5c:74:b3:f0:48:7a:72:28:a2:9f:4f:78:a8:e4: 9a:98:28:59:b0:3e:e6:30:65:f2:07:81:2f:5b:13: 6e:85:0f:1a:d2:97:6d:23:b2:94:17:32:05:89:65: bc:8c:7f:d3:15:3a:b7:e7:5c:40:66:6b:7e:59:2f: eb:02:6e:d6:ed:d7:48:17:3f:9d:9b:48:1b:17:09: fd:99:3e:0a:d5:04:f6:a2:7f:e6:84:ba:74:f8:2b: 61:50:e6:e9:4f:e4:17:18:b8:5f:84:4b:b0:a5:2f: df:6e:2f:65:e1:53:e8:2e:d5:13:e3:1f:73:7d:7f: a2:8c:2a:29:b5:87:c9:af:54:14:13:8a:7b:09:57: 03:1a:5d:c7:f0:f7:15:d4:22:36:c3:8d:18:d4:13: a7:58:19:7e:45:f4:bc:6b:58:94:b0:d8:7f:7d:bd: 19:3e:f8:7d:8a:3b:b5:2b:24:c7:3b:79:c5:ac:a2: c4:c3:41:1c:3c:a8:bf:f4:ce:5c:31:be:22:ef:d8: 4e:d6:8f:3e:96:10:ea:d6:37:97:1c:2a:10:9d:81: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:F0:8E:DA:7E:91:82:26:DA:01:B9:E3:49:85:2F:5C:10:8D:B2 X509v3 Authority Key Identifier: keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:08:62:29:bf:06:01:d2:13:20:7b:85:e2:bb:6b:24:c9:93: 5d:60:09:98:6e:43:71:92:a3:ef:bc:c8:3c:1a:6c:bd:e2:0e: 4a:a7:17:29:5f:a4:d5:88:16:d2:06:2a:c5:7c:c8:8d:52:fc: 85:52:c0:ac:f7:76:60:b2:51:6b:f2:fa:6d:d1:2b:44:da:fa: d9:c6:f7:ad:2e:5c:eb:45:bc:67:54:66:64:2b:ff:d9:15:43: f5:8b:a4:bb:fb:7a:77:97:ab:31:06:9a:fe:b5:f3:43:7c:7b: 71:1b:ea:fd:27:e8:99:78:c0:10:a7:d4:4d:0d:7b:7e:39:84: c2:bc:cf:54:a7:8c:df:e8:17:ca:12:7c:e3:47:6d:a7:d2:e0: 27:7e:68:20:64:a5:8e:b4:27:b3:4b:26:e3:91:cb:e6:d2:1c: 63:bb:10:52:b9:aa:64:4f:3d:84:76:0b:d8:2e:c7:2c:65:76: 1d:88:b9:4f:95:5f:9f:92:cf:ec:8c:8e:51:82:93:d2:53:63: d5:e7:a0:a8:67:15:34:97:93:d2:8e:a1:66:16:2b:1a:3c:70: 62:31:37:01:8d:d0:30:fd:53:5f:24:90:20:cb:d4:66:d2:7c: 18:26:63:8c:74:79:3b:34:e9:d7:40:95:d6:e8:6a:64:f5:a7: 52:a9:ea:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72R21BUL6je4BHuK0BaMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm ODI0YjMwHhcNMjUxMjIwMTMwMDQzWhcNMjUxMjIxMTMwMDQzWjAzMTEwLwYDVQQD Eyg0MmM5ZjA4ZWRhN2U5MTgyMjZkYTAxYjllMzQ5ODUyZjVjMTA4ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7C4qCJD+P/0ciTXtzACd8p4z2rK DosgW5QYDYNBXsIPC3ajViDz7xIEh/c/XHSz8Eh6ciiin094qOSamChZsD7mMGXy B4EvWxNuhQ8a0pdtI7KUFzIFiWW8jH/TFTq351xAZmt+WS/rAm7W7ddIFz+dm0gb Fwn9mT4K1QT2on/mhLp0+CthUObpT+QXGLhfhEuwpS/fbi9l4VPoLtUT4x9zfX+i jCoptYfJr1QUE4p7CVcDGl3H8PcV1CI2w40Y1BOnWBl+RfS8a1iUsNh/fb0ZPvh9 iju1KyTHO3nFrKLEw0EcPKi/9M5cMb4i79hO1o8+lhDq1jeXHCoQnYEi3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELJ8I7afpGCJtoBueNJhS9cEI2yMB8GA1UdIwQY MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXghiKb8G AdITIHuF4rtrJMmTXWAJmG5DcZKj77zIPBpsveIOSqcXKV+k1YgW0gYqxXzIjVL8 hVLArPd2YLJRa/L6bdErRNr62cb3rS5c60W8Z1RmZCv/2RVD9Yuku/t6d5erMQaa /rXzQ3x7cRvq/SfomXjAEKfUTQ17fjmEwrzPVKeM3+gXyhJ840dtp9LgJ35oIGSl jrQns0sm45HL5tIcY7sQUrmqZE89hHYL2C7HLGV2HYi5T5Vfn5LP7IyOUYKT0lNj 1eegqGcVNJeT0o6hZhYrGjxwYjE3AY3QMP1TXySQIMvUZtJ8GCZjjHR5OzTp10CV 1uhqZPWnUqnqSg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:52:16 2025 by rpki-client