This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft File: ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json) Hash identifier: dAfLMslMjyM0URM7ZeBQqyDflm2IJpX6R2/PfRPgrds= Subject key identifier: 79:2F:8C:55:69:CC:68:39:69:0E:B5:96:A5:61:A0:A3:3E:EE:00:0C Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Certificate serial: 019B2B1C3EDABAA75D25A30D772FEFBD64B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft Manifest number: 035D Signing time: Wed 17 Dec 2025 07:00:29 +0000 Manifest this update: Wed 17 Dec 2025 07:00:29 +0000 Manifest next update: Thu 18 Dec 2025 07:00:29 +0000 Files and hashes: 1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: yw6h9qV31ZHnZuA+LrdvTjo0vNRKCs/xUIQuEkKBVtE=) 2: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (hash: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:3e:da:ba:a7:5d:25:a3:0d:77:2f:ef:bd:64:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Validity Not Before: Dec 17 07:00:29 2025 GMT Not After : Dec 18 07:00:29 2025 GMT Subject: CN=792f8c5569cc6839690eb596a561a0a33eee000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:01:69:0b:6f:e7:08:7f:e0:40:ab:f1:2e: b8:7a:87:59:cf:8d:31:20:27:aa:db:8d:24:4c:3f: e4:e5:0e:5b:43:9d:14:47:22:15:0b:5a:55:11:ec: 04:c3:f0:24:6e:ee:7e:ef:44:dd:41:cc:cb:aa:c3: 23:71:96:de:68:8e:82:63:77:59:4a:3a:0e:b0:4e: f2:fa:25:cb:08:fc:9c:e0:a1:15:44:45:9c:10:d2: 57:f0:2c:5c:bc:83:ce:fd:ca:a1:c6:71:f9:ac:8c: 55:00:87:19:c0:be:b5:2b:63:c9:2b:14:2e:ab:72: 8b:fb:27:7b:56:c4:cf:e3:29:e6:1d:61:cf:1b:49: e1:da:e0:d4:16:7b:9f:e1:82:4c:ce:b1:74:4d:d2: 4c:d0:70:46:22:9d:c8:f9:49:4f:83:02:56:95:4c: 95:9c:72:1f:97:c7:f8:12:49:fc:6a:b7:82:10:89: 06:d0:3f:13:7a:b6:fa:f6:ca:c5:43:7e:00:88:a5: 04:e1:ec:6a:3d:a5:42:89:b0:a3:37:7e:f8:0f:65: ba:45:6d:b9:6f:e6:69:11:c0:66:94:9d:2e:40:e5: b4:49:88:aa:67:d2:04:98:49:0c:21:0b:7e:f8:e8: 03:b0:5e:58:d4:98:93:5c:f3:8e:85:9d:3b:8d:99: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:8C:55:69:CC:68:39:69:0E:B5:96:A5:61:A0:A3:3E:EE:00:0C X509v3 Authority Key Identifier: keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6b:b7:84:05:87:94:0e:65:2f:ee:90:27:f0:ef:98:7b:e9: f0:63:47:cc:f9:74:2a:70:40:3d:45:ff:a4:f6:2a:93:ab:bd: cb:d9:98:49:f8:11:1c:7d:ff:e8:3d:4c:73:1e:d1:0e:4c:5b: ad:18:fd:49:57:0f:97:d1:f9:b9:71:52:a6:a3:33:0d:f6:e9: 8e:cf:5b:fd:39:97:4e:96:2b:73:92:49:67:eb:f2:6f:47:e9: 92:9c:3e:7b:9c:cb:17:91:ad:44:2e:f2:ec:e5:c5:80:99:03: 7d:5f:04:e3:fd:31:18:06:c4:d4:7b:41:84:35:1c:a8:4d:1c: ab:1b:98:93:a7:9b:05:3b:f3:d7:bb:c9:6b:80:fb:ba:c1:33: 43:20:76:a4:2b:2f:e1:f1:c2:a7:f8:f5:34:5e:54:a1:2a:74: e7:c8:08:b2:3f:81:48:97:ae:c5:db:de:da:f0:f0:0b:6e:3b: 57:90:76:2d:64:d1:94:de:c1:a9:c4:55:6e:84:73:ef:2e:15: 9f:bd:94:3c:cf:74:d2:8f:df:4a:be:08:18:e0:54:c6:35:a2: 3f:d3:5c:18:e8:b3:dd:ac:be:1a:eb:04:41:27:11:a8:40:41: 5b:de:b9:fc:80:d5:41:e0:2c:aa:1b:c8:18:fe:0c:4d:ef:c6: 45:d1:71:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHD7auqddJaMNdy/vvWSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjZmZWUwZTdhMTRjN2UxZDM4NjA5ZDliYzNjMmVmY2Nh ZjMzYWMwHhcNMjUxMjE3MDcwMDI5WhcNMjUxMjE4MDcwMDI5WjAzMTEwLwYDVQQD Eyg3OTJmOGM1NTY5Y2M2ODM5NjkwZWI1OTZhNTYxYTBhMzNlZWUwMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AwBaQtv5wh/4ECr8S64eodZz40x ICeq240kTD/k5Q5bQ50URyIVC1pVEewEw/Akbu5+70TdQczLqsMjcZbeaI6CY3dZ SjoOsE7y+iXLCPyc4KEVREWcENJX8CxcvIPO/cqhxnH5rIxVAIcZwL61K2PJKxQu q3KL+yd7VsTP4ynmHWHPG0nh2uDUFnuf4YJMzrF0TdJM0HBGIp3I+UlPgwJWlUyV nHIfl8f4Ekn8areCEIkG0D8Terb69srFQ34AiKUE4exqPaVCibCjN374D2W6RW25 b+ZpEcBmlJ0uQOW0SYiqZ9IEmEkMIQt++OgDsF5Y1JiTXPOOhZ07jZnYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkvjFVpzGg5aQ61lqVhoKM+7gAMMB8GA1UdIwQY MBaAFFC2/uDnoUx+HThgnZvDwu/MrzOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2Qt ZmQ2NjRmMDMyOTgwLzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2QtZmQ2NjRmMDMyOTgw LzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGu3hAWH lA5lL+6QJ/DvmHvp8GNHzPl0KnBAPUX/pPYqk6u9y9mYSfgRHH3/6D1Mcx7RDkxb rRj9SVcPl9H5uXFSpqMzDfbpjs9b/TmXTpYrc5JJZ+vyb0fpkpw+e5zLF5GtRC7y 7OXFgJkDfV8E4/0xGAbE1HtBhDUcqE0cqxuYk6ebBTvz17vJa4D7usEzQyB2pCsv 4fHCp/j1NF5UoSp058gIsj+BSJeuxdve2vDwC247V5B2LWTRlN7BqcRVboRz7y4V n72UPM900o/fSr4IGOBUxjWiP9NcGOiz3ay+GusEQScRqEBBW965/IDVQeAsqhvI GP4MTe/GRdFx7A== -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:35 2025 by rpki-client