This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: HiCecvXUhDOcN6A6gkrNyANBlUDglDSfZRZuMmzXRLk= Subject key identifier: 0A:DF:59:6E:A0:37:FF:4B:69:50:BA:73:AB:59:B9:9A:4F:41:CF:17 Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019AF65368313A4046E98F098B0D9B2FC226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0E27 Signing time: Sun 07 Dec 2025 01:00:52 +0000 Manifest this update: Sun 07 Dec 2025 01:00:52 +0000 Manifest next update: Mon 08 Dec 2025 01:00:52 +0000 Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: JoTUSwMH5IlQYC4u3UI1u3RNxGz0rJkRNjZ/n122GVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:68:31:3a:40:46:e9:8f:09:8b:0d:9b:2f:c2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Dec 7 01:00:52 2025 GMT Not After : Dec 8 01:00:52 2025 GMT Subject: CN=0adf596ea037ff4b6950ba73ab59b99a4f41cf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:d6:61:d1:06:d5:0a:11:b3:57:8c:19:45: 5e:b5:8b:4e:ba:39:46:a9:45:96:76:df:68:9b:38: 28:76:24:0a:88:30:10:11:86:25:b3:8d:c5:48:1b: 67:93:b6:ec:78:5a:a9:dd:80:18:45:11:30:bf:a9: b5:58:72:56:83:bb:d4:fe:cd:1e:84:85:82:d5:6f: e4:a7:00:7e:39:34:4a:6e:fa:9a:c0:46:f0:8c:84: b5:3a:e5:b9:75:c0:f9:f6:0a:23:35:5d:8e:f2:d6: 47:20:aa:c1:5c:69:35:06:56:7c:dd:8e:d2:d5:10: 5c:7c:e8:7c:57:9a:c7:82:b2:b6:b2:a7:e7:3a:57: 91:e8:25:60:73:26:40:5d:76:ab:bc:fe:00:bb:ec: 51:3b:80:52:15:c6:00:00:0b:b3:c7:8b:ca:40:ec: b9:a8:a7:7d:36:d7:34:7b:dd:f0:21:99:31:88:d7: 52:a6:9a:64:b3:17:bc:44:f3:9e:98:df:82:4e:fa: 9d:02:77:a0:12:16:4b:b8:8a:86:0c:6a:b3:b7:9c: ea:b1:b6:cc:ae:79:d2:b3:8b:21:17:36:78:a9:6f: 5c:80:18:c1:44:e9:cb:2a:fe:f2:2c:9c:a1:6a:49: 18:09:59:04:0e:c4:dd:83:26:80:b0:4d:eb:05:bf: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DF:59:6E:A0:37:FF:4B:69:50:BA:73:AB:59:B9:9A:4F:41:CF:17 X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:dc:c3:70:2a:57:4b:85:8f:ef:72:4e:d1:ab:7b:1c:8e: c2:fd:52:f3:b5:aa:7f:4e:59:ed:c3:b0:d0:62:20:09:23:11: 89:1d:7c:b8:79:a2:33:c4:18:51:57:9c:03:13:b9:70:53:bd: 00:3d:3f:dc:50:cb:2a:26:ae:d0:d1:c4:aa:52:dc:e4:e7:85: ca:ab:e7:e5:af:6a:64:86:a7:1e:21:b1:68:c5:0d:97:c6:10: 02:f6:02:5d:02:6e:d1:46:a9:f8:98:fe:ac:38:0f:a8:b3:e2: a2:04:ef:a0:b3:31:2f:6e:dc:90:03:d5:ed:f5:1e:fb:48:f9: ee:02:d9:7e:4b:df:61:3d:78:11:61:21:9a:53:11:0b:bd:71: ec:f8:7c:9a:a8:f8:ad:b4:e5:b1:c3:0b:aa:df:1c:84:8a:f6: f1:61:05:7f:07:cd:27:2c:b6:cc:66:21:9f:2f:ee:a5:b0:56: 89:8d:bd:77:e7:d3:ed:f0:be:46:f0:66:e1:52:b2:d4:c1:a3: 09:cc:53:b2:12:6c:c2:2d:9b:d2:8b:ba:a3:fe:53:8f:d4:ab: b0:c6:56:28:b3:07:13:67:2a:10:5d:c8:61:6c:37:ec:76:d0: a8:7b:b6:a3:53:0f:3c:05:b2:44:24:92:63:d3:72:3a:c9:3a: 0b:40:49:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U2gxOkBG6Y8Jiw2bL8ImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjUxMjA3MDEwMDUyWhcNMjUxMjA4MDEwMDUyWjAzMTEwLwYDVQQD EygwYWRmNTk2ZWEwMzdmZjRiNjk1MGJhNzNhYjU5Yjk5YTRmNDFjZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVHWYdEG1QoRs1eMGUVetYtOujlG qUWWdt9omzgodiQKiDAQEYYls43FSBtnk7bseFqp3YAYRREwv6m1WHJWg7vU/s0e hIWC1W/kpwB+OTRKbvqawEbwjIS1OuW5dcD59gojNV2O8tZHIKrBXGk1BlZ83Y7S 1RBcfOh8V5rHgrK2sqfnOleR6CVgcyZAXXarvP4Au+xRO4BSFcYAAAuzx4vKQOy5 qKd9Ntc0e93wIZkxiNdSpppksxe8RPOemN+CTvqdAnegEhZLuIqGDGqzt5zqsbbM rnnSs4shFzZ4qW9cgBjBROnLKv7yLJyhakkYCVkEDsTdgyaAsE3rBb/PrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArfWW6gN/9LaVC6c6tZuZpPQc8XMB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqfcw3Aq V0uFj+9yTtGrexyOwv1S87Wqf05Z7cOw0GIgCSMRiR18uHmiM8QYUVecAxO5cFO9 AD0/3FDLKiau0NHEqlLc5OeFyqvn5a9qZIanHiGxaMUNl8YQAvYCXQJu0Uap+Jj+ rDgPqLPiogTvoLMxL27ckAPV7fUe+0j57gLZfkvfYT14EWEhmlMRC71x7Ph8mqj4 rbTlscMLqt8chIr28WEFfwfNJyy2zGYhny/upbBWiY29d+fT7fC+RvBm4VKy1MGj CcxTshJswi2b0ou6o/5Tj9SrsMZWKLMHE2cqEF3IYWw37HbQqHu2o1MPPAWyRCSS Y9NyOsk6C0BJmw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:13 2025 by rpki-client