This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: fHaNNFr2XIMOk3cZfYbIKTyrWngoh85dmlMmfyH0C6Y= Subject key identifier: A8:33:A8:82:AD:BC:91:E9:46:07:E2:C7:AB:EE:84:2E:5D:A0:EB:7A Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019AF4650430EB0BE8A2C858578A104FF2F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0E26 Signing time: Sat 06 Dec 2025 16:00:51 +0000 Manifest this update: Sat 06 Dec 2025 16:00:51 +0000 Manifest next update: Sun 07 Dec 2025 16:00:51 +0000 Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: SQMUba29vfUGjgd9iNzidQArfAyZrjU0eVtRPSnYU6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:04:30:eb:0b:e8:a2:c8:58:57:8a:10:4f:f2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Dec 6 16:00:51 2025 GMT Not After : Dec 7 16:00:51 2025 GMT Subject: CN=a833a882adbc91e94607e2c7abee842e5da0eb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:71:93:a0:d3:c1:97:42:5a:74:f0:9a:0f: 12:94:37:90:b1:dd:ab:7a:f8:24:f1:4e:e5:fd:fd: 52:5a:3d:2a:9c:3c:5e:6e:ce:bc:dd:7f:95:ec:f2: f4:a6:43:c6:82:85:12:e0:14:7e:a7:4d:3a:7d:1f: 05:e6:d4:ba:81:53:74:7d:53:47:68:2c:61:42:f5: 83:11:3f:34:cf:62:58:4d:7e:dc:fa:0c:7a:77:d6: 36:ff:07:58:05:d1:eb:ca:64:b1:a2:04:a7:25:04: a0:10:f9:d3:c2:64:73:cd:fb:a7:a5:90:ea:af:5b: db:64:22:6a:2a:80:b4:2a:6f:88:94:04:8c:bb:a3: b6:ac:2d:d2:dc:8e:0d:e8:bf:e6:91:2f:f7:61:99: 12:9e:0c:a7:d7:3b:9c:37:d1:db:fe:40:b6:f0:d1: bb:48:d2:d5:0c:7a:41:ca:64:93:3f:fb:6b:55:05: 24:9d:9f:c4:cc:7a:f1:d3:7f:b9:7c:8e:0d:e1:04: f8:90:0c:57:c8:5f:19:e1:7e:0a:57:db:be:36:13: f7:66:6f:3c:82:3a:05:bb:78:8e:fb:58:6a:5d:21: b9:a1:5a:7c:b2:eb:5a:4d:df:c7:2e:f7:a8:19:d5: a7:b1:59:4d:9e:52:92:d0:f6:98:04:8b:ef:3b:e7: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:A8:82:AD:BC:91:E9:46:07:E2:C7:AB:EE:84:2E:5D:A0:EB:7A X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3c:d5:3a:43:5d:b2:72:12:a9:54:0b:34:4d:64:b1:7f:db: dd:45:a1:7b:db:bb:cc:98:05:5b:ff:7c:be:a5:3a:c5:14:bf: 36:98:63:6f:f3:d0:e7:99:a4:47:fb:1b:9c:e9:72:03:03:1d: 6a:77:d1:c3:d7:c5:2c:ae:87:a0:3f:7d:fc:9d:4a:83:33:e5: db:1a:9e:74:b6:9c:bf:50:6e:38:a5:f2:9e:92:5b:95:9a:d9: b2:ee:82:14:6c:7b:b0:b8:b1:41:16:95:b3:48:e1:01:06:c3: a0:4e:55:fc:b1:39:b4:7b:8e:a0:38:6b:76:51:60:ab:94:46: 16:2f:51:94:fd:37:b4:11:89:2c:5c:94:f5:bc:01:09:69:16: 57:2e:eb:69:10:07:c6:dd:c3:30:f4:e5:4d:ec:d5:da:89:4c: e3:16:3d:0e:e6:8d:a9:59:10:a5:e4:ca:a6:37:a4:41:e3:73: 0a:5a:7d:90:27:b0:c0:35:64:46:fe:19:5b:c9:a5:c6:8e:e7: e0:ba:15:fe:0c:41:bd:17:7d:f8:e1:b3:64:5c:1b:0e:e4:cc: 8f:06:fa:f1:43:24:8c:d5:ea:84:9f:d5:78:0e:ba:0c:41:c3: 13:86:8f:4d:e9:42:47:e6:b7:a1:3e:bf:b5:f6:68:e1:01:84: 18:22:0d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQQw6wvooshYV4oQT/L2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjUxMjA2MTYwMDUxWhcNMjUxMjA3MTYwMDUxWjAzMTEwLwYDVQQD EyhhODMzYTg4MmFkYmM5MWU5NDYwN2UyYzdhYmVlODQyZTVkYTBlYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X5xk6DTwZdCWnTwmg8SlDeQsd2r evgk8U7l/f1SWj0qnDxebs683X+V7PL0pkPGgoUS4BR+p006fR8F5tS6gVN0fVNH aCxhQvWDET80z2JYTX7c+gx6d9Y2/wdYBdHrymSxogSnJQSgEPnTwmRzzfunpZDq r1vbZCJqKoC0Km+IlASMu6O2rC3S3I4N6L/mkS/3YZkSngyn1zucN9Hb/kC28NG7 SNLVDHpBymSTP/trVQUknZ/EzHrx03+5fI4N4QT4kAxXyF8Z4X4KV9u+NhP3Zm88 gjoFu3iO+1hqXSG5oVp8sutaTd/HLveoGdWnsVlNnlKS0PaYBIvvO+cbYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgzqIKtvJHpRgfix6vuhC5doOt6MB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjzVOkNd snISqVQLNE1ksX/b3UWhe9u7zJgFW/98vqU6xRS/Nphjb/PQ55mkR/sbnOlyAwMd anfRw9fFLK6HoD99/J1KgzPl2xqedLacv1BuOKXynpJblZrZsu6CFGx7sLixQRaV s0jhAQbDoE5V/LE5tHuOoDhrdlFgq5RGFi9RlP03tBGJLFyU9bwBCWkWVy7raRAH xt3DMPTlTezV2olM4xY9DuaNqVkQpeTKpjekQeNzClp9kCewwDVkRv4ZW8mlxo7n 4LoV/gxBvRd9+OGzZFwbDuTMjwb68UMkjNXqhJ/VeA66DEHDE4aPTelCR+a3oT6/ tfZo4QGEGCINZg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:36 2025 by rpki-client