This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json) Hash identifier: wc36YSfDI7V57ekltnDTMHjqgS2my3drPzb6TkG+Oi8= Subject key identifier: A3:8F:6D:09:F6:D5:7F:12:85:0F:E0:E4:50:5C:0D:94:8A:76:DB:62 Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3 Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3 Certificate serial: 019AF352B653A633D04275260EA678F5E1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft Manifest number: 1453 Signing time: Sat 06 Dec 2025 11:01:15 +0000 Manifest this update: Sat 06 Dec 2025 11:01:15 +0000 Manifest next update: Sun 07 Dec 2025 11:01:15 +0000 Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: dFvhOASJrzZbuGBjjUydJnL7dymInjerybsqDg7HcUs=) 2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b6:53:a6:33:d0:42:75:26:0e:a6:78:f5:e1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3 Validity Not Before: Dec 6 11:01:15 2025 GMT Not After : Dec 7 11:01:15 2025 GMT Subject: CN=a38f6d09f6d57f12850fe0e4505c0d948a76db62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:80:46:6a:27:81:62:f7:71:1d:4f:3d:0f: 59:0c:03:1d:89:91:50:f4:8e:b7:93:01:68:76:0c: c5:ec:c3:0c:8f:76:e6:b2:65:95:ef:13:3a:e6:78: 9e:7c:4a:32:fd:15:99:08:10:a6:7b:67:77:d1:be: 56:e8:59:48:b4:2c:ad:54:8b:04:67:b7:4a:8b:2a: 7d:aa:fd:cf:d8:b7:2e:88:46:74:67:99:71:2a:73: cf:51:a3:ab:93:05:ca:7e:92:00:6e:c8:84:af:27: e3:d9:8b:22:c3:fd:ad:b6:a0:a1:b8:23:75:19:59: 6b:2b:8a:80:d1:3e:c3:e0:92:6c:be:0f:97:50:55: ca:2d:29:f6:75:ab:09:bd:cb:d2:00:49:57:a1:48: 17:eb:a7:3e:81:e8:6b:7f:1b:5e:c0:08:12:50:00: 07:8b:4e:b0:db:20:ab:53:32:e0:67:27:50:13:3e: f5:96:cb:05:72:39:c6:f1:81:67:de:a3:42:95:9f: 8b:01:a6:4d:50:6a:c5:61:fa:4a:76:fa:25:ea:b6: c0:59:7d:8e:90:5a:a2:6a:dd:af:e5:98:6f:b2:36: 97:47:c5:9d:0e:72:59:91:1f:f3:10:04:d0:e7:5c: 97:e9:ff:3c:35:ce:8f:8f:ae:d3:48:46:ef:ba:da: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:6D:09:F6:D5:7F:12:85:0F:E0:E4:50:5C:0D:94:8A:76:DB:62 X509v3 Authority Key Identifier: keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:b3:99:d7:1f:3d:5f:8d:ea:f0:65:cc:8f:33:41:8d:56: 8e:62:74:39:12:e4:a2:41:c2:18:a5:a9:dd:9c:29:cf:fb:dd: 25:22:db:fe:0b:e8:ea:fa:e9:4a:d3:f4:ca:02:2f:04:bb:99: c9:23:3a:f1:0c:61:d6:72:d6:0b:16:35:62:a2:21:f8:55:ed: 3d:45:aa:e8:98:ee:6c:8d:7d:19:a9:ce:d8:8a:33:65:c1:bb: 72:f6:60:a9:90:d4:4e:a0:d5:0c:2e:9d:d2:cc:44:98:8e:d5: c8:b8:2f:73:58:76:92:c3:3a:8d:ec:82:39:27:06:8f:3a:28: 03:58:b3:15:4a:eb:0b:7e:03:f8:17:70:9c:86:80:15:cf:ed: c7:36:aa:0b:b1:f4:45:a6:ba:9c:42:fc:9a:e3:66:5a:cf:71: f5:ad:73:68:7b:2e:b0:b5:f4:d1:9f:c2:3e:1a:c6:14:c2:54: f3:07:26:16:0a:5c:f2:6a:94:7f:f0:47:a5:96:80:8e:a8:f2: 7a:f8:ac:03:67:80:c9:ee:21:d5:5a:4e:cd:f4:cd:46:87:a6: d4:e8:86:33:0f:e2:d3:c9:68:49:d2:7f:c6:c8:1a:0b:ba:b0: 68:0a:a9:0c:ea:6a:42:0e:0b:f5:8e:56:49:05:29:a2:74:b1: 2b:29:a8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrZTpjPQQnUmDqZ49eHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTkxNWI0YzcyNDA3YWZiNzk0MWU1YmUyOTRhYzcxMzNi MTA3YjMwHhcNMjUxMjA2MTEwMTE1WhcNMjUxMjA3MTEwMTE1WjAzMTEwLwYDVQQD EyhhMzhmNmQwOWY2ZDU3ZjEyODUwZmUwZTQ1MDVjMGQ5NDhhNzZkYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49aARmongWL3cR1PPQ9ZDAMdiZFQ 9I63kwFodgzF7MMMj3bmsmWV7xM65niefEoy/RWZCBCme2d30b5W6FlItCytVIsE Z7dKiyp9qv3P2LcuiEZ0Z5lxKnPPUaOrkwXKfpIAbsiEryfj2Ysiw/2ttqChuCN1 GVlrK4qA0T7D4JJsvg+XUFXKLSn2dasJvcvSAElXoUgX66c+gehrfxtewAgSUAAH i06w2yCrUzLgZydQEz71lssFcjnG8YFn3qNClZ+LAaZNUGrFYfpKdvol6rbAWX2O kFqiat2v5ZhvsjaXR8WdDnJZkR/zEATQ51yX6f88Nc6Pj67TSEbvutqCjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOPbQn21X8ShQ/g5FBcDZSKdttiMB8GA1UdIwQY MBaAFFJZFbTHJAevt5QeW+KUrHEzsQezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDIt MGNlM2EyZWZjOGRkLzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDItMGNlM2EyZWZjOGRk LzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5uzmdcf PV+N6vBlzI8zQY1WjmJ0ORLkokHCGKWp3Zwpz/vdJSLb/gvo6vrpStP0ygIvBLuZ ySM68Qxh1nLWCxY1YqIh+FXtPUWq6JjubI19GanO2IozZcG7cvZgqZDUTqDVDC6d 0sxEmI7VyLgvc1h2ksM6jeyCOScGjzooA1izFUrrC34D+BdwnIaAFc/txzaqC7H0 Raa6nEL8muNmWs9x9a1zaHsusLX00Z/CPhrGFMJU8wcmFgpc8mqUf/BHpZaAjqjy evisA2eAye4h1VpOzfTNRoem1OiGMw/i08loSdJ/xsgaC7qwaAqpDOpqQg4L9Y5W SQUponSxKymoNw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:42 2025 by rpki-client