This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json) Hash identifier: k+merraH+mTEWSZCmisKFd2dJd/0qIvID1MazU98IP0= Subject key identifier: 50:17:B9:2B:45:20:79:E7:22:5F:80:26:CB:1A:61:BB:03:E0:87:44 Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e Certificate serial: 019B4FCED57CD59E6563E09564DFE5F5F6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft Manifest number: 114F Signing time: Wed 24 Dec 2025 10:01:53 +0000 Manifest this update: Wed 24 Dec 2025 10:01:53 +0000 Manifest next update: Thu 25 Dec 2025 10:01:53 +0000 Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: uSEB2giiFRmfr8c5jUhK+wilPgHdzKliaZoXBR/i2mU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:d5:7c:d5:9e:65:63:e0:95:64:df:e5:f5:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e Validity Not Before: Dec 24 10:01:53 2025 GMT Not After : Dec 25 10:01:53 2025 GMT Subject: CN=5017b92b452079e7225f8026cb1a61bb03e08744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:2e:45:fc:33:22:68:6d:2a:ee:33:aa:a8: 0d:f8:08:91:8f:dc:2a:21:c1:df:68:d1:23:56:30: 5a:1b:53:aa:10:17:d0:bd:62:5e:5b:e0:c0:6f:eb: 7f:79:c0:39:bd:9d:dc:da:61:f1:a6:96:ed:b3:9a: d3:9e:20:85:e8:b0:e8:4d:ac:22:18:61:04:1c:f8: 1b:9c:dc:15:75:9f:0c:ac:cd:bb:dd:cf:49:8d:25: f4:4c:2b:31:0f:29:fd:78:ac:c5:51:5b:6e:ff:4b: b5:9f:88:9d:ec:4c:00:db:75:40:71:d6:3c:af:58: 0a:46:0c:6a:f7:e5:c2:01:a7:64:fa:3b:ae:6b:2f: a9:a6:77:f1:65:11:ab:4b:a3:5b:75:52:f6:c3:89: b1:24:e6:5a:dc:6a:86:88:9e:fc:07:1d:66:07:32: 67:4c:77:ea:87:82:ae:ab:08:b7:bc:b6:cc:ba:54: 29:ab:9f:6b:c4:ec:da:3b:8f:e3:c4:ec:30:dd:eb: 49:75:aa:8f:79:e9:b5:68:1e:98:e1:58:7e:da:d9: 83:66:9e:51:d5:c6:ea:64:00:2c:ac:8f:0e:92:e7: 88:b3:d2:a3:4b:05:7d:8e:7d:27:de:29:23:0b:31: 96:dc:0a:ff:e9:40:ba:f2:34:aa:8b:5d:3c:16:36: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:B9:2B:45:20:79:E7:22:5F:80:26:CB:1A:61:BB:03:E0:87:44 X509v3 Authority Key Identifier: keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d8:ac:6e:f2:59:3a:2a:b4:cb:10:dd:9e:ee:bf:80:a5:d7: 17:d5:3f:e1:f1:5a:9d:ae:6d:e5:36:87:28:61:90:3c:c6:46: d7:3c:0c:05:37:10:42:c5:46:d3:ba:26:fa:5b:06:51:9f:c3: 8f:d6:84:5d:ac:9d:ca:2d:5a:11:7d:fb:58:d7:39:7a:d3:92: c8:66:d6:4f:0c:f9:70:39:bb:8a:f3:8a:b8:b2:21:34:73:d1: ec:12:5a:6f:e2:fa:3a:48:43:2e:25:79:a7:a1:cd:51:2f:c6: 75:00:a0:c0:ff:ec:5f:0d:46:1c:bf:fb:2d:47:78:bf:ff:99: 26:27:87:cd:2f:79:4f:04:21:d1:4b:37:80:28:71:ff:6c:5c: 3e:ef:66:ec:81:91:8f:9c:77:ff:e8:72:9b:65:2d:0b:32:1f: 74:69:5b:13:70:ee:b2:9a:a4:30:1c:5b:bf:20:66:21:14:43: b0:95:14:01:cc:cf:21:40:b1:e5:9d:59:6b:c5:5d:21:80:63: 87:2b:79:63:06:4f:43:05:9b:4e:9a:80:26:22:82:6b:36:cd: 70:d2:80:ea:9f:55:4c:ea:e3:66:b4:ff:43:69:38:88:a0:80: c1:c7:06:30:7b:90:69:8c:14:85:48:4f:51:fd:4e:7e:67:44: a3:ed:ce:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPztV81Z5lY+CVZN/l9fbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTNjYTE4ZTNhMDQ4ZDU5ZmE2Y2Y1OTY2N2NmZDM5YTA1 Nzk3M2UwHhcNMjUxMjI0MTAwMTUzWhcNMjUxMjI1MTAwMTUzWjAzMTEwLwYDVQQD Eyg1MDE3YjkyYjQ1MjA3OWU3MjI1ZjgwMjZjYjFhNjFiYjAzZTA4NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CIuRfwzImhtKu4zqqgN+AiRj9wq IcHfaNEjVjBaG1OqEBfQvWJeW+DAb+t/ecA5vZ3c2mHxppbts5rTniCF6LDoTawi GGEEHPgbnNwVdZ8MrM273c9JjSX0TCsxDyn9eKzFUVtu/0u1n4id7EwA23VAcdY8 r1gKRgxq9+XCAadk+juuay+ppnfxZRGrS6NbdVL2w4mxJOZa3GqGiJ78Bx1mBzJn THfqh4Kuqwi3vLbMulQpq59rxOzaO4/jxOww3etJdaqPeem1aB6Y4Vh+2tmDZp5R 1cbqZAAsrI8OkueIs9KjSwV9jn0n3ikjCzGW3Ar/6UC68jSqi108FjYOSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAXuStFIHnnIl+AJssaYbsD4IdEMB8GA1UdIwQY MBaAFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMt MWIyMDQ1NGEyODYyLzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMtMWIyMDQ1NGEyODYy LzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtisbvJZ Oiq0yxDdnu6/gKXXF9U/4fFana5t5TaHKGGQPMZG1zwMBTcQQsVG07om+lsGUZ/D j9aEXaydyi1aEX37WNc5etOSyGbWTwz5cDm7ivOKuLIhNHPR7BJab+L6OkhDLiV5 p6HNUS/GdQCgwP/sXw1GHL/7LUd4v/+ZJieHzS95TwQh0Us3gChx/2xcPu9m7IGR j5x3/+hym2UtCzIfdGlbE3DuspqkMBxbvyBmIRRDsJUUAczPIUCx5Z1Za8VdIYBj hyt5YwZPQwWbTpqAJiKCazbNcNKA6p9VTOrjZrT/Q2k4iKCAwccGMHuQaYwUhUhP Uf1OfmdEo+3OGA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:42:04 2025 by rpki-client