This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json) Hash identifier: 50VFx/NMjAOdjZM+70AfMKZ8xuT2fd8aM/crReneB6Y= Subject key identifier: B5:87:DA:22:BB:7C:BA:CB:87:21:9D:9E:E6:DF:76:8F:F2:BC:92:14 Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Certificate serial: 019B4A7129F4A109F44682CA4523A592CEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft Manifest number: 0B12 Signing time: Tue 23 Dec 2025 09:01:28 +0000 Manifest this update: Tue 23 Dec 2025 09:01:28 +0000 Manifest next update: Wed 24 Dec 2025 09:01:28 +0000 Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=) 2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: /KgAkrFmUTwOkIYxPkY4DP40RvHUhLH/uI+w/r9ohLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:29:f4:a1:09:f4:46:82:ca:45:23:a5:92:ce:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Validity Not Before: Dec 23 09:01:28 2025 GMT Not After : Dec 24 09:01:28 2025 GMT Subject: CN=b587da22bb7cbacb87219d9ee6df768ff2bc9214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:95:80:ea:47:de:22:a4:f0:11:19:ec:a8:95: d3:a3:8a:bd:10:31:5c:9e:93:dd:87:50:0e:b9:66: 4f:48:ff:07:e0:3d:81:ff:46:51:08:df:47:ef:b3: 8c:48:2d:9d:e4:3c:c7:41:93:cc:3f:ea:f6:94:01: cc:b0:de:4d:7a:f2:90:32:e3:12:d0:83:a7:e6:a2: 8a:a4:89:58:5e:4a:f4:bd:27:f5:4f:4d:7c:28:ad: 37:f5:64:89:9d:4f:43:56:c5:52:4b:a5:37:b8:d1: 50:c3:42:31:98:ec:71:69:ad:e9:92:bc:b0:9c:e9: cc:50:13:28:59:af:38:21:26:43:0a:44:10:f8:92: 89:a3:a5:dd:38:92:c6:02:6d:a7:a3:0f:13:00:93: 74:4c:32:a0:3a:ac:ed:a7:55:4a:6b:8f:f4:64:e8: a4:36:fc:c6:e5:73:03:fe:e5:1c:71:8c:ae:c3:34: 91:78:60:9c:db:3c:f7:31:a9:bc:ef:84:fd:9d:c5: 8b:60:7d:bf:b0:ca:00:22:ea:20:02:a8:c0:93:b8: ac:04:0b:36:0b:93:d8:b3:85:c2:8a:12:d6:85:90: 29:26:7e:f0:1d:85:9c:5a:6d:90:d2:b9:e5:ed:9a: af:41:a5:40:b5:6e:9a:2a:9a:3f:65:d9:90:29:2f: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:87:DA:22:BB:7C:BA:CB:87:21:9D:9E:E6:DF:76:8F:F2:BC:92:14 X509v3 Authority Key Identifier: keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:af:3e:3b:0e:96:1a:7f:74:48:82:64:c8:62:37:a9:86:61: 3a:ef:fc:64:af:0f:32:f6:ee:63:2e:ab:f5:48:45:b6:f6:e4: 9a:14:f5:f5:72:55:b4:0f:b9:a2:e8:09:ff:1f:05:80:de:23: 43:a6:0c:2b:ed:13:c2:27:71:81:4f:76:4f:a0:58:37:59:f8: a6:62:17:e9:3b:5e:3b:80:26:2a:27:a3:e8:7d:19:c6:3b:9d: e9:d4:e6:dc:17:9a:15:15:5f:b3:51:69:71:74:e3:e7:2e:b0: cb:f4:bb:d3:09:b2:b8:c6:d7:29:2a:5f:46:4f:d3:c0:0c:08: 6a:c7:bb:a4:8c:d5:c6:7e:c9:a6:74:fa:c2:70:4a:30:99:9b: 5a:f9:34:63:c2:52:ce:ea:a6:c0:a5:12:41:59:34:bb:43:56: 07:87:37:82:07:1f:24:6b:fa:a8:30:3a:97:8b:78:14:1e:40: 3b:ce:96:54:b1:3e:e6:ab:cb:1f:61:57:67:4c:62:f2:45:fb: 71:63:a9:5e:fc:27:8e:e4:a0:39:2d:14:cc:f0:0a:b9:1c:26: 7f:7c:8d:47:01:87:0a:1e:d2:79:a3:ad:b5:57:2d:ad:89:19: c7:89:93:50:5b:89:16:04:4c:6b:5d:10:40:af:a5:11:eb:36: 2e:60:65:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcSn0oQn0RoLKRSOlks7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw OWJlOGUwHhcNMjUxMjIzMDkwMTI4WhcNMjUxMjI0MDkwMTI4WjAzMTEwLwYDVQQD EyhiNTg3ZGEyMmJiN2NiYWNiODcyMTlkOWVlNmRmNzY4ZmYyYmM5MjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pWA6kfeIqTwERnsqJXTo4q9EDFc npPdh1AOuWZPSP8H4D2B/0ZRCN9H77OMSC2d5DzHQZPMP+r2lAHMsN5NevKQMuMS 0IOn5qKKpIlYXkr0vSf1T018KK039WSJnU9DVsVSS6U3uNFQw0IxmOxxaa3pkryw nOnMUBMoWa84ISZDCkQQ+JKJo6XdOJLGAm2now8TAJN0TDKgOqztp1VKa4/0ZOik NvzG5XMD/uUccYyuwzSReGCc2zz3Mam874T9ncWLYH2/sMoAIuogAqjAk7isBAs2 C5PYs4XCihLWhZApJn7wHYWcWm2Q0rnl7ZqvQaVAtW6aKpo/ZdmQKS829wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWH2iK7fLrLhyGdnubfdo/yvJIUMB8GA1UdIwQY MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0 LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq8+Ow6W Gn90SIJkyGI3qYZhOu/8ZK8PMvbuYy6r9UhFtvbkmhT19XJVtA+5ougJ/x8FgN4j Q6YMK+0TwidxgU92T6BYN1n4pmIX6TteO4AmKiej6H0Zxjud6dTm3BeaFRVfs1Fp cXTj5y6wy/S70wmyuMbXKSpfRk/TwAwIase7pIzVxn7JpnT6wnBKMJmbWvk0Y8JS zuqmwKUSQVk0u0NWB4c3ggcfJGv6qDA6l4t4FB5AO86WVLE+5qvLH2FXZ0xi8kX7 cWOpXvwnjuSgOS0UzPAKuRwmf3yNRwGHCh7SeaOttVctrYkZx4mTUFuJFgRMa10Q QK+lEes2LmBl1g== -----END CERTIFICATE-----Generated at Tue Dec 23 14:54:20 2025 by rpki-client