This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json) Hash identifier: mRi7JRcTbabhfIwiPLqKWhGXDdjEPxz9uFVDSKMZqRY= Subject key identifier: AE:29:37:FF:5D:EA:5E:DB:B1:CE:0A:E3:1A:0E:63:A0:8B:2C:84:01 Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Certificate serial: 019B4E163BB77BDA7D53FE06338CFC6E358F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 02:00:38 +0000 Manifest this update: Wed 24 Dec 2025 02:00:38 +0000 Manifest next update: Thu 25 Dec 2025 02:00:38 +0000 Files and hashes: 1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=) 2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: lOuEeL9P4ALar6TbQLXqMIISFld9971hHgQp9wOB9MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:3b:b7:7b:da:7d:53:fe:06:33:8c:fc:6e:35:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Validity Not Before: Dec 24 02:00:38 2025 GMT Not After : Dec 25 02:00:38 2025 GMT Subject: CN=ae2937ff5dea5edbb1ce0ae31a0e63a08b2c8401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:91:35:97:80:e4:40:fb:94:dc:47:45:3d: f9:6e:70:de:ee:dc:dd:cc:1e:d9:fa:f1:55:f1:2a: d9:34:18:e6:61:a4:c5:ec:c8:07:f3:7c:65:c6:da: 6e:fb:75:99:cf:f2:29:16:32:18:c9:2c:8d:9b:c6: bd:46:70:0c:c3:e6:d7:d6:a2:ac:20:49:7a:fe:8b: 92:f2:6f:cf:df:f4:84:c0:40:fe:99:3d:cc:dc:b4: 87:d0:49:6e:01:b7:6f:e9:bc:be:d4:bb:da:02:4e: a4:1d:5a:95:88:50:96:6b:7c:69:a8:4f:7f:55:53: 9e:2b:93:a6:e8:08:70:c1:a0:26:4a:a0:5e:44:9f: f1:b8:0a:80:9e:7e:34:60:9b:14:5a:20:01:70:d4: e3:27:f5:ef:53:42:d9:a8:b2:c4:97:fe:80:5c:5e: ee:9a:e0:d7:b8:0d:16:88:10:d9:61:c1:d7:ca:23: a8:38:37:cd:5d:92:13:7b:b9:11:f5:54:98:9f:6f: b8:54:e1:a0:c6:98:8c:a8:4b:90:70:d4:cf:cd:38: b4:90:9e:60:04:56:c5:c2:49:bf:01:82:f4:6c:e8: f3:80:4f:ba:0f:c2:f7:5c:66:d5:9c:59:44:56:23: 54:27:bb:2e:fa:8d:62:e2:c5:2a:5d:73:22:07:4f: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:29:37:FF:5D:EA:5E:DB:B1:CE:0A:E3:1A:0E:63:A0:8B:2C:84:01 X509v3 Authority Key Identifier: keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c7:0c:77:e9:49:10:e4:d8:c3:2f:a0:55:7a:73:75:31:02: 44:ee:ed:b9:b0:b8:ea:13:a3:4c:fa:9d:dd:64:d5:f0:3e:c1: 41:63:e3:6d:55:6a:54:00:de:37:3e:96:d3:21:71:7f:ed:f7: fa:10:1f:1d:b8:88:88:0b:3f:f2:58:1a:42:ab:2f:3b:31:96: 2b:cb:4a:b2:00:5e:d8:a0:62:97:0d:9e:8b:97:de:cc:28:db: 96:c8:ba:48:f7:c6:40:10:96:fa:38:25:54:33:84:de:96:e7: 15:ce:46:e0:e9:7b:0d:5d:fa:f3:4e:69:b6:33:0a:de:f8:8b: 34:ed:ea:00:3a:bd:82:d0:1f:00:df:59:42:9a:87:0b:3a:b4: fe:4a:37:6c:d2:46:18:f0:82:c5:be:f3:7b:d8:08:90:7b:b3: 9b:ca:30:3f:d4:fc:32:74:e4:68:3a:0a:e8:51:d0:21:b7:80: 04:fd:07:c8:cd:15:67:1f:3b:b6:1b:4e:d5:37:5b:f7:a2:27: 93:5c:61:a5:da:cf:22:63:5a:70:1c:7c:79:0e:ad:49:b3:34: 35:b2:ed:d1:62:c0:09:66:06:65:69:de:be:df:42:04:3b:9a: eb:1a:c9:29:44:fb:ef:d7:4e:13:ee:57:b8:40:08:e2:44:e5: dc:9e:ba:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFju3e9p9U/4GM4z8bjWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5 ZTRjOWUwHhcNMjUxMjI0MDIwMDM4WhcNMjUxMjI1MDIwMDM4WjAzMTEwLwYDVQQD EyhhZTI5MzdmZjVkZWE1ZWRiYjFjZTBhZTMxYTBlNjNhMDhiMmM4NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dKRNZeA5ED7lNxHRT35bnDe7tzd zB7Z+vFV8SrZNBjmYaTF7MgH83xlxtpu+3WZz/IpFjIYySyNm8a9RnAMw+bX1qKs IEl6/ouS8m/P3/SEwED+mT3M3LSH0EluAbdv6by+1LvaAk6kHVqViFCWa3xpqE9/ VVOeK5Om6AhwwaAmSqBeRJ/xuAqAnn40YJsUWiABcNTjJ/XvU0LZqLLEl/6AXF7u muDXuA0WiBDZYcHXyiOoODfNXZITe7kR9VSYn2+4VOGgxpiMqEuQcNTPzTi0kJ5g BFbFwkm/AYL0bOjzgE+6D8L3XGbVnFlEViNUJ7su+o1i4sUqXXMiB08EcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4pN/9d6l7bsc4K4xoOY6CLLIQBMB8GA1UdIwQY MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt OTliNGQ0YWNlNjkzLzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEccMd+lJ EOTYwy+gVXpzdTECRO7tubC46hOjTPqd3WTV8D7BQWPjbVVqVADeNz6W0yFxf+33 +hAfHbiIiAs/8lgaQqsvOzGWK8tKsgBe2KBilw2ei5fezCjblsi6SPfGQBCW+jgl VDOE3pbnFc5G4Ol7DV36805ptjMK3viLNO3qADq9gtAfAN9ZQpqHCzq0/ko3bNJG GPCCxb7ze9gIkHuzm8owP9T8MnTkaDoK6FHQIbeABP0HyM0VZx87thtO1Tdb96In k1xhpdrPImNacBx8eQ6tSbM0NbLt0WLACWYGZWnevt9CBDua6xrJKUT779dOE+5X uEAI4kTl3J66BQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:29 2025 by rpki-client