This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json) Hash identifier: 9H93ssXXaLGdKuqiGce3Dyr5p8JglEqoHLJkdjut+Yo= Subject key identifier: B2:56:11:7C:81:44:F3:03:8E:92:96:44:D4:39:81:D5:EC:D2:39:E7 Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Certificate serial: 019B590845806D2B1B7B6B2951670BAB093B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft Manifest number: 0508 Signing time: Fri 26 Dec 2025 05:01:12 +0000 Manifest this update: Fri 26 Dec 2025 05:01:12 +0000 Manifest next update: Sat 27 Dec 2025 05:01:12 +0000 Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: ZnE+pwycqvyfYvhapX7A0jcciRoaDdCXAK3w9BMRMpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:45:80:6d:2b:1b:7b:6b:29:51:67:0b:ab:09:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Validity Not Before: Dec 26 05:01:12 2025 GMT Not After : Dec 27 05:01:12 2025 GMT Subject: CN=b256117c8144f3038e929644d43981d5ecd239e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:1f:0c:8e:c3:0d:5e:16:a7:27:d9:c3:95: ec:62:ef:ec:5d:d1:8e:2d:3d:4c:db:24:18:04:97: e8:c3:42:7a:7f:35:0a:ff:61:5a:48:08:96:1c:39: 2f:da:6e:8e:5a:0c:61:b7:0a:cb:31:0d:64:f5:af: 6d:3b:96:d6:57:9d:ae:0e:67:9d:97:b7:5d:25:f5: e7:58:6a:91:e5:da:24:a9:05:cb:e7:0a:8d:2c:6f: b5:ed:d2:35:ea:69:fa:f5:e4:fc:bb:4f:3d:61:a9: cc:bd:50:00:d2:9c:60:fb:2b:cb:f8:8e:1e:42:3d: c9:8f:c4:39:3c:17:ff:44:6a:ee:ed:7e:25:da:7d: 45:ad:70:14:0e:87:df:82:3e:a4:42:de:d9:7f:6e: c3:49:bb:6a:d4:9a:e7:cf:00:50:da:27:bf:af:d4: 5a:2a:ec:c4:ee:0d:25:8d:00:55:67:64:9f:3a:a4: bb:31:67:b7:c1:b6:84:b7:98:4e:8e:f2:7a:bb:e7: 6b:86:4b:cf:7a:16:44:68:72:7b:02:05:44:be:f7: 9c:bf:88:37:cb:26:cf:99:20:df:26:e1:2f:6e:f8: 8c:8b:af:c8:76:19:15:2b:1c:54:0f:d1:00:70:ac: 41:59:11:15:7c:3f:21:8f:a0:d2:7f:c2:41:25:41: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:56:11:7C:81:44:F3:03:8E:92:96:44:D4:39:81:D5:EC:D2:39:E7 X509v3 Authority Key Identifier: keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:81:90:97:7b:d4:10:1d:bb:ce:55:de:c0:23:c1:59:fc:05: 26:e3:93:b1:4b:1d:e4:2e:c0:07:bf:28:3b:9b:cb:25:6b:d5: 4d:77:02:5e:df:f9:cb:8c:75:b1:27:1c:cf:48:c1:7f:4d:1e: 60:a1:6b:6c:4e:18:b9:61:66:74:e2:d1:ff:a8:f1:e0:92:5d: be:d9:91:dc:a8:71:dc:3c:cb:b9:56:9c:ab:aa:24:7b:89:d0: 82:2f:4a:25:f8:1c:19:1d:91:7f:6a:e0:8d:3e:4b:17:0c:fb: 2f:e5:58:85:f9:90:04:15:ae:b3:11:6d:45:12:29:33:61:c2: 11:d5:72:2e:95:69:e1:24:4e:02:e3:7f:24:30:b2:89:82:be: b0:55:3d:98:10:23:28:28:50:32:c8:9c:fc:1c:14:ab:c3:df: 78:cf:e8:13:1c:5e:b5:b6:39:11:51:2c:e3:66:28:c8:92:86: 86:84:47:09:bf:4a:27:d6:d4:2b:f8:a4:2a:0b:96:d2:28:0c: be:d7:c0:ef:2a:3a:2b:5f:7c:2a:f0:57:e5:9f:7f:16:0e:12: 80:20:4f:73:b3:9d:3d:bc:08:c8:54:29:8f:75:25:ce:d6:0c: eb:e8:bc:21:bc:fb:e5:ce:d9:69:f2:bb:6e:44:21:93:b4:4c: 40:a6:e9:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCEWAbSsbe2spUWcLqwk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjg0M2E4ZDkxYjE1ODI0ZTYwZTJjZDY4OWE2ZjQ1MWUy NTZhNWUwHhcNMjUxMjI2MDUwMTEyWhcNMjUxMjI3MDUwMTEyWjAzMTEwLwYDVQQD EyhiMjU2MTE3YzgxNDRmMzAzOGU5Mjk2NDRkNDM5ODFkNWVjZDIzOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6EfDI7DDV4WpyfZw5XsYu/sXdGO LT1M2yQYBJfow0J6fzUK/2FaSAiWHDkv2m6OWgxhtwrLMQ1k9a9tO5bWV52uDmed l7ddJfXnWGqR5dokqQXL5wqNLG+17dI16mn69eT8u089YanMvVAA0pxg+yvL+I4e Qj3Jj8Q5PBf/RGru7X4l2n1FrXAUDoffgj6kQt7Zf27DSbtq1JrnzwBQ2ie/r9Ra KuzE7g0ljQBVZ2SfOqS7MWe3wbaEt5hOjvJ6u+drhkvPehZEaHJ7AgVEvvecv4g3 yybPmSDfJuEvbviMi6/IdhkVKxxUD9EAcKxBWREVfD8hj6DSf8JBJUFRHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJWEXyBRPMDjpKWRNQ5gdXs0jnnMB8GA1UdIwQY MBaAFFC4Q6jZGxWCTmDizWiab0UeJWpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgt MjUxODY3YmRjMTNmLzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgtMjUxODY3YmRjMTNm LzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4GQl3vU EB27zlXewCPBWfwFJuOTsUsd5C7AB78oO5vLJWvVTXcCXt/5y4x1sSccz0jBf00e YKFrbE4YuWFmdOLR/6jx4JJdvtmR3Khx3DzLuVacq6oke4nQgi9KJfgcGR2Rf2rg jT5LFwz7L+VYhfmQBBWusxFtRRIpM2HCEdVyLpVp4SROAuN/JDCyiYK+sFU9mBAj KChQMsic/BwUq8PfeM/oExxetbY5EVEs42YoyJKGhoRHCb9KJ9bUK/ikKguW0igM vtfA7yo6K198KvBX5Z9/Fg4SgCBPc7OdPbwIyFQpj3UlztYM6+i8Ibz75c7ZafK7 bkQhk7RMQKbpcQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:15 2025 by rpki-client