This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json) Hash identifier: 0sWTB8QqiUgQeT3LJkeg9/+6q3sk9BYLoFX0lIoQhSE= Subject key identifier: 4D:FA:1A:C8:4B:03:D2:BD:C5:09:C4:74:49:81:55:0F:39:1B:71:40 Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746 Certificate serial: 019B39B4095F4FB7FA1382C4E1B50BC3742F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft Manifest number: 0BA8 Signing time: Sat 20 Dec 2025 03:00:58 +0000 Manifest this update: Sat 20 Dec 2025 03:00:58 +0000 Manifest next update: Sun 21 Dec 2025 03:00:58 +0000 Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: HeHRsKWjbw4V8nINbevO/jORuINkxEolOZ1qECsmd0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:09:5f:4f:b7:fa:13:82:c4:e1:b5:0b:c3:74:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746 Validity Not Before: Dec 20 03:00:58 2025 GMT Not After : Dec 21 03:00:58 2025 GMT Subject: CN=4dfa1ac84b03d2bdc509c4744981550f391b7140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:f8:7d:1e:49:30:55:77:48:3b:6c:6a:c3: de:b2:74:f5:05:2a:85:da:e1:51:41:50:28:b9:b1: 70:05:a3:f9:04:68:47:48:bf:1c:7b:5b:d9:0e:e9: 58:ea:cd:82:97:3c:b4:5f:b6:e3:18:9f:e6:93:71: 03:42:92:68:cb:c0:7a:67:03:5f:ec:95:ad:81:9b: 04:05:e5:eb:af:d2:94:b9:5e:4d:b6:1c:50:44:4a: 50:e6:96:09:e4:7f:b7:38:8c:c3:f1:8b:93:40:a5: e8:74:a5:77:f3:04:e7:fc:e5:13:63:5b:c2:56:80: e6:36:4c:4d:c8:f9:ec:c2:92:02:ca:ef:05:c5:cb: fc:80:2b:c7:b8:42:75:8a:ec:3c:10:f4:b2:ba:04: fd:ff:fb:6f:81:9f:13:d5:b2:3b:9f:5f:12:ec:07: 0d:e3:1a:cd:46:83:a4:c0:d3:40:ad:92:c7:ca:97: 45:fb:7b:3c:c9:1d:8d:6b:77:6a:63:d5:b3:42:7b: 14:9d:6e:a2:6e:fd:fb:63:0a:8f:49:88:c5:12:54: ef:6f:bf:5f:24:92:50:61:6b:80:3c:b9:ac:50:8e: 46:c9:e5:35:85:f7:79:43:f2:aa:fa:6e:6c:77:5a: 57:26:70:60:fa:42:34:eb:a5:92:29:0e:74:f5:4d: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:1A:C8:4B:03:D2:BD:C5:09:C4:74:49:81:55:0F:39:1B:71:40 X509v3 Authority Key Identifier: keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:05:8d:5e:6b:4c:20:a7:eb:5e:17:6b:35:37:a0:43:c0:2b: bb:8b:06:46:4c:7a:8d:97:99:fe:be:3e:a0:ec:6f:02:1e:3f: c3:c7:e3:1f:8b:3e:83:92:33:78:68:4b:2b:e4:b6:57:1b:2a: b5:1e:ec:c6:ed:ca:50:71:99:f4:c1:01:7f:21:b8:22:38:68: f2:fb:54:b7:c7:18:8a:ce:8b:2f:f8:dd:3b:97:0c:3b:91:b9: 77:f3:5c:36:08:02:6b:9f:aa:78:53:b2:27:33:c8:d4:8f:43: 83:fc:e0:85:0a:b6:db:77:0d:ad:59:c2:3f:1c:5e:18:02:01: 4a:25:8d:4c:bd:e6:b0:ba:20:e1:3e:4e:c2:62:95:94:3b:25: 0a:dc:a1:40:90:9c:e6:2f:59:13:04:d4:dc:1e:ed:ad:fa:4d: c7:c8:b9:39:69:c4:6e:00:66:05:cc:c6:d2:ef:3a:80:1a:b0: 15:4d:26:62:70:79:d9:c2:bb:a2:b7:ed:ca:a3:b7:1d:eb:52: 5e:7f:7b:d8:20:93:19:76:73:8a:26:be:f2:c0:82:89:3e:a9: 91:7c:80:8a:22:dd:25:8c:87:1a:ed:6b:9d:b3:a3:30:c4:fd: e2:4b:5f:cf:ea:b9:09:dd:b3:c5:ce:ad:5d:fa:26:b8:d6:59: 79:0b:c5:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tAlfT7f6E4LE4bULw3QvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDk3ZmI1OGM2ZjZhNDQxZDhlZDc1MDAwNzczYjRkMDk4 NTY3NDYwHhcNMjUxMjIwMDMwMDU4WhcNMjUxMjIxMDMwMDU4WjAzMTEwLwYDVQQD Eyg0ZGZhMWFjODRiMDNkMmJkYzUwOWM0NzQ0OTgxNTUwZjM5MWI3MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7/4fR5JMFV3SDtsasPesnT1BSqF 2uFRQVAoubFwBaP5BGhHSL8ce1vZDulY6s2Clzy0X7bjGJ/mk3EDQpJoy8B6ZwNf 7JWtgZsEBeXrr9KUuV5NthxQREpQ5pYJ5H+3OIzD8YuTQKXodKV38wTn/OUTY1vC VoDmNkxNyPnswpICyu8Fxcv8gCvHuEJ1iuw8EPSyugT9//tvgZ8T1bI7n18S7AcN 4xrNRoOkwNNArZLHypdF+3s8yR2Na3dqY9WzQnsUnW6ibv37YwqPSYjFElTvb79f JJJQYWuAPLmsUI5GyeU1hfd5Q/Kq+m5sd1pXJnBg+kI066WSKQ509U1WRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE36GshLA9K9xQnEdEmBVQ85G3FAMB8GA1UdIwQY MBaAFFAJf7WMb2pEHY7XUAB3O00JhWdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMt MjJkYzYzNmIyNDg4LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMtMjJkYzYzNmIyNDg4 LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQWNXmtM IKfrXhdrNTegQ8Aru4sGRkx6jZeZ/r4+oOxvAh4/w8fjH4s+g5IzeGhLK+S2Vxsq tR7sxu3KUHGZ9MEBfyG4Ijho8vtUt8cYis6LL/jdO5cMO5G5d/NcNggCa5+qeFOy JzPI1I9Dg/zghQq223cNrVnCPxxeGAIBSiWNTL3msLog4T5OwmKVlDslCtyhQJCc 5i9ZEwTU3B7trfpNx8i5OWnEbgBmBczG0u86gBqwFU0mYnB52cK7orftyqO3HetS Xn972CCTGXZziia+8sCCiT6pkXyAiiLdJYyHGu1rnbOjMMT94ktfz+q5Cd2zxc6t XfomuNZZeQvFOg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:31:28 2025 by rpki-client