This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json) Hash identifier: DyxLYm3HbsTYmhKSOb/w7ysFHoLvgPhLJ9iGPIClM8I= Subject key identifier: 36:49:C3:F4:A0:57:29:25:5F:96:92:D1:BB:0C:94:2B:83:5F:B1:EE Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Certificate serial: 019AF7D43FD21200555120FABA12B2B79532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft Manifest number: 05C3 Signing time: Sun 07 Dec 2025 08:01:13 +0000 Manifest this update: Sun 07 Dec 2025 08:01:13 +0000 Manifest next update: Mon 08 Dec 2025 08:01:13 +0000 Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=) 2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 5airq/ceWSGApar2PYI8Of2WHkTUlvqmRFwJzspB7MY=) 3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:3f:d2:12:00:55:51:20:fa:ba:12:b2:b7:95:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Validity Not Before: Dec 7 08:01:13 2025 GMT Not After : Dec 8 08:01:13 2025 GMT Subject: CN=3649c3f4a05729255f9692d1bb0c942b835fb1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:3b:07:d8:f2:3a:0a:2d:39:dd:84:df:ad: 6f:bc:3c:4e:19:3f:39:c5:be:8a:f2:72:b2:7b:9f: d6:c1:ac:28:6b:3d:0c:9a:8d:a7:5c:f9:ba:47:a4: ac:d1:9d:10:bc:63:e7:dd:86:95:5b:5e:4e:d1:18: c8:06:5e:8c:22:a6:6d:65:a2:df:a9:66:6b:2b:36: 4a:44:4a:61:de:3c:56:a4:ae:b1:43:78:11:34:4a: d9:cd:a0:5a:45:d7:bd:30:79:b3:c8:62:ce:3d:42: 83:8a:8a:7c:5a:a8:37:f3:0d:2c:8f:99:04:4c:68: 94:27:71:c7:2e:b2:82:52:03:c0:5b:38:bc:74:cb: 92:f8:07:f8:68:5f:ff:9c:c1:e9:e8:a5:a8:2e:94: 9f:f1:85:73:2a:26:6d:6a:93:5d:ef:39:00:5f:b3: ff:47:bc:21:28:34:1a:7a:70:90:32:df:46:0a:4e: 99:6b:18:ed:81:31:88:41:b5:3c:b2:67:f9:97:20: 06:a2:81:bf:18:5e:db:8f:05:e8:2a:0b:80:ed:6d: 46:b8:95:0e:67:88:37:b6:6e:69:2c:af:92:db:cb: ed:6e:4b:bc:40:d3:b7:60:93:72:46:81:46:d5:60: 08:7b:af:0d:3e:99:03:46:70:5a:cb:60:4b:63:0c: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:49:C3:F4:A0:57:29:25:5F:96:92:D1:BB:0C:94:2B:83:5F:B1:EE X509v3 Authority Key Identifier: keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:4e:80:fb:78:30:d5:3f:df:cf:9c:5b:0a:bf:da:12:41: 31:1e:23:f2:04:6d:65:c5:1a:62:e4:fe:e6:dc:1d:19:f7:4c: 7e:62:78:71:04:05:55:b0:47:2d:76:52:d6:93:ca:1a:96:24: 21:20:f6:5b:ea:31:67:d6:96:22:8f:7b:9c:31:bf:a8:be:a3: 2f:cd:5c:2a:43:18:5a:85:ad:0f:6e:5e:55:cb:45:b0:b8:be: 53:4d:5b:e6:84:c0:71:2e:1f:98:55:d6:4c:f4:23:e1:29:7e: e7:cd:0f:ea:2c:21:e7:7a:d6:47:b1:eb:8d:22:79:ba:a1:aa: ed:30:4c:f0:20:de:08:13:69:43:e0:a1:71:8a:67:81:be:b7: 43:61:83:87:29:d1:e7:d4:82:ed:08:06:4c:28:55:3c:69:05: 4e:47:ed:83:fd:78:24:22:07:ef:bf:63:ab:d3:75:95:7e:b2: 4b:9d:74:1e:3b:32:1e:6f:6c:79:76:ed:a0:90:0f:75:26:8e: 06:f1:43:a1:94:77:f5:9d:eb:82:e7:b7:ee:6e:c9:26:ee:82: 44:2a:da:60:b2:97:5b:9b:c2:8d:89:b8:1f:8f:21:4d:a8:0d: 28:38:95:ad:ec:a7:b3:5e:4f:80:c4:e0:26:f9:4e:59:e4:83: 00:02:10:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31D/SEgBVUSD6uhKyt5UyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh NDk1YzEwHhcNMjUxMjA3MDgwMTEzWhcNMjUxMjA4MDgwMTEzWjAzMTEwLwYDVQQD EygzNjQ5YzNmNGEwNTcyOTI1NWY5NjkyZDFiYjBjOTQyYjgzNWZiMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr47B9jyOgotOd2E361vvDxOGT85 xb6K8nKye5/Wwawoaz0Mmo2nXPm6R6Ss0Z0QvGPn3YaVW15O0RjIBl6MIqZtZaLf qWZrKzZKREph3jxWpK6xQ3gRNErZzaBaRde9MHmzyGLOPUKDiop8Wqg38w0sj5kE TGiUJ3HHLrKCUgPAWzi8dMuS+Af4aF//nMHp6KWoLpSf8YVzKiZtapNd7zkAX7P/ R7whKDQaenCQMt9GCk6ZaxjtgTGIQbU8smf5lyAGooG/GF7bjwXoKguA7W1GuJUO Z4g3tm5pLK+S28vtbku8QNO3YJNyRoFG1WAIe68NPpkDRnBay2BLYwyEawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZJw/SgVyklX5aS0bsMlCuDX7HuMB8GA1UdIwQY MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2 LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFthOgPt4 MNU/38+cWwq/2hJBMR4j8gRtZcUaYuT+5twdGfdMfmJ4cQQFVbBHLXZS1pPKGpYk ISD2W+oxZ9aWIo97nDG/qL6jL81cKkMYWoWtD25eVctFsLi+U01b5oTAcS4fmFXW TPQj4Sl+580P6iwh53rWR7HrjSJ5uqGq7TBM8CDeCBNpQ+ChcYpngb63Q2GDhynR 59SC7QgGTChVPGkFTkftg/14JCIH779jq9N1lX6yS510HjsyHm9seXbtoJAPdSaO BvFDoZR39Z3rgue37m7JJu6CRCraYLKXW5vCjYm4H48hTagNKDiVreyns15PgMTg JvlOWeSDAAIQcw== -----END CERTIFICATE-----Generated at Sun Dec 7 11:16:49 2025 by rpki-client