This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json) Hash identifier: f4u6G7NsZyV8EobFbgz5/2IL1cZ0/fZ5kiQBqy268no= Subject key identifier: 0E:E4:A3:A6:6D:FC:A0:AB:86:19:67:C9:3E:6D:D9:3A:C8:02:61:83 Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Certificate serial: 019B432562E45BA1699CCC91632FA11B4C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft Manifest number: 05EA Signing time: Sun 21 Dec 2025 23:01:22 +0000 Manifest this update: Sun 21 Dec 2025 23:01:22 +0000 Manifest next update: Mon 22 Dec 2025 23:01:22 +0000 Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=) 2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: s4vxrv62SNQioT8VScOAqgGP2VtlsxP2j7ex+gEsVq0=) 3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:62:e4:5b:a1:69:9c:cc:91:63:2f:a1:1b:4c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Validity Not Before: Dec 21 23:01:22 2025 GMT Not After : Dec 22 23:01:22 2025 GMT Subject: CN=0ee4a3a66dfca0ab861967c93e6dd93ac8026183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:76:1a:83:a5:d6:48:e1:a1:da:db:44:66: c7:e9:3e:fd:02:12:20:c0:37:e7:2c:66:bd:9f:a5: 46:43:6f:78:9f:5e:f0:85:7b:9f:00:d2:d2:30:e9: 2b:19:9f:24:95:36:64:a6:c1:1a:a6:4b:6d:64:9a: f8:b9:64:c8:19:55:23:51:4d:af:a8:5b:f4:6f:51: a7:d4:5b:f7:aa:e3:34:40:91:8c:aa:24:53:51:5b: 08:9a:71:51:17:38:fe:d6:a4:0d:58:7c:6c:0d:2c: d5:1d:70:f9:e2:b9:5b:e9:c9:cb:fa:4e:49:65:ad: 30:13:e8:40:a3:82:c4:24:60:5b:60:9a:45:1a:39: 92:e6:9c:9d:fc:75:00:81:09:ac:ae:88:c5:d0:2b: 3e:99:9f:5d:17:cd:ee:f9:f0:44:54:e0:ab:7d:2f: d5:3c:4a:69:47:5b:71:4c:9a:db:84:33:a9:e9:fd: d0:e5:e9:fd:f9:e7:16:06:0b:19:6f:50:8b:11:b5: 7e:fc:81:6c:bb:0e:db:c6:e3:53:59:dd:05:21:06: a0:0a:0f:5d:59:de:f5:6d:1e:dd:6d:5d:93:55:39: 40:31:fb:5d:8a:80:1b:76:8d:99:93:07:d0:c3:3a: eb:62:ba:8d:d7:4a:ed:4e:f4:1f:55:52:c9:d0:c9: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E4:A3:A6:6D:FC:A0:AB:86:19:67:C9:3E:6D:D9:3A:C8:02:61:83 X509v3 Authority Key Identifier: keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8b:09:96:ea:7f:f7:96:bc:28:12:fa:c6:51:01:39:48:0b: d6:82:a0:93:c6:51:7b:94:28:0c:e5:6f:02:49:30:c2:3e:b8: 55:a7:bb:b4:02:cf:5d:a8:e7:88:9b:8f:72:3d:c2:f6:23:e6: b5:03:cb:de:58:f9:21:ad:c2:2f:c5:5d:69:84:d7:05:1b:7e: e1:9c:a4:2c:c6:68:7f:e4:48:3c:e7:fb:d5:65:42:14:9b:cc: ce:99:99:44:0d:fc:80:b9:82:26:d7:36:37:16:ba:2e:ec:ac: 9d:a8:e3:69:c2:31:8e:93:a2:cc:f4:b2:eb:39:b0:c9:77:c9: b0:2e:a0:ad:cd:8a:17:86:c6:b0:ab:af:8b:c8:53:55:ee:7d: 0b:72:51:c7:41:47:76:aa:81:f9:24:ee:ef:71:6e:9d:65:47: 07:79:d9:7e:ec:eb:da:8b:1d:61:9d:14:c8:84:ea:69:ac:2c: 99:69:da:3b:38:18:b1:41:af:d8:b5:4a:e4:f7:9a:51:97:4f: e0:e5:a1:cd:38:45:48:e9:7a:db:cc:bb:f7:ed:26:cc:78:71: 44:52:ff:41:cf:a5:0e:b5:2a:45:b0:d5:73:b0:3d:ed:a3:ad: 78:a5:77:a9:5c:9d:3b:4d:be:c5:5b:11:ce:fb:de:9a:d7:c8: 22:4b:80:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJWLkW6FpnMyRYy+hG0yUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh NDk1YzEwHhcNMjUxMjIxMjMwMTIyWhcNMjUxMjIyMjMwMTIyWjAzMTEwLwYDVQQD EygwZWU0YTNhNjZkZmNhMGFiODYxOTY3YzkzZTZkZDkzYWM4MDI2MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv92GoOl1kjhodrbRGbH6T79AhIg wDfnLGa9n6VGQ294n17whXufANLSMOkrGZ8klTZkpsEapkttZJr4uWTIGVUjUU2v qFv0b1Gn1Fv3quM0QJGMqiRTUVsImnFRFzj+1qQNWHxsDSzVHXD54rlb6cnL+k5J Za0wE+hAo4LEJGBbYJpFGjmS5pyd/HUAgQmsrojF0Cs+mZ9dF83u+fBEVOCrfS/V PEppR1txTJrbhDOp6f3Q5en9+ecWBgsZb1CLEbV+/IFsuw7bxuNTWd0FIQagCg9d Wd71bR7dbV2TVTlAMftdioAbdo2ZkwfQwzrrYrqN10rtTvQfVVLJ0MnIvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7ko6Zt/KCrhhlnyT5t2TrIAmGDMB8GA1UdIwQY MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2 LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIsJlup/ 95a8KBL6xlEBOUgL1oKgk8ZRe5QoDOVvAkkwwj64Vae7tALPXajniJuPcj3C9iPm tQPL3lj5Ia3CL8VdaYTXBRt+4ZykLMZof+RIPOf71WVCFJvMzpmZRA38gLmCJtc2 Nxa6LuysnajjacIxjpOizPSy6zmwyXfJsC6grc2KF4bGsKuvi8hTVe59C3JRx0FH dqqB+STu73FunWVHB3nZfuzr2osdYZ0UyITqaawsmWnaOzgYsUGv2LVK5PeaUZdP 4OWhzThFSOl628y79+0mzHhxRFL/Qc+lDrUqRbDVc7A97aOteKV3qVydO02+xVsR zvvemtfIIkuARg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:20:45 2025 by rpki-client