This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json) Hash identifier: 9B3eDq0jmOC7OBxZnmch9Ntbvv/8yyS0tyz8BsHA3+4= Subject key identifier: F1:4B:0F:F0:01:B6:D4:7E:02:3C:10:A2:D7:DD:A7:0C:F2:2E:14:53 Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479 Certificate serial: 019B5975B7EC6D7280A1E6A27B111C2B0DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft Manifest number: 01B2 Signing time: Fri 26 Dec 2025 07:00:45 +0000 Manifest this update: Fri 26 Dec 2025 07:00:45 +0000 Manifest next update: Sat 27 Dec 2025 07:00:45 +0000 Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: sa+BoL9d2Px77tNb47KpnepMYbwX4zChL9FHIogaZqI=) 2: n6xqmighFn7Vnqg53_v_ZExOLTk.roa (hash: Vp9Yf4e/IJuX8klPo+kJIwSDYNXo9hKqOgWcowfTXuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b7:ec:6d:72:80:a1:e6:a2:7b:11:1c:2b:0d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259796c5f60c55501e458008611623b5049d479 Validity Not Before: Dec 26 07:00:45 2025 GMT Not After : Dec 27 07:00:45 2025 GMT Subject: CN=f14b0ff001b6d47e023c10a2d7dda70cf22e1453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:61:66:39:73:40:50:8e:53:62:b0:b5:ba: 68:86:29:8b:2f:ee:b7:24:8a:65:87:6c:86:79:e6: 16:27:ca:66:1c:2d:a8:0e:51:3c:95:e5:4f:75:e1: c8:ad:3e:f8:17:b0:ca:32:04:07:aa:ea:4f:bb:93: d7:38:35:7f:27:86:b7:6c:de:10:ea:22:16:dc:07: 38:7b:fc:a7:88:f2:a5:88:ea:e8:92:77:c4:c9:3c: fb:6e:34:24:68:96:ee:4c:95:fe:8a:8d:8b:e3:ea: 0e:b1:8e:75:50:23:11:19:bc:a9:18:ba:8e:a6:14: 1e:0a:df:0a:84:13:5b:10:43:45:21:2d:0a:55:9e: 53:db:4a:d1:af:f5:14:5d:e8:cb:b2:0d:f0:2e:48: 49:f5:5b:28:7a:ff:4e:7e:4d:49:91:73:03:49:9f: bc:48:8c:3e:ae:de:ba:f3:65:4e:4b:99:cf:4e:71: 8e:65:f0:91:ee:04:08:3e:5b:f3:d0:f7:3e:70:46: f7:6e:03:72:72:be:c0:2c:76:9b:10:99:23:a9:27: 26:63:bb:33:85:40:be:19:eb:5c:7d:22:8e:2a:89: 15:91:1a:78:08:68:bd:ca:1d:89:fa:2f:96:71:e7: 6d:c1:1b:37:02:0f:85:88:9a:b1:e9:dc:be:55:55: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4B:0F:F0:01:B6:D4:7E:02:3C:10:A2:D7:DD:A7:0C:F2:2E:14:53 X509v3 Authority Key Identifier: keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1b:2b:52:bf:36:90:4c:9a:d1:e7:f4:22:af:69:1e:be:7b: a3:71:f6:76:ec:3d:47:cc:11:4a:9d:03:07:95:1a:99:31:42: 72:31:18:81:e1:ab:bb:8e:5c:a1:2a:72:82:68:de:fa:5f:6f: a9:73:95:01:d4:8e:2d:fa:1e:2f:ae:37:07:b0:e3:90:83:e9: f0:53:5c:f5:5f:00:85:a1:47:bb:31:b2:ee:c7:c7:e8:41:37: 10:64:35:cd:8d:69:93:a5:4d:7a:9b:5b:68:2c:22:ad:b9:e4: 08:5d:df:56:f1:88:07:74:c9:1f:78:f8:2b:44:31:08:d1:54: ce:ca:dd:88:b2:4e:ee:50:45:73:a8:69:58:c4:e4:8f:6a:cd: d2:de:1b:8e:57:f0:38:82:a1:32:05:98:4b:20:6b:91:7c:79: b1:d3:4f:b3:4c:1e:d2:f3:b8:e8:6d:bc:f5:81:07:ee:ea:b8: 75:39:1b:3e:f5:05:d2:56:05:a0:a4:75:26:5d:10:21:75:e7: 14:81:0b:5e:af:98:2a:b2:e7:04:d9:e3:a5:33:a7:fe:ea:8e: 68:e9:30:00:62:ad:40:c0:e1:ce:68:ab:36:85:16:8a:5d:a4: 8e:fc:bc:15:e7:ad:e7:70:55:68:db:44:af:de:9f:a7:bb:54: b4:65:ca:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbfsbXKAoeaiexEcKw3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTk3OTZjNWY2MGM1NTUwMWU0NTgwMDg2MTE2MjNiNTA0 OWQ0NzkwHhcNMjUxMjI2MDcwMDQ1WhcNMjUxMjI3MDcwMDQ1WjAzMTEwLwYDVQQD EyhmMTRiMGZmMDAxYjZkNDdlMDIzYzEwYTJkN2RkYTcwY2YyMmUxNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xphZjlzQFCOU2KwtbpohimLL+63 JIplh2yGeeYWJ8pmHC2oDlE8leVPdeHIrT74F7DKMgQHqupPu5PXODV/J4a3bN4Q 6iIW3Ac4e/yniPKliOroknfEyTz7bjQkaJbuTJX+io2L4+oOsY51UCMRGbypGLqO phQeCt8KhBNbEENFIS0KVZ5T20rRr/UUXejLsg3wLkhJ9Vsoev9Ofk1JkXMDSZ+8 SIw+rt6682VOS5nPTnGOZfCR7gQIPlvz0Pc+cEb3bgNycr7ALHabEJkjqScmY7sz hUC+GetcfSKOKokVkRp4CGi9yh2J+i+WcedtwRs3Ag+FiJqx6dy+VVVINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFLD/ABttR+AjwQotfdpwzyLhRTMB8GA1UdIwQY MBaAFFJZeWxfYMVVAeRYAIYRYjtQSdR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYt ZThiYmI1NTE5MjM2LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mYWUwNWMtOWExZS00OWI4LTgwNDYtZThiYmI1NTE5MjM2 LzEvVWxsNWJGOWd4VlVCNUZnQWhoRmlPMUJKMUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRsrUr82 kEya0ef0Iq9pHr57o3H2duw9R8wRSp0DB5UamTFCcjEYgeGru45coSpygmje+l9v qXOVAdSOLfoeL643B7DjkIPp8FNc9V8AhaFHuzGy7sfH6EE3EGQ1zY1pk6VNeptb aCwirbnkCF3fVvGIB3TJH3j4K0QxCNFUzsrdiLJO7lBFc6hpWMTkj2rN0t4bjlfw OIKhMgWYSyBrkXx5sdNPs0we0vO46G289YEH7uq4dTkbPvUF0lYFoKR1Jl0QIXXn FIELXq+YKrLnBNnjpTOn/uqOaOkwAGKtQMDhzmirNoUWil2kjvy8Feet53BVaNtE r96fp7tUtGXKYg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client