This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft File: ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft (raw, json) Hash identifier: ckEeIsyluliuEPuhbJ0sFk/7K9moR5HWM4WL1+JU/aU= Subject key identifier: 8B:F9:BB:5D:55:C4:97:60:C1:D0:E4:B3:72:21:78:D1:B3:18:C1:CA Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26 Certificate issuer: /CN=50bb4c781a5b393ff07fb405e528179f5ab87726 Certificate serial: 019B07B530E66D5A2867B4DC98ADDB723F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft Manifest number: 1700 Signing time: Wed 10 Dec 2025 10:01:13 +0000 Manifest this update: Wed 10 Dec 2025 10:01:13 +0000 Manifest next update: Thu 11 Dec 2025 10:01:13 +0000 Files and hashes: 1: ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl (hash: W5mEVyU1XTBzg7TKoNid34Ao45IcxduD0KKXWgdiSdU=) 2: osNkGM30SnMymb2Awx_H5QpAsjo.roa (hash: HAaDhq9nK6jC5S5RvUgE6hoFlbMOsKI55ry4MCnd8LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:30:e6:6d:5a:28:67:b4:dc:98:ad:db:72:3f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726 Validity Not Before: Dec 10 10:01:13 2025 GMT Not After : Dec 11 10:01:13 2025 GMT Subject: CN=8bf9bb5d55c49760c1d0e4b3722178d1b318c1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:c6:34:50:66:55:fa:75:7b:b7:d1:9d:00: e0:0d:3d:47:c2:21:ed:d5:b4:4a:fa:fc:ee:50:eb: a1:cc:1e:45:2a:cf:e3:a6:a2:9c:13:5d:d6:e0:1a: 54:6e:bd:71:a5:af:81:14:4d:fe:65:c9:99:dc:db: 85:be:e2:68:d2:85:7b:6b:85:70:c6:c7:78:93:3b: e1:96:78:7a:14:81:91:f3:88:49:a5:23:9b:5b:00: 9a:17:16:8c:18:90:e8:b1:df:1e:3d:71:3b:88:59: 08:39:67:46:9e:5b:fc:1d:ad:9e:1c:09:1b:97:43: 6c:c4:46:b4:e5:42:15:be:b6:ab:bc:33:42:e9:66: 47:23:bf:cb:a4:66:cf:e7:f3:97:d4:07:bb:2e:45: 4a:5d:a9:17:74:7d:d8:7a:f7:c3:14:2d:76:20:8a: 61:e6:24:00:85:29:9c:22:4e:bf:9e:f1:c3:96:1d: c5:27:0e:36:f8:99:41:f4:ee:d4:f4:29:ce:7b:8e: b9:01:32:26:ec:a8:a5:68:14:e0:e7:0f:6d:38:15: e7:30:50:b5:ea:d2:23:1c:8e:23:52:65:f3:a4:5d: 24:77:06:38:10:3c:06:da:a3:3a:6c:24:72:78:fa: 89:67:81:ae:68:aa:20:eb:8b:cb:ed:3d:8b:38:81: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F9:BB:5D:55:C4:97:60:C1:D0:E4:B3:72:21:78:D1:B3:18:C1:CA X509v3 Authority Key Identifier: keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:52:ea:1d:dc:1f:37:07:e9:7a:41:64:83:7a:74:22:5f:6a: 60:0f:f7:b0:e2:66:d7:b4:25:8e:39:88:09:e5:13:89:da:0a: c6:93:e6:f0:96:57:fa:20:9d:f5:ee:73:83:81:cf:37:c3:c3: 12:fe:1d:0f:ff:86:c8:8e:70:e5:b8:51:ac:7a:91:67:73:a5: 1d:76:83:f4:8c:fd:4e:06:c4:3a:ab:e6:d8:2b:09:5b:6e:29: 04:d6:1f:76:09:40:cf:40:89:5b:e4:af:34:66:b1:d5:97:74: 91:7a:6a:f5:98:b5:16:7e:bf:fe:26:50:4b:13:e6:7d:1d:b5: db:3e:36:ef:65:4a:be:b7:32:84:e2:db:66:86:d5:2e:a4:ba: 1c:f9:92:b1:c0:65:34:5f:96:c6:cc:ca:54:de:88:28:20:0d: 6f:a2:92:5b:fc:32:3c:95:7b:5d:41:20:15:46:24:53:06:ba: 52:f7:85:8e:af:d9:a2:85:a3:03:9a:5a:83:24:2e:7b:50:bf: 68:a2:ef:d6:cf:78:ee:72:59:f8:79:2b:62:80:67:58:87:77: 4c:37:79:9f:db:54:34:7b:7a:72:4a:ad:a3:23:d5:21:9e:7c: 93:4b:e5:68:b9:d7:64:99:f8:00:ef:1d:f2:35:58:42:20:d1: de:85:c2:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtTDmbVooZ7TcmK3bcj94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYmI0Yzc4MWE1YjM5M2ZmMDdmYjQwNWU1MjgxNzlmNWFi ODc3MjYwHhcNMjUxMjEwMTAwMTEzWhcNMjUxMjExMTAwMTEzWjAzMTEwLwYDVQQD Eyg4YmY5YmI1ZDU1YzQ5NzYwYzFkMGU0YjM3MjIxNzhkMWIzMThjMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvfGNFBmVfp1e7fRnQDgDT1HwiHt 1bRK+vzuUOuhzB5FKs/jpqKcE13W4BpUbr1xpa+BFE3+ZcmZ3NuFvuJo0oV7a4Vw xsd4kzvhlnh6FIGR84hJpSObWwCaFxaMGJDosd8ePXE7iFkIOWdGnlv8Ha2eHAkb l0NsxEa05UIVvrarvDNC6WZHI7/LpGbP5/OX1Ae7LkVKXakXdH3YevfDFC12IIph 5iQAhSmcIk6/nvHDlh3FJw42+JlB9O7U9CnOe465ATIm7KilaBTg5w9tOBXnMFC1 6tIjHI4jUmXzpF0kdwY4EDwG2qM6bCRyePqJZ4GuaKog64vL7T2LOIHTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv5u11VxJdgwdDks3IheNGzGMHKMB8GA1UdIwQY MBaAFFC7THgaWzk/8H+0BeUoF59auHcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQt Yjg3ZjkxYzI5YjllLzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQtYjg3ZjkxYzI5Yjll LzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1LqHdwf NwfpekFkg3p0Il9qYA/3sOJm17QljjmICeUTidoKxpPm8JZX+iCd9e5zg4HPN8PD Ev4dD/+GyI5w5bhRrHqRZ3OlHXaD9Iz9TgbEOqvm2CsJW24pBNYfdglAz0CJW+Sv NGax1Zd0kXpq9Zi1Fn6//iZQSxPmfR212z4272VKvrcyhOLbZobVLqS6HPmSscBl NF+WxszKVN6IKCANb6KSW/wyPJV7XUEgFUYkUwa6UveFjq/ZooWjA5pagyQue1C/ aKLv1s947nJZ+HkrYoBnWId3TDd5n9tUNHt6ckqtoyPVIZ58k0vlaLnXZJn4AO8d 8jVYQiDR3oXCcw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:55 2025 by rpki-client