This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json) Hash identifier: 0Xes1oSbN7AX1p7Sjw6W4p5+gGJlUR/TBgK0106xmxk= Subject key identifier: 91:74:58:09:22:E8:90:1E:03:D9:67:4B:3B:97:71:44:D7:53:06:C8 Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019B10141F0923975647371246696D3D1534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft Manifest number: 124B Signing time: Fri 12 Dec 2025 01:01:52 +0000 Manifest this update: Fri 12 Dec 2025 01:01:52 +0000 Manifest next update: Sat 13 Dec 2025 01:01:52 +0000 Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=) 2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: M7gFHkNYovgX0n93eyMQfW85AMIIECbhpSznLNCM8cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:1f:09:23:97:56:47:37:12:46:69:6d:3d:15:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Dec 12 01:01:52 2025 GMT Not After : Dec 13 01:01:52 2025 GMT Subject: CN=9174580922e8901e03d9674b3b977144d75306c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:13:98:99:d0:8b:20:50:21:08:1e:69:f2: 04:67:1d:76:67:31:05:b9:49:53:25:7c:16:e6:94: 12:9a:1c:d9:3f:41:0f:a7:40:67:23:7e:d5:5f:46: 2b:70:eb:cf:ac:93:b7:9f:ac:97:f0:82:04:d6:aa: c5:5a:33:0d:e9:ad:4f:37:c7:b3:a6:e3:83:be:4d: a9:b6:50:c8:03:61:80:21:c5:f9:f3:06:b7:be:95: f3:de:b9:92:22:d5:5d:91:92:71:cf:ba:fe:47:8e: b5:3e:e5:40:aa:d8:1c:b6:34:7d:26:13:59:84:17: c6:0c:00:e9:6e:0f:54:a8:76:d3:52:cf:0e:0c:56: 0f:55:1d:b3:f3:e5:5d:a2:65:14:bf:8c:39:9f:18: 3e:3e:48:df:94:f4:da:c7:af:7a:74:4b:9d:20:e4: 6e:94:33:1f:7d:df:ce:41:e0:db:d3:01:99:a2:98: 11:b7:e9:60:4a:c2:b9:58:e2:4b:52:d0:96:e8:d1: a2:87:7e:22:83:1b:a8:48:8f:ba:a5:79:6d:97:c9: c3:63:3d:f2:5a:ca:e5:9e:2c:c9:32:69:2a:da:b9: 09:e8:cf:b4:41:f3:e1:ba:67:9e:eb:6b:ef:20:9a: bd:7e:50:09:45:b0:5d:50:05:b0:1d:94:ad:86:e4: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:74:58:09:22:E8:90:1E:03:D9:67:4B:3B:97:71:44:D7:53:06:C8 X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3e:c8:eb:d3:c5:1b:72:bf:1f:43:64:00:6b:04:4c:82:7c: b5:99:94:42:0c:dc:a5:0b:6c:9d:0e:70:3a:61:dc:7d:ff:5d: 0a:8a:4b:d3:16:60:f7:fe:6f:96:20:66:2e:1a:c5:2e:b7:bd: bd:58:6e:85:be:b6:21:cf:48:25:c5:11:12:84:f7:8f:14:8c: 52:1d:8c:4e:19:d3:54:2c:32:2f:0c:5d:76:69:c8:0d:a5:0e: 6f:84:c6:14:e7:31:b2:f4:0a:a4:f5:c7:62:4b:45:82:78:3f: 7c:15:df:2f:50:8f:67:c9:6f:2f:ef:1a:27:b1:f1:3e:78:57: 7b:7d:61:e3:75:3d:0e:74:db:4a:d1:92:70:9b:8e:f1:06:cc: d8:97:a3:39:2d:65:ff:34:22:f2:1d:09:f6:fc:ea:70:81:c7: de:b6:4b:03:c8:97:e8:c8:a2:cc:0d:0b:da:2f:9d:8f:fd:16: 8d:c3:b0:cb:cd:00:6d:c8:54:06:3c:d6:f3:46:93:9d:f3:eb: 86:a4:4f:7c:fc:29:41:6a:8c:55:63:6f:fb:a1:cf:21:71:dd: 53:49:ec:fb:cd:a0:f6:78:1f:e4:df:16:8a:32:49:04:a3:9a: b3:6e:d7:2e:56:02:9c:30:5a:6b:42:08:0b:58:c4:95:db:30: bd:b4:15:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFB8JI5dWRzcSRmltPRU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjUxMjEyMDEwMTUyWhcNMjUxMjEzMDEwMTUyWjAzMTEwLwYDVQQD Eyg5MTc0NTgwOTIyZTg5MDFlMDNkOTY3NGIzYjk3NzE0NGQ3NTMwNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNgTmJnQiyBQIQgeafIEZx12ZzEF uUlTJXwW5pQSmhzZP0EPp0BnI37VX0YrcOvPrJO3n6yX8IIE1qrFWjMN6a1PN8ez puODvk2ptlDIA2GAIcX58wa3vpXz3rmSItVdkZJxz7r+R461PuVAqtgctjR9JhNZ hBfGDADpbg9UqHbTUs8ODFYPVR2z8+VdomUUv4w5nxg+PkjflPTax696dEudIORu lDMffd/OQeDb0wGZopgRt+lgSsK5WOJLUtCW6NGih34igxuoSI+6pXltl8nDYz3y WsrlnizJMmkq2rkJ6M+0QfPhumee62vvIJq9flAJRbBdUAWwHZSthuTGfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF0WAki6JAeA9lnSzuXcUTXUwbIMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlz7I69PF G3K/H0NkAGsETIJ8tZmUQgzcpQtsnQ5wOmHcff9dCopL0xZg9/5vliBmLhrFLre9 vVhuhb62Ic9IJcUREoT3jxSMUh2MThnTVCwyLwxddmnIDaUOb4TGFOcxsvQKpPXH YktFgng/fBXfL1CPZ8lvL+8aJ7HxPnhXe31h43U9DnTbStGScJuO8QbM2JejOS1l /zQi8h0J9vzqcIHH3rZLA8iX6MiizA0L2i+dj/0WjcOwy80AbchUBjzW80aTnfPr hqRPfPwpQWqMVWNv+6HPIXHdU0ns+82g9ngf5N8WijJJBKOas27XLlYCnDBaa0II C1jEldswvbQVQw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:42:03 2025 by rpki-client