This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json) Hash identifier: k5V77nKw35xEhx8+V92sLqa9vXKfnNn7A2bO/YOOOvI= Subject key identifier: 39:5C:1B:83:B5:9B:FD:FB:56:94:4B:4A:8D:37:1C:81:6D:CC:EA:5E Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057 Certificate serial: 019B59765E86261E96CDFF782DE2DD2B6E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft Manifest number: 13CB Signing time: Fri 26 Dec 2025 07:01:28 +0000 Manifest this update: Fri 26 Dec 2025 07:01:28 +0000 Manifest next update: Sat 27 Dec 2025 07:01:28 +0000 Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: fXCcIEPTH6LS1Go6N6/W85nuiUgMu6h/4bPucFbI1SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:5e:86:26:1e:96:cd:ff:78:2d:e2:dd:2b:6e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057 Validity Not Before: Dec 26 07:01:28 2025 GMT Not After : Dec 27 07:01:28 2025 GMT Subject: CN=395c1b83b59bfdfb56944b4a8d371c816dccea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:3d:8a:b6:f1:a1:55:21:6f:3d:d3:8d:9e: b1:b8:46:ba:17:e3:f4:2e:fc:47:fd:41:51:cf:cf: 94:eb:87:fd:01:4e:e4:53:af:1a:3c:3e:17:23:75: be:e2:b6:ea:0f:30:bc:42:30:04:a5:ea:25:e0:6a: 21:fd:32:cb:a5:e7:d0:91:3d:6f:a6:cc:dd:d4:69: 66:e4:5f:0f:46:9c:06:71:6b:5b:10:14:f4:7f:f5: 97:07:7d:ff:a2:ab:b6:ae:37:ef:6e:ab:7c:bc:62: bb:ff:0b:31:44:c3:af:88:43:d0:97:27:b2:62:3d: cb:81:eb:d4:d1:7a:ae:06:95:c9:b8:a8:7f:96:10: 26:95:42:55:17:ed:d0:16:b8:c8:e1:a1:cc:58:2c: 51:8b:e5:3c:5d:b5:5f:28:85:a6:81:70:3b:2e:c4: b6:87:bb:f3:de:34:30:2f:33:bf:3c:aa:ec:f3:f9: d1:99:81:15:04:a1:a6:92:c5:cc:4f:86:dd:6f:3b: a1:66:22:c2:fb:77:e3:0f:84:a7:a2:d4:40:67:8b: b1:56:c6:40:9a:8e:ce:97:2a:b6:26:4f:df:b7:9b: da:13:c8:d8:6e:82:84:d9:4f:0f:1c:fa:fd:58:53: ec:06:26:34:11:65:b6:ad:d9:d3:af:eb:de:76:a6: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:1B:83:B5:9B:FD:FB:56:94:4B:4A:8D:37:1C:81:6D:CC:EA:5E X509v3 Authority Key Identifier: keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:26:ae:5d:9e:bc:c9:f5:58:da:17:f2:0a:78:58:75:4c:7d: 8f:10:33:9d:2d:1a:7f:35:f4:e7:c7:73:43:bd:44:27:a8:c5: d7:ce:36:04:aa:38:bf:43:84:19:61:ef:12:90:f7:56:b5:4c: 81:d4:52:14:9e:97:4e:af:1f:c3:d2:e9:50:53:f2:14:bd:07: 90:50:52:16:6e:49:d8:99:0b:2c:ec:bb:ee:c4:35:b8:ba:23: 64:08:79:10:cc:e8:bb:29:27:1e:4e:ac:68:5a:b8:6a:2a:99: c2:c0:2a:f9:b2:ac:51:6d:bd:96:48:ea:29:4f:9f:2f:3e:f3: c7:42:5d:55:58:de:c4:81:75:ef:cf:e6:09:cd:5d:a9:dd:e0: ef:35:f2:ee:1c:6a:66:80:88:d0:ce:97:c1:14:1c:b6:df:58: 76:ca:8e:14:10:18:77:c2:db:81:c1:b5:f4:3d:c8:14:7d:70: eb:64:c2:e9:a7:fc:df:d5:81:7a:fd:6a:68:d3:91:86:7a:8b: fc:1f:d7:bd:50:79:c4:62:c8:87:3e:21:98:1d:51:89:ce:19: ba:25:69:41:ff:73:ef:84:bd:6e:b8:e2:d4:64:17:68:2e:bd: 8d:ad:0d:9e:44:dc:7d:6e:1e:58:bb:2c:18:a7:06:4d:1a:8f: 59:3a:ee:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdl6GJh6Wzf94LeLdK259MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4 OGQwNTcwHhcNMjUxMjI2MDcwMTI4WhcNMjUxMjI3MDcwMTI4WjAzMTEwLwYDVQQD EygzOTVjMWI4M2I1OWJmZGZiNTY5NDRiNGE4ZDM3MWM4MTZkY2NlYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rI9irbxoVUhbz3TjZ6xuEa6F+P0 LvxH/UFRz8+U64f9AU7kU68aPD4XI3W+4rbqDzC8QjAEpeol4Goh/TLLpefQkT1v pszd1Glm5F8PRpwGcWtbEBT0f/WXB33/oqu2rjfvbqt8vGK7/wsxRMOviEPQlyey Yj3LgevU0XquBpXJuKh/lhAmlUJVF+3QFrjI4aHMWCxRi+U8XbVfKIWmgXA7LsS2 h7vz3jQwLzO/PKrs8/nRmYEVBKGmksXMT4bdbzuhZiLC+3fjD4SnotRAZ4uxVsZA mo7Olyq2Jk/ft5vaE8jYboKE2U8PHPr9WFPsBiY0EWW2rdnTr+vedqb4cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlcG4O1m/37VpRLSo03HIFtzOpeMB8GA1UdIwQY MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2 LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiauXZ68 yfVY2hfyCnhYdUx9jxAznS0afzX058dzQ71EJ6jF1842BKo4v0OEGWHvEpD3VrVM gdRSFJ6XTq8fw9LpUFPyFL0HkFBSFm5J2JkLLOy77sQ1uLojZAh5EMzouyknHk6s aFq4aiqZwsAq+bKsUW29lkjqKU+fLz7zx0JdVVjexIF178/mCc1dqd3g7zXy7hxq ZoCI0M6XwRQctt9YdsqOFBAYd8LbgcG19D3IFH1w62TC6af839WBev1qaNORhnqL /B/XvVB5xGLIhz4hmB1Ric4ZuiVpQf9z74S9brji1GQXaC69ja0NnkTcfW4eWLss GKcGTRqPWTrubA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client