This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json) Hash identifier: oRLW8BSsFlk4A/T3euURJcKOWCbcXFOogSQfDN1BAaU= Subject key identifier: D1:FF:09:04:B0:79:8D:36:1A:CF:88:D0:01:0B:00:57:FB:2D:BE:73 Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Certificate serial: 019B37218A7D0BA6F537A5E291AADA567B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft Manifest number: 1598 Signing time: Fri 19 Dec 2025 15:01:43 +0000 Manifest this update: Fri 19 Dec 2025 15:01:43 +0000 Manifest next update: Sat 20 Dec 2025 15:01:43 +0000 Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: QsZykbk27UDRdjVqa2UVs5KOyRUOqk/akglwyiyJQTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:8a:7d:0b:a6:f5:37:a5:e2:91:aa:da:56:7b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Validity Not Before: Dec 19 15:01:43 2025 GMT Not After : Dec 20 15:01:43 2025 GMT Subject: CN=d1ff0904b0798d361acf88d0010b0057fb2dbe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:cd:29:01:8f:4f:dc:d2:9c:5a:ef:27:92: ca:60:78:30:ca:de:3f:a2:3b:f5:10:df:fa:77:5c: d2:5d:db:77:b5:53:5d:b4:2b:0b:30:f3:9a:5f:b6: fd:ea:cc:1d:eb:94:6b:0d:41:28:bf:ec:a6:57:0f: c6:7d:82:16:22:94:f3:62:f5:0e:61:55:67:cc:97: 1a:25:b5:7a:c4:4f:9b:52:46:a6:a0:63:f9:a0:0f: d8:a0:0f:29:d4:59:73:51:8f:c0:23:e9:ea:24:e9: 19:03:be:94:63:db:d4:ff:7c:17:ad:e8:c1:11:94: 42:1d:a2:0d:33:2f:a0:92:bd:b9:36:f2:b4:bb:ef: 1b:40:8d:a1:15:51:8a:a8:85:36:39:d8:84:b6:08: 09:2f:1b:3e:e0:1d:7d:e6:ed:52:93:de:e0:19:91: 00:ad:24:cc:77:ab:c5:d2:2b:7c:6c:82:11:9b:0a: 3e:6a:1c:28:bf:b7:6e:70:8d:16:ab:8b:7a:2e:a0: b8:0c:5c:17:ef:7f:07:9a:21:ad:66:12:bc:41:c3: 43:8e:a6:68:b7:ee:d3:a8:1f:fb:19:4c:9a:d0:51: ca:fa:c7:e5:bf:c5:97:84:1a:02:77:39:34:e0:4b: 6b:ba:e9:78:9f:d0:38:5e:47:9b:1a:a5:1c:92:2b: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:09:04:B0:79:8D:36:1A:CF:88:D0:01:0B:00:57:FB:2D:BE:73 X509v3 Authority Key Identifier: keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a4:b9:5c:eb:9a:c0:af:a4:27:3a:ab:59:5a:74:0b:a8:ae: f0:b7:a8:a3:e9:15:b0:75:22:2a:e8:ab:21:56:a5:e6:18:9c: ad:61:d7:6b:9f:69:c6:3a:9a:09:b7:65:ee:2a:22:71:87:e2: 11:8e:7a:4c:0b:d7:7c:4a:13:ed:6a:3a:36:4e:58:7f:3b:86: ea:fb:4d:ba:d8:de:c5:56:bd:dd:82:8e:a8:b7:08:86:2f:67: dc:ca:48:f6:a4:08:2b:c3:f9:48:00:ab:51:30:d7:59:b4:ff: b7:1f:e5:98:17:af:6c:63:e8:b0:9c:5d:0b:17:17:83:69:02: b7:b0:a7:19:26:44:be:26:2b:56:6b:77:b6:89:85:28:6a:27: e3:42:9e:df:f5:96:cb:ae:7f:22:06:49:31:fd:5a:51:b7:bf: b9:d8:fb:12:c7:d9:a5:46:82:aa:54:41:92:ab:20:b9:3e:e8: e1:f4:30:58:09:40:26:ee:81:ec:09:4b:db:56:5b:ac:45:b0: 74:19:49:fd:4c:ae:dd:bb:f1:21:e1:b7:1b:7c:66:93:7f:72: ed:21:0a:7b:04:25:d8:41:d8:bf:4d:cc:4b:6f:6b:53:d7:00: 8c:8f:15:18:ec:6b:c5:48:71:cd:61:bb:27:94:6c:cf:3b:cd: 18:2a:88:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYp9C6b1N6XikaraVnuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTUwYjJhNTFjOGY1YWRiOTM3YjIyYTkwYzcyMGY2YjA0 ZjI5NzMwHhcNMjUxMjE5MTUwMTQzWhcNMjUxMjIwMTUwMTQzWjAzMTEwLwYDVQQD EyhkMWZmMDkwNGIwNzk4ZDM2MWFjZjg4ZDAwMTBiMDA1N2ZiMmRiZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LLNKQGPT9zSnFrvJ5LKYHgwyt4/ ojv1EN/6d1zSXdt3tVNdtCsLMPOaX7b96swd65RrDUEov+ymVw/GfYIWIpTzYvUO YVVnzJcaJbV6xE+bUkamoGP5oA/YoA8p1FlzUY/AI+nqJOkZA76UY9vU/3wXrejB EZRCHaINMy+gkr25NvK0u+8bQI2hFVGKqIU2OdiEtggJLxs+4B195u1Sk97gGZEA rSTMd6vF0it8bIIRmwo+ahwov7ducI0Wq4t6LqC4DFwX738HmiGtZhK8QcNDjqZo t+7TqB/7GUya0FHK+sflv8WXhBoCdzk04Etruul4n9A4XkebGqUckitYlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH/CQSweY02Gs+I0AELAFf7Lb5zMB8GA1UdIwQY MBaAFIPlCypRyPWtuTeyKpDHIPawTylzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2Et YjgzOWQ5MjAyMTA2LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2EtYjgzOWQ5MjAyMTA2 LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaS5XOua wK+kJzqrWVp0C6iu8Leoo+kVsHUiKuirIVal5hicrWHXa59pxjqaCbdl7ioicYfi EY56TAvXfEoT7Wo6Nk5YfzuG6vtNutjexVa93YKOqLcIhi9n3MpI9qQIK8P5SACr UTDXWbT/tx/lmBevbGPosJxdCxcXg2kCt7CnGSZEviYrVmt3tomFKGon40Ke3/WW y65/IgZJMf1aUbe/udj7EsfZpUaCqlRBkqsguT7o4fQwWAlAJu6B7AlL21ZbrEWw dBlJ/Uyu3bvxIeG3G3xmk39y7SEKewQl2EHYv03MS29rU9cAjI8VGOxrxUhxzWG7 J5RszzvNGCqIeA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:05 2025 by rpki-client