This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json) Hash identifier: cE6XrMMLTREpO6Xv4UGDByBKVkHtz4LkaNvMnG7aUi8= Subject key identifier: C7:88:A1:63:0A:68:41:BE:7A:DC:36:8C:41:7E:2C:6E:CF:D3:C2:7C Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Certificate serial: 019B5A52111688C7C312C4DEA5EDF0DA56C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft Manifest number: 1649 Signing time: Fri 26 Dec 2025 11:01:26 +0000 Manifest this update: Fri 26 Dec 2025 11:01:26 +0000 Manifest next update: Sat 27 Dec 2025 11:01:26 +0000 Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: AAC0DwxxpByKZqoLBvVCijnC2H0Fdi2u1MS8z/ROlhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:11:16:88:c7:c3:12:c4:de:a5:ed:f0:da:56:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Validity Not Before: Dec 26 11:01:26 2025 GMT Not After : Dec 27 11:01:26 2025 GMT Subject: CN=c788a1630a6841be7adc368c417e2c6ecfd3c27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:42:64:b8:84:af:81:8f:3d:51:6d:27:8e: ff:ec:5a:82:19:8d:85:39:77:58:e9:b7:43:0a:ae: ed:f5:46:3f:ef:ab:28:43:f2:c6:d3:38:47:2c:f7: ff:29:18:56:3f:47:ca:4b:a1:94:d2:0c:33:a4:ee: 56:7a:e7:3c:4f:47:71:c6:35:99:c5:63:41:ad:87: 2f:a0:89:ac:13:fa:12:4e:8b:1b:53:a1:91:14:54: ee:9c:27:c6:4a:ce:b4:6f:6b:42:24:e4:d7:b9:5a: c3:f6:c0:6d:b2:2d:38:d6:e7:7c:4c:64:6e:c9:7b: 1a:37:5a:c4:23:14:5f:09:a4:11:2c:34:3b:e2:cb: f8:83:19:c1:6b:10:56:99:74:43:af:ca:53:14:8c: 58:cc:bb:8f:69:4d:27:9d:98:fe:ce:86:fa:ab:ab: 9b:ed:d2:8a:b3:96:fd:99:86:b3:02:c2:49:b6:f0: a4:dd:9e:19:a9:f0:c9:cb:04:90:d5:ad:8b:98:d1: 89:6b:16:ca:b0:f7:d9:8d:cf:f8:25:74:f0:26:ec: 73:c1:10:0b:7f:e0:a9:09:db:03:64:25:b3:13:43: 14:1f:91:6a:ef:a3:3b:ba:71:c7:9f:56:6f:21:13: dc:9b:79:b9:22:43:65:5b:9d:e5:91:42:17:d2:80: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:88:A1:63:0A:68:41:BE:7A:DC:36:8C:41:7E:2C:6E:CF:D3:C2:7C X509v3 Authority Key Identifier: keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:b8:dc:80:61:d0:5b:92:5c:2b:27:96:b9:7e:7e:91:cc: 78:a2:92:e0:a2:69:5d:7a:0e:93:ed:5f:1f:91:90:cf:10:21: 37:19:df:51:7a:9e:99:a4:1a:25:06:3f:a2:d0:aa:16:59:80: 16:9d:bc:24:34:b4:64:22:98:1b:09:c7:fa:02:67:49:2b:3b: b0:2c:d9:f3:41:4a:43:27:f6:6a:5a:81:c8:b8:e4:62:03:61: 3f:62:74:b4:31:fd:4a:73:7d:31:07:bd:28:3a:51:dc:a9:d8: 31:08:91:06:07:bd:59:ff:78:39:90:81:b7:c2:73:d3:51:ca: 68:8e:51:46:c9:57:b8:8a:0f:00:53:99:0c:fb:ec:26:34:07: fb:c2:b8:53:b7:9b:f6:be:56:73:c0:54:19:78:48:2e:77:b7: 6f:b2:e7:a8:97:8b:e4:e1:36:22:63:a5:64:8d:72:07:b6:f5: c7:2f:2e:72:71:16:f3:d1:46:d2:ea:51:8a:24:41:06:94:f5: ca:d0:53:4a:cd:04:21:f1:93:c7:ae:7e:16:85:cd:62:82:02: b3:d1:55:73:51:02:0e:7a:38:4f:65:70:b0:c3:ca:0f:a4:07: 00:6f:04:b9:d6:31:a4:41:5b:70:1c:ea:26:22:2f:6c:1e:a1: f0:97:aa:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhEWiMfDEsTepe3w2lbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx OWQzNWEwHhcNMjUxMjI2MTEwMTI2WhcNMjUxMjI3MTEwMTI2WjAzMTEwLwYDVQQD EyhjNzg4YTE2MzBhNjg0MWJlN2FkYzM2OGM0MTdlMmM2ZWNmZDNjMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf1CZLiEr4GPPVFtJ47/7FqCGY2F OXdY6bdDCq7t9UY/76soQ/LG0zhHLPf/KRhWP0fKS6GU0gwzpO5Weuc8T0dxxjWZ xWNBrYcvoImsE/oSTosbU6GRFFTunCfGSs60b2tCJOTXuVrD9sBtsi041ud8TGRu yXsaN1rEIxRfCaQRLDQ74sv4gxnBaxBWmXRDr8pTFIxYzLuPaU0nnZj+zob6q6ub 7dKKs5b9mYazAsJJtvCk3Z4ZqfDJywSQ1a2LmNGJaxbKsPfZjc/4JXTwJuxzwRAL f+CpCdsDZCWzE0MUH5Fq76M7unHHn1ZvIRPcm3m5IkNlW53lkUIX0oDlZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeIoWMKaEG+etw2jEF+LG7P08J8MB8GA1UdIwQY MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnW43IBh 0FuSXCsnlrl+fpHMeKKS4KJpXXoOk+1fH5GQzxAhNxnfUXqemaQaJQY/otCqFlmA Fp28JDS0ZCKYGwnH+gJnSSs7sCzZ80FKQyf2alqByLjkYgNhP2J0tDH9SnN9MQe9 KDpR3KnYMQiRBge9Wf94OZCBt8Jz01HKaI5RRslXuIoPAFOZDPvsJjQH+8K4U7eb 9r5Wc8BUGXhILne3b7LnqJeL5OE2ImOlZI1yB7b1xy8ucnEW89FG0upRiiRBBpT1 ytBTSs0EIfGTx65+FoXNYoICs9FVc1ECDno4T2VwsMPKD6QHAG8EudYxpEFbcBzq JiIvbB6h8JeqcA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client