This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: CC2TRgj1zzka4WJwFFA0B4lMqJqAV188CZLJvcOOy1I= Subject key identifier: 98:29:9B:0A:AA:17:1E:7B:23:15:B9:39:AB:72:6A:2E:9E:43:D0:93 Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019ACBD730FF2DAAABCA04C5DE6F5DC5A865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0E11 Signing time: Fri 28 Nov 2025 19:01:08 +0000 Manifest this update: Fri 28 Nov 2025 19:01:08 +0000 Manifest next update: Sat 29 Nov 2025 19:01:08 +0000 Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: 7Hn07ID5dkl0CUGo6PIR0lw5n7VBNFslEFMJ9tdMPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:d7:30:ff:2d:aa:ab:ca:04:c5:de:6f:5d:c5:a8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Nov 28 19:01:08 2025 GMT Not After : Nov 29 19:01:08 2025 GMT Subject: CN=98299b0aaa171e7b2315b939ab726a2e9e43d093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:8b:88:06:fd:84:b0:29:cd:9d:f0:97:30: 85:9c:fc:5c:b9:06:7c:23:c2:00:2b:bf:b6:19:50: f6:2f:92:61:db:51:0c:d0:b5:e3:b6:8b:39:dc:71: 84:42:e7:ed:82:19:fa:82:13:98:7e:59:02:72:2a: c0:3b:d5:08:b3:c3:a4:7e:5f:f6:2b:c7:f0:cc:c3: 12:5b:6b:c6:4b:06:c1:a0:84:b2:7e:a4:52:a6:ca: 88:93:51:37:58:74:d5:51:a4:c9:b0:36:a6:4b:c1: a9:26:f5:ba:77:c0:8c:de:c2:12:53:44:f2:ec:83: 9d:59:2d:9c:c7:63:db:ae:96:8d:f8:65:e1:58:d8: 93:80:d2:45:26:cd:2e:5d:04:d8:65:20:99:42:fd: 09:5d:28:9e:d2:6b:03:d6:a3:75:c5:a7:9f:67:b0: d4:81:29:72:71:4b:7f:89:60:c1:45:e1:36:77:e9: 8e:ba:fc:56:f5:d0:af:be:85:d9:38:78:a8:2f:44: 22:43:f1:a3:0c:50:1c:ca:37:5a:a4:02:de:09:39: ad:c1:6e:88:65:f7:c8:35:ed:b2:3c:55:88:1c:7d: 69:74:09:d5:5a:1b:7c:d2:8b:33:56:c6:e2:42:dc: bd:67:ad:41:6e:5d:47:8c:05:97:f2:57:05:3a:58: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:9B:0A:AA:17:1E:7B:23:15:B9:39:AB:72:6A:2E:9E:43:D0:93 X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:ca:3d:0f:a6:63:03:1d:b1:d0:27:fe:80:80:bf:e5:f6: 6f:db:aa:cd:09:63:3a:a1:9c:27:9c:a2:9a:c5:9a:01:c2:58: 7b:38:09:f6:88:11:2d:65:b5:7e:a7:27:8f:c8:cf:2e:8e:c0: 39:81:e0:74:a1:dc:84:a6:a4:29:2f:d7:d6:0c:87:b1:f3:2e: 4b:85:16:06:db:a4:a9:5b:12:15:3a:6b:10:9f:0e:42:46:71: dd:6a:e1:53:92:e4:3a:68:84:03:3a:cc:e9:bf:33:6e:78:17: 3d:03:2e:e2:b6:e6:78:aa:e1:f6:0d:65:ea:72:df:35:88:bb: 9b:c0:bf:70:d9:3c:f9:88:20:04:29:8b:3e:66:8d:13:13:6a: 83:8a:c9:f4:19:69:16:dc:3c:27:c2:f0:94:53:2f:38:27:fe: 01:3a:9e:c5:89:28:15:21:62:e2:a5:da:37:36:55:11:df:26: ff:c2:48:62:1c:57:2f:99:c3:90:de:27:2c:0a:55:1b:e6:96: 4c:30:09:e5:31:30:07:ee:7c:86:dd:49:1a:d0:6a:43:50:7d: eb:ec:c7:5d:ac:7a:af:a2:0d:77:77:3f:b5:40:5a:6a:93:48: 10:24:10:7c:90:23:cd:d0:7d:e7:6b:a0:e2:4f:99:62:9e:fc: e7:07:d2:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrL1zD/LaqrygTF3m9dxahlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjUxMTI4MTkwMTA4WhcNMjUxMTI5MTkwMTA4WjAzMTEwLwYDVQQD Eyg5ODI5OWIwYWFhMTcxZTdiMjMxNWI5MzlhYjcyNmEyZTllNDNkMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLiAb9hLApzZ3wlzCFnPxcuQZ8 I8IAK7+2GVD2L5Jh21EM0LXjtos53HGEQuftghn6ghOYflkCcirAO9UIs8Okfl/2 K8fwzMMSW2vGSwbBoISyfqRSpsqIk1E3WHTVUaTJsDamS8GpJvW6d8CM3sISU0Ty 7IOdWS2cx2PbrpaN+GXhWNiTgNJFJs0uXQTYZSCZQv0JXSie0msD1qN1xaefZ7DU gSlycUt/iWDBReE2d+mOuvxW9dCvvoXZOHioL0QiQ/GjDFAcyjdapALeCTmtwW6I ZffINe2yPFWIHH1pdAnVWht80oszVsbiQty9Z61Bbl1HjAWX8lcFOlj3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgpmwqqFx57IxW5Oatyai6eQ9CTMB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzHKPQ+m YwMdsdAn/oCAv+X2b9uqzQljOqGcJ5yimsWaAcJYezgJ9ogRLWW1fqcnj8jPLo7A OYHgdKHchKakKS/X1gyHsfMuS4UWBtukqVsSFTprEJ8OQkZx3WrhU5LkOmiEAzrM 6b8zbngXPQMu4rbmeKrh9g1l6nLfNYi7m8C/cNk8+YggBCmLPmaNExNqg4rJ9Blp Ftw8J8LwlFMvOCf+ATqexYkoFSFi4qXaNzZVEd8m/8JIYhxXL5nDkN4nLApVG+aW TDAJ5TEwB+58ht1JGtBqQ1B96+zHXax6r6INd3c/tUBaapNIECQQfJAjzdB952ug 4k+ZYp785wfS3Q== -----END CERTIFICATE-----Generated at Fri Nov 28 23:43:05 2025 by rpki-client