This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json) Hash identifier: zpjMF+/0LeHNURaidAotyC22HxCQROeHbXfrlaxXtOw= Subject key identifier: 1D:5B:29:3A:1A:EE:0E:53:41:63:FD:25:B4:DE:4B:F2:E8:24:5B:6C Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Certificate serial: 019B465D3465F6A961D76D343260E5232816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 14:01:11 +0000 Manifest this update: Mon 22 Dec 2025 14:01:11 +0000 Manifest next update: Tue 23 Dec 2025 14:01:11 +0000 Files and hashes: 1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=) 2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: dgpYmgUWWUvEsmiC9IJ77xqZ6GEiAZJEjN3evrHygn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:34:65:f6:a9:61:d7:6d:34:32:60:e5:23:28:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Validity Not Before: Dec 22 14:01:11 2025 GMT Not After : Dec 23 14:01:11 2025 GMT Subject: CN=1d5b293a1aee0e534163fd25b4de4bf2e8245b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:87:fa:13:11:da:0b:c8:9e:dd:8f:45:48:97: c5:f4:0a:c4:2f:cf:33:a8:88:81:14:f6:1a:0b:cf: 23:07:b0:db:46:14:64:59:78:3f:01:b8:1b:68:eb: 75:68:28:4d:79:bb:9d:b1:18:24:65:1d:8d:ac:90: fd:c8:c8:19:ec:17:fd:51:a6:88:c2:08:d3:cf:83: a9:1d:02:7b:f1:a0:30:6f:06:b6:62:7f:85:c7:a2: 74:0b:2e:73:76:0d:6e:28:68:12:ab:80:eb:13:43: 73:3b:4e:be:36:95:1e:5a:cc:7f:b5:b5:8e:7c:7e: c8:f4:da:95:3c:30:59:af:86:7b:71:22:b4:ef:0e: b1:50:ce:d3:1e:4d:5c:85:0b:21:cd:f4:9e:e7:4d: b3:44:98:21:4f:5d:68:a9:39:96:70:a4:fa:51:b5: 87:e0:15:e6:91:f3:8e:51:54:13:f1:db:20:81:ec: 2e:96:98:09:04:e6:e0:20:4e:6e:31:e3:c5:11:c4: bd:59:f4:15:02:3b:5c:60:05:a2:d2:d0:91:46:04: a3:80:7d:07:39:ca:8a:c1:63:1c:dd:bd:69:d5:c6: 23:fb:b4:d6:d2:5c:67:de:14:e8:03:6e:e9:5d:a3: 83:e0:93:0d:1d:44:a1:c6:27:11:c8:b5:db:9c:d6: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5B:29:3A:1A:EE:0E:53:41:63:FD:25:B4:DE:4B:F2:E8:24:5B:6C X509v3 Authority Key Identifier: keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:a4:06:d7:01:22:61:98:03:52:d3:25:d1:1f:7a:40:e9: 02:e7:9b:8b:3b:b9:c8:84:00:0e:ea:1b:81:f7:72:31:5c:9d: 38:b2:b1:21:59:f6:f4:62:2e:7f:88:48:22:ab:dd:2f:d3:c4: 81:71:ba:b1:49:29:4f:3f:06:12:d2:68:28:41:3d:30:de:b0: 3b:2d:e8:ec:38:db:e0:10:12:3c:e8:e2:8d:e7:38:bf:51:ac: 9d:60:77:1f:16:b2:77:d6:d4:bf:82:f7:85:57:83:ae:d9:42: 57:16:4c:26:c5:59:52:3b:60:cf:d6:7e:d7:27:67:bd:32:2a: 0c:14:71:c4:12:44:ba:4f:25:17:2e:32:82:d8:d2:97:3d:e9: 51:b0:d8:1f:bb:33:c2:64:f4:fe:6b:22:c0:05:06:9a:4e:1d: 2e:09:24:42:5c:6c:ab:8b:e3:bb:a9:b0:5a:90:ca:a5:62:82: f9:b5:ab:8c:d5:ae:a4:ec:13:1a:b9:e9:a1:c5:b4:70:1f:a7: 82:38:b2:95:fd:98:06:e5:0b:f5:83:1a:5a:7a:f2:bb:d5:63: 94:21:d4:c9:20:0b:15:54:e4:9f:2f:6a:6d:b5:62:2a:68:44: ba:50:7d:09:0a:9f:d2:bc:46:12:89:71:c7:6f:ba:af:a1:c8: c4:0e:26:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXTRl9qlh1200MmDlIygWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5 ZTRjOWUwHhcNMjUxMjIyMTQwMTExWhcNMjUxMjIzMTQwMTExWjAzMTEwLwYDVQQD EygxZDViMjkzYTFhZWUwZTUzNDE2M2ZkMjViNGRlNGJmMmU4MjQ1YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7of6ExHaC8ie3Y9FSJfF9ArEL88z qIiBFPYaC88jB7DbRhRkWXg/AbgbaOt1aChNebudsRgkZR2NrJD9yMgZ7Bf9UaaI wgjTz4OpHQJ78aAwbwa2Yn+Fx6J0Cy5zdg1uKGgSq4DrE0NzO06+NpUeWsx/tbWO fH7I9NqVPDBZr4Z7cSK07w6xUM7THk1chQshzfSe502zRJghT11oqTmWcKT6UbWH 4BXmkfOOUVQT8dsggewulpgJBObgIE5uMePFEcS9WfQVAjtcYAWi0tCRRgSjgH0H OcqKwWMc3b1p1cYj+7TW0lxn3hToA27pXaOD4JMNHUShxicRyLXbnNah/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1bKToa7g5TQWP9JbTeS/LoJFtsMB8GA1UdIwQY MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt OTliNGQ0YWNlNjkzLzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU+kBtcB ImGYA1LTJdEfekDpAuebizu5yIQADuobgfdyMVydOLKxIVn29GIuf4hIIqvdL9PE gXG6sUkpTz8GEtJoKEE9MN6wOy3o7Djb4BASPOjijec4v1GsnWB3Hxayd9bUv4L3 hVeDrtlCVxZMJsVZUjtgz9Z+1ydnvTIqDBRxxBJEuk8lFy4ygtjSlz3pUbDYH7sz wmT0/msiwAUGmk4dLgkkQlxsq4vju6mwWpDKpWKC+bWrjNWupOwTGrnpocW0cB+n gjiylf2YBuUL9YMaWnryu9VjlCHUySALFVTkny9qbbViKmhEulB9CQqf0rxGEolx x2+6r6HIxA4mdQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:36 2025 by rpki-client