This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json) Hash identifier: uTHLfy8BodxkVIcvf2G81nMfRkCSYoq/o3TG4qW7O7o= Subject key identifier: 30:04:9C:96:12:EC:B9:A0:BC:69:5E:88:05:68:A7:37:9E:D9:41:AC Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Certificate serial: 019B3268C2D9E96874A37D91B0918E5D1323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft Manifest number: 04F4 Signing time: Thu 18 Dec 2025 17:01:25 +0000 Manifest this update: Thu 18 Dec 2025 17:01:25 +0000 Manifest next update: Fri 19 Dec 2025 17:01:25 +0000 Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: Pr/GTsDycm9NvME8nw4zulYJ/cs+qz5U90lOmPVJddk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:c2:d9:e9:68:74:a3:7d:91:b0:91:8e:5d:13:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Validity Not Before: Dec 18 17:01:25 2025 GMT Not After : Dec 19 17:01:25 2025 GMT Subject: CN=30049c9612ecb9a0bc695e880568a7379ed941ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:19:64:96:45:b7:78:e6:34:4c:26:b7:1e: 3a:28:bc:c5:e2:5a:cb:f6:f5:9b:0c:00:dd:b6:7c: 5c:80:22:d7:98:e4:f2:f9:e5:7c:5e:a5:18:e3:99: 70:99:36:71:c9:6c:11:7a:2e:67:35:24:40:2f:58: 81:3d:07:3b:a6:92:68:59:a7:16:e0:a3:97:f8:46: 15:73:18:9e:e0:2b:64:93:05:23:00:7c:9d:52:47: a6:83:9a:1f:f3:d9:97:9a:18:88:ac:67:ec:b6:da: d0:82:32:45:5e:d4:20:db:88:75:d6:42:72:13:36: 84:bd:39:e1:12:1c:d8:80:71:67:b7:85:68:03:e6: 65:10:d3:9c:68:da:35:45:99:64:45:3b:03:a2:41: 0f:6e:f2:21:a1:ee:a8:b6:19:f2:d1:c4:d5:25:bd: 4a:44:5e:4c:1d:15:b8:b6:d0:06:45:80:17:c7:dc: 22:00:c8:bb:eb:52:fa:5a:3a:b6:4b:ea:50:c8:94: 63:6d:83:7e:87:c3:f0:4f:36:3f:9c:5f:79:59:f4: 4b:9a:52:fe:75:4c:fe:63:28:a1:a7:79:3f:04:9c: 92:49:50:e1:7f:e5:a8:6c:83:c7:64:24:52:54:ba: b7:c4:b2:51:51:03:c7:dd:51:13:37:93:d5:8e:61: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:9C:96:12:EC:B9:A0:BC:69:5E:88:05:68:A7:37:9E:D9:41:AC X509v3 Authority Key Identifier: keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:23:84:52:85:56:b4:b7:8f:7c:81:51:7c:e9:ed:8b:f6:a5: 65:63:b9:ff:22:f3:f4:42:62:15:ef:a4:79:37:a5:25:64:5e: 1d:e2:8b:68:ae:b2:ae:d5:de:e9:49:d7:83:f9:17:da:f9:90: 0a:4f:3e:50:6d:80:2c:14:12:5c:b6:5e:19:55:f8:5c:19:76: 48:db:c8:98:da:42:47:d4:de:78:77:3d:05:5a:00:c7:73:d3: 7b:57:60:e4:d0:d9:c7:33:20:76:6d:36:74:7f:68:b5:6a:12: 4c:e1:3b:e4:f2:5e:de:34:24:68:f9:61:2f:40:a3:c9:a8:00: 2f:c3:f3:69:92:db:09:d8:24:b3:ea:f2:79:fb:d8:a9:63:af: 61:56:88:ee:5c:3d:0e:bf:64:67:2c:23:ea:3d:6b:34:f5:11: 6a:e1:74:f3:46:59:66:b6:0c:ac:a6:ac:b8:d8:66:6f:e4:a2: 3b:9e:46:7b:ae:86:f3:83:cf:1d:fb:8e:bd:70:95:54:32:c1: 4a:0d:55:67:91:c7:68:64:0c:fb:2f:66:71:f3:a1:3e:1b:f1: e6:2d:41:51:44:bf:c8:d2:18:67:96:c7:72:56:9c:da:5e:0a: 7d:7c:60:93:e8:9e:08:e1:e7:83:25:e9:6b:3a:02:2f:8f:26: 65:76:2c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaMLZ6Wh0o32RsJGOXRMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjg0M2E4ZDkxYjE1ODI0ZTYwZTJjZDY4OWE2ZjQ1MWUy NTZhNWUwHhcNMjUxMjE4MTcwMTI1WhcNMjUxMjE5MTcwMTI1WjAzMTEwLwYDVQQD EygzMDA0OWM5NjEyZWNiOWEwYmM2OTVlODgwNTY4YTczNzllZDk0MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqkZZJZFt3jmNEwmtx46KLzF4lrL 9vWbDADdtnxcgCLXmOTy+eV8XqUY45lwmTZxyWwRei5nNSRAL1iBPQc7ppJoWacW 4KOX+EYVcxie4CtkkwUjAHydUkemg5of89mXmhiIrGfsttrQgjJFXtQg24h11kJy EzaEvTnhEhzYgHFnt4VoA+ZlENOcaNo1RZlkRTsDokEPbvIhoe6othny0cTVJb1K RF5MHRW4ttAGRYAXx9wiAMi761L6Wjq2S+pQyJRjbYN+h8PwTzY/nF95WfRLmlL+ dUz+Yyihp3k/BJySSVDhf+WobIPHZCRSVLq3xLJRUQPH3VETN5PVjmGGHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAEnJYS7LmgvGleiAVopzee2UGsMB8GA1UdIwQY MBaAFFC4Q6jZGxWCTmDizWiab0UeJWpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgt MjUxODY3YmRjMTNmLzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgtMjUxODY3YmRjMTNm LzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCOEUoVW tLePfIFRfOnti/alZWO5/yLz9EJiFe+keTelJWReHeKLaK6yrtXe6UnXg/kX2vmQ Ck8+UG2ALBQSXLZeGVX4XBl2SNvImNpCR9TeeHc9BVoAx3PTe1dg5NDZxzMgdm02 dH9otWoSTOE75PJe3jQkaPlhL0CjyagAL8PzaZLbCdgks+ryefvYqWOvYVaI7lw9 Dr9kZywj6j1rNPURauF080ZZZrYMrKasuNhmb+SiO55Ge66G84PPHfuOvXCVVDLB Sg1VZ5HHaGQM+y9mcfOhPhvx5i1BUUS/yNIYZ5bHclac2l4KfXxgk+ieCOHngyXp azoCL48mZXYsCQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:02 2025 by rpki-client