This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json) Hash identifier: IhQ/xNn0s1Vm2KNb9orn83KTVeXphw1zXd85JnUX/70= Subject key identifier: 91:FE:61:21:3B:04:94:F5:EB:4E:0B:39:42:C3:D5:61:42:C6:32:4D Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746 Certificate serial: 019B661E75E5CA66269DEAFE03463FDFC6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft Manifest number: 0BBF Signing time: Sun 28 Dec 2025 18:00:30 +0000 Manifest this update: Sun 28 Dec 2025 18:00:30 +0000 Manifest next update: Mon 29 Dec 2025 18:00:30 +0000 Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: OpOc6YDWBbzAyNkPMK4HCvYtb7u926kxTjKoqVr3j3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:75:e5:ca:66:26:9d:ea:fe:03:46:3f:df:c6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746 Validity Not Before: Dec 28 18:00:30 2025 GMT Not After : Dec 29 18:00:30 2025 GMT Subject: CN=91fe61213b0494f5eb4e0b3942c3d56142c6324d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:8d:24:23:d2:5a:7d:f0:59:69:59:fb:a7: 02:84:37:b0:06:5b:38:de:d3:bf:c5:10:1d:83:28: e4:1c:bf:02:dd:a9:3d:5c:6a:4c:5c:17:4a:ab:30: 5c:a7:0f:f6:2c:f2:e7:76:ef:42:5c:f9:14:3e:10: 0f:fe:ab:e1:66:a5:87:69:30:8d:f6:7b:a3:6b:db: 38:6a:68:74:d0:df:81:a3:47:54:86:41:fa:c7:c6: 26:5b:71:a4:51:81:a7:83:b2:0f:fe:2e:9d:0c:13: b9:40:50:78:d4:5b:57:ea:18:b0:fb:77:19:fb:95: 67:80:7e:f5:e5:6a:e0:d7:1b:7c:1f:65:0c:79:c9: 15:81:26:f6:ff:8b:de:58:ce:ae:da:b6:4c:e8:ca: 8d:90:da:ec:7c:23:2f:85:ca:68:7c:2d:b3:c1:72: 2a:ad:4d:01:b0:58:6f:ce:4a:c3:77:c7:a7:f8:19: 51:cb:0b:0a:90:4f:32:9d:e1:d6:18:aa:44:b1:3b: f8:4d:84:bc:50:9a:18:a5:34:17:13:16:0a:06:d0: ce:21:cf:b3:cd:18:74:20:9c:4b:06:61:54:a9:09: ed:a4:c2:c3:c1:d9:ec:a7:97:a9:53:82:46:81:5a: 63:6d:cd:1d:6d:79:1a:b1:f5:4b:f7:14:0e:1f:d0: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:61:21:3B:04:94:F5:EB:4E:0B:39:42:C3:D5:61:42:C6:32:4D X509v3 Authority Key Identifier: keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0d:8a:53:ce:57:54:f2:ab:96:b0:94:a9:07:87:0c:14:ae: 08:fe:d4:51:c9:dd:89:6f:c5:09:d2:ac:e7:d0:9f:61:7e:98: 76:9a:91:27:f4:c2:0b:10:20:6d:0f:88:0d:9e:b4:f5:af:c0: 36:dd:a5:ab:fd:32:a5:9e:da:64:e2:f3:19:5b:3d:52:f0:38: 00:59:56:76:52:bf:5e:82:57:4b:56:5d:73:63:21:25:35:3b: 2e:e9:2f:ed:fd:bf:16:2d:bb:12:56:bb:3c:f6:9f:eb:64:15: d7:1a:f3:d6:99:4a:28:92:8d:18:32:23:26:4e:65:ed:a0:4e: 5c:63:68:c1:00:0e:e7:a0:8d:b8:16:43:7e:d1:d8:e7:20:cb: c0:67:76:e8:a9:95:6f:c9:1f:72:d3:98:18:2b:f5:7f:fa:e3: 21:58:e0:2e:90:2c:22:3c:80:28:4d:42:38:0c:90:4f:6b:14: af:55:4d:06:5f:03:5f:5b:f7:87:e5:c4:83:d0:84:64:64:23: d5:53:68:2d:04:1f:6a:a4:2c:ba:88:6a:48:65:6a:b4:05:8a: ef:e8:a4:83:d7:d6:33:c1:19:aa:a7:d8:12:39:c3:b4:53:fd: 08:ca:dc:a4:fd:c9:7e:18:bd:68:cd:f8:ea:0f:f3:46:c3:2a: 32:9e:10:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHnXlymYmner+A0Y/38bnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDk3ZmI1OGM2ZjZhNDQxZDhlZDc1MDAwNzczYjRkMDk4 NTY3NDYwHhcNMjUxMjI4MTgwMDMwWhcNMjUxMjI5MTgwMDMwWjAzMTEwLwYDVQQD Eyg5MWZlNjEyMTNiMDQ5NGY1ZWI0ZTBiMzk0MmMzZDU2MTQyYzYzMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aKNJCPSWn3wWWlZ+6cChDewBls4 3tO/xRAdgyjkHL8C3ak9XGpMXBdKqzBcpw/2LPLndu9CXPkUPhAP/qvhZqWHaTCN 9nuja9s4amh00N+Bo0dUhkH6x8YmW3GkUYGng7IP/i6dDBO5QFB41FtX6hiw+3cZ +5VngH715Wrg1xt8H2UMeckVgSb2/4veWM6u2rZM6MqNkNrsfCMvhcpofC2zwXIq rU0BsFhvzkrDd8en+BlRywsKkE8yneHWGKpEsTv4TYS8UJoYpTQXExYKBtDOIc+z zRh0IJxLBmFUqQntpMLDwdnsp5epU4JGgVpjbc0dbXkasfVL9xQOH9AHQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH+YSE7BJT1604LOULD1WFCxjJNMB8GA1UdIwQY MBaAFFAJf7WMb2pEHY7XUAB3O00JhWdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMt MjJkYzYzNmIyNDg4LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wNWY0MWUtZTE0Yi00MDk5LWFjYWMtMjJkYzYzNmIyNDg4 LzEvVUFsX3RZeHZha1FkanRkUUFIYzdUUW1GWjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA2KU85X VPKrlrCUqQeHDBSuCP7UUcndiW/FCdKs59CfYX6YdpqRJ/TCCxAgbQ+IDZ609a/A Nt2lq/0ypZ7aZOLzGVs9UvA4AFlWdlK/XoJXS1Zdc2MhJTU7Lukv7f2/Fi27Ela7 PPaf62QV1xrz1plKKJKNGDIjJk5l7aBOXGNowQAO56CNuBZDftHY5yDLwGd26KmV b8kfctOYGCv1f/rjIVjgLpAsIjyAKE1COAyQT2sUr1VNBl8DX1v3h+XEg9CEZGQj 1VNoLQQfaqQsuohqSGVqtAWK7+ikg9fWM8EZqqfYEjnDtFP9CMrcpP3Jfhi9aM34 6g/zRsMqMp4QsQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:31 2025 by rpki-client