This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json) Hash identifier: os9kj52Fue4qobm9MHj/J+iKuz6JiKPquonhjZMMP4Y= Subject key identifier: 18:99:05:94:1C:3F:F6:30:D1:68:89:23:95:88:BB:EB:1F:41:58:C5 Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5 Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5 Certificate serial: 019B30E96A04C8D4360140B35245EBD33890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft Manifest number: 1346 Signing time: Thu 18 Dec 2025 10:02:41 +0000 Manifest this update: Thu 18 Dec 2025 10:02:41 +0000 Manifest next update: Fri 19 Dec 2025 10:02:41 +0000 Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: vkhBP+YwzXcyUKm9TWFP1ru4nBAfCa7NZtI/22czSK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:6a:04:c8:d4:36:01:40:b3:52:45:eb:d3:38:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5 Validity Not Before: Dec 18 10:02:41 2025 GMT Not After : Dec 19 10:02:41 2025 GMT Subject: CN=189905941c3ff630d16889239588bbeb1f4158c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d5:d9:e0:8c:f7:00:ae:1d:68:4d:81:85:3c: b7:2b:59:5c:43:54:31:bb:ff:16:20:30:4d:b0:0e: 34:51:ae:3f:2c:fe:80:ec:e1:e7:24:36:eb:62:40: d6:6f:3e:27:a5:35:04:31:40:5d:91:64:18:e5:8a: 9d:13:12:f5:63:b5:f7:e8:13:33:0a:db:5c:92:28: 23:7e:68:23:ca:7b:46:33:9b:84:17:a1:38:eb:ae: 4b:b6:90:9b:fb:d0:ff:f6:47:b1:1a:11:46:55:e3: 9a:85:a0:1a:d2:34:a0:38:d3:e2:73:b2:08:9d:31: ff:53:42:ad:b3:f5:bc:55:b4:60:b4:2b:bc:64:1f: 26:a2:99:e8:10:c5:f3:46:8b:ab:0c:93:be:ad:b3: 84:1c:85:b3:9d:69:60:2a:02:f4:76:95:36:dc:e9: 36:40:11:b4:4f:ce:07:bf:04:11:58:92:2b:83:6a: fa:86:08:69:f5:0e:6c:25:6f:39:d6:2e:0f:3d:35: a6:5d:ba:1b:0b:1e:25:59:bf:2a:f2:81:8b:84:06: 19:00:e4:df:83:bd:05:37:41:3a:9f:e7:f1:be:c4: 3f:38:7b:b9:02:fe:3a:91:5a:bf:4a:04:e3:99:f5: 80:e5:0f:c8:b8:c8:4e:4a:af:86:2f:79:92:fa:5c: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:05:94:1C:3F:F6:30:D1:68:89:23:95:88:BB:EB:1F:41:58:C5 X509v3 Authority Key Identifier: keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a9:33:bc:22:82:c6:74:ca:89:0d:70:8f:38:15:f3:40:81: 87:23:b3:7b:5d:fb:19:e9:00:5e:40:20:75:12:57:9a:30:0d: 54:1f:27:da:e3:85:f2:9e:96:23:de:ff:1c:12:2d:a7:73:12: ec:c8:2f:9e:d6:f2:66:f0:cf:27:00:fa:31:3f:7e:de:21:1f: bc:de:12:f0:d0:27:4c:f4:40:67:bc:c4:b9:90:b1:ab:b5:e6: bf:78:7d:ed:df:4d:90:16:f3:04:d0:9c:ba:29:b1:03:16:0b: 7a:c6:99:84:0a:1c:dc:3f:de:f8:8b:54:11:6d:7a:50:48:f2: 29:3a:d8:9f:01:76:a1:68:49:85:2d:3e:88:dc:29:72:ed:54: 61:28:65:21:e0:93:d9:0d:bf:c5:e3:5b:63:ee:64:e6:e4:8e: ea:04:ff:24:c8:e8:5a:c1:19:ff:64:ef:10:8f:94:9a:87:d9: d2:56:93:1e:37:ec:19:bd:95:0b:bb:68:86:19:21:d5:11:20: 53:ba:5e:b4:d4:af:21:c6:f1:e6:88:7c:8f:53:8e:df:8f:a2: 20:41:06:5f:1d:c0:b3:74:4d:b3:3e:5e:f9:1d:c0:65:8f:ab: 15:d6:a4:85:2d:86:35:09:c5:67:73:d9:56:ac:36:f2:9d:07: 84:a2:54:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6WoEyNQ2AUCzUkXr0ziQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOWJhNTgyMWMwODVhNThlM2UxZDMzYTRlZjQxZTliNzYx MDVlZTUwHhcNMjUxMjE4MTAwMjQxWhcNMjUxMjE5MTAwMjQxWjAzMTEwLwYDVQQD EygxODk5MDU5NDFjM2ZmNjMwZDE2ODg5MjM5NTg4YmJlYjFmNDE1OGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NXZ4Iz3AK4daE2BhTy3K1lcQ1Qx u/8WIDBNsA40Ua4/LP6A7OHnJDbrYkDWbz4npTUEMUBdkWQY5YqdExL1Y7X36BMz CttckigjfmgjyntGM5uEF6E4665LtpCb+9D/9kexGhFGVeOahaAa0jSgONPic7II nTH/U0Kts/W8VbRgtCu8ZB8mopnoEMXzRourDJO+rbOEHIWznWlgKgL0dpU23Ok2 QBG0T84HvwQRWJIrg2r6hghp9Q5sJW851i4PPTWmXbobCx4lWb8q8oGLhAYZAOTf g70FN0E6n+fxvsQ/OHu5Av46kVq/SgTjmfWA5Q/IuMhOSq+GL3mS+lxsoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiZBZQcP/Yw0WiJI5WIu+sfQVjFMB8GA1UdIwQY MBaAFL+bpYIcCFpY4+HTOk70Hpt2EF7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQt YmZhZmIyOTM3MWNmLzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQtYmZhZmIyOTM3MWNm LzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKkzvCKC xnTKiQ1wjzgV80CBhyOze137GekAXkAgdRJXmjANVB8n2uOF8p6WI97/HBItp3MS 7MgvntbyZvDPJwD6MT9+3iEfvN4S8NAnTPRAZ7zEuZCxq7Xmv3h97d9NkBbzBNCc uimxAxYLesaZhAoc3D/e+ItUEW16UEjyKTrYnwF2oWhJhS0+iNwpcu1UYShlIeCT 2Q2/xeNbY+5k5uSO6gT/JMjoWsEZ/2TvEI+UmofZ0laTHjfsGb2VC7tohhkh1REg U7petNSvIcbx5oh8j1OO34+iIEEGXx3As3RNsz5e+R3AZY+rFdakhS2GNQnFZ3PZ Vqw28p0HhKJUrw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:57:54 2025 by rpki-client