This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json) Hash identifier: 6ilKFqSG+vbk4CPVyIE01sb7cXd1/xfcnxdKvwet9+M= Subject key identifier: 76:C2:14:4A:AC:BA:1A:4B:E5:99:47:3E:A9:8E:78:12:81:C5:2B:35 Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Certificate serial: 019B424A9C5830115ADC014CA36472EDC8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 19:02:24 +0000 Manifest this update: Sun 21 Dec 2025 19:02:24 +0000 Manifest next update: Mon 22 Dec 2025 19:02:24 +0000 Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=) 2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=) 3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: v9oEh0979iDwWoXFVJQQv/72F1rYZyzgM2KPVYpL0fA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:9c:58:30:11:5a:dc:01:4c:a3:64:72:ed:c8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Validity Not Before: Dec 21 19:02:24 2025 GMT Not After : Dec 22 19:02:24 2025 GMT Subject: CN=76c2144aacba1a4be599473ea98e781281c52b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:29:e4:73:75:2a:2b:36:69:a4:b0:91:46: 78:96:06:85:be:9b:be:ea:d9:19:35:91:34:14:c1: 83:2e:ba:22:a4:a6:2b:75:68:e4:9f:84:fa:47:95: 78:84:cc:ee:73:fc:63:49:62:a5:a9:29:34:c9:22: 40:f3:fe:8f:a1:09:4b:91:95:fc:df:40:0a:fe:5c: 37:31:87:d1:05:3a:eb:1f:88:5f:47:10:f0:fb:d8: 07:10:93:5c:9f:6e:25:a2:89:ff:6e:a6:36:21:54: 8b:c4:27:f2:4d:4d:53:25:fc:b3:5b:34:0d:c1:2f: e9:ec:02:e4:0c:41:b2:7d:20:2a:36:21:96:07:47: 52:e6:90:93:32:ab:f9:11:e0:1f:e1:0c:7b:76:08: 2b:2c:7d:5f:f0:e1:05:fb:9c:14:27:0a:7c:e0:a7: 0c:74:77:f7:97:0f:01:ab:c3:99:bb:71:aa:09:d9: 2b:2c:4f:ab:97:c8:17:08:44:ae:c3:6e:07:6d:19: de:18:41:3d:db:a2:67:52:e5:8d:c4:90:30:30:29: fd:a1:03:34:52:d0:e1:d0:ab:87:d8:7b:10:85:1e: af:c5:51:d6:23:72:a6:83:4f:49:e2:63:33:3a:de: 36:e6:bc:d6:39:5d:c7:36:50:50:8a:b9:07:e8:43: ef:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:14:4A:AC:BA:1A:4B:E5:99:47:3E:A9:8E:78:12:81:C5:2B:35 X509v3 Authority Key Identifier: keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:09:a6:a4:ae:08:1f:aa:0e:2b:c9:94:65:4f:f3:85:d9:0c: d4:18:01:c0:15:58:24:6f:f7:d3:65:31:d9:16:4f:69:ff:57: 90:c0:5b:9b:c6:c0:0b:9c:d2:7f:4d:74:a2:9d:e4:dd:0e:42: 69:ec:07:2a:2d:c0:98:7b:77:9f:5e:6d:41:79:ba:9a:52:b9: c9:24:00:17:3a:ee:b2:7c:3f:bf:07:d6:fd:20:96:84:27:cf: 34:51:f3:0d:88:fb:aa:be:59:6f:ca:b1:6a:a5:b8:f5:ac:5e: 89:a7:31:8d:34:ee:a4:cd:2c:a3:2d:b4:d0:99:b8:bc:9e:1d: 1c:ac:28:fd:1e:ec:8f:74:a7:00:61:4c:59:5a:11:fb:3e:6c: a5:05:e2:b9:7c:bb:81:b8:2d:ee:79:c3:e3:aa:6e:e7:26:c0: 95:1c:63:ec:d8:6a:91:8f:1d:d3:02:b9:ac:f9:73:31:dc:9c: 67:94:b7:45:f3:df:2d:f7:25:07:9b:70:71:1a:3a:53:ab:a6: 18:76:55:f7:3e:35:fd:b4:86:ab:3c:6c:90:e3:e7:09:1d:3a: 56:04:b9:13:22:4a:8b:5b:5a:c7:c6:f2:6f:b8:7f:17:aa:f0: 52:79:d1:e2:4e:97:82:be:24:85:8d:96:f6:7d:98:5b:e1:96: d3:ca:71:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSpxYMBFa3AFMo2Ry7cjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTRiNmU1ZmNjYTMwOGIzNmRjOGYxNjc2MDZiMmQ2NTk4 MzljZjEwHhcNMjUxMjIxMTkwMjI0WhcNMjUxMjIyMTkwMjI0WjAzMTEwLwYDVQQD Eyg3NmMyMTQ0YWFjYmExYTRiZTU5OTQ3M2VhOThlNzgxMjgxYzUyYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ewp5HN1Kis2aaSwkUZ4lgaFvpu+ 6tkZNZE0FMGDLroipKYrdWjkn4T6R5V4hMzuc/xjSWKlqSk0ySJA8/6PoQlLkZX8 30AK/lw3MYfRBTrrH4hfRxDw+9gHEJNcn24loon/bqY2IVSLxCfyTU1TJfyzWzQN wS/p7ALkDEGyfSAqNiGWB0dS5pCTMqv5EeAf4Qx7dggrLH1f8OEF+5wUJwp84KcM dHf3lw8Bq8OZu3GqCdkrLE+rl8gXCESuw24HbRneGEE926JnUuWNxJAwMCn9oQM0 UtDh0KuH2HsQhR6vxVHWI3Kmg09J4mMzOt425rzWOV3HNlBQirkH6EPvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbCFEqsuhpL5ZlHPqmOeBKBxSs1MB8GA1UdIwQY MBaAFLpUtuX8yjCLNtyPFnYGstZZg5zxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQt NTI2ZjdjYzUyOWI3LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi83OGIxOTAtOGEwMi00Y2I4LWI0ODQtNTI2ZjdjYzUyOWI3 LzEvdWxTMjVmektNSXMyM0k4V2RnYXkxbG1EblBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigmmpK4I H6oOK8mUZU/zhdkM1BgBwBVYJG/302Ux2RZPaf9XkMBbm8bAC5zSf010op3k3Q5C aewHKi3AmHt3n15tQXm6mlK5ySQAFzrusnw/vwfW/SCWhCfPNFHzDYj7qr5Zb8qx aqW49axeiacxjTTupM0soy200Jm4vJ4dHKwo/R7sj3SnAGFMWVoR+z5spQXiuXy7 gbgt7nnD46pu5ybAlRxj7NhqkY8d0wK5rPlzMdycZ5S3RfPfLfclB5twcRo6U6um GHZV9z41/bSGqzxskOPnCR06VgS5EyJKi1tax8byb7h/F6rwUnnR4k6Xgr4khY2W 9n2YW+GW08pxAA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:51:38 2025 by rpki-client