This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json) Hash identifier: q+Qo2YB+COrLpXhJc36jBtLFHvN0J8kEB/eZjLdozEM= Subject key identifier: 3D:B6:EE:4F:66:B1:AE:A5:2D:5B:5C:56:BF:01:DB:49:4E:27:58:50 Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Certificate serial: 019B3D5A09C57CC261778E273E430199F92B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft Manifest number: 05E7 Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=) 2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: DRjozIvLnZUC07KmQQzk+TOhGIAOg/8/r84ytdsimwM=) 3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:09:c5:7c:c2:61:77:8e:27:3e:43:01:99:f9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1 Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=3db6ee4f66b1aea52d5b5c56bf01db494e275850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:58:f7:a3:2b:f9:7d:4a:50:67:24:1e:b2: 3c:56:75:44:46:e6:4f:bd:5e:40:e5:1f:a0:14:28: 79:10:74:c1:6b:4b:21:b7:b9:9a:86:52:88:14:8a: 1f:87:54:4c:7d:5a:c8:ee:18:a0:ca:da:1b:79:97: 6a:e0:df:e8:3b:ee:6b:c0:bf:6f:41:81:95:71:cf: 83:ee:32:84:f3:7f:6b:ab:09:6c:69:8b:d4:de:c0: 40:aa:48:d5:35:3c:03:3c:79:fd:5c:e5:99:9e:09: 58:0e:15:f4:1c:2a:85:b3:ec:c6:57:24:17:12:c3: fe:9b:08:f0:ab:cf:d4:14:8e:3d:df:2f:30:00:b4: 07:d3:79:cc:f7:fe:8b:88:0a:60:4b:35:c8:35:4c: 61:46:a7:15:11:8e:d8:47:92:8f:81:3b:4f:f9:02: 1f:c7:9a:63:2f:a4:0a:8d:7b:0e:3a:36:1f:97:6a: bd:9b:b0:9c:4e:0c:1c:d9:64:c7:96:b4:db:bf:56: c2:29:6f:48:19:cd:4c:b3:17:c3:fa:b6:5c:5e:4b: aa:4b:bf:c3:ca:71:ae:c9:ff:c4:45:8c:f8:1d:2c: ee:53:bc:d6:0d:ce:07:6e:c0:19:ab:f8:49:b9:cc: de:7a:fb:0a:6b:c1:6a:27:c1:f5:bb:0f:53:07:18: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:EE:4F:66:B1:AE:A5:2D:5B:5C:56:BF:01:DB:49:4E:27:58:50 X509v3 Authority Key Identifier: keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a2:13:8d:f5:72:f2:09:84:54:8d:c0:78:eb:2a:13:ea:29: a6:d1:85:45:be:19:2b:68:5f:5a:92:7e:de:22:cd:61:14:8b: 0f:45:51:6c:98:25:8b:98:0f:5f:a2:c8:be:d2:9f:52:06:a8: 04:30:74:fb:9e:40:19:44:75:1b:74:5f:99:69:d3:70:1b:10: 80:65:94:2b:f0:14:f6:13:aa:cc:12:5e:e6:0f:17:5e:ce:88: 57:ac:ea:ef:9e:65:0e:29:8f:ed:97:9b:a5:74:36:17:5a:a5: 66:f3:39:c3:5f:c7:7c:4a:b9:6f:a4:42:d5:6b:ba:fd:e6:71: fe:f6:08:2f:c2:f9:d9:20:b9:72:75:20:d1:98:ad:51:fd:16: ee:67:6b:e8:fd:75:42:05:81:43:0d:d4:a4:5f:3e:e4:d1:5e: b8:55:c6:d8:be:22:5f:76:5e:bc:91:89:97:db:e6:1c:3c:da: 76:99:cd:93:79:d4:33:41:7e:9a:67:35:09:65:70:94:e7:35: 37:d7:6e:45:db:79:c9:ba:f7:75:42:2c:59:05:24:15:d4:c4: 18:cb:79:81:fb:31:bd:d4:dd:84:d7:1f:43:ec:83:33:aa:61: 5b:95:a4:38:7d:97:cc:b3:31:11:83:39:1c:d1:94:fa:af:6b: c2:b5:a8:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgnFfMJhd44nPkMBmfkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh NDk1YzEwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EygzZGI2ZWU0ZjY2YjFhZWE1MmQ1YjVjNTZiZjAxZGI0OTRlMjc1ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukVY96Mr+X1KUGckHrI8VnVERuZP vV5A5R+gFCh5EHTBa0sht7mahlKIFIofh1RMfVrI7higytobeZdq4N/oO+5rwL9v QYGVcc+D7jKE839rqwlsaYvU3sBAqkjVNTwDPHn9XOWZnglYDhX0HCqFs+zGVyQX EsP+mwjwq8/UFI493y8wALQH03nM9/6LiApgSzXINUxhRqcVEY7YR5KPgTtP+QIf x5pjL6QKjXsOOjYfl2q9m7CcTgwc2WTHlrTbv1bCKW9IGc1MsxfD+rZcXkuqS7/D ynGuyf/ERYz4HSzuU7zWDc4HbsAZq/hJuczeevsKa8FqJ8H1uw9TBxhUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD227k9msa6lLVtcVr8B20lOJ1hQMB8GA1UdIwQY MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2 LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKITjfVy 8gmEVI3AeOsqE+opptGFRb4ZK2hfWpJ+3iLNYRSLD0VRbJgli5gPX6LIvtKfUgao BDB0+55AGUR1G3RfmWnTcBsQgGWUK/AU9hOqzBJe5g8XXs6IV6zq755lDimP7Zeb pXQ2F1qlZvM5w1/HfEq5b6RC1Wu6/eZx/vYIL8L52SC5cnUg0ZitUf0W7mdr6P11 QgWBQw3UpF8+5NFeuFXG2L4iX3ZevJGJl9vmHDzadpnNk3nUM0F+mmc1CWVwlOc1 N9duRdt5ybr3dUIsWQUkFdTEGMt5gfsxvdTdhNcfQ+yDM6phW5WkOH2XzLMxEYM5 HNGU+q9rwrWoUg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:10 2025 by rpki-client