This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft File: ucN059N57ajbliAKTu_lvBwok58.mft (raw, json) Hash identifier: 2LoMsDOEzAjiWghAnIJIVbgaVLjh93dz8FjcRs7dzTo= Subject key identifier: 23:50:1F:F7:CE:54:B0:48:0B:F3:B3:B7:DB:B2:96:0A:2A:00:70:72 Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F Certificate issuer: /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f Certificate serial: 019B70A37713D4AA878DD75CB830FB3F72CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft Manifest number: 0E5A Signing time: Tue 30 Dec 2025 19:01:59 +0000 Manifest this update: Tue 30 Dec 2025 19:01:59 +0000 Manifest next update: Wed 31 Dec 2025 19:01:59 +0000 Files and hashes: 1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: jpS9MBqvxGbazsGfAca2Ycx+US1nr4KaX7EvTkTXf0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:77:13:d4:aa:87:8d:d7:5c:b8:30:fb:3f:72:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f Validity Not Before: Dec 30 19:01:59 2025 GMT Not After : Dec 31 19:01:59 2025 GMT Subject: CN=23501ff7ce54b0480bf3b3b7dbb2960a2a007072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:4a:de:ce:4d:32:cd:d9:ca:fd:0d:f3:0a: 23:8c:c2:6e:4c:77:17:cf:04:b9:15:ee:f0:23:d4: f0:43:bd:b8:2c:38:48:45:2c:44:b4:4d:f3:4a:23: cf:e0:6b:c1:b1:1b:ea:3a:36:a9:39:8c:5e:b7:d6: ff:d2:64:cb:59:a9:e8:37:83:e9:9f:13:20:c6:fe: c7:87:d7:73:e5:e9:99:6f:ed:10:51:46:bd:97:1b: ee:7d:7e:db:91:07:90:69:60:20:47:55:0d:1e:48: f0:48:b3:83:a0:e3:cc:73:06:08:6d:bb:b2:48:a9: c7:41:9d:34:35:fb:00:2a:dd:8a:ff:f0:d1:83:96: a7:14:e3:cf:0d:a8:47:f8:a0:26:d6:85:f7:07:20: 73:d6:22:d3:75:2e:33:ec:c0:be:62:2b:17:d7:53: 3f:fa:15:6b:f6:ec:e2:67:d5:23:05:56:78:b5:7d: 53:04:fc:3c:74:be:aa:11:04:51:5f:12:4c:b9:a6: bc:92:6f:90:08:a9:b9:2d:c3:4a:d8:02:45:29:c7: 56:91:a1:2b:54:84:f3:c8:94:d4:66:9a:01:6b:59: 0e:fc:b8:cf:28:85:a3:68:07:81:ed:29:73:f4:a9: c2:b0:58:3a:45:9c:0c:d8:c7:15:0c:36:4c:f7:c5: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:1F:F7:CE:54:B0:48:0B:F3:B3:B7:DB:B2:96:0A:2A:00:70:72 X509v3 Authority Key Identifier: keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:a9:b8:04:88:b0:f9:98:57:da:e4:a9:b2:d8:c3:75:1b: b6:47:50:35:7a:5c:cf:ae:df:a6:d6:2b:25:1f:11:43:57:05: ac:79:54:ea:68:f0:f8:c5:06:15:0e:50:c5:45:63:3a:7b:fc: 28:f2:c2:f9:fb:5e:ef:3e:39:f0:6d:cf:d9:04:f2:95:b7:b1: 90:7b:66:d9:e2:f3:85:78:80:0e:9a:9e:23:08:de:20:07:a8: 9b:11:3b:fe:01:df:f6:cc:1d:f6:2a:c4:43:46:83:b1:a0:bc: 69:fc:8a:73:c7:47:0f:fa:26:c1:35:d5:54:c1:0b:b8:6e:f2: e8:80:05:4f:a7:af:9b:1c:c4:14:13:91:d1:03:1f:66:74:ee: 18:8c:6f:a8:d5:0b:14:84:ce:88:9b:d0:51:a5:8c:8b:25:09: e7:62:40:08:be:1a:bd:70:53:15:3a:04:a7:67:54:c6:49:10: 06:1b:f1:7b:20:3e:b1:97:19:0a:5b:cb:9f:22:4f:bb:79:98: f5:74:7f:71:21:92:58:e2:35:9e:43:7a:30:44:8c:99:06:07: bb:98:7a:07:d4:1e:42:5a:72:75:06:79:e2:be:e1:b0:8d:78: 86:78:7b:72:cc:e0:7f:f5:f3:6d:82:f8:ec:04:5a:47:46:10: fc:95:36:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo3cT1KqHjddcuDD7P3LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YzM3NGU3ZDM3OWVkYThkYjk2MjAwYTRlZWZlNWJjMWMy ODkzOWYwHhcNMjUxMjMwMTkwMTU5WhcNMjUxMjMxMTkwMTU5WjAzMTEwLwYDVQQD EygyMzUwMWZmN2NlNTRiMDQ4MGJmM2IzYjdkYmIyOTYwYTJhMDA3MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ctK3s5NMs3Zyv0N8wojjMJuTHcX zwS5Fe7wI9TwQ724LDhIRSxEtE3zSiPP4GvBsRvqOjapOYxet9b/0mTLWanoN4Pp nxMgxv7Hh9dz5emZb+0QUUa9lxvufX7bkQeQaWAgR1UNHkjwSLODoOPMcwYIbbuy SKnHQZ00NfsAKt2K//DRg5anFOPPDahH+KAm1oX3ByBz1iLTdS4z7MC+YisX11M/ +hVr9uziZ9UjBVZ4tX1TBPw8dL6qEQRRXxJMuaa8km+QCKm5LcNK2AJFKcdWkaEr VITzyJTUZpoBa1kO/LjPKIWjaAeB7Slz9KnCsFg6RZwM2McVDDZM98UFXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNQH/fOVLBIC/Ozt9uylgoqAHByMB8GA1UdIwQY MBaAFLnDdOfTee2o25YgCk7v5bwcKJOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83YTUzZWMtNTZkNy00NWNkLWJhYjgt YjMyYWRmNjFhYjQ3LzEvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83YTUzZWMtNTZkNy00NWNkLWJhYjgtYjMyYWRmNjFhYjQ3 LzEvdWNOMDU5TjU3YWpibGlBS1R1X2x2QndvazU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn6puASI sPmYV9rkqbLYw3UbtkdQNXpcz67fptYrJR8RQ1cFrHlU6mjw+MUGFQ5QxUVjOnv8 KPLC+fte7z458G3P2QTylbexkHtm2eLzhXiADpqeIwjeIAeomxE7/gHf9swd9irE Q0aDsaC8afyKc8dHD/omwTXVVMELuG7y6IAFT6evmxzEFBOR0QMfZnTuGIxvqNUL FITOiJvQUaWMiyUJ52JACL4avXBTFToEp2dUxkkQBhvxeyA+sZcZClvLnyJPu3mY 9XR/cSGSWOI1nkN6MESMmQYHu5h6B9QeQlpydQZ54r7hsI14hnh7cszgf/XzbYL4 7ARaR0YQ/JU2gw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:48:41 2025 by rpki-client