This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json) Hash identifier: pDRKyReGuLu7kTsBmPWmhWj7Ic2euYJbRv47AkJS+Wk= Subject key identifier: D5:4B:AE:44:92:44:39:DB:22:CC:B8:7E:74:B4:8B:9E:00:86:C1:E2 Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Certificate serial: 019B9D4498693A2576A3CD4FF21DAF8E1A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft Manifest number: 0B3D Signing time: Thu 08 Jan 2026 11:01:16 +0000 Manifest this update: Thu 08 Jan 2026 11:01:16 +0000 Manifest next update: Fri 09 Jan 2026 11:01:16 +0000 Files and hashes: 1: sICtzvgHOfjE61zPkmdaObhuF_w.roa (hash: yLzVc8wYL4bjob1Nz0UNQRkDAIOchQwZ/HOQ+w5x5Ik=) 2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: k/N04/apQ070vJR6yRIVLB1qO5MRYyJNak2Si23/2TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:44:98:69:3a:25:76:a3:cd:4f:f2:1d:af:8e:1a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Validity Not Before: Jan 8 11:01:16 2026 GMT Not After : Jan 9 11:01:16 2026 GMT Subject: CN=d54bae44924439db22ccb87e74b48b9e0086c1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:1d:da:be:5c:2c:98:03:3e:01:66:73:64: 2c:05:79:ec:7c:60:d7:47:b7:95:5b:4c:0a:68:8c: 9d:2a:45:a4:cc:4c:ec:6f:5f:ab:f4:d5:e7:6e:15: ed:74:6f:ee:2a:08:f0:d1:30:ec:2c:e7:ef:ab:03: d4:9b:71:68:f5:48:31:c4:e4:0c:de:0a:13:09:1c: 3f:b7:ca:3c:8b:00:e4:ce:86:83:66:bb:ad:9f:a2: 1f:f4:c9:4b:64:a9:3a:e9:76:61:68:63:f5:53:6a: 2a:68:53:6c:72:88:b0:a2:d2:a3:4d:20:85:52:99: 8d:fc:b3:a6:2b:8b:9f:91:85:94:ea:75:d4:75:3b: 15:46:87:e9:2c:c9:3c:48:ab:67:12:56:1c:73:db: f5:17:28:7a:5c:18:2d:ee:11:44:38:cb:3a:a7:c5: 43:f3:58:61:39:b9:3a:19:0b:03:b1:25:81:26:0a: c2:88:ad:d6:96:06:88:cd:30:22:0b:f0:bf:88:5b: aa:d1:a0:e3:9f:68:f4:44:d4:de:f4:1a:20:73:22: e3:bd:6f:79:bf:b9:31:db:2b:9e:e9:44:22:b1:0d: 24:a3:52:e3:d7:69:6f:f0:28:c6:4b:c0:34:87:9d: f7:06:56:92:64:01:d2:59:e1:11:92:de:a4:85:9a: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4B:AE:44:92:44:39:DB:22:CC:B8:7E:74:B4:8B:9E:00:86:C1:E2 X509v3 Authority Key Identifier: keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fd:b9:6f:55:d0:4b:69:bf:10:9c:c4:98:f0:3d:51:a1:2a: 10:7a:53:98:af:bd:1a:16:84:b8:06:fd:59:65:d0:78:4a:23: f3:b7:30:e1:3d:2a:e4:0e:27:e7:c3:51:8f:f3:31:6a:dc:5b: b3:f6:d5:c9:85:bc:73:26:e7:24:13:6b:8b:c5:6f:9a:82:2b: b7:5d:dd:59:41:48:1d:d2:fd:9f:3e:0e:22:cb:04:05:d8:c3: b6:cd:fa:75:4f:23:c8:39:98:af:eb:e1:35:12:fb:e6:5f:20: dc:db:31:82:b3:18:0b:8d:15:dd:58:d4:ff:bc:26:ac:e6:9f: 33:2b:8c:7e:cd:18:65:ab:b5:ce:19:22:d3:9c:70:66:87:f8: 01:2b:8f:ff:61:bf:f0:6f:12:98:d1:a3:69:67:08:e3:38:0d: cf:d9:0a:25:b8:e5:c6:dc:36:84:f7:de:36:af:2f:04:5b:8c: 0a:d2:18:63:fe:72:70:10:0b:f2:90:e6:0e:8d:e8:ca:83:e2: f2:44:ff:90:a9:b6:43:97:43:09:38:1a:76:ee:e9:c0:b5:7e: 2e:35:e2:5e:78:a1:15:05:19:12:89:83:38:93:9b:dd:c6:8d: 70:16:0a:4d:b6:58:fc:16:da:5f:0e:98:ce:a8:c9:47:62:89: 57:6d:ea:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZudRJhpOiV2o81P8h2vjhqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw OWJlOGUwHhcNMjYwMTA4MTEwMTE2WhcNMjYwMTA5MTEwMTE2WjAzMTEwLwYDVQQD EyhkNTRiYWU0NDkyNDQzOWRiMjJjY2I4N2U3NGI0OGI5ZTAwODZjMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7cd2r5cLJgDPgFmc2QsBXnsfGDX R7eVW0wKaIydKkWkzEzsb1+r9NXnbhXtdG/uKgjw0TDsLOfvqwPUm3Fo9UgxxOQM 3goTCRw/t8o8iwDkzoaDZrutn6If9MlLZKk66XZhaGP1U2oqaFNscoiwotKjTSCF UpmN/LOmK4ufkYWU6nXUdTsVRofpLMk8SKtnElYcc9v1Fyh6XBgt7hFEOMs6p8VD 81hhObk6GQsDsSWBJgrCiK3WlgaIzTAiC/C/iFuq0aDjn2j0RNTe9BogcyLjvW95 v7kx2yue6UQisQ0ko1Lj12lv8CjGS8A0h533BlaSZAHSWeERkt6khZps9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVLrkSSRDnbIsy4fnS0i54AhsHiMB8GA1UdIwQY MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0 LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv25b1XQ S2m/EJzEmPA9UaEqEHpTmK+9GhaEuAb9WWXQeEoj87cw4T0q5A4n58NRj/Mxatxb s/bVyYW8cybnJBNri8VvmoIrt13dWUFIHdL9nz4OIssEBdjDts36dU8jyDmYr+vh NRL75l8g3NsxgrMYC40V3VjU/7wmrOafMyuMfs0YZau1zhki05xwZof4ASuP/2G/ 8G8SmNGjaWcI4zgNz9kKJbjlxtw2hPfeNq8vBFuMCtIYY/5ycBAL8pDmDo3oyoPi 8kT/kKm2Q5dDCTgadu7pwLV+LjXiXnihFQUZEomDOJOb3caNcBYKTbZY/BbaXw6Y zqjJR2KJV23qcA== -----END CERTIFICATE-----Generated at Thu Jan 8 17:29:07 2026 by rpki-client