This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json) Hash identifier: W8Laj9MBzuHxR5BbY8L3DaCQbw5TJeSytRBG7hPX008= Subject key identifier: E1:24:05:B4:5B:FF:A6:A6:FA:14:9A:1B:7E:A7:2C:03:88:AD:C0:DF Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Certificate serial: 019B7110684F17D8776C6884FE7CC9254D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft Manifest number: 0B26 Signing time: Tue 30 Dec 2025 21:00:59 +0000 Manifest this update: Tue 30 Dec 2025 21:00:59 +0000 Manifest next update: Wed 31 Dec 2025 21:00:59 +0000 Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=) 2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: 3juhiQ2OaXTp9WFEKRhz4pUGFtb0ISsJKn4FDVBa8Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:68:4f:17:d8:77:6c:68:84:fe:7c:c9:25:4d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Validity Not Before: Dec 30 21:00:59 2025 GMT Not After : Dec 31 21:00:59 2025 GMT Subject: CN=e12405b45bffa6a6fa149a1b7ea72c0388adc0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:63:6c:7b:35:7a:b8:23:08:56:54:11:1e: e2:a1:98:5b:27:d3:06:7b:54:32:85:42:7f:5d:bb: bb:1a:80:e0:65:c5:46:73:94:ca:fa:50:ab:cc:aa: 0a:5f:44:1e:90:eb:64:c4:9e:58:c6:76:27:d5:e5: 71:1a:39:54:80:ad:4a:ff:9f:b8:b1:9e:fa:a1:02: c1:f9:64:01:6e:85:d1:96:18:ef:4a:9f:50:53:a6: 06:48:e4:7a:f7:2f:34:70:e6:7c:02:82:bd:b2:53: 5e:99:52:b1:8c:d4:df:82:e4:d0:e3:93:43:d3:ce: 6a:47:c6:3c:14:62:ec:54:16:0b:46:d6:22:da:17: 88:1f:23:11:9d:0c:76:d1:b0:9c:0e:07:79:5f:43: bb:4f:10:58:6c:65:2f:62:3a:85:ea:2d:eb:9b:6d: 13:62:7c:2c:98:ee:df:6a:fe:09:47:3b:80:fc:01: 35:57:35:a5:4d:02:44:c9:54:60:50:c2:c4:c1:fb: 75:82:a5:df:57:de:ac:27:a6:41:05:52:ee:10:b3: 59:97:f5:14:d4:53:c2:43:b4:50:b4:4a:ff:b8:d0: b3:04:be:88:aa:08:8f:7b:05:94:bd:ed:11:90:3a: ca:dd:08:ee:42:7f:8e:48:c7:ca:32:2f:52:7f:5c: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:05:B4:5B:FF:A6:A6:FA:14:9A:1B:7E:A7:2C:03:88:AD:C0:DF X509v3 Authority Key Identifier: keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5b:da:be:8c:85:0f:32:63:fd:e3:6c:fa:c9:98:9d:f4:e7: 4b:6c:cc:48:7f:23:dc:c4:a4:a0:32:36:c9:a1:fe:03:77:cf: 0c:dc:04:b4:7a:42:fa:67:b5:f9:9f:23:e0:88:61:c5:3e:21: df:a4:6e:d3:b6:cb:89:71:9d:a7:8a:00:d2:eb:1b:20:fc:a4: 76:54:f1:23:0a:9d:1d:10:96:93:6a:2d:98:a8:43:83:00:2b: cc:69:5d:54:cb:db:f0:bb:9f:c3:a7:1e:28:be:6b:c1:a8:f9: 0f:5c:6d:52:6f:78:c9:b7:d6:f8:81:f7:86:88:a0:02:26:b4: 93:2a:be:2a:d2:80:a7:59:93:b7:bc:fe:71:86:f4:62:f0:94: a9:66:b4:2b:db:ab:58:b6:0d:b0:39:0f:f4:e8:fe:d7:69:08: 72:50:a7:87:ec:21:76:94:1e:ac:d0:da:51:ff:53:da:24:9f: a5:49:0a:30:70:d6:6f:08:cc:c5:5b:e6:ab:40:c6:96:55:85: 14:f9:75:e0:2f:53:ac:7a:19:aa:c5:02:2c:b7:43:60:5a:b2: d4:7f:93:62:53:ad:42:25:94:f9:93:9f:78:5b:ec:af:fa:b2: d9:d2:fd:a6:07:a4:bb:98:18:2d:d6:df:cc:bb:4e:38:a7:cc: 51:3b:fa:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEGhPF9h3bGiE/nzJJU03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw OWJlOGUwHhcNMjUxMjMwMjEwMDU5WhcNMjUxMjMxMjEwMDU5WjAzMTEwLwYDVQQD EyhlMTI0MDViNDViZmZhNmE2ZmExNDlhMWI3ZWE3MmMwMzg4YWRjMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5jbHs1ergjCFZUER7ioZhbJ9MG e1QyhUJ/Xbu7GoDgZcVGc5TK+lCrzKoKX0QekOtkxJ5YxnYn1eVxGjlUgK1K/5+4 sZ76oQLB+WQBboXRlhjvSp9QU6YGSOR69y80cOZ8AoK9slNemVKxjNTfguTQ45ND 085qR8Y8FGLsVBYLRtYi2heIHyMRnQx20bCcDgd5X0O7TxBYbGUvYjqF6i3rm20T YnwsmO7fav4JRzuA/AE1VzWlTQJEyVRgUMLEwft1gqXfV96sJ6ZBBVLuELNZl/UU 1FPCQ7RQtEr/uNCzBL6IqgiPewWUve0RkDrK3QjuQn+OSMfKMi9Sf1wLmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEkBbRb/6am+hSaG36nLAOIrcDfMB8GA1UdIwQY MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0 LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlvavoyF DzJj/eNs+smYnfTnS2zMSH8j3MSkoDI2yaH+A3fPDNwEtHpC+me1+Z8j4IhhxT4h 36Ru07bLiXGdp4oA0usbIPykdlTxIwqdHRCWk2otmKhDgwArzGldVMvb8Lufw6ce KL5rwaj5D1xtUm94ybfW+IH3hoigAia0kyq+KtKAp1mTt7z+cYb0YvCUqWa0K9ur WLYNsDkP9Oj+12kIclCnh+whdpQerNDaUf9T2iSfpUkKMHDWbwjMxVvmq0DGllWF FPl14C9TrHoZqsUCLLdDYFqy1H+TYlOtQiWU+ZOfeFvsr/qy2dL9pgeku5gYLdbf zLtOOKfMUTv6Hw== -----END CERTIFICATE-----Generated at Wed Dec 31 00:04:27 2025 by rpki-client