This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json) Hash identifier: KDlAfsyC35ODYS27nuRwZaSq8NAO0kYeePgsqQd4xmU= Subject key identifier: 92:F6:1C:72:58:E2:C3:C0:A3:C7:84:67:4C:72:FD:E8:BC:95:F7:80 Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Certificate serial: 019B977949FB00C2AA6C20444E990778A869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft Manifest number: 0B3A Signing time: Wed 07 Jan 2026 08:01:06 +0000 Manifest this update: Wed 07 Jan 2026 08:01:06 +0000 Manifest next update: Thu 08 Jan 2026 08:01:06 +0000 Files and hashes: 1: sICtzvgHOfjE61zPkmdaObhuF_w.roa (hash: yLzVc8wYL4bjob1Nz0UNQRkDAIOchQwZ/HOQ+w5x5Ik=) 2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: Q2ZVFibiotFdNrPYgU6YHMR6m8ULQEJLKVgZyY4SkA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:79:49:fb:00:c2:aa:6c:20:44:4e:99:07:78:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e Validity Not Before: Jan 7 08:01:06 2026 GMT Not After : Jan 8 08:01:06 2026 GMT Subject: CN=92f61c7258e2c3c0a3c784674c72fde8bc95f780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:07:ee:15:f7:fa:89:3d:73:fb:05:43:2e: 46:3b:1e:7d:fe:5e:bf:47:d0:24:c9:33:8b:aa:e1: 5b:94:b4:4d:b1:b3:46:e8:c5:ba:2d:24:6c:e3:d7: b9:15:14:e1:eb:c6:7f:bc:22:00:f5:dd:3d:8e:32: 1a:ac:7f:b8:f8:6a:b7:c4:8e:80:3f:4a:ff:27:f5: 96:c3:ea:9d:47:67:c9:19:4b:68:44:e3:90:bf:c7: ef:2a:91:12:e5:20:5e:4e:27:6e:cf:88:32:d4:e5: e3:03:e7:88:5b:82:61:01:da:95:f1:23:a6:d9:bc: 6f:70:37:1a:86:20:46:5e:f4:cf:b8:27:b4:79:7e: b8:d8:e1:fe:cf:c9:59:cf:0f:f2:68:f8:1c:86:15: 80:4b:8a:ad:f3:91:86:78:3c:d6:d7:1f:d0:96:ed: 20:7d:45:0a:35:9b:13:28:6a:f3:37:10:8f:e1:34: 7d:9f:f4:34:81:c9:69:f2:0c:04:49:0d:9b:16:ff: 92:81:35:5d:48:60:89:82:8a:ef:f2:99:56:21:fe: d5:6d:d8:1e:cf:20:8e:be:f0:9c:7c:cc:52:21:4a: 76:ba:7a:d0:6a:bc:5b:97:9f:3e:9f:16:1b:9f:4c: 08:c0:31:86:b6:77:a8:12:67:c7:6e:ee:cc:b8:37: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:1C:72:58:E2:C3:C0:A3:C7:84:67:4C:72:FD:E8:BC:95:F7:80 X509v3 Authority Key Identifier: keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8c:bb:71:b5:a5:a6:e4:86:ea:db:dd:9f:bc:bf:00:6f:30: b5:76:27:9f:49:c0:a3:62:26:42:99:d0:c8:7e:7a:8c:88:97: 90:a8:dd:f3:fd:c6:78:9c:e1:ed:f4:11:ef:89:04:32:d0:01: ba:bb:cf:14:a4:31:e9:f1:ff:9e:7f:11:d0:0a:61:1c:0d:fe: 2e:63:71:9a:fd:13:04:c0:9d:50:54:01:d0:11:0e:4d:df:ba: fd:09:b2:16:95:a5:67:fa:44:54:60:82:5b:d4:c0:60:78:1f: 5e:71:6e:8e:0d:4c:57:64:bd:02:9e:5d:cb:7d:52:61:40:95: 89:a8:aa:b8:ad:5d:95:97:fe:f3:b6:be:4f:22:0e:99:3e:e3: b4:d8:09:05:4c:bf:92:58:f8:f8:44:c6:b8:67:b9:3a:33:cd: ed:e5:b0:e9:be:bc:3b:88:f1:34:c1:ec:e6:93:15:df:68:52: eb:6f:63:4b:78:da:62:c8:0b:11:d8:0b:0d:4a:8c:3d:52:64: 64:78:1c:82:41:53:3d:74:ce:7e:56:88:bd:d4:cc:c7:76:3b: 40:f7:38:41:cc:3c:3f:f5:89:bb:1f:5c:35:c0:90:28:83:5b: 40:20:68:f9:32:aa:91:b6:fa:59:6e:ca:63:bf:d2:95:28:eb: da:d5:5f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXeUn7AMKqbCBETpkHeKhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw OWJlOGUwHhcNMjYwMTA3MDgwMTA2WhcNMjYwMTA4MDgwMTA2WjAzMTEwLwYDVQQD Eyg5MmY2MWM3MjU4ZTJjM2MwYTNjNzg0Njc0YzcyZmRlOGJjOTVmNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HgH7hX3+ok9c/sFQy5GOx59/l6/ R9AkyTOLquFblLRNsbNG6MW6LSRs49e5FRTh68Z/vCIA9d09jjIarH+4+Gq3xI6A P0r/J/WWw+qdR2fJGUtoROOQv8fvKpES5SBeTiduz4gy1OXjA+eIW4JhAdqV8SOm 2bxvcDcahiBGXvTPuCe0eX642OH+z8lZzw/yaPgchhWAS4qt85GGeDzW1x/Qlu0g fUUKNZsTKGrzNxCP4TR9n/Q0gclp8gwESQ2bFv+SgTVdSGCJgorv8plWIf7Vbdge zyCOvvCcfMxSIUp2unrQarxbl58+nxYbn0wIwDGGtneoEmfHbu7MuDdDWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL2HHJY4sPAo8eEZ0xy/ei8lfeAMB8GA1UdIwQY MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0 LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIy7cbWl puSG6tvdn7y/AG8wtXYnn0nAo2ImQpnQyH56jIiXkKjd8/3GeJzh7fQR74kEMtAB urvPFKQx6fH/nn8R0AphHA3+LmNxmv0TBMCdUFQB0BEOTd+6/QmyFpWlZ/pEVGCC W9TAYHgfXnFujg1MV2S9Ap5dy31SYUCViaiquK1dlZf+87a+TyIOmT7jtNgJBUy/ klj4+ETGuGe5OjPN7eWw6b68O4jxNMHs5pMV32hS629jS3jaYsgLEdgLDUqMPVJk ZHgcgkFTPXTOflaIvdTMx3Y7QPc4Qcw8P/WJux9cNcCQKINbQCBo+TKqkbb6WW7K Y7/SlSjr2tVfmQ== -----END CERTIFICATE-----Generated at Wed Jan 7 10:24:49 2026 by rpki-client