This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json) Hash identifier: pVpR4n6UHkthxyYjZb5kD6HfqgxmYniwXi7P/vzSlQc= Subject key identifier: 18:72:79:22:CB:D9:A3:8E:39:C8:08:23:3D:88:56:67:1B:49:64:D2 Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019B4BF2593E1E11DE81AA9893E7F8958B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft Manifest number: 126A Signing time: Tue 23 Dec 2025 16:02:12 +0000 Manifest this update: Tue 23 Dec 2025 16:02:12 +0000 Manifest next update: Wed 24 Dec 2025 16:02:12 +0000 Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=) 2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: AL7WAQaybNzZXWcfjX0x/dgXwiATjZjOZoQO+7sCD6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:59:3e:1e:11:de:81:aa:98:93:e7:f8:95:8b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Dec 23 16:02:12 2025 GMT Not After : Dec 24 16:02:12 2025 GMT Subject: CN=18727922cbd9a38e39c808233d8856671b4964d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:1b:91:e1:bb:a8:76:15:d8:ef:01:46:4d: 8d:ab:dc:4a:48:41:63:af:df:ef:e4:ea:8e:ae:00: f3:6c:f7:bd:6a:2a:ba:a8:37:52:45:4b:f6:3d:f5: 24:b5:d3:55:86:91:ac:fa:64:84:7c:ea:84:7c:e5: fa:74:14:3c:99:ea:0b:36:26:55:47:08:2a:c3:91: d9:37:62:12:81:0d:ff:45:e3:c5:e2:33:ec:37:8d: 51:d9:da:3f:b0:2a:50:58:85:dc:71:d3:7f:b7:32: 26:65:83:45:5b:70:cc:28:45:a2:89:b1:0a:d0:2c: 88:c6:2a:b5:6f:5e:f2:c3:33:58:03:f6:8c:da:c4: 9c:bc:45:fd:4c:f1:56:3b:aa:78:96:af:38:fb:82: e8:64:a6:64:0b:96:23:f3:cf:fc:24:8f:67:ba:fb: 66:af:1d:cf:84:64:d9:a5:de:55:55:5e:90:ea:10: dc:50:28:df:a7:30:59:3d:df:8e:f6:95:c6:82:d7: ba:3e:bb:8e:01:94:82:fe:2d:6c:e4:c1:53:2d:02: e6:f7:4d:b1:f1:49:7e:c4:f1:1e:64:da:78:2d:59: 9f:7a:b2:44:1b:10:4e:59:b2:c1:f2:f1:ec:84:c5: 88:e7:8b:2d:51:4c:a9:b9:e2:06:17:08:f5:b9:d5: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:79:22:CB:D9:A3:8E:39:C8:08:23:3D:88:56:67:1B:49:64:D2 X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ea:15:c1:db:80:ac:2d:86:ec:c2:26:ad:1a:4a:34:b8:db: c3:63:77:78:3c:ab:46:53:c7:e7:d3:2a:d1:ea:c9:58:41:b9: 98:e8:ba:32:b8:ab:40:3d:9b:64:8c:76:09:6b:14:90:ed:75: b3:bc:17:76:0c:39:b3:1b:ab:07:be:14:75:22:f8:56:5c:e1: 05:92:e2:82:8f:c0:5a:64:b9:a8:c6:bb:17:ae:46:7c:5d:ef: 38:2e:9c:91:66:b9:9d:f1:8c:8a:16:30:da:cf:69:1d:69:01: 52:a8:35:36:32:8d:35:27:77:5c:8a:9d:62:aa:7c:2b:74:5e: f2:6b:da:7a:bd:e3:79:8a:f7:d5:de:7a:c4:d9:96:1c:83:87: 3a:bd:7f:c1:2e:fb:4d:6a:03:c2:fd:fb:de:15:eb:07:4a:92: cb:4c:37:04:9b:b5:50:f4:73:a9:bd:f9:5c:bf:26:06:ac:33: 20:83:ff:44:c2:a4:79:7c:49:f0:74:9d:fc:b3:27:fb:ea:da: 13:bf:5e:e0:54:eb:77:ff:32:85:a1:49:75:52:c6:bc:77:6f: 9a:8d:9d:33:11:6e:5a:2f:a3:03:6e:67:7b:bc:03:5c:91:c6: 8b:ef:8c:5c:95:70:b6:3c:6e:09:4a:8c:fc:f3:5c:80:6d:61: 8c:99:af:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8lk+HhHegaqYk+f4lYtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjUxMjIzMTYwMjEyWhcNMjUxMjI0MTYwMjEyWjAzMTEwLwYDVQQD EygxODcyNzkyMmNiZDlhMzhlMzljODA4MjMzZDg4NTY2NzFiNDk2NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIUbkeG7qHYV2O8BRk2Nq9xKSEFj r9/v5OqOrgDzbPe9aiq6qDdSRUv2PfUktdNVhpGs+mSEfOqEfOX6dBQ8meoLNiZV Rwgqw5HZN2ISgQ3/RePF4jPsN41R2do/sCpQWIXccdN/tzImZYNFW3DMKEWiibEK 0CyIxiq1b17ywzNYA/aM2sScvEX9TPFWO6p4lq84+4LoZKZkC5Yj88/8JI9nuvtm rx3PhGTZpd5VVV6Q6hDcUCjfpzBZPd+O9pXGgte6PruOAZSC/i1s5MFTLQLm902x 8Ul+xPEeZNp4LVmferJEGxBOWbLB8vHshMWI54stUUypueIGFwj1udWw6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhyeSLL2aOOOcgIIz2IVmcbSWTSMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteoVwduA rC2G7MImrRpKNLjbw2N3eDyrRlPH59Mq0erJWEG5mOi6MrirQD2bZIx2CWsUkO11 s7wXdgw5sxurB74UdSL4VlzhBZLigo/AWmS5qMa7F65GfF3vOC6ckWa5nfGMihYw 2s9pHWkBUqg1NjKNNSd3XIqdYqp8K3Re8mvaer3jeYr31d56xNmWHIOHOr1/wS77 TWoDwv373hXrB0qSy0w3BJu1UPRzqb35XL8mBqwzIIP/RMKkeXxJ8HSd/LMn++ra E79e4FTrd/8yhaFJdVLGvHdvmo2dMxFuWi+jA25ne7wDXJHGi++MXJVwtjxuCUqM /PNcgG1hjJmvoQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:50:33 2025 by rpki-client