This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json) Hash identifier: j4VxIq5XS3zXgvj/DsOMvm12jqf/Ln0OSjWqHtxZviI= Subject key identifier: 58:53:D5:93:07:F4:BF:00:75:A7:56:53:B0:66:B6:AC:11:6F:D7:9D Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057 Certificate serial: 019B34C518DC74B539853DD8AAA02F3B0B6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft Manifest number: 13B8 Signing time: Fri 19 Dec 2025 04:01:30 +0000 Manifest this update: Fri 19 Dec 2025 04:01:30 +0000 Manifest next update: Sat 20 Dec 2025 04:01:30 +0000 Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: xjwBLeVZXEjCfBAVAWZsdanoMRWSctQ9g1dPbEve0fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:18:dc:74:b5:39:85:3d:d8:aa:a0:2f:3b:0b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057 Validity Not Before: Dec 19 04:01:30 2025 GMT Not After : Dec 20 04:01:30 2025 GMT Subject: CN=5853d59307f4bf0075a75653b066b6ac116fd79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:37:c7:26:2e:04:d3:9a:be:a8:64:59:23: c9:8c:a0:0b:01:f9:ee:29:7c:33:a6:55:93:86:38: b8:fc:df:2a:9b:0a:ec:35:1f:1d:1c:3a:43:ad:cf: 9a:fa:3e:dc:df:e2:9b:30:e0:b5:da:47:ca:2d:0f: 18:4f:6e:ba:50:d0:86:a7:ce:ff:be:38:4c:4a:fa: 3e:f9:2b:6f:1a:48:24:81:44:d6:d0:c3:82:13:87: 13:72:ad:e6:90:0d:3a:72:5e:78:8a:df:8a:78:b2: b2:de:fe:e1:5d:7d:5f:e4:02:b2:78:dc:87:5c:61: aa:14:b0:bf:cc:a0:e7:5f:2e:f5:9f:c4:4e:3b:1c: 5b:46:44:0b:77:5f:c2:9e:5d:38:9e:35:f8:c6:92: 7a:08:de:5a:65:8a:3e:15:3d:05:25:43:9f:8a:0b: c0:1a:da:d7:b1:98:30:1a:22:00:b2:43:58:a0:9b: 13:53:a2:44:30:89:35:03:02:25:79:fd:64:b7:58: a2:2f:4c:74:3a:b5:98:66:62:f4:75:e9:61:23:7d: 79:fa:15:00:d7:76:f7:ea:d6:d9:f4:66:79:40:32: d4:dc:4e:87:0d:c1:5d:34:c5:43:c4:12:d1:e6:df: e3:6e:37:05:47:66:61:05:92:b2:19:cf:ef:b9:4c: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:D5:93:07:F4:BF:00:75:A7:56:53:B0:66:B6:AC:11:6F:D7:9D X509v3 Authority Key Identifier: keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7d:7f:28:75:42:d4:20:c9:60:5e:6c:87:e4:79:d2:4a:b3: 8a:d9:4f:e2:02:68:14:f6:9b:2a:09:28:b1:50:d3:11:aa:25: 86:d5:8c:fa:10:8c:45:b5:32:a5:99:1b:f5:0b:6e:13:91:30: d8:c0:4e:80:64:0c:63:fe:42:6c:40:fc:24:a3:00:2f:d5:1d: 3c:cc:58:65:5e:38:8b:9d:ae:b7:68:08:c0:93:ca:c6:fa:a9: 2d:87:bd:78:3f:f3:58:5c:53:42:76:8e:71:20:2c:51:34:48: 99:d1:58:7c:b2:35:30:e7:94:6a:18:32:87:52:4b:2b:a1:35: e2:04:73:80:c0:88:04:6b:8d:f3:5e:bb:e8:e5:37:78:ae:af: 9a:f5:8c:f0:b6:87:62:b8:2f:61:ff:28:f2:1a:a1:18:a8:d0: 19:57:fb:68:49:f4:1d:5e:39:a4:93:62:e5:63:ef:4a:03:e2: 7a:8a:8d:50:ee:11:4a:8b:2b:2f:32:7e:ea:ef:b1:12:ac:bd: 73:35:41:b6:14:41:61:34:50:10:3a:a2:e0:7d:72:4a:fb:d4: 16:50:86:cd:6c:26:24:bd:2b:26:b0:f2:91:b7:90:3e:ed:af: 38:6b:2b:0d:7f:08:ec:4b:53:af:82:cf:71:be:8e:29:2e:de: b3:a8:a6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRjcdLU5hT3YqqAvOwtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4 OGQwNTcwHhcNMjUxMjE5MDQwMTMwWhcNMjUxMjIwMDQwMTMwWjAzMTEwLwYDVQQD Eyg1ODUzZDU5MzA3ZjRiZjAwNzVhNzU2NTNiMDY2YjZhYzExNmZkNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyU3xyYuBNOavqhkWSPJjKALAfnu KXwzplWThji4/N8qmwrsNR8dHDpDrc+a+j7c3+KbMOC12kfKLQ8YT266UNCGp87/ vjhMSvo++StvGkgkgUTW0MOCE4cTcq3mkA06cl54it+KeLKy3v7hXX1f5AKyeNyH XGGqFLC/zKDnXy71n8ROOxxbRkQLd1/Cnl04njX4xpJ6CN5aZYo+FT0FJUOfigvA GtrXsZgwGiIAskNYoJsTU6JEMIk1AwIlef1kt1iiL0x0OrWYZmL0delhI315+hUA 13b36tbZ9GZ5QDLU3E6HDcFdNMVDxBLR5t/jbjcFR2ZhBZKyGc/vuUyXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhT1ZMH9L8AdadWU7BmtqwRb9edMB8GA1UdIwQY MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2 LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV31/KHVC 1CDJYF5sh+R50kqzitlP4gJoFPabKgkosVDTEaolhtWM+hCMRbUypZkb9QtuE5Ew 2MBOgGQMY/5CbED8JKMAL9UdPMxYZV44i52ut2gIwJPKxvqpLYe9eD/zWFxTQnaO cSAsUTRImdFYfLI1MOeUahgyh1JLK6E14gRzgMCIBGuN81676OU3eK6vmvWM8LaH YrgvYf8o8hqhGKjQGVf7aEn0HV45pJNi5WPvSgPieoqNUO4RSosrLzJ+6u+xEqy9 czVBthRBYTRQEDqi4H1ySvvUFlCGzWwmJL0rJrDykbeQPu2vOGsrDX8I7EtTr4LP cb6OKS7es6imAg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:55:23 2025 by rpki-client