This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json) Hash identifier: KBSVY+imgAJ18Yh8DS+KiZ1gbWT9SaQJyLu9jhsDouI= Subject key identifier: 36:9C:8D:96:33:7A:53:04:5A:0C:AF:EA:C0:0D:A0:5A:27:F4:F8:5B Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Certificate serial: 019B3344C70DB02B350F341741BC44FD4D8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft Manifest number: 1596 Signing time: Thu 18 Dec 2025 21:01:43 +0000 Manifest this update: Thu 18 Dec 2025 21:01:43 +0000 Manifest next update: Fri 19 Dec 2025 21:01:43 +0000 Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: 2JpkgZclbCD9zOqCWdmMXjnL9eulrxmVJbDzb48WFP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:c7:0d:b0:2b:35:0f:34:17:41:bc:44:fd:4d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Validity Not Before: Dec 18 21:01:43 2025 GMT Not After : Dec 19 21:01:43 2025 GMT Subject: CN=369c8d96337a53045a0cafeac00da05a27f4f85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:5e:8b:bc:92:00:2a:52:ba:a8:52:f5:70: 6f:cc:4c:a7:9a:43:da:25:06:65:d7:37:21:26:0a: 04:05:9c:27:36:23:66:74:1b:00:2a:3b:b1:26:71: d0:88:e3:a4:91:81:c0:b2:8c:4e:7f:44:6b:16:bc: 65:fe:1d:ae:3e:1b:e1:90:ed:88:b8:6f:bd:ab:a2: 29:d0:eb:4b:df:0b:f1:a4:c4:4d:b5:85:15:e7:7b: 30:c2:03:74:58:f6:a0:02:9d:19:cc:6f:20:dc:ca: 29:0b:57:a4:fc:bd:c7:28:3a:77:2e:82:ef:02:cf: 03:f9:d7:cc:d7:de:11:13:c8:17:2c:dd:e0:e8:c1: 0a:57:97:b1:37:c4:bf:c0:c0:4a:b6:a5:d3:ce:96: a6:42:87:7d:4d:2d:77:e1:af:d9:97:78:13:a4:35: 1c:1d:9a:d9:14:e5:9a:9e:e0:2e:8c:6b:5c:f2:52: bb:03:fc:ce:d4:32:51:69:11:42:74:a4:00:ff:96: dd:3d:b0:dd:31:23:82:54:d3:3d:5f:2b:81:0b:c1: 04:63:63:3c:15:6e:a3:17:f7:6c:7f:43:27:de:d8: 43:02:ad:f9:71:48:71:ae:09:9b:43:c2:62:18:a9: 0d:fa:04:39:7f:2c:bc:18:68:9d:36:2f:56:64:15: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:8D:96:33:7A:53:04:5A:0C:AF:EA:C0:0D:A0:5A:27:F4:F8:5B X509v3 Authority Key Identifier: keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:a3:4f:86:2a:20:8b:4e:06:1c:f1:6e:f3:6f:ae:0a:5b: 49:41:7e:81:50:6b:53:a4:04:e6:76:fc:9b:81:e1:94:79:31: 75:25:d4:93:d1:dc:12:31:f9:55:c3:6f:48:ab:74:98:44:cf: 45:e5:d6:6a:21:b1:d7:1f:81:b7:ed:17:05:e1:96:4f:92:19: a6:2c:0b:a5:7c:ab:6f:97:f7:28:98:eb:e4:dd:00:52:9b:f7: b8:cc:e7:d0:d0:0d:59:db:48:08:f9:ff:8c:b4:9a:d9:b7:25: e4:f3:ca:8a:bb:75:be:24:ad:82:a5:f6:f2:13:dc:5e:50:1c: 37:79:fd:33:a8:8a:ab:ca:c3:57:5b:6a:f9:c0:70:62:07:7a: 16:92:e8:ca:5e:23:f3:a5:51:ea:29:47:7c:d5:f5:97:d2:18: 3f:52:11:78:c0:5b:e6:34:d5:70:3d:76:5f:5f:fe:d3:f4:4c: 4f:5a:dd:21:8b:49:4b:79:b7:d3:bc:b8:02:eb:95:ae:b1:d1: 03:2b:89:ba:3a:ab:e5:ae:5c:fe:72:46:31:bc:44:10:c2:b3: 46:89:25:06:88:c5:41:bd:4b:b5:21:7c:80:8a:d1:16:91:3f: d5:e9:ae:ee:97:7d:ea:4d:47:7a:3b:73:3f:04:b5:58:5c:83: c2:4b:81:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRMcNsCs1DzQXQbxE/U2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTUwYjJhNTFjOGY1YWRiOTM3YjIyYTkwYzcyMGY2YjA0 ZjI5NzMwHhcNMjUxMjE4MjEwMTQzWhcNMjUxMjE5MjEwMTQzWjAzMTEwLwYDVQQD EygzNjljOGQ5NjMzN2E1MzA0NWEwY2FmZWFjMDBkYTA1YTI3ZjRmODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rdei7ySACpSuqhS9XBvzEynmkPa JQZl1zchJgoEBZwnNiNmdBsAKjuxJnHQiOOkkYHAsoxOf0RrFrxl/h2uPhvhkO2I uG+9q6Ip0OtL3wvxpMRNtYUV53swwgN0WPagAp0ZzG8g3MopC1ek/L3HKDp3LoLv As8D+dfM194RE8gXLN3g6MEKV5exN8S/wMBKtqXTzpamQod9TS134a/Zl3gTpDUc HZrZFOWanuAujGtc8lK7A/zO1DJRaRFCdKQA/5bdPbDdMSOCVNM9XyuBC8EEY2M8 FW6jF/dsf0Mn3thDAq35cUhxrgmbQ8JiGKkN+gQ5fyy8GGidNi9WZBU0CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDacjZYzelMEWgyv6sANoFon9PhbMB8GA1UdIwQY MBaAFIPlCypRyPWtuTeyKpDHIPawTylzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2Et YjgzOWQ5MjAyMTA2LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2EtYjgzOWQ5MjAyMTA2 LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPCjT4Yq IItOBhzxbvNvrgpbSUF+gVBrU6QE5nb8m4HhlHkxdSXUk9HcEjH5VcNvSKt0mETP ReXWaiGx1x+Bt+0XBeGWT5IZpiwLpXyrb5f3KJjr5N0AUpv3uMzn0NANWdtICPn/ jLSa2bcl5PPKirt1viStgqX28hPcXlAcN3n9M6iKq8rDV1tq+cBwYgd6FpLoyl4j 86VR6ilHfNX1l9IYP1IReMBb5jTVcD12X1/+0/RMT1rdIYtJS3m307y4AuuVrrHR AyuJujqr5a5c/nJGMbxEEMKzRoklBojFQb1LtSF8gIrRFpE/1emu7pd96k1Hejtz PwS1WFyDwkuBIw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:58 2025 by rpki-client