This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json) Hash identifier: KS4TRJwNUoW1QEo7f5DLzpnJ1KcNmh6qj1J6y4GA0tU= Subject key identifier: 71:BC:F1:A9:F6:02:D5:4C:12:28:F9:9C:34:62:90:AB:78:29:7B:5F Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019B4DA879881F36C04890499813D1105EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft Manifest number: 0B58 Signing time: Wed 24 Dec 2025 00:00:45 +0000 Manifest this update: Wed 24 Dec 2025 00:00:45 +0000 Manifest next update: Thu 25 Dec 2025 00:00:45 +0000 Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: DlYtxoB03cVZDcMaXRLK4w6atdN62h0YoxeTeRrf8c4=) 2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=) 3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:a8:79:88:1f:36:c0:48:90:49:98:13:d1:10:5e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Dec 24 00:00:45 2025 GMT Not After : Dec 25 00:00:45 2025 GMT Subject: CN=71bcf1a9f602d54c1228f99c346290ab78297b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:9c:5c:dc:a3:11:23:8c:c2:53:d1:55:91: 0f:65:f2:b7:72:dd:d0:b8:a3:44:c2:72:aa:57:b5: 9a:35:42:34:d1:a9:a2:60:0c:0c:a9:64:bc:15:e5: 4e:80:e4:9a:d5:f3:47:f4:e2:0f:35:ab:81:b5:e3: 2c:a1:aa:b5:a9:52:59:13:50:6f:d3:39:af:3d:5e: 6c:61:5f:cf:4c:cf:46:51:00:e7:0f:7b:ab:ba:c7: 02:25:68:1f:6b:d6:37:da:1d:70:a5:38:10:a1:6b: dc:46:05:98:9c:0e:16:d1:44:47:97:16:98:7b:59: 4b:1a:5b:be:8c:bb:73:cf:9e:85:86:fc:84:f9:a2: 9c:a9:72:c8:cc:fd:51:11:10:5c:06:51:88:10:a1: 6a:7a:ec:57:f1:93:df:ca:b9:c5:77:6e:c3:5b:dd: ea:98:ad:73:b3:cc:5e:60:87:27:51:cc:ae:c4:ae: f0:86:c5:09:ca:e1:94:35:dd:d6:b4:26:b0:cf:96: 46:49:6b:ea:73:77:8a:ad:95:e7:b0:69:86:7b:ab: 20:ff:aa:07:f8:4f:86:ab:69:1c:3b:da:16:45:7a: 1d:30:5b:dc:c5:e8:76:84:32:04:22:d2:89:4e:4b: 23:9d:90:75:b4:fb:52:e1:18:92:f6:4c:12:90:11: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:F1:A9:F6:02:D5:4C:12:28:F9:9C:34:62:90:AB:78:29:7B:5F X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f6:6c:6c:b0:16:d7:fc:f4:c1:24:51:cd:8b:eb:7d:7d:af: 37:93:2d:88:d6:54:2c:94:aa:0e:57:1d:8e:58:56:ec:36:d9: 70:78:3d:03:80:8b:6b:64:87:ae:e5:14:f3:10:a9:9c:d0:fe: 59:63:37:04:24:3c:11:a5:0f:98:e9:27:d1:f7:24:7f:b6:4d: 1d:05:ff:a4:c4:10:df:d5:76:27:8e:02:8f:b6:88:c0:fa:01: 9e:b9:24:b6:89:d8:2b:45:b2:94:07:48:06:35:1b:99:2e:87: 15:35:67:61:53:8a:6d:96:05:a6:d3:24:a6:7f:35:8e:25:a6: 86:be:6e:0a:54:6e:5e:60:c3:01:46:4c:5c:fc:f3:d3:a4:80: 33:1a:72:18:86:78:31:47:13:e5:82:0c:ef:6a:f7:dc:d6:af: 14:8a:38:6d:e4:c6:86:5f:42:9b:cf:a9:fa:a8:21:80:0a:a5: eb:79:93:4e:01:da:54:a0:1e:e2:3d:d9:cc:98:ea:f1:ce:da: 99:74:38:e6:92:5f:00:27:3b:58:0b:d1:f0:38:d6:df:1b:70: cb:b3:3b:79:53:86:03:0b:35:5c:d2:d1:74:b3:46:31:6a:36: c6:ec:90:f1:f1:2c:4a:44:64:d2:bd:d5:9f:fa:57:55:6a:6c: bd:c0:12:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNqHmIHzbASJBJmBPREF6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjUxMjI0MDAwMDQ1WhcNMjUxMjI1MDAwMDQ1WjAzMTEwLwYDVQQD Eyg3MWJjZjFhOWY2MDJkNTRjMTIyOGY5OWMzNDYyOTBhYjc4Mjk3YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwecXNyjESOMwlPRVZEPZfK3ct3Q uKNEwnKqV7WaNUI00amiYAwMqWS8FeVOgOSa1fNH9OIPNauBteMsoaq1qVJZE1Bv 0zmvPV5sYV/PTM9GUQDnD3uruscCJWgfa9Y32h1wpTgQoWvcRgWYnA4W0URHlxaY e1lLGlu+jLtzz56FhvyE+aKcqXLIzP1RERBcBlGIEKFqeuxX8ZPfyrnFd27DW93q mK1zs8xeYIcnUcyuxK7whsUJyuGUNd3WtCawz5ZGSWvqc3eKrZXnsGmGe6sg/6oH +E+Gq2kcO9oWRXodMFvcxeh2hDIEItKJTksjnZB1tPtS4RiS9kwSkBE6BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHG88an2AtVMEij5nDRikKt4KXtfMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/ZsbLAW 1/z0wSRRzYvrfX2vN5MtiNZULJSqDlcdjlhW7DbZcHg9A4CLa2SHruUU8xCpnND+ WWM3BCQ8EaUPmOkn0fckf7ZNHQX/pMQQ39V2J44Cj7aIwPoBnrkktonYK0WylAdI BjUbmS6HFTVnYVOKbZYFptMkpn81jiWmhr5uClRuXmDDAUZMXPzz06SAMxpyGIZ4 MUcT5YIM72r33NavFIo4beTGhl9Cm8+p+qghgAql63mTTgHaVKAe4j3ZzJjq8c7a mXQ45pJfACc7WAvR8DjW3xtwy7M7eVOGAws1XNLRdLNGMWo2xuyQ8fEsSkRk0r3V n/pXVWpsvcAS0Q== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:26 2025 by rpki-client