This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json) Hash identifier: 7yw8VWlTWXcUabj2M8fpR9E+Kts9XMZISnqDyhvoKyA= Subject key identifier: 8F:32:85:29:28:09:29:4C:CC:C6:B2:C5:79:DD:BA:8D:F7:C6:9D:99 Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019B440053FE6EFF078262566ABDC13B566D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft Manifest number: 0B53 Signing time: Mon 22 Dec 2025 03:00:30 +0000 Manifest this update: Mon 22 Dec 2025 03:00:30 +0000 Manifest next update: Tue 23 Dec 2025 03:00:30 +0000 Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: /SuU3pOx2L94VY2lEslEzoMmUTGGa1u3w6wngdxvkrM=) 2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=) 3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:53:fe:6e:ff:07:82:62:56:6a:bd:c1:3b:56:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Dec 22 03:00:30 2025 GMT Not After : Dec 23 03:00:30 2025 GMT Subject: CN=8f3285292809294cccc6b2c579ddba8df7c69d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:7a:69:83:dd:b1:e9:83:48:0b:39:d4:e7: 15:7d:30:f8:94:0e:c7:3f:cb:81:22:85:ad:76:4c: af:9c:b3:25:32:de:c7:14:86:08:cc:f3:51:ae:6f: e1:18:01:e6:c4:7d:db:42:13:c0:39:60:6c:91:d4: b0:09:86:4c:d4:92:eb:d7:ee:b0:3f:08:69:50:c6: 17:2e:ae:f3:fe:b0:8f:6b:11:59:36:4b:4c:54:e0: 12:4a:54:c4:a4:ee:f6:a2:60:9a:9d:17:bc:83:1a: 84:58:bf:ba:80:03:50:b2:1b:34:dc:af:99:cd:ce: 0f:5f:f4:25:f2:c3:53:4f:a3:ec:ac:7b:78:e2:7e: 47:20:9b:28:b5:f7:41:8a:5a:4e:09:52:2a:95:73: eb:f3:2c:e5:41:f0:6c:56:68:2e:8d:f3:62:3e:88: 51:2a:e9:66:ef:8e:5c:ee:dc:f9:ae:53:39:11:3a: 56:ad:bd:0f:0a:34:1c:b3:b5:7a:4d:8f:a9:53:aa: 8f:04:fa:6f:e8:9a:18:1c:12:67:7b:f8:6c:96:5a: 3e:b7:6b:38:d6:83:a2:4e:ae:b5:f9:6d:57:cf:fa: d1:63:39:8e:a4:a0:3d:aa:81:2c:38:ad:8c:96:fb: d3:83:f5:6c:62:70:8a:7a:44:a2:dd:49:f3:99:3f: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:85:29:28:09:29:4C:CC:C6:B2:C5:79:DD:BA:8D:F7:C6:9D:99 X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f4:17:6e:e2:68:7e:c3:33:fc:35:61:d6:7a:12:3a:4b:35: 98:67:be:29:ff:1d:ba:a9:4e:66:77:5e:0f:87:87:42:89:b5: 6a:4c:c1:86:08:cb:70:00:bc:7a:7f:a9:2a:85:ca:48:6f:6c: 00:99:65:25:81:26:14:6a:78:58:ed:a7:bd:55:04:a0:70:05: a6:b5:ac:ff:ae:12:04:73:4c:3a:4d:42:26:fd:32:10:10:d3: 00:62:d8:3b:0b:44:61:80:d7:f2:97:3d:d6:d2:5f:1c:3b:71: 6f:31:61:24:ad:95:48:6c:56:44:d8:23:90:5d:61:7d:90:10: 1a:a3:44:09:c5:5a:9b:5b:55:29:f1:ce:79:70:ae:2a:22:1c: 3c:0e:7a:fe:6a:7b:e6:52:f7:d4:57:4c:1f:1e:81:69:03:74: 8e:0f:ee:c4:df:4f:67:50:30:16:d2:a0:a8:2f:70:ea:29:48: 18:b3:9c:7c:74:c9:ca:5e:08:f1:89:f4:6d:10:58:d8:a8:39: d7:2d:20:35:a3:6c:15:ae:ac:10:21:f5:b2:45:89:d7:c7:50: fb:98:41:8d:db:6d:c8:60:e0:a4:3f:f6:2f:0f:12:31:33:31: 4b:a9:b1:2a:c5:07:61:93:a7:c7:d5:b3:a8:a6:12:47:d1:c9: 01:54:d0:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAFP+bv8HgmJWar3BO1ZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjUxMjIyMDMwMDMwWhcNMjUxMjIzMDMwMDMwWjAzMTEwLwYDVQQD Eyg4ZjMyODUyOTI4MDkyOTRjY2NjNmIyYzU3OWRkYmE4ZGY3YzY5ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4996aYPdsemDSAs51OcVfTD4lA7H P8uBIoWtdkyvnLMlMt7HFIYIzPNRrm/hGAHmxH3bQhPAOWBskdSwCYZM1JLr1+6w PwhpUMYXLq7z/rCPaxFZNktMVOASSlTEpO72omCanRe8gxqEWL+6gANQshs03K+Z zc4PX/Ql8sNTT6PsrHt44n5HIJsotfdBilpOCVIqlXPr8yzlQfBsVmgujfNiPohR Kulm745c7tz5rlM5ETpWrb0PCjQcs7V6TY+pU6qPBPpv6JoYHBJne/hsllo+t2s4 1oOiTq61+W1Xz/rRYzmOpKA9qoEsOK2MlvvTg/VsYnCKekSi3UnzmT9S+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8yhSkoCSlMzMayxXnduo33xp2ZMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvQXbuJo fsMz/DVh1noSOks1mGe+Kf8duqlOZndeD4eHQom1akzBhgjLcAC8en+pKoXKSG9s AJllJYEmFGp4WO2nvVUEoHAFprWs/64SBHNMOk1CJv0yEBDTAGLYOwtEYYDX8pc9 1tJfHDtxbzFhJK2VSGxWRNgjkF1hfZAQGqNECcVam1tVKfHOeXCuKiIcPA56/mp7 5lL31FdMHx6BaQN0jg/uxN9PZ1AwFtKgqC9w6ilIGLOcfHTJyl4I8Yn0bRBY2Kg5 1y0gNaNsFa6sECH1skWJ18dQ+5hBjdttyGDgpD/2Lw8SMTMxS6mxKsUHYZOnx9Wz qKYSR9HJAVTQzw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:04 2025 by rpki-client