This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json) Hash identifier: HRJelJTqm7xfmxaipu3A+QV/nqxyp1JH7xEMIh3ZJwI= Subject key identifier: 2C:F4:5C:47:1D:42:E8:ED:D7:15:EC:A4:4D:83:68:7A:7F:2D:B9:37 Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414 Certificate serial: 019B3E6DADB0E24F2F1DDBCB9E706EAE0743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft Manifest number: 90 Signing time: Sun 21 Dec 2025 01:02:13 +0000 Manifest this update: Sun 21 Dec 2025 01:02:13 +0000 Manifest next update: Mon 22 Dec 2025 01:02:13 +0000 Files and hashes: 1: LZ-wxsIfVBkPpzzPccN-Xg843Tk.roa (hash: a+rRNmojLXEiSwjZR22/RH+IaH7ZkyL3G1aaVSbNX3o=) 2: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: 0D+cvHVSeQW/a95G7Ub3KceoDNY+ahSOgOgzcuLNHAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:ad:b0:e2:4f:2f:1d:db:cb:9e:70:6e:ae:07:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414 Validity Not Before: Dec 21 01:02:13 2025 GMT Not After : Dec 22 01:02:13 2025 GMT Subject: CN=2cf45c471d42e8edd715eca44d83687a7f2db937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:dc:0e:fc:17:5c:89:34:d8:24:a1:d4:8b: e4:cc:78:da:5b:92:d9:3d:f1:1e:e1:cc:8f:ec:d5: 13:13:d4:bc:a9:c5:02:23:05:ba:4e:79:9b:06:17: 37:28:c3:9d:53:f6:b5:4f:59:7d:8f:d1:e6:3a:b9: 6d:1c:04:b7:88:6e:22:ad:58:9f:3f:0d:fa:6e:0f: 29:ee:4f:4e:f9:58:1a:b2:1b:9e:d1:ad:b7:37:6a: 87:84:56:30:a8:af:8e:a5:bc:a8:2b:0b:09:0a:06: cd:33:89:9a:4e:7e:9a:11:40:ce:c0:dc:77:44:c7: 04:a6:1e:f1:b9:37:12:2f:81:cd:a4:22:d4:4b:ab: 70:7b:95:c8:a6:7b:82:c5:e4:bd:a9:b1:b5:23:f7: 04:df:68:c1:b2:30:a1:89:af:c8:76:08:63:c0:ee: 7b:db:55:2d:4b:14:bc:fd:73:a4:4a:c3:97:8a:67: 89:a0:3d:76:36:7b:1f:3c:75:a5:77:78:10:02:f3: 72:2a:f8:c0:76:39:5e:ec:6b:30:3c:d3:4e:5d:c6: e0:8a:dd:55:29:6a:c3:c5:a4:71:9c:a5:5e:ba:ac: ef:fc:22:31:82:19:89:a8:a2:32:1d:ad:db:aa:32: 0f:c6:7a:1c:da:4a:7e:ae:f0:59:4e:5d:f9:8a:0b: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:5C:47:1D:42:E8:ED:D7:15:EC:A4:4D:83:68:7A:7F:2D:B9:37 X509v3 Authority Key Identifier: keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1d:1c:97:8c:70:fb:bd:5c:67:8c:a2:16:cf:a8:77:9d:40: 1c:8c:a8:5b:58:d3:da:19:d2:f2:1c:1c:00:8a:2d:29:3f:34: f4:8a:d4:94:e0:08:be:03:c7:e2:e7:d9:52:34:ad:82:b0:04: 3c:b3:8d:8d:46:b5:dc:87:27:63:91:9a:75:cf:8b:8e:a9:89: 29:fb:72:f4:c9:7d:8d:7a:de:e2:d5:95:6a:e7:cd:82:b0:48: 87:d3:69:f7:c0:70:b6:f0:1d:27:d3:e2:1d:22:0f:ec:0f:01: 94:72:30:17:72:84:6b:0d:52:52:c8:94:45:99:c4:90:79:55: 84:1d:a5:f1:96:2f:3e:57:90:df:c2:23:5d:98:9f:78:27:b0: 1f:30:fb:e4:c6:7a:16:8b:aa:8c:df:10:f2:1e:74:0b:f4:d5: d6:f5:eb:77:6e:f6:22:12:03:bd:15:98:9c:11:27:43:7f:40: f4:b9:7a:29:52:db:3d:b0:dc:c8:03:7a:da:c0:66:3a:2f:54: cc:38:cb:19:fc:9d:1f:9d:19:e8:61:df:3c:e1:0c:b1:f8:b2: 35:73:13:47:46:77:0e:9e:12:55:6f:2d:07:78:c8:1f:9a:2d: 4a:5f:d9:d1:90:90:96:41:99:ad:6a:01:3c:c6:3d:12:9d:ae: 63:44:d9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ba2w4k8vHdvLnnBurgdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjBlNzE1NzE0N2E5MGNlMzc0NjBiNzE5Y2I3NjA2OTRh YjU0MTQwHhcNMjUxMjIxMDEwMjEzWhcNMjUxMjIyMDEwMjEzWjAzMTEwLwYDVQQD EygyY2Y0NWM0NzFkNDJlOGVkZDcxNWVjYTQ0ZDgzNjg3YTdmMmRiOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHcDvwXXIk02CSh1IvkzHjaW5LZ PfEe4cyP7NUTE9S8qcUCIwW6TnmbBhc3KMOdU/a1T1l9j9HmOrltHAS3iG4irVif Pw36bg8p7k9O+Vgashue0a23N2qHhFYwqK+OpbyoKwsJCgbNM4maTn6aEUDOwNx3 RMcEph7xuTcSL4HNpCLUS6twe5XIpnuCxeS9qbG1I/cE32jBsjChia/IdghjwO57 21UtSxS8/XOkSsOXimeJoD12NnsfPHWld3gQAvNyKvjAdjle7GswPNNOXcbgit1V KWrDxaRxnKVeuqzv/CIxghmJqKIyHa3bqjIPxnoc2kp+rvBZTl35igt05QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz0XEcdQujt1xXspE2DaHp/Lbk3MB8GA1UdIwQY MBaAFFCw5xVxR6kM43RgtxnLdgaUq1QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYt MTRjOTE5YWQ4NzY4LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYtMTRjOTE5YWQ4NzY4 LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh0cl4xw +71cZ4yiFs+od51AHIyoW1jT2hnS8hwcAIotKT809IrUlOAIvgPH4ufZUjStgrAE PLONjUa13IcnY5Gadc+LjqmJKfty9Ml9jXre4tWVaufNgrBIh9Np98BwtvAdJ9Pi HSIP7A8BlHIwF3KEaw1SUsiURZnEkHlVhB2l8ZYvPleQ38IjXZifeCewHzD75MZ6 FouqjN8Q8h50C/TV1vXrd272IhIDvRWYnBEnQ39A9Ll6KVLbPbDcyAN62sBmOi9U zDjLGfydH50Z6GHfPOEMsfiyNXMTR0Z3Dp4SVW8tB3jIH5otSl/Z0ZCQlkGZrWoB PMY9Ep2uY0TZ1w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:31 2025 by rpki-client