This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json) Hash identifier: pqh8BUxW+tKXGfieOtevFzSIjOo/AjyqpXN/efMIbOE= Subject key identifier: B6:EC:C3:56:C6:6D:D3:3E:09:A0:87:A2:D2:6F:04:53:0A:57:1B:68 Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8 Certificate serial: 019B2EFA930E3FD3AE5CDA0966325833A179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft Manifest number: 135C Signing time: Thu 18 Dec 2025 01:02:11 +0000 Manifest this update: Thu 18 Dec 2025 01:02:11 +0000 Manifest next update: Fri 19 Dec 2025 01:02:11 +0000 Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: wD18uKRJ/rFh01UKX9fN7Ac4w1djwZU9OegSyxXOUhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:93:0e:3f:d3:ae:5c:da:09:66:32:58:33:a1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8 Validity Not Before: Dec 18 01:02:11 2025 GMT Not After : Dec 19 01:02:11 2025 GMT Subject: CN=b6ecc356c66dd33e09a087a2d26f04530a571b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:d3:17:db:81:16:56:e5:68:f4:06:97:a4: d5:19:1b:1a:ce:ee:72:d3:53:bc:94:73:b4:5a:07: 9f:96:a8:d5:19:a6:60:40:19:5d:dc:d0:09:3b:0b: c7:71:3b:8d:83:c5:30:50:40:ab:8e:80:31:7a:66: d2:32:20:9f:da:f6:c8:f8:32:fd:e7:19:e5:6a:05: 6d:66:48:c5:cb:72:b2:b7:b0:0d:f5:5b:a5:77:b0: 9c:da:7a:b6:5a:e4:12:6d:17:f5:22:b6:7c:9d:44: 7f:29:0c:c0:0f:0a:74:e6:f0:64:67:7d:59:d5:84: 01:3b:5b:e0:5d:92:bf:fc:0a:d7:5d:5f:36:38:31: f7:e9:0c:c3:f0:3b:f3:7f:a2:6c:17:24:17:fa:3d: f9:c6:84:3c:91:db:3a:a6:19:be:ea:68:41:63:69: 79:0c:74:b0:62:7e:98:aa:75:cc:ef:d6:8e:e0:32: ae:e1:ad:06:ca:0c:6a:4f:c0:e3:33:ec:66:e2:c6: 69:44:1f:76:36:4e:fd:1b:e3:1e:f4:a6:9f:c4:f3: d7:fc:9e:9e:d7:2b:c1:20:92:53:f4:0c:53:30:cb: 5e:ed:45:9b:37:d0:47:94:cf:2e:c2:cf:da:1d:19: b5:b7:84:4a:98:5a:d4:4f:8b:6f:c2:e7:6b:6d:c9: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:C3:56:C6:6D:D3:3E:09:A0:87:A2:D2:6F:04:53:0A:57:1B:68 X509v3 Authority Key Identifier: keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ec:62:c2:b0:13:14:3c:60:3d:24:18:7d:37:cb:23:31:89: 60:b8:39:1b:01:cc:e8:f9:cf:31:bf:3c:eb:02:1d:5e:3d:84: bd:7e:b1:9e:8d:e0:b0:78:49:9e:c3:99:f2:da:b7:74:8a:a3: 8c:7a:f3:d0:b4:97:b4:47:37:fe:3b:49:16:c6:45:b1:e9:1f: 58:a2:f6:1e:22:2a:94:9c:9c:80:b7:0d:1c:3a:90:a4:5e:ad: 94:ff:57:bd:76:fd:ec:f9:3f:5f:74:1e:15:b1:50:ee:02:13: 96:fc:32:b9:6a:c9:6e:05:db:6c:39:df:0b:22:e3:bb:ed:ed: 8a:b6:1d:46:32:05:2a:e3:bf:9b:bb:96:f9:1a:ea:53:c4:03: 32:c5:a2:99:51:93:c1:80:69:98:45:4a:fc:9f:d7:4e:70:2d: 3d:7f:af:6f:8f:79:10:e5:38:e5:27:a7:e3:10:59:c2:a6:50: ef:3b:0e:39:c4:8f:45:3e:df:b2:40:bf:c2:1a:a3:b2:66:80: 71:53:a8:40:3d:88:38:83:1e:fe:b0:da:48:c2:42:9b:10:6d: a4:0f:36:8c:2c:0f:91:83:67:ec:23:69:c2:6b:99:a6:46:75: e2:cf:6e:db:99:6e:f9:85:47:b2:83:95:bd:99:d1:d2:79:7c: fa:92:2a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pMOP9OuXNoJZjJYM6F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTgyNzU1NzI0MzQ4OTNiOWNiZDE0ZTRhZGU3MDg5Mjll NDY3ZjgwHhcNMjUxMjE4MDEwMjExWhcNMjUxMjE5MDEwMjExWjAzMTEwLwYDVQQD EyhiNmVjYzM1NmM2NmRkMzNlMDlhMDg3YTJkMjZmMDQ1MzBhNTcxYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHvTF9uBFlblaPQGl6TVGRsazu5y 01O8lHO0WgeflqjVGaZgQBld3NAJOwvHcTuNg8UwUECrjoAxembSMiCf2vbI+DL9 5xnlagVtZkjFy3Kyt7AN9Vuld7Cc2nq2WuQSbRf1IrZ8nUR/KQzADwp05vBkZ31Z 1YQBO1vgXZK//ArXXV82ODH36QzD8Dvzf6JsFyQX+j35xoQ8kds6phm+6mhBY2l5 DHSwYn6YqnXM79aO4DKu4a0GygxqT8DjM+xm4sZpRB92Nk79G+Me9KafxPPX/J6e 1yvBIJJT9AxTMMte7UWbN9BHlM8uws/aHRm1t4RKmFrUT4tvwudrbclmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbsw1bGbdM+CaCHotJvBFMKVxtoMB8GA1UdIwQY MBaAFLpYJ1VyQ0iTucvRTkrecIkp5Gf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTIt MjYyNTU3Yzc0ZDRjLzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTItMjYyNTU3Yzc0ZDRj LzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduxiwrAT FDxgPSQYfTfLIzGJYLg5GwHM6PnPMb886wIdXj2EvX6xno3gsHhJnsOZ8tq3dIqj jHrz0LSXtEc3/jtJFsZFsekfWKL2HiIqlJycgLcNHDqQpF6tlP9XvXb97Pk/X3Qe FbFQ7gITlvwyuWrJbgXbbDnfCyLju+3tirYdRjIFKuO/m7uW+RrqU8QDMsWimVGT wYBpmEVK/J/XTnAtPX+vb495EOU45Sen4xBZwqZQ7zsOOcSPRT7fskC/whqjsmaA cVOoQD2IOIMe/rDaSMJCmxBtpA82jCwPkYNn7CNpwmuZpkZ14s9u25lu+YVHsoOV vZnR0nl8+pIq3Q== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:44 2025 by rpki-client