This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json) Hash identifier: adNNvFO2xPZByAOPHp21WZzXqtqZSz/xP6FmXEjItGY= Subject key identifier: 46:D4:BB:FD:4F:A0:CE:05:06:2C:CC:F7:CD:D2:4D:E5:F4:BC:9A:C4 Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Certificate serial: 019B5675174B790D9BCCE682C917A1395A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft Manifest number: 1647 Signing time: Thu 25 Dec 2025 17:01:12 +0000 Manifest this update: Thu 25 Dec 2025 17:01:12 +0000 Manifest next update: Fri 26 Dec 2025 17:01:12 +0000 Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: MC+3DlXQKXHZd4nsz82Egz+iY56Bl4FoDhLeawzUtM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:17:4b:79:0d:9b:cc:e6:82:c9:17:a1:39:5a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Validity Not Before: Dec 25 17:01:12 2025 GMT Not After : Dec 26 17:01:12 2025 GMT Subject: CN=46d4bbfd4fa0ce05062cccf7cdd24de5f4bc9ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:d7:b5:bc:0e:a6:b4:00:c7:4b:f4:3c:76: 5e:88:d7:c9:51:ee:ef:ad:03:7c:ec:5a:73:c9:e2: 32:71:36:08:8f:6a:a6:66:5d:a2:04:ae:60:26:d0: 59:8d:e7:e5:93:0f:ed:1d:05:03:7d:a1:d9:94:19: 8d:32:6b:97:5f:68:e5:fb:98:b4:63:e0:d7:dc:e2: e6:cd:8a:80:71:1f:e0:c6:92:b9:d3:bd:87:af:41: 4a:d3:c2:24:9c:a6:59:a3:e8:c9:a2:7d:8a:95:3d: 7b:ea:b7:62:13:17:72:fe:90:a5:dc:c9:11:39:57: db:4e:f7:1a:b1:e0:85:af:c0:0f:b5:68:53:9b:92: 5c:54:c6:ed:05:53:f2:bd:dc:99:30:ec:1b:a0:86: 23:38:ba:aa:4b:f1:87:a7:0d:c1:2c:70:e8:fb:f1: 57:c4:1a:a6:07:94:88:85:a8:cf:8c:ff:0f:0b:f8: 1e:9d:52:d1:83:e5:da:cd:90:98:e1:18:82:5b:8b: ba:b5:f6:f6:64:13:e6:c4:ec:41:c3:bd:ae:8e:d5: e0:9c:01:5b:96:fb:6a:a4:c5:7c:a0:99:77:2a:98: e9:91:6a:cb:76:5e:24:ba:9c:68:4a:95:82:b8:87: f7:ae:a9:f1:05:5d:32:d4:11:ea:4d:c8:28:78:90: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:BB:FD:4F:A0:CE:05:06:2C:CC:F7:CD:D2:4D:E5:F4:BC:9A:C4 X509v3 Authority Key Identifier: keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:5d:02:23:26:18:2f:5f:18:31:32:29:de:72:86:aa:76: 5a:af:26:65:f5:95:2c:ab:ab:02:b0:18:fe:f0:88:f2:45:88: e0:1e:2a:7c:03:37:56:4d:39:06:fb:7e:c7:a3:d5:70:9b:ac: ab:47:08:dd:c6:59:ae:80:0b:39:17:aa:12:52:80:9a:af:53: d2:b7:16:bf:32:2f:2c:f1:9f:25:a6:48:73:4d:66:a3:8e:82: f2:0e:4d:f9:0b:ff:bc:c9:d4:20:84:be:27:1b:85:68:a6:6e: 20:db:23:8e:e4:b1:6b:6a:e4:30:39:88:4c:10:86:63:c3:ac: fc:7c:b1:51:93:23:b3:15:61:20:b7:71:c7:dc:3a:5f:c9:7b: 46:56:40:db:6b:60:6f:f3:5b:85:2b:51:aa:10:dc:82:59:5e: e3:eb:3f:eb:b8:89:3a:e6:94:76:b1:2f:d0:70:78:88:c7:fd: 4b:d0:f5:2f:00:09:5b:ac:93:58:c0:c9:5c:23:56:82:4e:6d: 93:7c:db:cf:55:2b:9d:87:96:ac:9a:97:9c:66:b3:7e:3f:23: 33:a7:0b:7e:e3:fa:c1:24:26:00:52:0e:05:46:5f:c7:8f:3d: 4b:c4:3a:4d:2d:df:c0:b9:6f:d8:38:d6:25:99:c9:d9:97:9f: 4c:22:c9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdRdLeQ2bzOaCyRehOVobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx OWQzNWEwHhcNMjUxMjI1MTcwMTEyWhcNMjUxMjI2MTcwMTEyWjAzMTEwLwYDVQQD Eyg0NmQ0YmJmZDRmYTBjZTA1MDYyY2NjZjdjZGQyNGRlNWY0YmM5YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8rXtbwOprQAx0v0PHZeiNfJUe7v rQN87FpzyeIycTYIj2qmZl2iBK5gJtBZjeflkw/tHQUDfaHZlBmNMmuXX2jl+5i0 Y+DX3OLmzYqAcR/gxpK5072Hr0FK08IknKZZo+jJon2KlT176rdiExdy/pCl3MkR OVfbTvcaseCFr8APtWhTm5JcVMbtBVPyvdyZMOwboIYjOLqqS/GHpw3BLHDo+/FX xBqmB5SIhajPjP8PC/genVLRg+XazZCY4RiCW4u6tfb2ZBPmxOxBw72ujtXgnAFb lvtqpMV8oJl3KpjpkWrLdl4kupxoSpWCuIf3rqnxBV0y1BHqTcgoeJBFbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbUu/1PoM4FBizM983STeX0vJrEMB8GA1UdIwQY MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3ddAiMm GC9fGDEyKd5yhqp2Wq8mZfWVLKurArAY/vCI8kWI4B4qfAM3Vk05Bvt+x6PVcJus q0cI3cZZroALOReqElKAmq9T0rcWvzIvLPGfJaZIc01mo46C8g5N+Qv/vMnUIIS+ JxuFaKZuINsjjuSxa2rkMDmITBCGY8Os/HyxUZMjsxVhILdxx9w6X8l7RlZA22tg b/NbhStRqhDcglle4+s/67iJOuaUdrEv0HB4iMf9S9D1LwAJW6yTWMDJXCNWgk5t k3zbz1UrnYeWrJqXnGazfj8jM6cLfuP6wSQmAFIOBUZfx489S8Q6TS3fwLlv2DjW JZnJ2ZefTCLJOw== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:53 2025 by rpki-client