This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json) Hash identifier: D5Bb8fZThzUY8CPgqLQS+0KOG9ekM3Fmjjjm8H7e5jY= Subject key identifier: 6E:77:A6:FC:E4:AC:9C:06:CD:C8:84:B9:FF:C3:6D:4C:4F:EA:69:5E Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Certificate serial: 019B6A3259007AD9C197BC3890F7572560DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft Manifest number: 0931 Signing time: Mon 29 Dec 2025 13:00:43 +0000 Manifest this update: Mon 29 Dec 2025 13:00:43 +0000 Manifest next update: Tue 30 Dec 2025 13:00:43 +0000 Files and hashes: 1: 0_BivZleQqQTDIIA1zuJgrTZcsU.roa (hash: 1e4TcEyXBttiFq9j+bwnnfrMc5xlrfiEhLRAJpiXu2M=) 2: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: U8AOnMhD6Fc92fsActg7dN3aWWr6SMUVEBqTpM2M6e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:59:00:7a:d9:c1:97:bc:38:90:f7:57:25:60:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Validity Not Before: Dec 29 13:00:43 2025 GMT Not After : Dec 30 13:00:43 2025 GMT Subject: CN=6e77a6fce4ac9c06cdc884b9ffc36d4c4fea695e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:e8:14:63:9f:a3:8a:2c:02:06:16:5d:ec: ff:ac:77:fd:65:1e:8b:60:26:95:7a:81:ee:fd:a3: 9a:df:a7:2e:8a:7d:60:d3:15:dc:b7:7c:e2:d2:c9: 3d:55:5d:71:33:10:a9:6b:c8:aa:bb:f4:71:27:00: d8:f9:10:20:ed:4f:0a:48:ae:36:90:01:e9:52:34: 94:42:26:75:f5:43:bf:9c:6d:e9:98:ef:3a:81:6c: 13:f4:72:fb:ac:06:11:80:6d:e5:6a:e5:da:0e:36: 65:94:ce:35:8a:9a:f8:ae:ed:d3:20:e6:bf:ba:9b: 26:36:65:f7:a3:7d:48:75:a7:2e:55:d1:86:1c:a0: 51:67:8a:8b:b5:c7:dd:0b:07:fc:22:6b:b6:9c:d5: 3a:82:3e:09:31:34:a4:dc:be:1b:eb:1f:db:69:b9: d7:5e:a4:c1:82:09:af:e9:66:40:62:a7:1a:21:76: 52:7c:d0:cd:7f:fc:6b:2f:9a:3b:86:05:cb:84:57: df:d8:e9:03:bd:70:0f:99:8e:68:5c:36:69:34:25: 1d:e8:eb:d0:43:8c:21:f4:9e:5f:e9:e8:1a:aa:52: c8:a9:1c:70:19:38:9d:72:9e:c5:50:2b:e7:9d:36: 1f:b7:71:a1:1d:eb:fa:5b:49:ca:53:01:81:7a:6f: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:A6:FC:E4:AC:9C:06:CD:C8:84:B9:FF:C3:6D:4C:4F:EA:69:5E X509v3 Authority Key Identifier: keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ed:29:0e:90:a9:19:1b:f7:96:a9:14:f1:dc:cb:63:ae:8e: 1e:e4:1e:c8:5e:6e:e3:0f:53:ed:d9:9d:7c:e1:c6:42:ee:27: 57:89:bc:82:b9:9b:c5:49:fd:b5:ac:84:77:10:8c:df:4c:a1: 77:a9:4f:f8:4a:76:ec:15:64:f2:8f:9f:ce:8a:67:8e:df:39: 2f:bc:dc:3d:02:e2:67:f1:0b:57:5b:ec:dd:9a:2c:e0:bc:8d: d5:8a:d6:b0:5b:20:4f:78:2a:50:e6:db:b1:c3:01:8e:8d:ff: ae:33:20:82:3a:9c:98:13:58:57:4a:da:95:66:f8:de:76:06: 46:60:be:c2:0a:d6:67:d1:e7:28:ea:c2:59:4c:48:73:e1:c5: 2a:a6:f7:6d:04:6c:a1:cf:3d:f6:3e:2e:6f:4c:0d:aa:f1:fa: 55:d4:2d:b1:83:97:9c:33:a4:5c:c0:86:99:f8:a4:c5:fc:ee: 12:72:60:3e:b5:95:c6:02:de:3c:7a:9c:47:e1:16:5f:a4:76: be:ca:d1:16:00:91:2e:57:ca:22:fb:28:47:84:c0:ec:f5:aa: 79:53:ae:4f:32:eb:7c:c6:d2:cf:b2:e7:99:a6:1d:03:8a:44: af:f4:e1:07:f6:15:f4:5e:5c:c6:07:c6:39:6e:81:fc:34:f4: ff:da:79:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMlkAetnBl7w4kPdXJWDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm ODI0YjMwHhcNMjUxMjI5MTMwMDQzWhcNMjUxMjMwMTMwMDQzWjAzMTEwLwYDVQQD Eyg2ZTc3YTZmY2U0YWM5YzA2Y2RjODg0YjlmZmMzNmQ0YzRmZWE2OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro3oFGOfo4osAgYWXez/rHf9ZR6L YCaVeoHu/aOa36cuin1g0xXct3zi0sk9VV1xMxCpa8iqu/RxJwDY+RAg7U8KSK42 kAHpUjSUQiZ19UO/nG3pmO86gWwT9HL7rAYRgG3lauXaDjZllM41ipr4ru3TIOa/ upsmNmX3o31IdacuVdGGHKBRZ4qLtcfdCwf8Imu2nNU6gj4JMTSk3L4b6x/babnX XqTBggmv6WZAYqcaIXZSfNDNf/xrL5o7hgXLhFff2OkDvXAPmY5oXDZpNCUd6OvQ Q4wh9J5f6egaqlLIqRxwGTidcp7FUCvnnTYft3GhHev6W0nKUwGBem/UzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG53pvzkrJwGzciEuf/DbUxP6mleMB8GA1UdIwQY MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvu0pDpCp GRv3lqkU8dzLY66OHuQeyF5u4w9T7dmdfOHGQu4nV4m8grmbxUn9tayEdxCM30yh d6lP+Ep27BVk8o+fzopnjt85L7zcPQLiZ/ELV1vs3Zos4LyN1YrWsFsgT3gqUObb scMBjo3/rjMggjqcmBNYV0ralWb43nYGRmC+wgrWZ9HnKOrCWUxIc+HFKqb3bQRs oc899j4ub0wNqvH6VdQtsYOXnDOkXMCGmfikxfzuEnJgPrWVxgLePHqcR+EWX6R2 vsrRFgCRLlfKIvsoR4TA7PWqeVOuTzLrfMbSz7LnmaYdA4pEr/ThB/YV9F5cxgfG OW6B/DT0/9p5Rw== -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:45 2025 by rpki-client