This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft File: ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json) Hash identifier: fOMUY9RlR8s7sZ0VY2sX3CSdd28nFz0vyDA0LFuVfGI= Subject key identifier: EA:B6:C8:DA:29:F3:7C:1D:2D:DC:F3:F0:FE:CB:85:0B:EF:D6:2A:6B Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Certificate serial: 019B53AA729EA3CDA9150E4C6947608581F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft Manifest number: 0372 Signing time: Thu 25 Dec 2025 04:00:37 +0000 Manifest this update: Thu 25 Dec 2025 04:00:37 +0000 Manifest next update: Fri 26 Dec 2025 04:00:37 +0000 Files and hashes: 1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: hRSWWyM/2U+NPozAoJeVS9oKPldU2APMhG0/voRwSGE=) 2: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (hash: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:72:9e:a3:cd:a9:15:0e:4c:69:47:60:85:81:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac Validity Not Before: Dec 25 04:00:37 2025 GMT Not After : Dec 26 04:00:37 2025 GMT Subject: CN=eab6c8da29f37c1d2ddcf3f0fecb850befd62a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:ca:4e:b4:d2:7c:b9:78:05:f6:42:04:98: b8:57:23:6f:ac:54:ff:65:10:fc:a0:97:5e:e9:50: 9e:25:5e:28:39:aa:75:13:4b:8b:3a:9b:0d:40:a0: d4:58:90:8a:c9:b9:c2:c2:06:13:54:de:bd:0b:81: d2:7a:d1:87:a9:c2:0a:6b:e0:92:ed:98:33:87:fa: 5a:50:7f:b4:96:08:2b:dd:af:00:04:9e:e1:81:8d: 90:d7:8e:f9:fb:db:72:43:d0:9c:12:21:87:94:a3: 55:26:22:6d:23:cb:6c:40:30:7b:cb:52:16:ee:10: 38:ab:df:3b:4a:14:04:6b:89:44:f2:6b:f7:3a:69: f4:4d:86:8a:03:29:9d:48:bc:61:7b:9b:d1:0b:46: 9e:75:1c:1c:84:a4:b8:1d:3a:1a:f4:72:5f:dc:fa: d1:93:7d:23:77:fe:e7:ef:94:0e:33:b7:60:97:c8: b7:c6:f8:36:65:ba:0d:40:1c:43:c1:34:ac:33:e7: 5d:0e:db:ba:89:50:a0:a0:cb:5f:f0:1a:11:9a:68: b4:59:63:44:df:29:13:3e:93:e9:89:72:4b:1f:a4: 4e:1e:85:33:6b:86:0f:8d:a3:39:fa:0b:20:5e:e6: 9f:c5:4c:41:80:be:76:3b:e4:18:e0:df:af:49:07: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B6:C8:DA:29:F3:7C:1D:2D:DC:F3:F0:FE:CB:85:0B:EF:D6:2A:6B X509v3 Authority Key Identifier: keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c6:d8:1a:ae:ea:19:94:86:4e:0c:50:52:40:30:bc:e3:5b: e3:3b:18:45:86:b2:57:be:24:cd:4d:cd:e9:9c:ff:86:8c:ad: 58:14:59:3e:0a:bc:bd:5e:b2:b3:18:f7:e6:d3:e5:d4:66:52: c3:6a:ac:9f:38:42:ea:f9:ec:03:51:b6:87:6f:53:a8:47:a3: a0:a9:1a:3a:f9:9b:24:6d:0f:f6:a4:59:5e:a7:d3:d2:88:9f: 5c:75:7b:26:4e:3e:dd:35:54:30:76:a4:c2:fe:0a:7b:5b:9a: b5:d6:a9:72:bc:b3:21:4e:a7:49:08:d9:4b:1c:f3:ed:0f:f0: 86:81:c4:dc:be:f1:d4:8f:56:98:18:13:fb:bf:6f:b0:c8:11: d0:8b:04:2d:a7:8d:2b:23:5a:e2:29:a6:8c:0a:c0:26:50:2c: 6a:ef:ae:09:a8:e4:27:f4:34:f2:cc:4b:7a:35:39:a2:d0:60: 75:3e:e2:51:39:94:e8:07:2c:fd:2e:77:d0:96:46:d1:52:e1: 39:73:22:ab:b1:66:52:84:68:b7:4f:54:75:1d:10:ea:6e:6d: e6:2a:0f:d0:5d:93:4e:65:1b:ea:a7:7d:54:05:01:fb:13:6c: 0f:41:6e:16:e4:13:a3:b6:a0:ca:8b:fe:2b:20:6a:bf:83:fc: ff:7c:bb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqnKeo82pFQ5MaUdghYHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjZmZWUwZTdhMTRjN2UxZDM4NjA5ZDliYzNjMmVmY2Nh ZjMzYWMwHhcNMjUxMjI1MDQwMDM3WhcNMjUxMjI2MDQwMDM3WjAzMTEwLwYDVQQD EyhlYWI2YzhkYTI5ZjM3YzFkMmRkY2YzZjBmZWNiODUwYmVmZDYyYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LnKTrTSfLl4BfZCBJi4VyNvrFT/ ZRD8oJde6VCeJV4oOap1E0uLOpsNQKDUWJCKybnCwgYTVN69C4HSetGHqcIKa+CS 7Zgzh/paUH+0lggr3a8ABJ7hgY2Q1475+9tyQ9CcEiGHlKNVJiJtI8tsQDB7y1IW 7hA4q987ShQEa4lE8mv3Omn0TYaKAymdSLxhe5vRC0aedRwchKS4HToa9HJf3PrR k30jd/7n75QOM7dgl8i3xvg2ZboNQBxDwTSsM+ddDtu6iVCgoMtf8BoRmmi0WWNE 3ykTPpPpiXJLH6ROHoUza4YPjaM5+gsgXuafxUxBgL52O+QY4N+vSQf2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq2yNop83wdLdzz8P7LhQvv1iprMB8GA1UdIwQY MBaAFFC2/uDnoUx+HThgnZvDwu/MrzOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2Qt ZmQ2NjRmMDMyOTgwLzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jZDhmZTgtOGMwOC00NmIyLWI1N2QtZmQ2NjRmMDMyOTgw LzEvVUxiLTRPZWhUSDRkT0dDZG04UEM3OHl2TTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMbYGq7q GZSGTgxQUkAwvONb4zsYRYayV74kzU3N6Zz/hoytWBRZPgq8vV6ysxj35tPl1GZS w2qsnzhC6vnsA1G2h29TqEejoKkaOvmbJG0P9qRZXqfT0oifXHV7Jk4+3TVUMHak wv4Ke1uatdapcryzIU6nSQjZSxzz7Q/whoHE3L7x1I9WmBgT+79vsMgR0IsELaeN KyNa4immjArAJlAsau+uCajkJ/Q08sxLejU5otBgdT7iUTmU6Acs/S530JZG0VLh OXMiq7FmUoRot09UdR0Q6m5t5ioP0F2TTmUb6qd9VAUB+xNsD0FuFuQTo7agyov+ KyBqv4P8/3y7Rw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:03:46 2025 by rpki-client