This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: xiu4uZsrDtxgygXUggQn8zhtK2Hi4Jl/Yrc5ObSInmQ= Subject key identifier: 2A:15:DB:40:31:64:C6:5E:95:57:5D:AC:9A:3F:B3:EE:F8:DB:FD:E6 Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019B39EADD6DC3401E436A36659C7BA8C7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0E4A Signing time: Sat 20 Dec 2025 04:00:51 +0000 Manifest this update: Sat 20 Dec 2025 04:00:51 +0000 Manifest next update: Sun 21 Dec 2025 04:00:51 +0000 Files and hashes: 1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: BEUyicDqWu5XLGNVyssfEe9JjvTHhciEjEvVh6EbQRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:dd:6d:c3:40:1e:43:6a:36:65:9c:7b:a8:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Dec 20 04:00:51 2025 GMT Not After : Dec 21 04:00:51 2025 GMT Subject: CN=2a15db403164c65e95575dac9a3fb3eef8dbfde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:d4:d8:f4:00:97:ea:ac:90:c4:1b:b6:8c: 89:ef:72:cb:9e:f0:81:63:55:37:5d:f6:81:20:e9: e8:86:81:1b:a7:99:26:91:67:19:4a:5c:aa:83:65: ee:aa:9c:08:2e:5e:1c:89:96:6b:9a:ae:92:4f:fa: 4e:49:29:89:65:f3:a0:2f:e7:e2:e0:cc:c7:11:3a: 29:8c:e0:a8:ca:e3:f6:1a:0e:e4:b0:75:f6:af:f8: 44:2c:d6:62:22:4f:f4:2f:c1:92:8b:56:71:c3:75: bb:6f:c1:07:fc:04:f0:ac:41:3b:6d:7b:46:f4:ad: c7:50:72:b6:b3:19:e7:42:f9:76:95:67:cb:72:9b: be:8a:e5:96:c4:6e:93:e3:60:7a:96:73:3e:df:dc: aa:52:6c:34:3a:68:0c:0e:4b:81:12:93:6f:94:c7: 2d:6e:25:eb:66:b7:ba:be:bc:8f:eb:f1:3c:6e:29: fa:11:f4:fc:39:66:0e:02:6c:f4:1c:86:60:05:6e: 45:ef:42:21:5e:b3:a1:49:b9:f6:50:98:1c:c6:bf: c7:86:ba:af:6f:74:5a:87:3b:04:ac:c4:b0:fc:b1: 8b:84:3d:33:77:6e:c0:06:b1:67:e9:ae:5a:00:71: fb:90:74:94:0f:b5:b2:64:56:6b:db:8e:0d:5a:bc: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:DB:40:31:64:C6:5E:95:57:5D:AC:9A:3F:B3:EE:F8:DB:FD:E6 X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fb:fa:4e:ad:11:53:da:35:87:a1:15:9a:ae:4b:e0:1b:f7: 65:b6:43:2c:cc:0d:de:32:cc:0c:75:e5:3c:40:b9:42:f1:da: 96:1d:bd:45:8c:0a:db:10:a1:28:a6:07:23:7c:10:b9:92:c7: d1:1c:eb:39:4c:4c:61:0b:ce:f5:26:a7:49:d5:06:32:9d:d2: 0e:26:6e:97:32:32:d0:d6:58:97:c9:bf:5e:c8:ab:ce:f4:47: a3:d7:b1:14:14:84:a7:65:1a:da:f4:d1:70:9a:45:35:e3:c9: 35:ff:ca:e0:48:ba:0d:96:0e:36:7d:bd:b7:3e:b3:59:dc:1c: 98:17:07:dc:24:c6:93:2f:7c:99:14:e4:34:5c:92:ab:ed:60: fb:44:f3:f7:8b:ca:85:0b:fd:d4:c8:e7:96:ac:41:50:1f:62: 8c:7c:e2:be:0b:ff:95:31:1b:a5:36:24:f0:39:8c:f0:1c:e3: 1e:c8:c8:ba:2d:02:2f:77:74:f7:4f:b6:97:a6:90:42:07:67: 34:03:df:9a:3b:6f:4b:36:00:96:54:12:64:87:61:09:d2:1e: e9:fd:83:0e:ac:f3:f5:97:ee:21:4f:e9:d9:0d:75:b2:60:92: 71:28:22:97:9f:62:22:eb:b9:85:9b:32:29:cc:33:eb:31:21: e6:22:95:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56t1tw0AeQ2o2ZZx7qMfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjUxMjIwMDQwMDUxWhcNMjUxMjIxMDQwMDUxWjAzMTEwLwYDVQQD EygyYTE1ZGI0MDMxNjRjNjVlOTU1NzVkYWM5YTNmYjNlZWY4ZGJmZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bU2PQAl+qskMQbtoyJ73LLnvCB Y1U3XfaBIOnohoEbp5kmkWcZSlyqg2XuqpwILl4ciZZrmq6ST/pOSSmJZfOgL+fi 4MzHETopjOCoyuP2Gg7ksHX2r/hELNZiIk/0L8GSi1Zxw3W7b8EH/ATwrEE7bXtG 9K3HUHK2sxnnQvl2lWfLcpu+iuWWxG6T42B6lnM+39yqUmw0OmgMDkuBEpNvlMct biXrZre6vryP6/E8bin6EfT8OWYOAmz0HIZgBW5F70IhXrOhSbn2UJgcxr/Hhrqv b3RahzsErMSw/LGLhD0zd27ABrFn6a5aAHH7kHSUD7WyZFZr244NWrwqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoV20AxZMZelVddrJo/s+742/3mMB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvv6Tq0R U9o1h6EVmq5L4Bv3ZbZDLMwN3jLMDHXlPEC5QvHalh29RYwK2xChKKYHI3wQuZLH 0RzrOUxMYQvO9SanSdUGMp3SDiZulzIy0NZYl8m/XsirzvRHo9exFBSEp2Ua2vTR cJpFNePJNf/K4Ei6DZYONn29tz6zWdwcmBcH3CTGky98mRTkNFySq+1g+0Tz94vK hQv91MjnlqxBUB9ijHzivgv/lTEbpTYk8DmM8BzjHsjIui0CL3d090+2l6aQQgdn NAPfmjtvSzYAllQSZIdhCdIe6f2DDqzz9ZfuIU/p2Q11smCScSgil59iIuu5hZsy Kcwz6zEh5iKVgA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:28:54 2025 by rpki-client