This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json) Hash identifier: pyhOcCakd24inSeJ61fi68j3K8fRgXqbMXfMZ8eEciw= Subject key identifier: 92:08:5F:B6:70:4A:CB:42:2F:6C:9B:BF:42:7A:34:51:BD:99:40:25 Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3 Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3 Certificate serial: 019B6B0E5DDECE3AD05F0DF75A590BB5765E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft Manifest number: 1491 Signing time: Mon 29 Dec 2025 17:01:02 +0000 Manifest this update: Mon 29 Dec 2025 17:01:02 +0000 Manifest next update: Tue 30 Dec 2025 17:01:02 +0000 Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: /dbGf697jw2DsIw73n9hmqd9GVKR3ABjLL+juoXLXhw=) 2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0e:5d:de:ce:3a:d0:5f:0d:f7:5a:59:0b:b5:76:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3 Validity Not Before: Dec 29 17:01:02 2025 GMT Not After : Dec 30 17:01:02 2025 GMT Subject: CN=92085fb6704acb422f6c9bbf427a3451bd994025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:b0:3a:f2:93:ec:5f:93:ba:26:c4:20:6d: dc:e4:7c:09:49:2e:28:51:46:fb:71:64:53:98:f8: 95:24:0c:2b:28:48:55:a8:76:94:22:18:93:07:d6: 70:30:de:85:d6:a6:44:5c:b7:c3:f4:4b:4c:ea:fb: 57:85:00:3d:ff:1a:0c:fd:db:e9:2f:30:91:74:31: 8a:de:a2:43:0c:db:55:53:76:25:51:c0:38:fa:29: 81:25:41:4a:ce:33:3a:4f:89:27:51:61:c7:84:1d: 19:ca:2c:0f:05:66:f9:e3:aa:38:f6:3a:68:a3:a6: de:61:1f:26:40:8b:2f:1b:80:72:28:65:72:b2:06: 96:d0:c2:9c:b9:13:6e:69:8d:9d:1c:3b:15:36:fc: 91:4f:a0:7e:f7:3c:6e:dd:4f:9e:64:4d:56:6a:db: fd:b7:45:3e:b2:c7:d3:55:74:30:81:26:af:73:a1: b6:b5:71:0c:b0:38:2b:bd:49:83:1a:43:cb:a3:bc: a0:c1:74:76:d8:7e:8a:5b:81:ae:b8:88:07:b3:32: 55:23:ec:68:4a:71:aa:1f:6b:c9:1f:b5:74:55:6e: d8:78:cb:8d:7a:86:da:d8:c5:3c:ef:7f:6f:e3:53: cd:23:bc:f7:1f:3d:9c:6d:f9:f2:fe:17:4f:6d:f2: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:08:5F:B6:70:4A:CB:42:2F:6C:9B:BF:42:7A:34:51:BD:99:40:25 X509v3 Authority Key Identifier: keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4a:c9:1d:7c:78:94:2d:19:26:7e:b9:2d:d0:ae:85:53:32: dc:53:2a:fc:29:9b:aa:d8:52:ba:ad:0c:67:73:82:42:c0:39: 48:88:81:6a:16:77:b1:a6:36:84:ea:26:25:c0:fc:f2:b0:de: 11:13:93:80:ac:9c:f1:e0:6e:55:63:68:91:51:29:22:98:09: 9f:98:2a:68:f2:22:a3:3a:77:e6:86:10:69:66:5d:fc:c4:01: b5:a7:dc:5b:13:ac:c2:14:fd:45:90:e1:71:fb:6a:80:45:e1: a3:09:56:42:d3:d7:15:ce:43:a0:62:79:b7:98:68:83:68:5b: ec:4c:fd:2e:43:59:8c:80:0d:cf:16:34:41:4e:58:fa:cc:2c: 88:4b:a9:eb:a8:6d:29:48:45:65:d9:db:04:d5:9e:aa:01:a4: 5b:07:68:47:62:4c:85:7d:3e:94:9f:f8:57:32:a6:ef:2d:79: 6b:b5:15:e5:84:8b:9e:58:42:3e:ab:ed:5b:4f:bc:20:29:d9: 04:e9:11:d1:c4:e3:40:06:f9:0a:24:66:76:a5:bc:ab:78:6d: 5f:95:bd:f4:f3:c4:07:e6:e9:81:bd:ea:b3:c3:d1:61:48:8d: 37:b8:78:83:a8:7c:50:84:d0:fd:d1:f1:3e:ff:b4:78:28:f5: 4d:49:ee:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDl3ezjrQXw33WlkLtXZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTkxNWI0YzcyNDA3YWZiNzk0MWU1YmUyOTRhYzcxMzNi MTA3YjMwHhcNMjUxMjI5MTcwMTAyWhcNMjUxMjMwMTcwMTAyWjAzMTEwLwYDVQQD Eyg5MjA4NWZiNjcwNGFjYjQyMmY2YzliYmY0MjdhMzQ1MWJkOTk0MDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdiwOvKT7F+TuibEIG3c5HwJSS4o UUb7cWRTmPiVJAwrKEhVqHaUIhiTB9ZwMN6F1qZEXLfD9EtM6vtXhQA9/xoM/dvp LzCRdDGK3qJDDNtVU3YlUcA4+imBJUFKzjM6T4knUWHHhB0ZyiwPBWb546o49jpo o6beYR8mQIsvG4ByKGVysgaW0MKcuRNuaY2dHDsVNvyRT6B+9zxu3U+eZE1Watv9 t0U+ssfTVXQwgSavc6G2tXEMsDgrvUmDGkPLo7ygwXR22H6KW4GuuIgHszJVI+xo SnGqH2vJH7V0VW7YeMuNeoba2MU8739v41PNI7z3Hz2cbfny/hdPbfLdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIIX7ZwSstCL2ybv0J6NFG9mUAlMB8GA1UdIwQY MBaAFFJZFbTHJAevt5QeW+KUrHEzsQezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDIt MGNlM2EyZWZjOGRkLzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTE3MDgtMTlmOS00ZWNjLWE0NDItMGNlM2EyZWZjOGRk LzEvVWxrVnRNY2tCNi0zbEI1YjRwU3NjVE94QjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUrJHXx4 lC0ZJn65LdCuhVMy3FMq/CmbqthSuq0MZ3OCQsA5SIiBahZ3saY2hOomJcD88rDe EROTgKyc8eBuVWNokVEpIpgJn5gqaPIiozp35oYQaWZd/MQBtafcWxOswhT9RZDh cftqgEXhowlWQtPXFc5DoGJ5t5hog2hb7Ez9LkNZjIANzxY0QU5Y+swsiEup66ht KUhFZdnbBNWeqgGkWwdoR2JMhX0+lJ/4VzKm7y15a7UV5YSLnlhCPqvtW0+8ICnZ BOkR0cTjQAb5CiRmdqW8q3htX5W99PPEB+bpgb3qs8PRYUiNN7h4g6h8UITQ/dHx Pv+0eCj1TUnu7Q== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:32 2025 by rpki-client