This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json) Hash identifier: aUNgXFbgWVwkqrZpQDnHKUpQodZuMPlybuoxS8G7noc= Subject key identifier: BF:18:78:66:7A:00:31:88:65:0A:19:54:4C:0E:BC:85:A8:21:6A:E1 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019B4F9718BAAF830031CA0563E9B4AF3B9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft Manifest number: 04C9 Signing time: Wed 24 Dec 2025 09:01:00 +0000 Manifest this update: Wed 24 Dec 2025 09:01:00 +0000 Manifest next update: Thu 25 Dec 2025 09:01:00 +0000 Files and hashes: 1: aB5BTwFM1GkHltsLxl4xVTjJVbk.roa (hash: Zs3VbsvkuiKkW16KsemamPimx1XPIkjb0yYjG6M7CZY=) 2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: ll1a3Q9hJM2SYJ7hqJjpa/5hr+1qpEVUN4pDoagwFsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:18:ba:af:83:00:31:ca:05:63:e9:b4:af:3b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 24 09:01:00 2025 GMT Not After : Dec 25 09:01:00 2025 GMT Subject: CN=bf1878667a003188650a19544c0ebc85a8216ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:c5:b4:03:95:f9:13:e6:57:d8:f8:11:05: 14:88:82:56:7b:01:45:8a:64:7d:52:1d:65:60:24: df:41:e3:a4:d2:8c:63:f3:0e:da:a0:93:db:4c:ac: 7c:2c:7c:3a:94:55:36:0b:53:0c:e8:44:aa:d8:86: f8:42:b9:12:9b:9b:42:14:1d:53:76:b4:07:06:96: 27:a0:94:d2:0f:63:46:66:5f:fa:84:0a:19:6c:66: aa:ad:91:48:48:47:ec:ff:90:da:ee:9a:14:eb:1a: da:55:0c:f3:b0:26:94:1a:32:9a:4d:5f:f2:29:e7: 80:0e:cd:99:ee:92:88:db:55:37:91:60:78:04:6c: 20:89:79:2d:c5:b2:cb:fa:9a:1b:19:c9:8b:dd:fa: 28:4c:2e:c1:dd:9a:93:6d:bb:ba:e5:2f:f9:29:97: 6b:cc:7f:cd:20:ed:28:7b:78:c7:6a:d5:d3:53:8e: d5:c7:0c:53:4e:69:c8:6d:cd:38:14:bf:41:af:a9: 20:14:0b:7c:1a:c4:f1:64:c8:a6:4e:60:26:4c:89: 37:32:ab:e6:3b:07:4d:90:d5:ec:cf:b4:ae:59:f6: db:a1:ad:f0:86:a0:bd:76:85:c3:7f:3c:c9:55:b5: 45:ca:84:5b:44:5f:ef:24:51:07:7f:fc:b4:cd:a3: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:18:78:66:7A:00:31:88:65:0A:19:54:4C:0E:BC:85:A8:21:6A:E1 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:20:c6:18:5c:bc:a3:3a:8b:f8:2d:cc:f6:01:72:a9:13:30: a5:7f:89:b8:06:b7:d0:4c:64:32:5c:5f:d0:ec:c6:d5:b8:c9: 05:2d:2e:00:c5:ac:b6:90:83:9e:bb:61:4d:17:f3:f4:54:14: d8:88:2e:d3:11:37:1c:c7:6c:69:8f:ea:ba:5b:1f:cb:a5:1c: b5:10:c7:68:81:05:be:8a:a9:28:67:bb:91:ee:9f:5d:5d:93: c0:26:ee:ed:d5:f9:e6:f7:5c:9c:1e:bf:b9:0d:cf:95:23:31: 69:70:92:9a:3b:2d:65:f1:b9:96:7f:e9:9e:95:de:fd:74:9d: 05:43:5a:bd:b6:9c:b2:a1:70:9e:88:1d:d9:2f:12:1a:a3:ad: d3:02:bf:c1:1f:33:9f:79:3d:1b:e1:4e:ed:e2:51:35:23:b2: 2d:16:70:85:00:2a:4e:ca:77:b3:9d:f9:c3:13:fc:89:54:75: 8f:92:f0:13:b8:52:b5:c7:f8:72:eb:7d:b1:c0:26:fc:86:26: 36:2f:d3:08:92:8a:d5:24:72:92:b2:05:46:91:66:22:76:78: 1b:96:4e:5f:fc:74:6e:4d:11:f0:00:d7:09:0f:15:7b:3a:1b: b8:c1:83:cd:f4:25:47:91:96:95:51:ee:9a:e4:48:3a:e9:e6: b0:17:7b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlxi6r4MAMcoFY+m0rzubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjI0MDkwMTAwWhcNMjUxMjI1MDkwMTAwWjAzMTEwLwYDVQQD EyhiZjE4Nzg2NjdhMDAzMTg4NjUwYTE5NTQ0YzBlYmM4NWE4MjE2YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwLFtAOV+RPmV9j4EQUUiIJWewFF imR9Uh1lYCTfQeOk0oxj8w7aoJPbTKx8LHw6lFU2C1MM6ESq2Ib4QrkSm5tCFB1T drQHBpYnoJTSD2NGZl/6hAoZbGaqrZFISEfs/5Da7poU6xraVQzzsCaUGjKaTV/y KeeADs2Z7pKI21U3kWB4BGwgiXktxbLL+pobGcmL3fooTC7B3ZqTbbu65S/5KZdr zH/NIO0oe3jHatXTU47VxwxTTmnIbc04FL9Br6kgFAt8GsTxZMimTmAmTIk3Mqvm OwdNkNXsz7SuWfbboa3whqC9doXDfzzJVbVFyoRbRF/vJFEHf/y0zaOZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8YeGZ6ADGIZQoZVEwOvIWoIWrhMB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSDGGFy8 ozqL+C3M9gFyqRMwpX+JuAa30ExkMlxf0OzG1bjJBS0uAMWstpCDnrthTRfz9FQU 2Igu0xE3HMdsaY/qulsfy6UctRDHaIEFvoqpKGe7ke6fXV2TwCbu7dX55vdcnB6/ uQ3PlSMxaXCSmjstZfG5ln/pnpXe/XSdBUNavbacsqFwnogd2S8SGqOt0wK/wR8z n3k9G+FO7eJRNSOyLRZwhQAqTsp3s535wxP8iVR1j5LwE7hStcf4cut9scAm/IYm Ni/TCJKK1SRykrIFRpFmInZ4G5ZOX/x0bk0R8ADXCQ8VezobuMGDzfQlR5GWlVHu muRIOunmsBd7CQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:28:51 2025 by rpki-client