This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json) Hash identifier: E9XlqbU2Rdd1yt4tfujGMQKUiTlHGW4pp1a2WamMwQQ= Subject key identifier: 69:BE:15:CB:48:57:74:08:75:24:BD:24:DD:05:BB:E7:E6:C0:C2:A5 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019B3DC75261C491326076332180A61BAA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft Manifest number: 04BE Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: 5h63SaxNOR-ikBa8qbYQgrq2NHI.roa (hash: aOvUDp+jGrnIyS18ub1nFjpUSp2FPZ4VntW0ZKOxZU0=) 2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: GdPIH3PxGT/bnMsU0hXGhCygnEcFURgyjUaIldD0IJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:52:61:c4:91:32:60:76:33:21:80:a6:1b:aa:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=69be15cb485774087524bd24dd05bbe7e6c0c2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:9f:e3:26:a4:41:8b:a7:24:e9:e5:9e:65: d9:75:1e:72:e6:f1:33:77:a2:66:53:06:d1:e2:71: 8d:ec:4e:b7:5a:0e:66:92:d6:4b:0b:3f:da:de:cf: 84:1f:e4:80:48:8b:04:20:f4:f9:ae:35:0e:55:54: 45:cf:73:86:82:f9:7d:63:ce:6c:89:42:c7:6e:c8: ef:0f:20:a1:19:2a:a4:d8:b1:d6:1c:4a:72:3d:17: e9:7a:d8:c6:c6:f1:d2:68:bf:32:b0:91:14:35:3f: c2:32:27:45:be:aa:8b:3a:3e:86:9e:2b:7a:90:c3: 53:fd:b6:79:f4:ab:38:75:31:cb:13:89:d5:68:2f: 74:49:5d:a0:39:35:8f:82:3c:7d:bd:a4:34:ab:01: 50:97:3e:b4:fe:4f:6d:48:18:c1:11:bc:16:ad:18: bc:12:0a:1a:28:59:6c:4b:cc:bb:61:b6:50:53:f9: 38:ba:64:5c:68:f7:78:b9:69:4f:76:c2:f0:d3:02: cb:d0:0e:f9:ee:d1:14:44:89:9f:ed:53:3d:d8:36: 7e:fd:d8:20:ed:60:fd:ac:84:1b:b8:64:e6:cc:ee: 3b:83:c0:50:cb:a0:62:46:dc:c6:11:86:91:12:66: 64:39:4f:cb:24:71:22:d4:c6:02:fe:df:17:fc:32: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:15:CB:48:57:74:08:75:24:BD:24:DD:05:BB:E7:E6:C0:C2:A5 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d9:9a:10:ef:fd:6d:ec:63:b6:b6:44:91:c4:e8:91:d0:1d: a4:9d:9f:31:00:6b:01:89:1c:1a:cd:84:ad:e9:39:14:e5:3c: 61:51:84:c6:cd:79:13:61:b0:a9:86:2f:63:6e:2e:b8:92:e1: 1b:91:0b:ad:4a:d3:d3:06:18:a7:8c:15:ae:e2:94:66:08:79: 3a:80:52:39:30:90:58:5a:2a:0d:fa:d6:d0:11:23:85:eb:59: 73:e9:13:05:af:a4:4e:56:6a:dc:5c:8c:2d:c0:45:4f:d6:fc: 0b:df:ad:0f:0e:35:1b:78:51:14:8d:e2:3c:b9:ea:c4:38:68: 59:96:91:ad:7e:c5:5b:86:24:47:7f:26:83:46:a0:30:b6:93: e9:24:ee:d2:6b:6b:ad:b3:90:96:fc:e8:b1:53:6a:7b:98:ad: 8e:34:32:2c:ae:41:cc:b8:f0:59:db:d7:39:aa:9a:13:ea:91: 33:ab:cf:d7:59:dd:69:f1:bc:ca:e9:aa:c1:fd:3e:00:92:5c: 79:bf:ed:14:58:3f:90:74:fe:2e:9b:6b:6a:41:8c:38:cb:e4: 72:29:3e:58:77:7d:29:90:e8:85:7b:e7:44:d5:a4:35:e2:8f: 8f:63:0f:eb:31:44:b1:b3:23:b1:8d:48:d5:92:91:6f:32:42: e6:16:d4:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1JhxJEyYHYzIYCmG6qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD Eyg2OWJlMTVjYjQ4NTc3NDA4NzUyNGJkMjRkZDA1YmJlN2U2YzBjMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKf4yakQYunJOnlnmXZdR5y5vEz d6JmUwbR4nGN7E63Wg5mktZLCz/a3s+EH+SASIsEIPT5rjUOVVRFz3OGgvl9Y85s iULHbsjvDyChGSqk2LHWHEpyPRfpetjGxvHSaL8ysJEUNT/CMidFvqqLOj6Gnit6 kMNT/bZ59Ks4dTHLE4nVaC90SV2gOTWPgjx9vaQ0qwFQlz60/k9tSBjBEbwWrRi8 EgoaKFlsS8y7YbZQU/k4umRcaPd4uWlPdsLw0wLL0A757tEURImf7VM92DZ+/dgg 7WD9rIQbuGTmzO47g8BQy6BiRtzGEYaREmZkOU/LJHEi1MYC/t8X/DJN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm+FctIV3QIdSS9JN0Fu+fmwMKlMB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdmaEO/9 bexjtrZEkcTokdAdpJ2fMQBrAYkcGs2Erek5FOU8YVGExs15E2GwqYYvY24uuJLh G5ELrUrT0wYYp4wVruKUZgh5OoBSOTCQWFoqDfrW0BEjhetZc+kTBa+kTlZq3FyM LcBFT9b8C9+tDw41G3hRFI3iPLnqxDhoWZaRrX7FW4YkR38mg0agMLaT6STu0mtr rbOQlvzosVNqe5itjjQyLK5BzLjwWdvXOaqaE+qRM6vP11ndafG8yumqwf0+AJJc eb/tFFg/kHT+LptrakGMOMvkcik+WHd9KZDohXvnRNWkNeKPj2MP6zFEsbMjsY1I 1ZKRbzJC5hbUcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:01:02 2025 by rpki-client