This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json) Hash identifier: Z+xFODnCex2WTPB2HM3084iTo9d/YEtyhBAMTxnYOh4= Subject key identifier: CD:49:22:83:CE:26:11:56:72:B6:85:38:67:83:B3:60:02:87:AE:1E Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Certificate serial: 019B37C5EC0226BBBE34D02C6E8EF7E0E80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 18:01:16 +0000 Manifest this update: Fri 19 Dec 2025 18:01:16 +0000 Manifest next update: Sat 20 Dec 2025 18:01:16 +0000 Files and hashes: 1: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (hash: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=) 2: Ukpz258Pu7bNWf8NOO8xTSDm6ac.roa (hash: N3tcSeOhnfUpzG6xjoUCZ9+KDhbzHATSPGgHhTJK3Ng=) 3: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: zWo5SDLgVtrL10sLdeXe+HASHdes6Gru8ggAEQXVV9o=) 4: aEi34f_6t9l4iaqclME3TbdcONI.roa (hash: 6lr3JCFVymXlYUNs8hePhThGsbDq6rJYIuYHzugE+PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ec:02:26:bb:be:34:d0:2c:6e:8e:f7:e0:e8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Validity Not Before: Dec 19 18:01:16 2025 GMT Not After : Dec 20 18:01:16 2025 GMT Subject: CN=cd492283ce26115672b685386783b3600287ae1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:9c:6d:17:df:1e:5b:58:9a:b3:ff:65:44: 4f:d8:57:91:ff:44:d0:86:dd:3b:50:c9:1d:b9:c7: ad:90:3c:1d:ce:62:95:32:6d:50:5d:84:72:73:9e: 45:0c:d6:cd:b4:3d:bf:dd:04:ba:ea:88:36:3a:00: b6:f6:27:9e:64:dd:f0:7e:dd:35:24:9a:9a:56:02: 26:40:cc:73:e1:c4:5d:6c:3a:e6:7f:3b:6f:bc:5d: c6:cd:23:c0:83:4f:c7:45:9d:3c:5c:9e:86:fc:bf: 13:12:28:97:31:df:20:b4:dc:85:12:29:ca:1c:f8: 53:de:0b:e3:6a:6b:53:e6:08:ed:70:b4:f1:28:e2: eb:73:c5:6b:63:c2:0b:46:7a:3e:69:61:be:6b:9a: aa:04:ef:0a:fc:12:c5:b1:61:2b:c4:5c:cf:26:f4: a9:e6:f9:57:af:c9:bd:a5:2e:64:99:31:6d:d4:94: 4c:ca:6c:0f:fe:c0:ca:25:c5:49:d3:1e:4c:32:c1: f3:ee:35:87:94:c1:eb:20:7d:80:6b:62:78:25:b1: e3:e4:de:a3:2a:76:e2:29:97:23:50:f0:1b:2e:d3: 90:8d:f4:6a:0f:14:d3:a6:33:11:2e:0a:09:c2:5c: df:05:23:78:92:e1:08:0d:db:fe:fe:a9:6c:37:31: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:22:83:CE:26:11:56:72:B6:85:38:67:83:B3:60:02:87:AE:1E X509v3 Authority Key Identifier: keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ef:8e:5f:40:05:a3:57:d0:a5:e0:d7:0c:00:fb:65:18:e8: 13:06:82:6f:3f:38:1b:74:af:82:b3:17:72:db:14:81:39:60: 62:a1:f2:56:d2:28:ff:6d:e5:0c:a6:28:6e:f3:b5:29:53:1a: 79:44:ab:c1:f4:d8:01:2d:8c:51:fe:68:a4:b5:ba:88:5f:8b: df:d4:b2:ff:a1:28:8e:7f:b1:55:60:4c:8b:ad:30:b2:04:2d: 3b:da:c6:9b:a2:ba:7a:e4:d5:3a:a7:8f:c7:e4:b1:3b:76:40: a8:a0:f7:96:ea:7e:43:9e:48:5f:7e:1b:2a:06:96:45:3f:85: 57:3e:d4:0e:88:aa:65:65:8c:df:61:16:ce:ed:cf:e0:96:75: d3:03:28:39:18:31:b5:ff:a4:73:f3:c1:0e:dc:ac:68:e0:d2: 14:f5:1e:3b:b4:7e:8a:9b:2a:34:88:6a:25:74:80:74:db:97: 27:16:83:2a:64:2a:98:d7:ab:a6:dc:24:9a:cb:7a:ab:84:f5: df:14:9d:b2:15:3b:30:88:26:64:8d:18:89:86:38:22:35:6c: 25:c8:2d:27:7b:9d:74:e8:50:82:3f:3e:e4:cd:f6:59:cd:d2: d6:5f:11:28:9e:75:49:6a:95:d6:28:fa:35:ce:b8:a4:bc:39: ae:a6:ea:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xewCJru+NNAsbo734OgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYmYyMWVlYjM2NDE0YjMyODBlNmMzM2IwYjU3Mjk2Yjhm NmI2NzUwHhcNMjUxMjE5MTgwMTE2WhcNMjUxMjIwMTgwMTE2WjAzMTEwLwYDVQQD EyhjZDQ5MjI4M2NlMjYxMTU2NzJiNjg1Mzg2NzgzYjM2MDAyODdhZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPKcbRffHltYmrP/ZURP2FeR/0TQ ht07UMkducetkDwdzmKVMm1QXYRyc55FDNbNtD2/3QS66og2OgC29ieeZN3wft01 JJqaVgImQMxz4cRdbDrmfztvvF3GzSPAg0/HRZ08XJ6G/L8TEiiXMd8gtNyFEinK HPhT3gvjamtT5gjtcLTxKOLrc8VrY8ILRno+aWG+a5qqBO8K/BLFsWErxFzPJvSp 5vlXr8m9pS5kmTFt1JRMymwP/sDKJcVJ0x5MMsHz7jWHlMHrIH2Aa2J4JbHj5N6j KnbiKZcjUPAbLtOQjfRqDxTTpjMRLgoJwlzfBSN4kuEIDdv+/qlsNzHRVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1JIoPOJhFWcraFOGeDs2ACh64eMB8GA1UdIwQY MBaAFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUt YWM5NmY2YWFiNDk0LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wNTk1NDMtNjllNC00OGY2LWExNzUtYWM5NmY2YWFiNDk0 LzEvVXI4aDdyTmtGTE1vRG13enNMVnlscmoydG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu+OX0AF o1fQpeDXDAD7ZRjoEwaCbz84G3SvgrMXctsUgTlgYqHyVtIo/23lDKYobvO1KVMa eUSrwfTYAS2MUf5opLW6iF+L39Sy/6Eojn+xVWBMi60wsgQtO9rGm6K6euTVOqeP x+SxO3ZAqKD3lup+Q55IX34bKgaWRT+FVz7UDoiqZWWM32EWzu3P4JZ10wMoORgx tf+kc/PBDtysaODSFPUeO7R+ipsqNIhqJXSAdNuXJxaDKmQqmNerptwkmst6q4T1 3xSdshU7MIgmZI0YiYY4IjVsJcgtJ3uddOhQgj8+5M32Wc3S1l8RKJ51SWqV1ij6 Nc64pLw5rqbqIg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:26:58 2025 by rpki-client