This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json) Hash identifier: S4uEu3aZ4T7qrV0Vn/kyLFwJTC4lltBd0sY9hWNnS+0= Subject key identifier: E7:74:00:0F:32:4C:6D:E2:78:38:A5:FE:CD:00:5F:A8:9D:9A:3A:51 Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa Certificate serial: 019B51174C1052025F13E8227E0CAB7ECC8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft Manifest number: 01EC Signing time: Wed 24 Dec 2025 16:00:39 +0000 Manifest this update: Wed 24 Dec 2025 16:00:39 +0000 Manifest next update: Thu 25 Dec 2025 16:00:39 +0000 Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=) 2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=) 3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: 4+Pu6ml71Ix34Tpv4M3PwkJk2fUKQ/G9h1nDE4WgllI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:4c:10:52:02:5f:13:e8:22:7e:0c:ab:7e:cc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa Validity Not Before: Dec 24 16:00:39 2025 GMT Not After : Dec 25 16:00:39 2025 GMT Subject: CN=e774000f324c6de27838a5fecd005fa89d9a3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:cc:48:99:a0:2a:b4:f6:2b:7f:5a:db:5e: fb:ab:e3:13:e3:d9:77:58:8d:b9:d7:31:eb:32:d8: 48:66:29:e4:9d:f5:61:9a:11:2a:21:48:dc:22:c4: a1:7d:2f:69:e5:f2:dd:a2:86:4e:07:d4:ca:5b:f9: e2:a1:cd:be:13:dd:0c:a7:ae:68:24:30:02:d2:55: 78:6e:db:0f:87:af:25:d1:7e:f6:48:ad:4d:f5:57: 6a:ae:b9:01:11:97:f6:65:ed:18:11:2a:05:f3:e7: 7e:9e:01:6f:3d:8c:c7:3a:d7:ce:29:06:21:ed:cd: 3d:ae:4f:f2:0e:57:65:aa:95:25:90:58:b2:1a:90: fa:5b:e5:93:9e:0b:55:e7:2e:7e:66:78:25:a8:5f: 3c:98:98:51:5b:ea:61:79:26:1e:d5:66:8b:1e:1f: 26:6a:cd:67:d4:65:b2:a5:b8:4d:93:a5:c5:7c:c9: f8:3c:87:8f:9d:a9:21:99:d5:0f:1e:85:49:a3:09: d6:66:39:3d:49:dd:80:5b:ca:26:b2:dc:e9:60:2a: c6:13:34:76:9e:73:b1:ef:33:74:f9:34:f4:d5:10: 51:21:a1:c3:f3:e9:60:79:64:21:5a:a4:93:51:01: 70:ef:6e:af:41:c3:01:f9:7d:2e:31:6f:1f:85:2d: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:74:00:0F:32:4C:6D:E2:78:38:A5:FE:CD:00:5F:A8:9D:9A:3A:51 X509v3 Authority Key Identifier: keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:13:65:5b:6e:be:a2:ff:10:7f:6d:e9:cf:28:23:32:cd: d6:21:a9:d9:b7:23:36:e2:fe:9c:76:3c:04:80:7c:45:4d:3d: 70:a6:9d:94:51:99:60:98:99:f2:55:7d:e7:6f:c4:c2:b4:ef: a8:77:b6:b7:ae:aa:32:08:cf:66:df:87:c9:e5:10:dd:df:d0: b1:08:4b:e3:4e:ee:0c:bb:67:16:ab:5b:c9:a4:04:14:ca:59: 6b:e7:db:e3:13:5c:05:98:76:c8:de:24:1f:8b:86:27:1b:ff: 87:7c:fd:1e:c2:bd:bc:1c:30:fa:b4:c1:38:0b:e3:58:36:01: 72:77:fb:26:6d:1b:df:00:98:c5:d4:4a:29:59:03:d3:bb:86: 60:01:eb:d5:49:84:1a:7b:e8:bc:c0:e1:7c:37:03:5b:f6:f9: 72:eb:23:c5:2b:6d:f3:56:d9:17:54:5c:36:74:58:00:39:e1: 53:a4:9c:7b:60:fd:fd:c1:ad:cd:00:bd:d4:6c:bb:92:fc:40: a5:ae:8f:f4:74:79:fa:e8:41:4a:5a:d8:8e:d1:fc:9e:e0:92: 1b:c0:f8:af:ca:ab:55:bb:b5:45:13:90:a9:75:da:f7:76:57: 95:e7:16:33:be:32:71:bc:81:18:cc:3f:0b:c7:26:dd:24:5a: da:6d:94:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF0wQUgJfE+gifgyrfsyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWFlNmFkNGJiMjc2MmUyMTk0ZTVkZjUxY2QwZDJjZDNl NjljYWEwHhcNMjUxMjI0MTYwMDM5WhcNMjUxMjI1MTYwMDM5WjAzMTEwLwYDVQQD EyhlNzc0MDAwZjMyNGM2ZGUyNzgzOGE1ZmVjZDAwNWZhODlkOWEzYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmufMSJmgKrT2K39a2177q+MT49l3 WI251zHrMthIZinknfVhmhEqIUjcIsShfS9p5fLdooZOB9TKW/nioc2+E90Mp65o JDAC0lV4btsPh68l0X72SK1N9VdqrrkBEZf2Ze0YESoF8+d+ngFvPYzHOtfOKQYh 7c09rk/yDldlqpUlkFiyGpD6W+WTngtV5y5+ZnglqF88mJhRW+pheSYe1WaLHh8m as1n1GWypbhNk6XFfMn4PIePnakhmdUPHoVJownWZjk9Sd2AW8omstzpYCrGEzR2 nnOx7zN0+TT01RBRIaHD8+lgeWQhWqSTUQFw726vQcMB+X0uMW8fhS2UXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd0AA8yTG3ieDil/s0AX6idmjpRMB8GA1UdIwQY MBaAFJLq5q1LsnYuIZTl31HNDSzT5pyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWIt N2U5NzY1MGQwZjg2LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWItN2U5NzY1MGQwZjg2 LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnkTZVtu vqL/EH9t6c8oIzLN1iGp2bcjNuL+nHY8BIB8RU09cKadlFGZYJiZ8lV952/EwrTv qHe2t66qMgjPZt+HyeUQ3d/QsQhL407uDLtnFqtbyaQEFMpZa+fb4xNcBZh2yN4k H4uGJxv/h3z9HsK9vBww+rTBOAvjWDYBcnf7Jm0b3wCYxdRKKVkD07uGYAHr1UmE GnvovMDhfDcDW/b5cusjxStt81bZF1RcNnRYADnhU6Sce2D9/cGtzQC91Gy7kvxA pa6P9HR5+uhBSlrYjtH8nuCSG8D4r8qrVbu1RROQqXXa93ZXlecWM74ycbyBGMw/ C8cm3SRa2m2U/w== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:07 2025 by rpki-client