This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: JHrCdYUvyyRc8RuTRSVz8Bfx/6mdgF0u3Btwr4y+Voo= Subject key identifier: 67:D1:8F:69:5B:B7:EC:E6:7C:AC:08:34:59:B5:F5:D3:DB:1B:10:57 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B2E1DE4D5A993CF8D5B0EA372C8B28367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 17B1 Signing time: Wed 17 Dec 2025 21:01:09 +0000 Manifest this update: Wed 17 Dec 2025 21:01:09 +0000 Manifest next update: Thu 18 Dec 2025 21:01:09 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: In34jHk68gCxTTnItTidIMh5l_0.roa (hash: ai0OxU7P9J24HUpRZ2/SoZH03ZZLm+vQvnj0RmvYt5M=) 6: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 7: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: Whs2xU66HqHzF/Ayr3RYg7LfSP5R+ry4um6Tmy4doDQ=) 10: yAfCjmZjOAB8dlMTE21kHjd1vL0.roa (hash: z0i92ZtXWqd/J3rMgm1gm2l9HMdnyUuG5Ta5tta+hmw=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:e4:d5:a9:93:cf:8d:5b:0e:a3:72:c8:b2:83:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 17 21:01:09 2025 GMT Not After : Dec 18 21:01:09 2025 GMT Subject: CN=67d18f695bb7ece67cac083459b5f5d3db1b1057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:ce:b6:cf:df:43:98:88:54:c9:c9:32:42: 05:0b:66:bf:a6:73:bb:02:29:f5:11:b0:55:fa:dc: c4:31:35:92:a8:7a:46:f4:63:d8:0c:d3:0d:79:dd: 40:54:30:55:04:43:ff:7e:bd:f4:32:ae:88:32:fb: 48:0e:52:75:d6:7a:02:59:8c:0c:8d:38:3b:93:98: 6f:b8:bd:9b:d7:04:e7:6e:1e:fb:b6:b8:e3:0d:2b: 8a:ce:ff:4f:99:30:4d:68:63:f0:14:ad:34:93:67: 65:5d:10:ae:7f:e0:ec:92:77:08:6a:a6:44:1b:2c: 63:44:7d:ed:5f:eb:26:17:95:e4:d5:8f:49:37:91: 2e:8f:92:2f:01:4e:83:7a:a0:41:ad:02:0e:66:30: e1:13:49:06:8b:19:bc:63:34:72:fd:aa:71:ed:7b: d0:e7:3c:04:3d:2a:58:80:f1:86:06:b4:15:f7:f7: 6c:a1:e5:25:e5:e0:8c:b4:0b:84:9f:87:be:de:de: 2f:c5:64:11:24:b0:6b:0c:98:7e:19:0a:60:ed:0b: 33:9f:e7:10:d4:09:3d:7e:27:22:c7:5a:a2:53:96: 1a:dd:e3:e5:f2:3e:f8:f1:ba:ca:28:ff:45:2d:56: dd:ce:d1:d3:f5:95:0b:aa:2c:90:e9:7f:1c:f3:ab: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:8F:69:5B:B7:EC:E6:7C:AC:08:34:59:B5:F5:D3:DB:1B:10:57 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:55:8e:61:b0:ba:c9:f3:00:62:d3:1b:a8:6c:8c:66:76:37: 74:8b:5e:17:b8:33:2c:d9:21:fe:45:1b:fb:e8:34:dd:e9:72: ae:2c:4f:a5:96:36:e6:f1:6c:04:82:3f:b2:34:83:b5:90:82: d9:00:d5:35:c9:e7:20:30:e7:98:63:1f:93:8e:5d:d8:fc:71: e6:46:c9:71:1f:47:c2:d5:6a:12:78:c3:5e:f2:5a:78:79:5b: 37:58:25:2e:f9:06:c8:70:48:7b:0b:99:88:3a:c8:f4:bd:d9: 3b:1b:0e:07:b3:c9:2c:d3:39:7c:00:34:a0:71:de:96:08:cc: 27:91:6c:0e:03:93:b6:bb:b9:cd:3d:f7:81:22:ae:a4:f6:f1: 26:42:8c:c4:0f:4b:63:aa:42:b3:e3:69:f8:82:0c:f2:55:93: 6c:2b:47:22:3e:6e:46:bc:f2:02:52:75:42:9c:10:6d:30:72: 9e:f0:12:68:ce:d1:ed:f2:c3:1c:dc:a9:61:18:4c:e4:81:f0: 9d:78:9f:05:18:93:9b:39:01:7c:a6:13:ee:f5:b8:2e:35:32: f1:b4:c6:77:67:5c:6b:39:92:d1:71:94:be:64:8d:21:59:c0: 7a:74:8f:65:0e:7b:e6:f2:3c:3a:ef:60:1d:ca:b2:a6:8a:6a: 78:a4:68:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHeTVqZPPjVsOo3LIsoNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjE3MjEwMTA5WhcNMjUxMjE4MjEwMTA5WjAzMTEwLwYDVQQD Eyg2N2QxOGY2OTViYjdlY2U2N2NhYzA4MzQ1OWI1ZjVkM2RiMWIxMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6POts/fQ5iIVMnJMkIFC2a/pnO7 Ain1EbBV+tzEMTWSqHpG9GPYDNMNed1AVDBVBEP/fr30Mq6IMvtIDlJ11noCWYwM jTg7k5hvuL2b1wTnbh77trjjDSuKzv9PmTBNaGPwFK00k2dlXRCuf+DskncIaqZE GyxjRH3tX+smF5Xk1Y9JN5Euj5IvAU6DeqBBrQIOZjDhE0kGixm8YzRy/apx7XvQ 5zwEPSpYgPGGBrQV9/dsoeUl5eCMtAuEn4e+3t4vxWQRJLBrDJh+GQpg7Qszn+cQ 1Ak9ficix1qiU5Ya3ePl8j748brKKP9FLVbdztHT9ZULqiyQ6X8c86sTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfRj2lbt+zmfKwINFm19dPbGxBXMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFWOYbC6 yfMAYtMbqGyMZnY3dIteF7gzLNkh/kUb++g03elyrixPpZY25vFsBII/sjSDtZCC 2QDVNcnnIDDnmGMfk45d2Pxx5kbJcR9HwtVqEnjDXvJaeHlbN1glLvkGyHBIewuZ iDrI9L3ZOxsOB7PJLNM5fAA0oHHelgjMJ5FsDgOTtru5zT33gSKupPbxJkKMxA9L Y6pCs+Np+IIM8lWTbCtHIj5uRrzyAlJ1QpwQbTBynvASaM7R7fLDHNypYRhM5IHw nXifBRiTmzkBfKYT7vW4LjUy8bTGd2dcazmS0XGUvmSNIVnAenSPZQ575vI8Ou9g HcqypopqeKRosA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:24 2025 by rpki-client