This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: rhorSzsexAWMJmzEvJ1TQrh+F1FOwqW3L1JUkRmKUwo= Subject key identifier: 24:B7:EF:CB:D7:5A:2A:3D:F7:9F:74:37:F1:9D:10:27:07:4A:C0:A8 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B2C2F809FE11E5C6A7CC47F1EA0FA0E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 17B0 Signing time: Wed 17 Dec 2025 12:01:09 +0000 Manifest this update: Wed 17 Dec 2025 12:01:09 +0000 Manifest next update: Thu 18 Dec 2025 12:01:09 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: In34jHk68gCxTTnItTidIMh5l_0.roa (hash: ai0OxU7P9J24HUpRZ2/SoZH03ZZLm+vQvnj0RmvYt5M=) 6: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 7: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 18f7ZoeAPwostjMpUchggzyM8xDFDHoB8+xh4f3C1Vw=) 10: yAfCjmZjOAB8dlMTE21kHjd1vL0.roa (hash: z0i92ZtXWqd/J3rMgm1gm2l9HMdnyUuG5Ta5tta+hmw=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:80:9f:e1:1e:5c:6a:7c:c4:7f:1e:a0:fa:0e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 17 12:01:09 2025 GMT Not After : Dec 18 12:01:09 2025 GMT Subject: CN=24b7efcbd75a2a3df79f7437f19d1027074ac0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:45:16:c2:00:74:01:cc:cc:61:1f:de:be: c8:0c:0a:9e:ce:a3:2e:9b:69:6d:bf:7a:86:d8:bc: f1:4a:bd:5a:09:63:78:11:22:07:e4:4d:cd:73:09: 96:15:5f:50:f8:83:15:24:00:85:b4:c5:c8:05:ba: 76:6c:ad:eb:6a:0d:54:0b:2a:d5:53:09:e2:74:32: 92:91:96:3c:82:96:a9:25:c7:ce:99:02:8e:c8:ef: e5:42:f6:5f:99:7a:74:cc:ae:24:0f:02:8e:b2:f0: 24:79:8b:8a:3f:41:fc:f9:c2:51:9f:f8:e8:db:2d: aa:38:9d:0d:3f:8c:6d:76:d0:82:b0:e6:15:ba:2c: 2d:b9:43:29:18:2a:b1:ae:67:e1:df:9f:eb:56:e9: 22:9d:f0:18:06:84:c0:39:82:65:4c:f5:23:88:66: e8:fd:fc:a5:d7:ce:d0:8a:c8:49:93:9b:e1:0a:c9: d9:f3:3a:6b:40:8a:0b:61:45:9e:0e:13:cf:14:d7: 01:c4:2b:7d:55:2f:e6:5a:73:09:09:8a:3c:5f:ac: a7:f5:19:dd:e0:19:51:81:1d:9c:0c:7a:c8:2e:05: f5:fc:cb:63:d8:ed:b0:4f:d4:f1:12:11:a2:02:72: 4c:9c:58:33:7e:c2:8c:9d:26:59:33:9b:b3:cd:31: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B7:EF:CB:D7:5A:2A:3D:F7:9F:74:37:F1:9D:10:27:07:4A:C0:A8 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:25:72:26:c3:9e:74:b8:59:93:6a:42:91:d4:3c:d3:7f:df: 24:f3:16:f3:8f:50:f3:e7:bb:27:6b:bf:36:64:2a:22:e6:74: e2:4e:ef:20:a6:41:86:6d:74:3d:4b:41:ff:28:c2:a6:64:b0: 58:a2:95:36:38:a5:fb:ec:2b:1a:90:46:41:3d:5b:91:94:78: c7:33:fe:a9:7e:7c:90:50:00:34:36:90:de:9a:40:3f:03:bb: 43:c5:22:d6:62:04:e4:ee:90:4f:a4:c0:4e:76:74:e1:a2:dc: c0:95:9b:0e:39:5b:67:f2:69:28:89:bf:8d:fe:cd:25:5d:62: 56:b8:3a:63:b7:d5:ae:57:40:32:42:8b:1a:13:cd:52:7e:2e: 25:05:c1:d3:1d:0a:b4:5e:6e:e9:86:3f:2c:cb:5b:31:a9:08: 48:f5:61:c0:70:88:79:6f:83:cc:ad:12:ab:af:c4:1a:92:04: a5:6f:ee:f7:21:ea:58:57:73:ee:09:a1:73:6b:51:1a:18:52: bb:e6:6f:30:56:fd:d8:d9:bb:02:6e:e9:e3:27:68:96:5a:19: 88:ff:ca:0c:03:7d:d2:98:27:7c:b0:12:e9:a8:4a:05:6d:27: a7:2f:46:df:9d:8f:c0:7a:d2:be:14:b5:fd:70:d1:49:d2:f8: 73:6d:d5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL4Cf4R5canzEfx6g+g5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjE3MTIwMTA5WhcNMjUxMjE4MTIwMTA5WjAzMTEwLwYDVQQD EygyNGI3ZWZjYmQ3NWEyYTNkZjc5Zjc0MzdmMTlkMTAyNzA3NGFjMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqJFFsIAdAHMzGEf3r7IDAqezqMu m2ltv3qG2LzxSr1aCWN4ESIH5E3NcwmWFV9Q+IMVJACFtMXIBbp2bK3rag1UCyrV UwnidDKSkZY8gpapJcfOmQKOyO/lQvZfmXp0zK4kDwKOsvAkeYuKP0H8+cJRn/jo 2y2qOJ0NP4xtdtCCsOYVuiwtuUMpGCqxrmfh35/rVukinfAYBoTAOYJlTPUjiGbo /fyl187QishJk5vhCsnZ8zprQIoLYUWeDhPPFNcBxCt9VS/mWnMJCYo8X6yn9Rnd 4BlRgR2cDHrILgX1/Mtj2O2wT9TxEhGiAnJMnFgzfsKMnSZZM5uzzTGPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS378vXWio99590N/GdECcHSsCoMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiVyJsOe dLhZk2pCkdQ803/fJPMW849Q8+e7J2u/NmQqIuZ04k7vIKZBhm10PUtB/yjCpmSw WKKVNjil++wrGpBGQT1bkZR4xzP+qX58kFAANDaQ3ppAPwO7Q8Ui1mIE5O6QT6TA TnZ04aLcwJWbDjlbZ/JpKIm/jf7NJV1iVrg6Y7fVrldAMkKLGhPNUn4uJQXB0x0K tF5u6YY/LMtbMakISPVhwHCIeW+DzK0Sq6/EGpIEpW/u9yHqWFdz7gmhc2tRGhhS u+ZvMFb92Nm7Am7p4ydolloZiP/KDAN90pgnfLAS6ahKBW0npy9G352PwHrSvhS1 /XDRSdL4c23VXQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:48 2025 by rpki-client