This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft File: urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft (raw, json) Hash identifier: hKf76VXd0zWaDCY007pPXknmb/Si3o4ODRvSWdTJ9uY= Subject key identifier: 33:F4:2F:6E:25:1A:C2:30:6D:F7:25:06:4B:DC:22:EE:69:53:9C:D8 Authority key identifier: BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B Certificate issuer: /CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b Certificate serial: 019B4248FEA6F9153B5D300FC4A233872597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft Manifest number: 0CA8 Signing time: Sun 21 Dec 2025 19:00:38 +0000 Manifest this update: Sun 21 Dec 2025 19:00:38 +0000 Manifest next update: Mon 22 Dec 2025 19:00:38 +0000 Files and hashes: 1: urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl (hash: J4+6eACUsBSn5lld35slYu5Tti/Xa5+9HurABj/TBQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:fe:a6:f9:15:3b:5d:30:0f:c4:a2:33:87:25:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b Validity Not Before: Dec 21 19:00:38 2025 GMT Not After : Dec 22 19:00:38 2025 GMT Subject: CN=33f42f6e251ac2306df725064bdc22ee69539cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:1f:35:80:07:b5:24:d8:a3:f5:1b:64:8e: b6:ef:d9:97:47:ef:9d:db:eb:4f:85:da:11:c7:5b: 15:55:48:98:11:4a:8c:ef:cf:10:21:43:f6:b2:52: f5:fd:18:23:93:98:9e:8a:2b:71:2a:61:95:9d:fb: 1f:fc:8e:02:be:f6:b6:34:5a:18:2c:c1:7e:89:3d: 49:25:4b:98:7a:98:9a:20:51:fe:0c:14:d2:93:d5: 63:34:dc:fe:13:b9:32:13:f9:6a:1e:20:90:ef:85: dd:68:5f:62:66:53:f0:a9:35:c8:d2:86:d7:af:a5: dd:68:30:53:6c:60:e8:ad:27:7d:a7:a2:9f:08:06: 4f:40:cb:1b:67:9f:ca:93:20:e4:2a:ec:15:6f:f7: 52:be:50:93:56:42:b2:61:56:9a:b8:a3:d7:9f:15: 6a:5c:fb:19:a0:cb:61:5f:a0:2f:0d:fe:20:b6:f0: 8a:cc:ea:04:25:5f:14:f9:3b:ab:df:d7:be:f2:b7: 52:3f:0d:03:8e:3b:ac:eb:ac:a1:66:d6:4f:e3:5c: 79:03:47:52:a2:9b:d8:d3:a8:26:35:b9:68:27:c6: f8:af:20:bf:39:82:2e:f0:d2:b6:74:f2:93:8d:aa: 60:30:2d:ae:ca:f5:9f:12:38:bf:8a:bf:16:d8:91: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F4:2F:6E:25:1A:C2:30:6D:F7:25:06:4B:DC:22:EE:69:53:9C:D8 X509v3 Authority Key Identifier: keyid:BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2b:d4:09:84:40:b6:c0:7f:79:4c:56:97:c4:da:65:34:b0: a3:37:d0:2d:67:62:bb:d4:50:38:fc:ba:66:bb:8b:05:3a:a7: 2f:96:16:32:7c:2c:1e:a6:ab:b7:56:94:68:36:99:6a:f8:0c: a0:a2:74:59:d2:18:30:ac:21:fa:1c:36:7e:d8:f6:d6:58:33: 35:31:72:12:69:08:0e:d5:fa:b6:72:25:3c:d0:be:09:f9:f0: f4:a3:01:8f:80:7d:30:90:4a:9a:09:65:02:5c:b0:bd:40:91: ad:4a:c6:bf:82:37:92:5c:b9:46:2e:d8:d2:1f:61:3d:ee:bb: d9:bb:dc:fc:bd:76:00:b4:a2:13:0e:24:3e:df:61:77:87:37: 5e:1c:6e:fe:10:f0:4f:dc:96:8c:8b:e5:3b:ab:0f:43:a1:58: b2:1a:2a:46:52:3a:3d:19:4b:a0:a1:d6:61:e9:47:a4:85:14: 2d:db:2e:14:1b:77:4c:73:06:8e:e8:a1:36:59:a0:d6:04:80: 5e:8c:f3:cd:37:c5:d3:1b:f4:47:ab:df:87:ab:9b:00:bf:5c: 56:6b:fe:a4:43:0f:02:7e:3d:2d:57:7c:62:9e:2e:de:cf:98: bf:97:52:5b:da:c1:64:19:7d:ca:74:f1:b2:d0:e1:57:77:49: 72:70:39:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSP6m+RU7XTAPxKIzhyWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjliYmMyNGU5YWMzZDllYzdlMTBiZjk1NzQ3ZGFiNWM0 NWRkMmIwHhcNMjUxMjIxMTkwMDM4WhcNMjUxMjIyMTkwMDM4WjAzMTEwLwYDVQQD EygzM2Y0MmY2ZTI1MWFjMjMwNmRmNzI1MDY0YmRjMjJlZTY5NTM5Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIEfNYAHtSTYo/UbZI6279mXR++d 2+tPhdoRx1sVVUiYEUqM788QIUP2slL1/Rgjk5ieiitxKmGVnfsf/I4Cvva2NFoY LMF+iT1JJUuYepiaIFH+DBTSk9VjNNz+E7kyE/lqHiCQ74XdaF9iZlPwqTXI0obX r6XdaDBTbGDorSd9p6KfCAZPQMsbZ5/KkyDkKuwVb/dSvlCTVkKyYVaauKPXnxVq XPsZoMthX6AvDf4gtvCKzOoEJV8U+Tur39e+8rdSPw0Djjus66yhZtZP41x5A0dS opvY06gmNbloJ8b4ryC/OYIu8NK2dPKTjapgMC2uyvWfEji/ir8W2JHlkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP0L24lGsIwbfclBkvcIu5pU5zYMB8GA1UdIwQY MBaAFLq5u8JOmsPZ7H4Qv5V0fatcRd0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjIt MmViYzY0NDhmNjAyLzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjItMmViYzY0NDhmNjAy LzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoivUCYRA tsB/eUxWl8TaZTSwozfQLWdiu9RQOPy6ZruLBTqnL5YWMnwsHqart1aUaDaZavgM oKJ0WdIYMKwh+hw2ftj21lgzNTFyEmkIDtX6tnIlPNC+Cfnw9KMBj4B9MJBKmgll AlywvUCRrUrGv4I3kly5Ri7Y0h9hPe672bvc/L12ALSiEw4kPt9hd4c3Xhxu/hDw T9yWjIvlO6sPQ6FYshoqRlI6PRlLoKHWYelHpIUULdsuFBt3THMGjuihNlmg1gSA XozzzTfF0xv0R6vfh6ubAL9cVmv+pEMPAn49LVd8Yp4u3s+Yv5dSW9rBZBl9ynTx stDhV3dJcnA5IQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:16 2025 by rpki-client