This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft File: Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json) Hash identifier: g49ltnqihrYetGCEjBtfr4qPeBvuimvWh6UuOzYo+pY= Subject key identifier: 71:F2:A9:D1:C8:27:B9:AC:11:8B:D9:F5:B2:61:B4:45:E7:ED:11:1A Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Certificate serial: 019B3D5A1B8572DE2CA6542B3E9CC0A17CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft Manifest number: 145F Signing time: Sat 20 Dec 2025 20:01:13 +0000 Manifest this update: Sat 20 Dec 2025 20:01:13 +0000 Manifest next update: Sun 21 Dec 2025 20:01:13 +0000 Files and hashes: 1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=) 2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: mbgveIDAyXAQIgaASObhEhE653edDP7fWP7SEsFEtkI=) 3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=) 4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=) 5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=) 6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1b:85:72:de:2c:a6:54:2b:3e:9c:c0:a1:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Validity Not Before: Dec 20 20:01:13 2025 GMT Not After : Dec 21 20:01:13 2025 GMT Subject: CN=71f2a9d1c827b9ac118bd9f5b261b445e7ed111a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:73:ae:72:a5:e4:f1:43:cc:75:39:89:0c: 91:e1:06:bd:43:28:d7:eb:5c:09:83:87:5e:27:f5: c8:f1:00:d4:72:27:68:26:4a:6c:b3:59:76:f2:0a: f5:fc:50:0e:e7:61:e4:f2:62:88:95:83:37:da:c8: 93:5f:6d:b1:39:dc:27:90:d4:5f:af:f6:c1:34:53: 40:a5:13:b5:8a:e3:d1:f3:3d:9e:2e:a9:ca:24:7b: 38:4d:04:7b:f9:85:98:bf:68:9f:0c:02:af:d3:35: 80:50:f9:b0:ec:8e:bd:c6:eb:5e:7e:6b:92:6d:e3: 51:85:6b:87:af:73:17:d9:b2:5a:0b:82:e4:af:7a: 30:18:24:01:bb:b8:6b:18:94:0c:a5:11:9c:d5:44: 18:18:a8:02:d0:81:0a:e1:8b:39:c4:5b:1c:e5:8f: cf:1c:35:82:c0:73:ff:19:37:ce:e3:54:b6:8a:64: 51:d0:c4:20:ea:79:7a:c6:45:76:7e:ed:6b:77:0f: 80:88:c0:a6:25:a9:8d:24:7a:c8:a7:ec:55:83:bc: fb:3a:7e:66:35:08:c9:d8:0d:38:52:71:48:d6:f9: 54:f3:8d:36:fd:bf:6c:52:cc:56:01:a6:84:55:b4: c2:1f:16:67:40:90:52:8b:2b:8c:cb:0e:f6:46:e4: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F2:A9:D1:C8:27:B9:AC:11:8B:D9:F5:B2:61:B4:45:E7:ED:11:1A X509v3 Authority Key Identifier: keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:20:61:77:05:cd:35:f8:f6:d4:ce:ca:ad:89:d1:61:06:d2: 19:6e:99:f1:9a:bc:03:dc:bb:24:90:de:1e:29:d6:45:9e:4d: 8f:a6:e0:48:61:16:18:d7:93:d6:9f:ca:f9:01:be:95:96:eb: 32:b8:aa:bf:92:a5:ea:46:ef:9f:2f:e8:bd:a7:76:f0:ca:0f: 0f:1c:14:02:aa:5f:71:f7:31:f7:8e:26:1b:c1:38:f1:88:8e: 28:c0:3b:8a:25:66:3c:1d:fa:b8:7c:4c:51:c7:c5:36:05:5d: c5:9b:66:7d:28:14:71:89:b1:fa:fd:b9:2b:ec:34:49:90:59: 30:aa:be:b7:7b:8f:a2:3e:e1:97:b6:bc:a7:b7:a6:f3:6d:12: 9b:0e:f4:3c:58:ac:6d:12:ec:2f:24:ff:50:54:7a:1d:0f:f9: 09:ad:2d:c5:1e:18:03:20:73:49:73:37:33:1e:ce:09:3f:f4: 06:f4:da:f6:40:11:30:4d:7a:7c:92:3a:c1:a0:8c:57:1a:46: ed:50:0e:c9:05:45:a0:a9:ea:12:a4:49:7f:22:57:d5:ac:1e: 7c:5f:03:4a:7b:ad:ac:a9:ab:70:2b:5e:78:ab:db:87:f7:68: 56:82:89:80:25:9d:e1:f5:78:9d:6e:8f:80:af:9a:de:f1:8d: 9d:9e:58:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhuFct4splQrPpzAoXzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm ZGQ1MGIwHhcNMjUxMjIwMjAwMTEzWhcNMjUxMjIxMjAwMTEzWjAzMTEwLwYDVQQD Eyg3MWYyYTlkMWM4MjdiOWFjMTE4YmQ5ZjViMjYxYjQ0NWU3ZWQxMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFzrnKl5PFDzHU5iQyR4Qa9QyjX 61wJg4deJ/XI8QDUcidoJkpss1l28gr1/FAO52Hk8mKIlYM32siTX22xOdwnkNRf r/bBNFNApRO1iuPR8z2eLqnKJHs4TQR7+YWYv2ifDAKv0zWAUPmw7I69xutefmuS beNRhWuHr3MX2bJaC4Lkr3owGCQBu7hrGJQMpRGc1UQYGKgC0IEK4Ys5xFsc5Y/P HDWCwHP/GTfO41S2imRR0MQg6nl6xkV2fu1rdw+AiMCmJamNJHrIp+xVg7z7On5m NQjJ2A04UnFI1vlU8402/b9sUsxWAaaEVbTCHxZnQJBSiyuMyw72RuTF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHyqdHIJ7msEYvZ9bJhtEXn7REaMB8GA1UdIwQY MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt ZGUwNWM1NDA0NWJiLzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSBhdwXN Nfj21M7KrYnRYQbSGW6Z8Zq8A9y7JJDeHinWRZ5Nj6bgSGEWGNeT1p/K+QG+lZbr Mriqv5Kl6kbvny/ovad28MoPDxwUAqpfcfcx944mG8E48YiOKMA7iiVmPB36uHxM UcfFNgVdxZtmfSgUcYmx+v25K+w0SZBZMKq+t3uPoj7hl7a8p7em820Smw70PFis bRLsLyT/UFR6HQ/5Ca0txR4YAyBzSXM3Mx7OCT/0BvTa9kARME16fJI6waCMVxpG 7VAOyQVFoKnqEqRJfyJX1awefF8DSnutrKmrcCteeKvbh/doVoKJgCWd4fV4nW6P gK+a3vGNnZ5YJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:17 2025 by rpki-client