This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json) Hash identifier: sVdPTki4e/+PMKYLdwxhVm+5dMmca8F2c1/3UjIYVy4= Subject key identifier: A0:5F:18:E7:1E:1B:61:04:AB:B4:B1:66:CA:61:5C:0E:55:17:81:0D Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Certificate serial: 019B4B838C4B1EFDECACE58D2FB9EA5A9D51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft Manifest number: 179C Signing time: Tue 23 Dec 2025 14:01:10 +0000 Manifest this update: Tue 23 Dec 2025 14:01:10 +0000 Manifest next update: Wed 24 Dec 2025 14:01:10 +0000 Files and hashes: 1: NBFkOVFjhr5cFEclo5MbI_qhtaE.roa (hash: aEnSyjmzjCXkq9QNcUbxZtFecm4VYBNFEkBBtcfxmSI=) 2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: y+LMtvLWWAoHw0JfzZfk2Pke9qN8hzN6kFqdZzCxjDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:8c:4b:1e:fd:ec:ac:e5:8d:2f:b9:ea:5a:9d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Validity Not Before: Dec 23 14:01:10 2025 GMT Not After : Dec 24 14:01:10 2025 GMT Subject: CN=a05f18e71e1b6104abb4b166ca615c0e5517810d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:4c:d5:15:8f:a3:a6:cd:9a:2d:20:e0:41: cd:38:d7:ac:9f:8d:9d:46:fe:2b:c8:7e:1d:bb:5c: 16:de:37:4b:cf:1b:d4:9a:12:97:dc:28:1a:57:6d: 91:23:aa:2a:ed:81:ab:1a:6f:9c:c1:4f:4b:44:7a: f5:16:f0:23:61:3d:08:ea:05:51:6c:86:16:28:5a: a1:c7:ad:52:8e:bc:34:05:e7:9f:f8:58:d6:57:89: cb:0d:7d:11:b7:75:67:2d:b7:89:0e:bd:86:ad:cf: c1:c3:c8:92:9c:c5:bd:35:db:bc:51:b0:67:36:ee: ff:ca:95:13:d2:8a:86:74:73:8c:64:ce:0a:b4:25: da:0d:6d:57:6d:da:00:07:d9:e3:50:d8:d1:39:5d: 60:51:cf:51:8a:20:a6:bc:f8:98:db:24:dd:ae:18: 85:e4:f5:ac:41:b7:22:1d:98:25:fb:f9:bc:80:59: 00:73:ca:e4:e3:19:11:11:15:0a:2f:85:e7:92:85: 94:7d:63:37:1e:15:5a:e5:6c:24:38:d6:26:68:57: c5:a8:66:53:c0:b9:c1:05:85:c5:36:03:f8:fc:44: 48:15:fa:3b:31:e7:12:49:f4:f9:e0:75:a0:d7:90: ed:4b:ae:62:fb:3f:87:fd:0d:15:db:2e:06:5e:aa: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5F:18:E7:1E:1B:61:04:AB:B4:B1:66:CA:61:5C:0E:55:17:81:0D X509v3 Authority Key Identifier: keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1a:c1:4a:01:44:86:5e:ef:29:f9:49:61:5f:26:47:d3:0c: 84:da:83:1f:51:19:a0:e3:ad:fa:42:52:45:de:9a:2c:8d:76: 2b:36:fe:53:10:64:6b:e4:7e:c7:4f:ee:0c:3c:c0:77:15:cf: 1b:f1:c5:4c:ce:4e:b7:7c:37:89:e4:e2:a2:6f:e9:03:5e:60: 31:0b:e4:05:e3:c2:67:80:fd:01:c0:43:11:5c:f8:42:cb:ba: 55:58:a0:00:2a:64:80:50:1b:91:61:86:d0:3c:85:f1:ba:ca: 20:22:6f:0d:5c:0a:62:be:6e:22:11:dd:eb:7d:62:bb:5a:68: ad:d9:7d:ba:22:3e:f8:64:6f:91:21:8b:8a:7f:7d:67:a6:e9: c4:aa:73:1e:49:a5:c2:b8:1e:56:b6:1f:86:ee:1f:d1:42:2f: 6a:7a:78:8d:c1:59:07:b6:7a:54:b1:cb:f5:89:3d:7e:db:97: 67:37:eb:56:0d:fc:8d:5a:0e:c2:79:01:7a:55:a9:15:2c:0d: df:a6:73:39:7d:de:77:53:29:f6:a5:ea:c7:0b:ea:1a:b0:e1: 72:5d:dd:9b:b2:3a:8f:4c:38:39:b0:01:77:dc:a6:17:6a:ca: 40:a9:24:e9:0a:03:46:75:cf:7d:1f:99:f1:56:54:7c:76:03: 77:c4:6e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg4xLHv3srOWNL7nqWp1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw NmVhZjIwHhcNMjUxMjIzMTQwMTEwWhcNMjUxMjI0MTQwMTEwWjAzMTEwLwYDVQQD EyhhMDVmMThlNzFlMWI2MTA0YWJiNGIxNjZjYTYxNWMwZTU1MTc4MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkxM1RWPo6bNmi0g4EHNONesn42d Rv4ryH4du1wW3jdLzxvUmhKX3CgaV22RI6oq7YGrGm+cwU9LRHr1FvAjYT0I6gVR bIYWKFqhx61Sjrw0Beef+FjWV4nLDX0Rt3VnLbeJDr2Grc/Bw8iSnMW9Ndu8UbBn Nu7/ypUT0oqGdHOMZM4KtCXaDW1XbdoAB9njUNjROV1gUc9RiiCmvPiY2yTdrhiF 5PWsQbciHZgl+/m8gFkAc8rk4xkRERUKL4XnkoWUfWM3HhVa5WwkONYmaFfFqGZT wLnBBYXFNgP4/ERIFfo7MecSSfT54HWg15DtS65i+z+H/Q0V2y4GXqqi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBfGOceG2EEq7SxZsphXA5VF4ENMB8GA1UdIwQY MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxrBSgFE hl7vKflJYV8mR9MMhNqDH1EZoOOt+kJSRd6aLI12Kzb+UxBka+R+x0/uDDzAdxXP G/HFTM5Ot3w3ieTiom/pA15gMQvkBePCZ4D9AcBDEVz4Qsu6VVigACpkgFAbkWGG 0DyF8brKICJvDVwKYr5uIhHd631iu1pordl9uiI++GRvkSGLin99Z6bpxKpzHkml wrgeVrYfhu4f0UIvanp4jcFZB7Z6VLHL9Yk9ftuXZzfrVg38jVoOwnkBelWpFSwN 36ZzOX3ed1Mp9qXqxwvqGrDhcl3dm7I6j0w4ObABd9ymF2rKQKkk6QoDRnXPfR+Z 8VZUfHYDd8Rutw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:18 2025 by rpki-client