This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json) Hash identifier: drY0AMWOvMzA2fk7dV24+faUESaODgn2FGMuBlTHQ/4= Subject key identifier: 5C:BC:24:1E:A2:A5:AA:3E:05:70:C3:9D:6E:94:9A:3F:E8:D7:02:3A Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Certificate serial: 019B4B15B3CCCEF5C0295E02D44E8E3DE54F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft Manifest number: 0AF6 Signing time: Tue 23 Dec 2025 12:01:11 +0000 Manifest this update: Tue 23 Dec 2025 12:01:11 +0000 Manifest next update: Wed 24 Dec 2025 12:01:11 +0000 Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=) 2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: F4jR+F5oTqjJi62s1cotw2i98qf3OE5X0YyMv8p+cVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:b3:cc:ce:f5:c0:29:5e:02:d4:4e:8e:3d:e5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Validity Not Before: Dec 23 12:01:11 2025 GMT Not After : Dec 24 12:01:11 2025 GMT Subject: CN=5cbc241ea2a5aa3e0570c39d6e949a3fe8d7023a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:d3:1f:b8:34:5b:7e:ed:ab:c8:98:44:ed: da:45:a6:da:df:d0:4d:1b:95:2e:d4:6f:5c:91:39: 14:05:af:a2:be:fb:e9:57:9d:19:28:9b:6e:ea:3a: c6:e2:20:10:4e:1c:04:75:00:f3:09:69:36:55:ef: f5:39:c3:4a:de:b0:df:a0:05:55:a0:7e:31:6f:9b: 94:4d:5f:25:55:02:b8:5e:9a:29:28:d6:80:aa:ef: 59:11:a3:ac:cc:71:2e:e9:32:f5:9d:07:2e:33:25: 30:5e:54:27:ca:41:54:ec:f8:8d:74:58:46:90:40: 30:1e:46:3e:ae:f8:79:56:e3:ea:51:4b:be:c2:44: 4d:5d:0b:b7:a8:ea:9c:2b:69:53:84:75:d8:8f:b9: 31:9c:cb:8c:ca:71:53:15:4d:b4:52:01:d5:d6:4f: fc:b1:52:0a:89:77:22:2e:42:28:9c:68:ee:eb:f8: 84:1c:71:54:3b:a1:6f:a0:a0:6a:19:f4:3b:f0:1a: 46:e0:d7:c5:b4:59:c8:49:b5:94:a6:16:5c:5f:7b: 72:49:81:b9:dd:66:75:16:8a:37:d1:90:2d:9e:da: 70:12:9d:1c:a3:ef:ad:a4:66:50:4c:9f:ab:59:fa: b7:b4:5a:77:c1:55:04:80:32:56:86:09:81:3c:a3: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:24:1E:A2:A5:AA:3E:05:70:C3:9D:6E:94:9A:3F:E8:D7:02:3A X509v3 Authority Key Identifier: keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3d:e8:7b:7e:ad:57:f4:a8:1f:eb:0c:df:9d:48:b5:1a:db: 55:b6:d4:e8:3f:50:38:7b:bc:09:f0:5c:82:24:27:71:39:a7: e3:bc:2c:49:47:8a:61:be:c6:5b:33:e3:f4:ea:c3:1b:0a:41: e6:59:6d:d8:8c:ac:b2:5d:36:20:87:c1:12:02:6f:15:e7:f5: 5f:44:c8:11:45:e0:55:3c:af:88:fd:fc:e1:b8:ca:73:cd:04: 33:29:d3:97:f3:3b:97:9b:a0:47:e5:54:04:1d:43:ab:9f:bd: d4:b9:c3:b1:8c:86:99:82:fc:1d:0b:11:77:7e:a0:c4:b6:17: 4d:4a:e0:c9:09:d2:6d:7e:c6:7e:67:ed:32:50:11:2f:d3:5e: e9:50:99:75:4a:3b:bc:30:27:87:e5:93:b4:ee:0a:45:b9:d5: 53:c9:70:d2:83:63:4f:f7:80:47:d8:41:fb:20:d2:6c:b0:40: 67:82:f3:40:53:b4:68:02:84:f9:97:1c:77:01:98:e0:e7:b9: 8a:16:86:30:0a:f2:d7:4e:bc:c2:8a:e6:1d:5d:ec:91:13:a6: 33:46:c6:38:d5:ad:be:04:e6:5c:ea:73:65:9c:60:d5:52:20: a4:ea:b0:01:e6:76:05:fb:4a:bc:96:3f:90:61:7c:8f:a2:e0: 93:a8:99:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFbPMzvXAKV4C1E6OPeVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm NmEwY2IwHhcNMjUxMjIzMTIwMTExWhcNMjUxMjI0MTIwMTExWjAzMTEwLwYDVQQD Eyg1Y2JjMjQxZWEyYTVhYTNlMDU3MGMzOWQ2ZTk0OWEzZmU4ZDcwMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1XTH7g0W37tq8iYRO3aRaba39BN G5Uu1G9ckTkUBa+ivvvpV50ZKJtu6jrG4iAQThwEdQDzCWk2Ve/1OcNK3rDfoAVV oH4xb5uUTV8lVQK4XpopKNaAqu9ZEaOszHEu6TL1nQcuMyUwXlQnykFU7PiNdFhG kEAwHkY+rvh5VuPqUUu+wkRNXQu3qOqcK2lThHXYj7kxnMuMynFTFU20UgHV1k/8 sVIKiXciLkIonGju6/iEHHFUO6FvoKBqGfQ78BpG4NfFtFnISbWUphZcX3tySYG5 3WZ1Foo30ZAtntpwEp0co++tpGZQTJ+rWfq3tFp3wVUEgDJWhgmBPKNpZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFy8JB6ipao+BXDDnW6Umj/o1wI6MB8GA1UdIwQY MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt MTc5MTE1OTRhZTUxLzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT3oe36t V/SoH+sM351ItRrbVbbU6D9QOHu8CfBcgiQncTmn47wsSUeKYb7GWzPj9OrDGwpB 5llt2Iyssl02IIfBEgJvFef1X0TIEUXgVTyviP384bjKc80EMynTl/M7l5ugR+VU BB1Dq5+91LnDsYyGmYL8HQsRd36gxLYXTUrgyQnSbX7GfmftMlARL9Ne6VCZdUo7 vDAnh+WTtO4KRbnVU8lw0oNjT/eAR9hB+yDSbLBAZ4LzQFO0aAKE+ZccdwGY4Oe5 ihaGMAry1068wormHV3skROmM0bGONWtvgTmXOpzZZxg1VIgpOqwAeZ2BftKvJY/ kGF8j6Lgk6iZ3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:48 2025 by rpki-client