This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json) Hash identifier: DUI+qdzCBK3mRf7Gxnqk18MZkFIjOsxS8L05pt1r96I= Subject key identifier: 3C:A8:8F:30:AF:0D:E0:5D:78:A9:75:49:05:E8:53:14:92:1C:00:79 Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Certificate serial: 019B31FA797196DC77B8946000F031400E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft Manifest number: 0AE9 Signing time: Thu 18 Dec 2025 15:00:57 +0000 Manifest this update: Thu 18 Dec 2025 15:00:57 +0000 Manifest next update: Fri 19 Dec 2025 15:00:57 +0000 Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=) 2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: rrnDd595EX4FcqhydoPaxzNS5CFTaZ4fQrnXdE8pLnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:79:71:96:dc:77:b8:94:60:00:f0:31:40:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Validity Not Before: Dec 18 15:00:57 2025 GMT Not After : Dec 19 15:00:57 2025 GMT Subject: CN=3ca88f30af0de05d78a9754905e85314921c0079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:24:c1:62:24:ec:76:42:62:6a:8f:23:3f: 4e:e2:63:f9:09:c1:d0:24:63:53:22:77:5a:2c:08: 14:0e:92:22:93:15:96:90:29:68:cc:0b:46:00:82: 0d:67:cc:f3:ff:eb:0b:46:19:85:96:ec:7c:d2:e9: 4b:d4:52:23:df:9c:76:18:28:8d:ea:f4:05:c0:b9: 66:e9:a8:79:cc:ac:ed:7b:9d:fd:d9:41:99:27:58: f5:08:a0:17:73:90:e3:89:39:aa:3d:f4:4e:cb:31: d7:1c:0e:65:15:7c:e1:f3:1c:20:c6:1c:d6:54:37: 36:4d:2d:73:c2:52:ac:49:e4:49:20:b1:f9:f1:0d: d4:86:1a:12:89:f7:c8:36:ce:41:2d:ab:d3:45:cd: ae:1e:f1:02:99:89:d6:2e:99:6a:b2:da:35:26:12: ab:de:80:07:05:95:4b:66:2d:e4:a4:b9:0c:82:ca: 66:27:00:63:87:b4:1a:f4:a9:60:25:85:d7:19:dd: 38:52:57:92:4d:cf:8c:f1:4b:14:77:4d:2d:92:d5: 8a:97:a0:14:32:b7:e6:3d:20:ad:bb:fb:8f:ba:c2: ad:80:8c:8b:5d:64:a8:31:19:ec:11:b5:3b:6e:18: 7a:5a:d3:04:57:ab:f6:6e:f0:57:cf:f5:46:02:c3: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A8:8F:30:AF:0D:E0:5D:78:A9:75:49:05:E8:53:14:92:1C:00:79 X509v3 Authority Key Identifier: keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:65:75:18:f0:c9:d1:48:b0:5b:92:6c:5a:5c:73:12:98:ee: 6b:33:de:2e:42:81:b4:e5:27:f7:db:71:68:db:09:63:43:a4: 32:22:1a:21:77:29:35:73:cc:88:46:4e:07:59:87:e9:7b:57: dc:a9:c4:a9:50:8c:a8:44:6a:c9:f1:47:0c:2d:a5:2e:c4:50: f9:16:2a:eb:36:d9:13:44:98:dc:dd:b2:e6:6f:85:12:ce:7f: 3a:26:23:71:13:d1:88:2b:20:e9:2f:0a:55:6c:53:5a:fa:45: fc:9d:31:a1:2c:44:ee:5e:6d:96:bc:fc:08:08:66:46:29:5d: e6:09:23:af:31:e0:bf:c4:c8:56:4b:23:71:a1:96:71:15:e1: 4e:a5:90:a6:33:76:22:fb:d7:2f:75:bf:0f:dc:30:aa:75:63: 40:ea:fb:c7:ce:8f:9d:67:e0:03:03:5c:25:45:09:a7:8d:62: fa:6f:b5:18:3a:fa:e8:cb:64:a9:fc:29:02:0a:01:94:bd:55: 9e:04:c1:ba:26:df:8d:a8:0f:f4:41:2c:fc:13:33:7e:48:6f: 1c:86:d7:39:6f:29:a0:e3:41:1c:9f:f8:75:71:d9:97:b9:7f: 2b:45:56:f3:0c:69:37:71:5f:4b:1c:25:0a:a5:f6:0e:4c:a6: 40:e4:a1:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+nlxltx3uJRgAPAxQA4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm NmEwY2IwHhcNMjUxMjE4MTUwMDU3WhcNMjUxMjE5MTUwMDU3WjAzMTEwLwYDVQQD EygzY2E4OGYzMGFmMGRlMDVkNzhhOTc1NDkwNWU4NTMxNDkyMWMwMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjIkwWIk7HZCYmqPIz9O4mP5CcHQ JGNTIndaLAgUDpIikxWWkClozAtGAIINZ8zz/+sLRhmFlux80ulL1FIj35x2GCiN 6vQFwLlm6ah5zKzte5392UGZJ1j1CKAXc5DjiTmqPfROyzHXHA5lFXzh8xwgxhzW VDc2TS1zwlKsSeRJILH58Q3UhhoSiffINs5BLavTRc2uHvECmYnWLplqsto1JhKr 3oAHBZVLZi3kpLkMgspmJwBjh7Qa9KlgJYXXGd04UleSTc+M8UsUd00tktWKl6AU MrfmPSCtu/uPusKtgIyLXWSoMRnsEbU7bhh6WtMEV6v2bvBXz/VGAsP1zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyojzCvDeBdeKl1SQXoUxSSHAB5MB8GA1UdIwQY MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt MTc5MTE1OTRhZTUxLzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWV1GPDJ 0UiwW5JsWlxzEpjuazPeLkKBtOUn99txaNsJY0OkMiIaIXcpNXPMiEZOB1mH6XtX 3KnEqVCMqERqyfFHDC2lLsRQ+RYq6zbZE0SY3N2y5m+FEs5/OiYjcRPRiCsg6S8K VWxTWvpF/J0xoSxE7l5tlrz8CAhmRild5gkjrzHgv8TIVksjcaGWcRXhTqWQpjN2 IvvXL3W/D9wwqnVjQOr7x86PnWfgAwNcJUUJp41i+m+1GDr66MtkqfwpAgoBlL1V ngTBuibfjagP9EEs/BMzfkhvHIbXOW8poONBHJ/4dXHZl7l/K0VW8wxpN3FfSxwl CqX2DkymQOShNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:22 2025 by rpki-client