This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json) Hash identifier: EOBiRkJEHr6h1Fw9FXMu1VjBIi4Tn4iGwJWgS2hLvcA= Subject key identifier: 75:91:63:E2:21:E1:F8:A4:7F:3C:2C:CF:99:D4:7B:8D:54:23:97:5F Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e Certificate serial: 019B27E4CADA1958F7D4346DB5A8CE3F6B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 16:01:04 +0000 Manifest this update: Tue 16 Dec 2025 16:01:04 +0000 Manifest next update: Wed 17 Dec 2025 16:01:04 +0000 Files and hashes: 1: JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa (hash: pDGrFl+zPntVOdC+wAqPCIkri5GYwFIWXTpGxCwXD/o=) 2: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: 7NZaDFqFzdTo1ezCGgQci/S+4H53vGslPbEN5gABosc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:ca:da:19:58:f7:d4:34:6d:b5:a8:ce:3f:6b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e Validity Not Before: Dec 16 16:01:04 2025 GMT Not After : Dec 17 16:01:04 2025 GMT Subject: CN=759163e221e1f8a47f3c2ccf99d47b8d5423975f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:57:2d:d7:2d:80:da:ab:ff:be:75:7e:43: 91:f0:8c:be:c8:56:11:3b:f0:fe:6b:73:a6:22:2c: 29:1d:84:56:cb:96:2a:f1:a7:7c:6c:db:76:bf:2c: 7e:90:0b:22:f7:38:c3:11:86:0f:40:1c:f2:45:07: 38:87:41:45:84:a6:1e:5c:6e:d7:33:d6:4b:81:bb: 83:23:a9:31:4b:fc:0f:8e:6c:61:d4:c5:7e:72:79: 82:f7:de:db:76:7e:e5:49:f9:c2:8f:e4:ca:16:ff: 2f:cc:5d:e1:27:24:88:58:be:0f:bb:a1:e2:90:71: 32:59:16:46:6d:4d:77:0b:b7:a3:8a:5c:3d:18:c9: 48:3c:e0:b6:a9:67:82:9c:b2:03:9c:0f:4f:1f:8a: be:99:45:ff:a2:de:dc:33:de:44:d8:d6:3d:ec:e9: 1e:ab:cb:54:9e:93:15:07:40:21:d0:bc:4a:80:65: 15:18:4f:c0:5a:13:95:cb:c2:2d:9e:b4:bc:a4:ae: 4c:a4:52:92:d7:81:e4:68:75:b4:f4:44:53:01:13: d0:25:29:b4:a4:22:0b:ac:34:b5:43:1e:70:6a:84: 21:c2:cb:77:9a:b5:be:5d:6a:17:97:48:2b:fb:ab: d3:1f:83:5c:a0:b9:ee:1b:01:bb:69:ca:a8:04:54: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:91:63:E2:21:E1:F8:A4:7F:3C:2C:CF:99:D4:7B:8D:54:23:97:5F X509v3 Authority Key Identifier: keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c8:f9:aa:d5:51:10:ed:12:b7:8c:43:1b:ba:a6:8c:ac:19: 73:c8:56:ca:0d:0c:9c:3d:b0:11:f9:ce:c6:70:b4:ee:2a:32: b6:66:72:8a:c6:48:a3:4d:42:92:c5:97:57:49:2e:e5:c8:b7: d7:fc:49:4f:e3:f0:e9:94:c8:c5:ed:ff:04:ff:58:98:21:d1: 99:2f:a6:0f:69:c1:54:73:5c:91:b2:01:49:da:db:f6:c1:30: 91:9d:93:cf:2c:ec:26:0f:8b:6b:3a:aa:45:9a:99:e7:9a:0f: 65:89:35:b1:44:d8:55:18:12:72:69:92:fc:f4:99:00:63:a8: f6:f6:76:34:a3:38:14:7b:8e:91:1e:f8:4e:a2:6f:1f:38:25: c6:79:bc:27:6f:67:0a:d5:74:22:f0:68:d1:67:16:b6:17:ea: 00:f7:46:cd:3a:9a:6f:77:96:e0:0b:52:6c:b2:e9:6d:ae:54: 41:9c:bc:8e:13:dd:6b:8f:09:cc:d9:21:6b:ed:f7:1f:41:95: c4:c7:f2:1f:1c:97:7c:ff:de:73:74:f8:a1:fc:ac:b6:46:7b: 77:6e:08:df:c3:4a:1c:52:bf:7d:0b:13:3a:ba:ac:e2:8e:a6: 05:2d:37:46:0a:db:cc:36:e0:bc:e5:06:b3:a4:f1:f2:f3:d9: 6c:05:bb:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5MraGVj31DRttajOP2uIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ1MzE1YjQ0Y2I2NWQyYTc5MWEwYWU1ODIzNjY0ZDBj NDQ0NWUwHhcNMjUxMjE2MTYwMTA0WhcNMjUxMjE3MTYwMTA0WjAzMTEwLwYDVQQD Eyg3NTkxNjNlMjIxZTFmOGE0N2YzYzJjY2Y5OWQ0N2I4ZDU0MjM5NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaxXLdctgNqr/751fkOR8Iy+yFYR O/D+a3OmIiwpHYRWy5Yq8ad8bNt2vyx+kAsi9zjDEYYPQBzyRQc4h0FFhKYeXG7X M9ZLgbuDI6kxS/wPjmxh1MV+cnmC997bdn7lSfnCj+TKFv8vzF3hJySIWL4Pu6Hi kHEyWRZGbU13C7ejilw9GMlIPOC2qWeCnLIDnA9PH4q+mUX/ot7cM95E2NY97Oke q8tUnpMVB0Ah0LxKgGUVGE/AWhOVy8ItnrS8pK5MpFKS14HkaHW09ERTARPQJSm0 pCILrDS1Qx5waoQhwst3mrW+XWoXl0gr+6vTH4NcoLnuGwG7acqoBFSbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWRY+Ih4fikfzwsz5nUe41UI5dfMB8GA1UdIwQY MBaAFLkUUxW0TLZdKnkaCuWCNmTQxEReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMt ZGZiOTQ2ZDE3ZDBjLzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMtZGZiOTQ2ZDE3ZDBj LzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMj5qtVR EO0St4xDG7qmjKwZc8hWyg0MnD2wEfnOxnC07ioytmZyisZIo01CksWXV0ku5ci3 1/xJT+Pw6ZTIxe3/BP9YmCHRmS+mD2nBVHNckbIBSdrb9sEwkZ2TzyzsJg+Lazqq RZqZ55oPZYk1sUTYVRgScmmS/PSZAGOo9vZ2NKM4FHuOkR74TqJvHzglxnm8J29n CtV0IvBo0WcWthfqAPdGzTqab3eW4AtSbLLpba5UQZy8jhPda48JzNkha+33H0GV xMfyHxyXfP/ec3T4ofystkZ7d24I38NKHFK/fQsTOrqs4o6mBS03RgrbzDbgvOUG s6Tx8vPZbAW7Pw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:23 2025 by rpki-client