This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json) Hash identifier: +i30jzZY2/KswTGIBztOgt28uK4DIs7EWtvp69skriA= Subject key identifier: 24:C2:51:82:DD:AB:78:1B:DA:5E:94:A5:4B:EA:6E:0D:FC:DA:16:64 Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99 Certificate serial: 019B3C101F6E372287C45F867890A08ABB91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft Manifest number: 09C5 Signing time: Sat 20 Dec 2025 14:00:48 +0000 Manifest this update: Sat 20 Dec 2025 14:00:48 +0000 Manifest next update: Sun 21 Dec 2025 14:00:48 +0000 Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=) 2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: X7ThgtI9WnlGgRJNQgHDkTdZVNdBpnBAKGE1IjYiBVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1f:6e:37:22:87:c4:5f:86:78:90:a0:8a:bb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99 Validity Not Before: Dec 20 14:00:48 2025 GMT Not After : Dec 21 14:00:48 2025 GMT Subject: CN=24c25182ddab781bda5e94a54bea6e0dfcda1664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:52:b5:94:85:bd:80:b2:7e:fa:64:2d:b5: 0e:5e:14:2f:58:b5:ac:35:72:fa:e2:ac:69:9b:71: 48:9d:c9:cd:50:d8:65:97:1a:03:6b:b8:57:6a:a7: ea:43:19:42:09:da:06:ad:56:85:b2:c6:be:f9:0f: 41:4f:1f:50:24:48:b4:d7:b1:90:ab:4b:26:e4:c0: a9:97:7a:5b:69:cb:20:a2:69:f6:58:f7:b9:58:84: ba:15:09:3f:bd:6b:e3:bb:82:7f:18:04:ab:72:2c: 40:0a:87:9e:6c:2e:5c:25:de:e7:07:37:c0:4f:96: 9b:f2:02:03:9f:73:18:e2:bd:94:78:b8:d6:20:bf: 8c:66:47:34:7f:03:16:66:c3:e9:8d:b2:58:57:e2: 90:2b:65:20:35:ee:a0:96:a1:42:27:fa:5b:3c:03: 5f:12:46:4c:7a:a1:fb:96:a3:f8:e3:55:38:aa:33: 46:36:02:37:2b:4a:6e:eb:e1:11:c3:6b:c1:5b:c9: 2c:0b:71:3b:c3:dd:8f:b5:d9:63:e6:4b:56:cd:16: 26:e5:6a:6e:5c:bc:b6:aa:c0:72:f7:48:f0:a0:fc: e9:05:8c:bb:ae:a6:4f:8d:98:b2:c1:68:88:9c:a6: 8f:62:98:19:15:17:f6:11:66:e8:6b:3e:ea:9c:46: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C2:51:82:DD:AB:78:1B:DA:5E:94:A5:4B:EA:6E:0D:FC:DA:16:64 X509v3 Authority Key Identifier: keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2f:d6:10:cf:f1:08:76:38:ca:99:e3:22:a9:5d:a5:59:ad: ce:8a:58:0f:c1:bd:3f:fa:70:b7:8c:e1:51:11:2a:8e:94:6f: 4b:60:5f:ca:ea:38:da:51:83:3f:00:72:46:79:11:4e:06:71: fb:39:03:41:fe:73:a7:5e:3d:d1:f0:1b:b3:f7:75:17:4d:84: 45:28:79:c6:3a:e5:00:e4:bd:d6:a8:5c:ba:0e:19:c9:d1:65: d1:6c:aa:22:69:a2:2e:db:8c:da:49:09:7a:65:d9:40:d2:de: 1e:00:b0:34:7b:58:6a:cd:83:36:f9:e7:cd:86:b2:7d:bd:9d: 2e:4f:39:8d:57:12:0b:88:9d:db:90:d8:c8:0c:59:2d:c9:76: 38:13:c2:d5:db:e6:2e:d2:85:b3:07:1d:2c:6b:22:32:5d:ac: 23:19:81:a1:c9:19:90:7b:45:1a:d6:b2:1d:b5:e1:34:3a:1a: 76:dd:1f:de:dc:04:c7:fe:9d:40:38:81:58:67:fb:8c:05:34: 8a:b6:28:34:96:57:3b:52:a2:e4:04:dd:17:68:3d:87:45:b2: f4:76:d8:a2:ae:78:3d:4d:eb:c8:20:f5:75:9f:0a:e6:a3:e1: 93:9d:c7:64:9e:d1:6e:f1:2b:01:ae:5b:3b:ec:71:81:20:72: 25:e3:6d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EB9uNyKHxF+GeJCgiruRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw MzhkOTkwHhcNMjUxMjIwMTQwMDQ4WhcNMjUxMjIxMTQwMDQ4WjAzMTEwLwYDVQQD EygyNGMyNTE4MmRkYWI3ODFiZGE1ZTk0YTU0YmVhNmUwZGZjZGExNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi9StZSFvYCyfvpkLbUOXhQvWLWs NXL64qxpm3FIncnNUNhllxoDa7hXaqfqQxlCCdoGrVaFssa++Q9BTx9QJEi017GQ q0sm5MCpl3pbacsgomn2WPe5WIS6FQk/vWvju4J/GASrcixACoeebC5cJd7nBzfA T5ab8gIDn3MY4r2UeLjWIL+MZkc0fwMWZsPpjbJYV+KQK2UgNe6glqFCJ/pbPANf EkZMeqH7lqP441U4qjNGNgI3K0pu6+ERw2vBW8ksC3E7w92Ptdlj5ktWzRYm5Wpu XLy2qsBy90jwoPzpBYy7rqZPjZiywWiInKaPYpgZFRf2EWboaz7qnEaVYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTCUYLdq3gb2l6UpUvqbg382hZkMB8GA1UdIwQY MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAy/WEM/x CHY4ypnjIqldpVmtzopYD8G9P/pwt4zhUREqjpRvS2Bfyuo42lGDPwByRnkRTgZx +zkDQf5zp1490fAbs/d1F02ERSh5xjrlAOS91qhcug4ZydFl0WyqImmiLtuM2kkJ emXZQNLeHgCwNHtYas2DNvnnzYayfb2dLk85jVcSC4id25DYyAxZLcl2OBPC1dvm LtKFswcdLGsiMl2sIxmBockZkHtFGtayHbXhNDoadt0f3twEx/6dQDiBWGf7jAU0 irYoNJZXO1Ki5ATdF2g9h0Wy9HbYoq54PU3ryCD1dZ8K5qPhk53HZJ7RbvErAa5b O+xxgSByJeNtrw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:42 2025 by rpki-client