This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json) Hash identifier: gtW/khbf09GZEzVmDLRrvOVswekP4+Wenrobs81QD7k= Subject key identifier: 05:6E:19:DB:9E:4F:91:22:68:0B:AA:AF:F7:22:11:57:12:33:FF:74 Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4 Certificate serial: 019B45B8254A4A007BF8C03FE1035029F639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 11:00:54 +0000 Manifest this update: Mon 22 Dec 2025 11:00:54 +0000 Manifest next update: Tue 23 Dec 2025 11:00:54 +0000 Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=) 2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: ZpGAC/UMKMktC5tyW7TbelV2DrW+JiYRjkvMXO+SFcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:25:4a:4a:00:7b:f8:c0:3f:e1:03:50:29:f6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4 Validity Not Before: Dec 22 11:00:54 2025 GMT Not After : Dec 23 11:00:54 2025 GMT Subject: CN=056e19db9e4f9122680baaaff72211571233ff74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:0b:d0:b8:84:27:38:1a:6a:29:b4:90:ec: d2:90:dd:ac:bd:2a:01:9c:75:22:16:a6:89:70:be: bd:9e:d6:74:db:c1:b3:e7:cd:76:8c:41:ef:4b:2d: e6:a9:ab:0c:4f:35:ed:4b:bd:f1:c8:9c:9c:c2:79: 90:e5:31:28:40:61:34:7c:fb:4a:f5:a1:88:ea:e1: d3:bf:7f:82:9a:39:71:b4:34:b6:4c:85:bc:72:00: 00:74:f5:fe:d2:89:9e:65:73:e9:22:f0:41:50:a0: f7:ce:09:2c:c5:1d:35:54:14:b7:6c:5b:52:f0:86: 36:c7:60:c3:9c:8b:4e:78:ed:3e:d7:64:ba:93:b4: 80:73:b5:d0:bd:04:fb:b2:31:05:66:66:4f:b5:8e: c4:16:0b:a2:bd:53:33:60:c4:68:0f:bc:3b:da:fb: 0a:ad:40:75:dc:bb:6e:c1:7d:5f:85:4f:6e:81:d0: 2a:2f:1d:d6:4b:57:e2:6b:6d:55:1c:2f:eb:8c:6b: 6c:63:5a:bd:f8:37:5a:8c:89:be:ca:3e:2e:ce:c3: 89:bc:9b:b3:de:31:9d:cd:49:3c:7b:52:48:d2:82: 71:5f:56:97:03:ca:da:0d:8f:52:d7:2c:46:0c:ec: 78:08:26:24:fb:63:fa:c4:59:cf:23:b7:db:78:1f: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6E:19:DB:9E:4F:91:22:68:0B:AA:AF:F7:22:11:57:12:33:FF:74 X509v3 Authority Key Identifier: keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b0:b6:3f:29:10:c6:14:b4:ee:1b:97:9b:df:8f:ae:b5:31: 2b:9b:42:89:ac:db:95:62:56:50:ba:f7:1f:f2:73:c6:eb:35: 10:56:11:01:6a:6f:08:d0:22:ab:98:0b:20:53:c7:c8:f0:1b: 4f:b5:c3:75:16:3d:00:91:7f:01:13:58:2f:69:61:fc:8c:94: 32:b3:1a:c2:c4:1a:c4:29:08:db:cd:b7:93:04:4d:7b:a1:f3: 0d:a9:ce:53:1a:b8:50:29:60:b7:4d:0a:1c:c9:a9:8c:67:9c: 77:ee:7c:82:80:db:e5:60:98:35:89:5b:9f:d7:26:75:1e:7d: bc:b1:43:81:b2:d8:a2:19:41:65:45:51:bd:e5:48:be:6c:99: 25:49:97:86:3e:ec:91:2c:3f:76:1d:da:48:b3:45:7c:25:12: 04:1b:14:90:e6:be:ec:29:04:d8:a9:40:23:cf:03:59:33:03: f7:33:79:4e:d6:cb:fc:66:3d:a4:b1:7f:6d:5f:4e:21:36:43: 2f:8b:8e:96:90:8f:51:46:e7:d0:27:1d:55:8a:e5:69:d8:cd: 8a:22:1f:91:0a:9f:a6:1a:5e:66:0f:12:14:92:7f:ab:00:95: 3a:f3:26:11:7f:7d:c1:96:c1:da:63:8d:8e:3d:a4:4f:49:61: 38:0c:5d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuCVKSgB7+MA/4QNQKfY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTVhZjU5ZDI0ZjU5YTYwZDk3YzFjODhhYjk3OWExNGM1 ODBmZjQwHhcNMjUxMjIyMTEwMDU0WhcNMjUxMjIzMTEwMDU0WjAzMTEwLwYDVQQD EygwNTZlMTlkYjllNGY5MTIyNjgwYmFhYWZmNzIyMTE1NzEyMzNmZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfkL0LiEJzgaaim0kOzSkN2svSoB nHUiFqaJcL69ntZ028Gz5812jEHvSy3mqasMTzXtS73xyJycwnmQ5TEoQGE0fPtK 9aGI6uHTv3+CmjlxtDS2TIW8cgAAdPX+0omeZXPpIvBBUKD3zgksxR01VBS3bFtS 8IY2x2DDnItOeO0+12S6k7SAc7XQvQT7sjEFZmZPtY7EFguivVMzYMRoD7w72vsK rUB13LtuwX1fhU9ugdAqLx3WS1fia21VHC/rjGtsY1q9+DdajIm+yj4uzsOJvJuz 3jGdzUk8e1JI0oJxX1aXA8raDY9S1yxGDOx4CCYk+2P6xFnPI7fbeB/cewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVuGdueT5EiaAuqr/ciEVcSM/90MB8GA1UdIwQY MBaAFLkVr1nST1mmDZfByIq5eaFMWA/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODct ZDQ3MmQ5YWZlMTM0LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODctZDQ3MmQ5YWZlMTM0 LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrC2PykQ xhS07huXm9+PrrUxK5tCiazblWJWULr3H/Jzxus1EFYRAWpvCNAiq5gLIFPHyPAb T7XDdRY9AJF/ARNYL2lh/IyUMrMawsQaxCkI2823kwRNe6HzDanOUxq4UClgt00K HMmpjGecd+58goDb5WCYNYlbn9cmdR59vLFDgbLYohlBZUVRveVIvmyZJUmXhj7s kSw/dh3aSLNFfCUSBBsUkOa+7CkE2KlAI88DWTMD9zN5TtbL/GY9pLF/bV9OITZD L4uOlpCPUUbn0CcdVYrladjNiiIfkQqfphpeZg8SFJJ/qwCVOvMmEX99wZbB2mON jj2kT0lhOAxdtw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:42:25 2025 by rpki-client