This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json) Hash identifier: JbH6E0mhE9KuaKsu5b9IPkl1TXvUi08Gj8vksiYHdB0= Subject key identifier: AF:CE:94:92:95:33:51:16:0C:44:21:A9:6C:B9:45:48:0F:76:0E:5B Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac Certificate serial: 019B3DFE8DAC7E8D6E8FAAD0E6226B82E483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft Manifest number: 0994 Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=) 2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: S1n5DcrUgeRcmupFsdR7eb0UKncJ1dBSrRe7Jk9SSOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8d:ac:7e:8d:6e:8f:aa:d0:e6:22:6b:82:e4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=afce9492953351160c4421a96cb945480f760e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:1e:be:09:41:1b:85:eb:87:79:69:70:ba: 19:61:19:11:91:dd:db:b5:92:fc:42:3a:b4:d6:ea: 46:79:bf:fb:14:76:90:fd:cd:25:bb:2e:0b:d6:4e: 04:33:f1:57:5a:30:c4:06:b0:0b:24:bb:02:0c:0d: 08:4e:91:75:e4:f7:a1:02:fb:34:9b:56:ed:37:67: a2:74:21:6e:81:16:4d:17:23:91:35:e5:79:b7:f5: 40:87:72:b6:04:77:ae:d1:5c:02:ca:dc:29:ec:80: e3:c5:69:50:35:c2:67:2c:86:02:52:cf:a7:4c:1f: 2f:cf:5c:a1:f2:ab:b2:ab:48:13:6b:d8:91:81:5e: 97:56:c0:a9:11:b3:8b:84:79:c9:5b:40:b8:2c:ab: 75:80:d8:4a:26:5f:7c:f5:a8:b6:6d:81:a7:4f:55: 96:d9:d8:06:a2:1c:eb:ff:27:01:19:71:2b:82:0d: b4:e4:2f:cb:76:4e:8b:fe:a9:2f:04:5b:3f:c0:77: 08:24:43:0f:20:fe:96:8b:7c:b2:40:b6:83:1b:23: 6b:3c:bb:2a:88:19:76:20:47:f8:13:2a:96:26:cc: e6:80:2b:92:8b:3b:ba:5f:0c:c7:26:5e:51:2f:42: 41:4d:4d:a5:a8:85:1b:49:05:85:4f:01:57:d2:c2: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CE:94:92:95:33:51:16:0C:44:21:A9:6C:B9:45:48:0F:76:0E:5B X509v3 Authority Key Identifier: keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:c5:b1:26:82:45:39:41:46:6e:f8:97:59:9d:ee:2f:39: c3:38:d7:15:42:83:dd:a1:68:91:e3:22:c2:d1:58:66:24:7e: d9:68:52:f4:48:96:bf:26:e6:1d:b3:2d:22:ae:ff:cd:73:5f: 16:c6:5c:e4:d5:11:5d:57:c2:90:9f:ab:cf:89:89:b4:e3:6c: 03:76:19:61:25:0e:53:48:fd:30:0a:9d:56:76:13:68:56:8b: 28:71:ed:6c:8c:de:d5:65:4b:b3:91:37:3e:34:d1:9b:63:ab: 3c:db:6d:13:a9:47:16:0d:ea:02:d1:c8:b0:c4:97:46:80:ae: 42:f1:e3:9a:e7:28:fa:52:87:9e:07:56:45:74:a9:f3:91:58: 59:ff:b7:a1:49:ea:8c:ce:75:2c:88:36:35:92:82:a9:d1:65: bd:d9:1e:67:56:f5:5c:7b:3c:34:b7:2a:91:8d:c7:ef:97:43: f1:9a:2e:a5:60:5c:fc:f8:da:b7:e0:b0:2c:c3:bd:24:39:b8: 28:7a:dd:d1:ed:b1:0d:78:46:78:7f:7e:2d:b8:84:b3:8e:9e: c4:e4:d7:7a:d5:54:91:15:d1:6a:64:6b:b2:1f:bb:a0:87:31: a4:70:36:f6:05:f9:1b:5e:fa:f5:32:a4:6a:f2:f5:e0:94:08: 38:08:0a:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/o2sfo1uj6rQ5iJrguSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MThhNWY0ODE1NTI2ZTFlOTI1MTBkMzY0OGViZGEwY2Ri YmMyYWMwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD EyhhZmNlOTQ5Mjk1MzM1MTE2MGM0NDIxYTk2Y2I5NDU0ODBmNzYwZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0evglBG4Xrh3lpcLoZYRkRkd3b tZL8Qjq01upGeb/7FHaQ/c0luy4L1k4EM/FXWjDEBrALJLsCDA0ITpF15PehAvs0 m1btN2eidCFugRZNFyORNeV5t/VAh3K2BHeu0VwCytwp7IDjxWlQNcJnLIYCUs+n TB8vz1yh8quyq0gTa9iRgV6XVsCpEbOLhHnJW0C4LKt1gNhKJl989ai2bYGnT1WW 2dgGohzr/ycBGXErgg205C/Ldk6L/qkvBFs/wHcIJEMPIP6Wi3yyQLaDGyNrPLsq iBl2IEf4EyqWJszmgCuSizu6XwzHJl5RL0JBTU2lqIUbSQWFTwFX0sLKMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/OlJKVM1EWDEQhqWy5RUgPdg5bMB8GA1UdIwQY MBaAFLkYpfSBVSbh6SUQ02SOvaDNu8KsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3Njkt YThmOTBkNDVlYTY3LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3NjktYThmOTBkNDVlYTY3 LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9PFsSaC RTlBRm74l1md7i85wzjXFUKD3aFokeMiwtFYZiR+2WhS9EiWvybmHbMtIq7/zXNf FsZc5NURXVfCkJ+rz4mJtONsA3YZYSUOU0j9MAqdVnYTaFaLKHHtbIze1WVLs5E3 PjTRm2OrPNttE6lHFg3qAtHIsMSXRoCuQvHjmuco+lKHngdWRXSp85FYWf+3oUnq jM51LIg2NZKCqdFlvdkeZ1b1XHs8NLcqkY3H75dD8ZoupWBc/Pjat+CwLMO9JDm4 KHrd0e2xDXhGeH9+LbiEs46exOTXetVUkRXRamRrsh+7oIcxpHA29gX5G1769TKk avL14JQIOAgKzg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:29 2025 by rpki-client