This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json) Hash identifier: fI3oxQZsKMxHHrqJjuepka3hEhsdejvFAPe/e0ZzlMc= Subject key identifier: 5A:FB:A6:C4:EC:2F:62:88:09:22:5D:F9:E6:BF:CD:50:DE:24:E0:73 Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d Certificate serial: 019B2A0A061D2EF00F27297CBD3B4A498AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft Manifest number: 0F04 Signing time: Wed 17 Dec 2025 02:00:58 +0000 Manifest this update: Wed 17 Dec 2025 02:00:58 +0000 Manifest next update: Thu 18 Dec 2025 02:00:58 +0000 Files and hashes: 1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=) 2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=) 3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: pjzyVznGkZ2BcaIjuXCU90QEeC1n2Ovz4viMJFiUgCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:06:1d:2e:f0:0f:27:29:7c:bd:3b:4a:49:8a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d Validity Not Before: Dec 17 02:00:58 2025 GMT Not After : Dec 18 02:00:58 2025 GMT Subject: CN=5afba6c4ec2f628809225df9e6bfcd50de24e073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:3f:45:7f:93:d4:d9:54:5c:e9:1e:99:4b: c7:a8:d0:b3:53:8b:60:1b:2a:5c:61:a7:d3:a2:69: 99:de:04:82:12:76:09:d6:4c:9a:25:7c:1a:ec:b3: 2e:9d:a9:37:67:45:ec:75:ac:e7:f4:58:94:ca:77: da:70:a3:54:88:c2:34:d2:4c:1a:3b:09:67:41:5f: fe:5f:fc:64:5e:3e:19:7e:44:17:b1:1f:1e:b3:89: 11:60:94:00:fe:41:fd:23:77:b1:16:ca:52:41:eb: 76:02:9c:03:f7:3e:b7:16:30:69:6e:26:3b:d3:56: 04:93:07:19:4d:7b:cd:bf:33:97:2f:58:d4:97:24: 25:63:5f:f5:e3:9a:75:02:25:22:87:f4:29:ba:0f: 30:34:ea:e9:6f:c6:82:c0:6a:e8:78:6a:59:86:0d: e4:be:66:74:34:6c:aa:d1:d9:c3:e4:eb:c4:aa:23: 09:0e:fc:c2:c8:81:9c:75:7d:74:8f:cf:5f:b0:29: 78:83:51:76:09:ed:77:1a:99:f5:41:ae:3a:d2:43: 84:09:41:99:81:c3:8c:5d:8b:7f:2d:a8:cd:79:33: 65:f6:48:4f:4e:aa:5e:08:6b:a3:f0:e4:19:5d:e2: 6e:4f:1f:52:03:dc:e3:a8:08:fa:74:eb:b2:b7:65: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:A6:C4:EC:2F:62:88:09:22:5D:F9:E6:BF:CD:50:DE:24:E0:73 X509v3 Authority Key Identifier: keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:69:e5:9e:23:dc:eb:3d:56:57:5f:b6:78:ec:e3:6e:7d:a8: 8b:50:16:4e:ec:77:a7:d4:05:a9:41:86:6d:cb:6b:83:ec:99: c5:96:85:b4:49:45:2f:6a:c3:e7:06:fb:93:a0:27:52:2d:db: f3:a8:4b:13:f8:72:af:e1:a3:24:5c:ff:3c:62:a6:a9:09:5a: a0:47:2c:1f:19:57:43:c7:5a:81:6f:95:cf:a4:4a:c8:5d:ec: 1e:b4:45:04:01:3c:9d:28:98:fc:d1:5a:a3:e8:e1:cd:1a:d2: a1:44:c0:4d:c2:56:93:a6:6b:7e:78:dd:25:a8:5f:df:62:fc: ac:29:57:ad:6f:91:be:27:3e:c4:c2:68:11:15:5c:32:b9:a0: d6:ee:e0:d6:2f:03:f2:97:f7:4f:d5:49:11:7b:ca:a5:dd:7f: c9:b1:5e:4e:46:0e:74:6f:44:d1:67:0c:25:ad:63:df:64:87: fc:fe:8b:24:f4:88:cb:0f:48:54:fa:98:65:71:0b:39:a4:93: 5a:ee:4d:ea:b1:2f:6f:d4:c9:1c:b0:a1:10:3d:a2:75:5f:7e: 7e:04:ae:25:7a:af:84:74:7f:4e:6a:40:3a:10:32:bf:90:d9: 98:88:a5:52:e9:38:22:b8:42:1b:c1:1d:34:f4:40:59:70:ba: 92:33:c0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCgYdLvAPJyl8vTtKSYqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz YmM3OGQwHhcNMjUxMjE3MDIwMDU4WhcNMjUxMjE4MDIwMDU4WjAzMTEwLwYDVQQD Eyg1YWZiYTZjNGVjMmY2Mjg4MDkyMjVkZjllNmJmY2Q1MGRlMjRlMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC0/RX+T1NlUXOkemUvHqNCzU4tg GypcYafTommZ3gSCEnYJ1kyaJXwa7LMunak3Z0Xsdazn9FiUynfacKNUiMI00kwa OwlnQV/+X/xkXj4ZfkQXsR8es4kRYJQA/kH9I3exFspSQet2ApwD9z63FjBpbiY7 01YEkwcZTXvNvzOXL1jUlyQlY1/145p1AiUih/Qpug8wNOrpb8aCwGroeGpZhg3k vmZ0NGyq0dnD5OvEqiMJDvzCyIGcdX10j89fsCl4g1F2Ce13Gpn1Qa460kOECUGZ gcOMXYt/LajNeTNl9khPTqpeCGuj8OQZXeJuTx9SA9zjqAj6dOuyt2VxowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr7psTsL2KICSJd+ea/zVDeJOBzMB8GA1UdIwQY MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3 LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmnlniPc 6z1WV1+2eOzjbn2oi1AWTux3p9QFqUGGbctrg+yZxZaFtElFL2rD5wb7k6AnUi3b 86hLE/hyr+GjJFz/PGKmqQlaoEcsHxlXQ8dagW+Vz6RKyF3sHrRFBAE8nSiY/NFa o+jhzRrSoUTATcJWk6ZrfnjdJahf32L8rClXrW+Rvic+xMJoERVcMrmg1u7g1i8D 8pf3T9VJEXvKpd1/ybFeTkYOdG9E0WcMJa1j32SH/P6LJPSIyw9IVPqYZXELOaST Wu5N6rEvb9TJHLChED2idV9+fgSuJXqvhHR/TmpAOhAyv5DZmIilUuk4IrhCG8Ed NPRAWXC6kjPAcw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:54 2025 by rpki-client