This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json) Hash identifier: lQFthCAaPnM90bdVvYmusQ8n0edb19HvBfhlgmk2jxk= Subject key identifier: E3:20:76:A3:AC:88:69:7C:E5:32:2A:1C:40:DB:78:5B:FA:D1:9A:C7 Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Certificate serial: 019B3BD9C092E27C544FA7AF97BD126BAB53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 13:01:24 +0000 Manifest this update: Sat 20 Dec 2025 13:01:24 +0000 Manifest next update: Sun 21 Dec 2025 13:01:24 +0000 Files and hashes: 1: EwcZg-vTn90_0p1Zc9YeuFGPAYE.roa (hash: mFgykHjCEZP545L3rZyO7ozms2YceeGVlHWxtXJTBzo=) 2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: ZejzOD5LIqVxC+L6s7ZoAO3+JlaXCxksdxhlSPtIX3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:c0:92:e2:7c:54:4f:a7:af:97:bd:12:6b:ab:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Validity Not Before: Dec 20 13:01:24 2025 GMT Not After : Dec 21 13:01:24 2025 GMT Subject: CN=e32076a3ac88697ce5322a1c40db785bfad19ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:f0:dd:82:56:8e:98:bc:d6:43:5a:76:5f: 67:25:7c:a1:e6:99:eb:46:77:e3:dd:7d:c4:c2:e7: b6:6d:c3:89:6f:1d:00:57:07:fd:1c:f6:7f:42:4c: d5:cb:37:4d:7e:28:ea:63:8b:35:ce:ea:73:41:90: 45:1f:bf:d8:7e:47:92:c2:54:33:4e:c6:68:cb:eb: cc:05:d8:44:00:84:85:ee:0d:c0:9c:26:a8:37:a8: ec:99:6c:6e:2f:6c:38:22:a0:9f:51:95:d6:d3:3b: 8b:f4:9e:e0:06:c6:e9:30:40:b1:72:0a:ef:00:f4: b7:83:0e:d1:99:a9:d6:48:62:a5:38:57:aa:50:c7: e2:5e:f6:a3:d1:51:40:16:36:20:89:a0:ec:b0:3c: 1c:15:3d:92:ba:fe:79:5a:7e:cf:39:1e:42:35:48: 72:71:a6:74:f2:9b:be:43:8b:f2:0a:db:bd:a6:9c: 35:15:1b:a3:9b:0b:9c:25:d3:6c:c6:01:f0:84:1f: 00:83:4f:9c:a3:7b:35:79:bd:e5:4b:09:9c:a5:c7: 39:fb:17:a5:e5:9b:e9:18:00:05:34:29:a1:ba:de: 39:0e:67:cb:3e:45:54:3a:a4:d5:b3:29:71:ff:8e: a1:d9:bb:64:af:26:38:a0:70:05:90:ba:ce:13:d8: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:76:A3:AC:88:69:7C:E5:32:2A:1C:40:DB:78:5B:FA:D1:9A:C7 X509v3 Authority Key Identifier: keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b5:9d:6a:34:19:56:a8:8e:a5:fe:b8:4b:ab:e5:4a:7d:ac: 42:54:25:71:98:98:5a:e9:47:0d:4b:c7:a2:60:bb:8d:80:f9: 33:1c:d4:e0:cf:8b:e5:9c:99:01:d9:19:ca:b3:64:a1:c2:4c: 75:e7:01:aa:06:0a:f8:2b:54:47:45:e0:51:97:a9:1d:1c:41: fe:ec:ee:57:22:08:be:38:5d:c4:f0:23:04:bf:82:b8:32:18: 53:19:05:be:30:1b:8d:14:fd:37:74:c0:49:84:53:5e:35:4a: 20:49:0d:8d:31:83:ee:f0:4d:e8:4f:1b:65:b8:54:6d:c0:7b: 85:32:f2:5d:cc:3a:43:15:76:01:5e:fb:da:8c:83:19:05:1a: 67:d6:d0:b1:7f:8a:63:96:5e:d4:14:d4:d3:d0:fd:ca:26:55: 4d:f8:d0:29:df:07:4c:8b:c7:8d:c6:d9:27:df:34:e8:ec:80: ef:c0:2f:5c:cc:06:1c:cb:bf:e0:b7:3f:b7:14:b9:20:b8:52: da:e9:4d:0d:ad:b3:12:94:52:02:b6:c7:6a:0d:ac:03:5c:4b: bb:d1:ed:1d:3b:1c:02:5f:e6:5e:46:5c:bb:0a:21:27:66:1f: 13:b0:7b:24:73:6f:60:4e:84:29:d4:22:09:20:18:9b:f5:9b: ce:61:b6:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72cCS4nxUT6evl70Sa6tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz NmY4MjcwHhcNMjUxMjIwMTMwMTI0WhcNMjUxMjIxMTMwMTI0WjAzMTEwLwYDVQQD EyhlMzIwNzZhM2FjODg2OTdjZTUzMjJhMWM0MGRiNzg1YmZhZDE5YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMfw3YJWjpi81kNadl9nJXyh5pnr Rnfj3X3Ewue2bcOJbx0AVwf9HPZ/QkzVyzdNfijqY4s1zupzQZBFH7/YfkeSwlQz TsZoy+vMBdhEAISF7g3AnCaoN6jsmWxuL2w4IqCfUZXW0zuL9J7gBsbpMECxcgrv APS3gw7RmanWSGKlOFeqUMfiXvaj0VFAFjYgiaDssDwcFT2Suv55Wn7POR5CNUhy caZ08pu+Q4vyCtu9ppw1FRujmwucJdNsxgHwhB8Ag0+co3s1eb3lSwmcpcc5+xel 5ZvpGAAFNCmhut45DmfLPkVUOqTVsylx/46h2btkryY4oHAFkLrOE9g2fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMgdqOsiGl85TIqHEDbeFv60ZrHMB8GA1UdIwQY MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrWdajQZ VqiOpf64S6vlSn2sQlQlcZiYWulHDUvHomC7jYD5MxzU4M+L5ZyZAdkZyrNkocJM decBqgYK+CtUR0XgUZepHRxB/uzuVyIIvjhdxPAjBL+CuDIYUxkFvjAbjRT9N3TA SYRTXjVKIEkNjTGD7vBN6E8bZbhUbcB7hTLyXcw6QxV2AV772oyDGQUaZ9bQsX+K Y5Ze1BTU09D9yiZVTfjQKd8HTIvHjcbZJ9806OyA78AvXMwGHMu/4Lc/txS5ILhS 2ulNDa2zEpRSArbHag2sA1xLu9HtHTscAl/mXkZcuwohJ2YfE7B7JHNvYE6EKdQi CSAYm/WbzmG2OQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:12 2025 by rpki-client