This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json) Hash identifier: SY+zi6aoWO2aIFcnGsGLoJr17Lv/TwJswImp9pYICio= Subject key identifier: D5:1E:DE:41:65:ED:C0:1B:F8:5F:0A:51:52:3F:D7:DF:16:65:47:28 Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Certificate serial: 019B37C58D5904CC58977EF50B49BC1B1559 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 18:00:52 +0000 Manifest this update: Fri 19 Dec 2025 18:00:52 +0000 Manifest next update: Sat 20 Dec 2025 18:00:52 +0000 Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=) 2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=) 3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: ENowxzcT38f/KqciSyPIxSGH7M98D0M8RrBllu8hlZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:8d:59:04:cc:58:97:7e:f5:0b:49:bc:1b:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Validity Not Before: Dec 19 18:00:52 2025 GMT Not After : Dec 20 18:00:52 2025 GMT Subject: CN=d51ede4165edc01bf85f0a51523fd7df16654728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:a9:5b:2c:92:e9:82:18:c0:e0:d8:e3:06: 0e:94:6d:b6:81:ed:49:03:fb:94:98:60:c2:53:7a: c8:62:6a:95:2b:0a:79:62:8f:43:aa:86:40:e3:21: ff:60:20:88:bd:cf:df:e7:6b:a3:90:de:56:f1:72: 62:55:63:82:b0:85:ed:1d:46:d6:c8:d1:a3:b8:d4: aa:2a:2c:55:6e:e5:e8:1d:1e:b6:ea:a0:6d:05:8b: a6:e7:dd:d5:c0:dc:ac:63:c2:65:d7:02:1e:75:6d: 4a:58:15:5f:9f:ec:d7:3a:3a:16:53:2c:88:85:f5: e2:4f:62:0c:0f:52:19:ed:30:03:e1:a3:aa:d8:46: cd:0c:fa:ff:1e:6e:6f:6b:5f:6d:ca:6c:a3:ea:5b: 8f:24:38:4e:43:1a:74:9b:06:ae:35:0a:60:a1:d5: 07:e5:de:87:9e:c1:f7:9f:04:ba:27:5c:c4:3d:20: b8:1e:2e:6b:b2:d6:0c:75:0a:65:aa:8d:f3:85:92: 20:b6:8c:af:8d:c8:27:db:44:01:19:7d:c6:40:70: 2e:83:5e:84:c1:5c:13:0e:7f:16:76:12:36:49:b1: 04:8d:a8:15:f6:5e:30:38:36:f7:9e:c9:35:82:df: 10:e5:b8:26:b7:21:85:c8:a2:01:57:cc:02:3b:f9: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:DE:41:65:ED:C0:1B:F8:5F:0A:51:52:3F:D7:DF:16:65:47:28 X509v3 Authority Key Identifier: keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:bd:2a:4e:58:44:10:f9:06:38:5f:32:ef:59:85:4a:1a: 4b:88:8f:ab:c7:43:f9:6a:ed:ef:f2:67:6b:a4:e2:d2:b5:cd: f0:a7:75:fa:9a:1d:1e:96:44:3d:4f:be:c4:f7:5e:23:da:9e: 26:d3:27:84:29:bf:9d:be:af:ab:02:9c:13:26:e7:04:ec:20: 1a:3e:e1:38:f3:d2:59:ec:7d:ae:ee:46:36:e0:05:29:66:85: 93:f4:3d:0f:e8:bb:4d:e8:cf:7a:18:df:d8:3b:8c:89:10:f0: 00:7e:92:79:8d:51:c4:fa:66:bb:bc:8f:3e:7e:15:90:11:f6: ee:e6:0b:e8:8d:5f:73:67:82:35:44:a2:a8:ad:ac:97:01:66: dc:ec:35:25:49:39:a5:ae:a5:47:95:f1:bf:c9:2d:6f:74:0d: 38:e7:f9:5f:4c:55:3c:4f:bc:ae:ff:1e:f5:fd:47:19:cc:02: c8:3c:a7:9b:64:f6:9b:2c:c8:41:78:43:c0:c2:0b:69:dd:ab: b9:70:c6:4f:a1:b1:32:77:6f:47:df:77:28:0f:4a:72:45:04: 56:a1:d0:8e:79:bf:b9:e3:f3:2f:b0:82:51:3c:83:90:3b:66: 04:b2:b2:62:ce:4f:87:8c:a1:43:fd:a6:72:7c:f1:a0:75:c7: c9:47:11:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xY1ZBMxYl371C0m8GxVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4 YTlmZGMwHhcNMjUxMjE5MTgwMDUyWhcNMjUxMjIwMTgwMDUyWjAzMTEwLwYDVQQD EyhkNTFlZGU0MTY1ZWRjMDFiZjg1ZjBhNTE1MjNmZDdkZjE2NjU0NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r+pWyyS6YIYwODY4wYOlG22ge1J A/uUmGDCU3rIYmqVKwp5Yo9DqoZA4yH/YCCIvc/f52ujkN5W8XJiVWOCsIXtHUbW yNGjuNSqKixVbuXoHR626qBtBYum593VwNysY8Jl1wIedW1KWBVfn+zXOjoWUyyI hfXiT2IMD1IZ7TAD4aOq2EbNDPr/Hm5va19tymyj6luPJDhOQxp0mwauNQpgodUH 5d6HnsH3nwS6J1zEPSC4Hi5rstYMdQplqo3zhZIgtoyvjcgn20QBGX3GQHAug16E wVwTDn8WdhI2SbEEjagV9l4wODb3nsk1gt8Q5bgmtyGFyKIBV8wCO/nDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUe3kFl7cAb+F8KUVI/198WZUcoMB8GA1UdIwQY MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisi9Kk5Y RBD5BjhfMu9ZhUoaS4iPq8dD+Wrt7/Jna6Ti0rXN8Kd1+podHpZEPU++xPdeI9qe JtMnhCm/nb6vqwKcEybnBOwgGj7hOPPSWex9ru5GNuAFKWaFk/Q9D+i7TejPehjf 2DuMiRDwAH6SeY1RxPpmu7yPPn4VkBH27uYL6I1fc2eCNUSiqK2slwFm3Ow1JUk5 pa6lR5Xxv8ktb3QNOOf5X0xVPE+8rv8e9f1HGcwCyDynm2T2myzIQXhDwMILad2r uXDGT6GxMndvR993KA9KckUEVqHQjnm/uePzL7CCUTyDkDtmBLKyYs5Ph4yhQ/2m cnzxoHXHyUcROQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:11:41 2025 by rpki-client