This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json) Hash identifier: iW52sfAV4WsryMGWqNe3NvN10wtgRfumcfti6B67K8w= Subject key identifier: 99:E7:3B:81:B8:2B:BA:2C:32:45:4D:E2:21:76:A3:67:E6:3F:93:36 Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Certificate serial: 019B3BA23AFDBEDAE6B3A12D2243E5E74CF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:00:46 +0000 Manifest this update: Sat 20 Dec 2025 12:00:46 +0000 Manifest next update: Sun 21 Dec 2025 12:00:46 +0000 Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=) 2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=) 3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: Fbhf0kOFoAgqxyRxSOeq0yXpF/RYieLfAy1ZYYO+CVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3a:fd:be:da:e6:b3:a1:2d:22:43:e5:e7:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Validity Not Before: Dec 20 12:00:46 2025 GMT Not After : Dec 21 12:00:46 2025 GMT Subject: CN=99e73b81b82bba2c32454de22176a367e63f9336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:7d:fc:81:66:ee:66:77:db:09:ba:71:79: bc:a3:67:25:83:51:fe:76:13:6d:bb:a7:53:2e:c3: 29:91:f1:e0:fc:15:28:f9:bc:d1:ce:7d:15:8f:9e: 2a:32:94:c6:0e:37:99:c9:fd:c9:1b:65:5a:2b:7f: cb:8f:d9:6d:50:05:7c:34:a2:5b:11:6f:be:57:4d: bc:97:fe:4a:5a:09:3c:67:6f:8f:66:8c:ab:da:e3: 7b:6f:0f:f9:1b:48:25:27:21:21:7d:c4:43:f5:90: 13:53:5f:78:0b:1c:4c:35:77:cf:7c:5e:67:06:36: e3:84:ca:2f:00:51:0d:6a:95:8e:24:2d:39:b1:09: c0:c2:b9:0d:b8:b6:b6:64:52:65:4b:b2:83:cd:a9: 27:f2:1b:47:23:99:b5:88:65:21:bb:be:e4:11:ed: 4e:3a:1c:26:d9:79:d1:3c:97:64:a3:0b:1c:fb:c2: d4:24:3b:fe:dc:72:b5:2f:65:93:70:50:ee:b3:fe: e7:d6:32:18:4e:7b:b3:37:77:3c:a1:3a:df:f5:40: 7f:02:04:49:e4:5f:00:31:fb:2f:6c:27:d6:24:26: 7a:be:d6:f8:8b:f5:bc:c4:74:c1:06:fc:cd:24:9e: 8d:bf:f6:81:2d:1e:d8:50:ad:f7:f8:97:f9:80:c5: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E7:3B:81:B8:2B:BA:2C:32:45:4D:E2:21:76:A3:67:E6:3F:93:36 X509v3 Authority Key Identifier: keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:5e:b1:95:fc:a1:5e:1a:b9:45:28:c7:fd:92:10:49:98: ea:92:ab:b4:0c:a0:45:5a:a3:f8:e7:4c:c1:3c:8a:53:2b:83: 63:b5:a5:9e:f4:0e:11:b8:8c:77:6c:0b:3c:32:fd:75:a4:99: d7:89:9f:41:5a:35:eb:bc:d5:db:17:6a:b5:9c:61:a8:56:a6: e6:8c:e8:c4:50:76:ee:c8:3d:b5:ec:45:14:79:f8:9f:8e:c9: 65:16:b8:6c:f5:ef:ef:7b:fe:87:ad:e7:77:59:c8:79:f8:b1: 28:b5:22:89:d8:b0:92:5a:6c:3f:e9:f7:13:88:ac:6d:a6:cd: 24:dc:db:39:58:99:b1:56:c8:7e:a1:8c:a5:89:1e:1f:62:f2: a3:ea:84:29:b2:df:90:c3:18:ee:3d:0d:90:1c:8b:88:9b:3b: b7:1c:52:42:25:a4:14:3f:0a:23:43:50:5c:1a:56:0f:72:25: f7:33:47:72:cc:2b:56:bb:a9:d6:29:1c:8f:52:83:c0:78:65: 1f:bc:99:79:64:66:e0:fc:55:09:43:af:0b:a9:70:94:17:1d: 07:dc:2b:e5:f9:a6:52:0a:15:d2:ed:34:74:e8:f5:fa:75:c6: 6c:e2:5d:3c:1c:70:c2:70:70:1c:df:4a:20:30:5a:44:01:d7: 02:b4:af:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojr9vtrms6EtIkPl50zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4 YTlmZGMwHhcNMjUxMjIwMTIwMDQ2WhcNMjUxMjIxMTIwMDQ2WjAzMTEwLwYDVQQD Eyg5OWU3M2I4MWI4MmJiYTJjMzI0NTRkZTIyMTc2YTM2N2U2M2Y5MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8h9/IFm7mZ32wm6cXm8o2clg1H+ dhNtu6dTLsMpkfHg/BUo+bzRzn0Vj54qMpTGDjeZyf3JG2VaK3/Lj9ltUAV8NKJb EW++V028l/5KWgk8Z2+PZoyr2uN7bw/5G0glJyEhfcRD9ZATU194CxxMNXfPfF5n BjbjhMovAFENapWOJC05sQnAwrkNuLa2ZFJlS7KDzakn8htHI5m1iGUhu77kEe1O Ohwm2XnRPJdkowsc+8LUJDv+3HK1L2WTcFDus/7n1jIYTnuzN3c8oTrf9UB/AgRJ 5F8AMfsvbCfWJCZ6vtb4i/W8xHTBBvzNJJ6Nv/aBLR7YUK33+Jf5gMVadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnnO4G4K7osMkVN4iF2o2fmP5M2MB8GA1UdIwQY MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFhesZX8 oV4auUUox/2SEEmY6pKrtAygRVqj+OdMwTyKUyuDY7WlnvQOEbiMd2wLPDL9daSZ 14mfQVo167zV2xdqtZxhqFam5ozoxFB27sg9texFFHn4n47JZRa4bPXv73v+h63n d1nIefixKLUiidiwklpsP+n3E4isbabNJNzbOViZsVbIfqGMpYkeH2Lyo+qEKbLf kMMY7j0NkByLiJs7txxSQiWkFD8KI0NQXBpWD3Il9zNHcswrVrup1ikcj1KDwHhl H7yZeWRm4PxVCUOvC6lwlBcdB9wr5fmmUgoV0u00dOj1+nXGbOJdPBxwwnBwHN9K IDBaRAHXArSv3g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:26 2025 by rpki-client