This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json) Hash identifier: 3Z1dJ3XSKFkZAr9KmYRPrfQVNjiXVKDov4y35tzJaFA= Subject key identifier: 5F:72:8D:D7:4F:26:30:BB:45:B0:7A:75:5C:F2:32:DF:9F:0B:80:F5 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019B593ED2B4090543472A3D70475ED4E0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft Manifest number: 04CE Signing time: Fri 26 Dec 2025 06:00:47 +0000 Manifest this update: Fri 26 Dec 2025 06:00:47 +0000 Manifest next update: Sat 27 Dec 2025 06:00:47 +0000 Files and hashes: 1: aB5BTwFM1GkHltsLxl4xVTjJVbk.roa (hash: Zs3VbsvkuiKkW16KsemamPimx1XPIkjb0yYjG6M7CZY=) 2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: 1fDEaWKGXcdFqKUCtvMzmW5xQHj0H1IhcvVqKCTjSSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d2:b4:09:05:43:47:2a:3d:70:47:5e:d4:e0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 26 06:00:47 2025 GMT Not After : Dec 27 06:00:47 2025 GMT Subject: CN=5f728dd74f2630bb45b07a755cf232df9f0b80f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:c8:ac:83:3b:eb:c5:52:14:a6:0c:76:ba: 8e:ac:6c:76:44:f9:ea:4b:09:2c:62:39:a0:5f:2b: 44:de:a9:79:54:a3:48:4b:8a:9b:d3:ee:5e:07:db: 2b:17:77:a9:f7:77:9e:2c:bc:e2:dd:4c:58:51:d2: f6:6d:65:31:87:57:01:d9:23:cd:b0:0c:4d:3c:6e: 9a:19:a5:8a:da:1a:0d:7b:03:74:4b:5c:d9:04:13: 46:3b:c0:e2:87:e6:41:c1:ca:f8:c7:d9:22:ea:bd: 74:36:66:be:d2:01:90:12:cd:50:8c:b2:23:5d:6d: a5:6b:d2:19:38:1b:9f:a5:f4:28:9c:ee:72:04:4b: 49:27:f9:38:f8:42:89:a0:40:8e:a5:4b:17:90:01: 8c:03:f1:3a:eb:37:44:d8:58:82:01:bf:cf:bf:f4: 85:1b:b6:70:63:32:8c:3f:c3:44:59:27:53:56:03: 4c:cc:98:14:5e:ac:47:81:35:49:1a:1c:12:22:47: c6:4c:09:30:87:fe:39:6d:23:3c:be:b1:b9:f9:4d: 41:b8:c0:b8:87:35:b8:cf:c2:82:ab:5f:7c:b4:40: 8f:b3:cb:cd:1d:c2:2c:4b:2b:88:e8:84:f9:3a:23: 41:c2:32:ef:62:21:f5:74:cc:6c:ae:cd:90:57:b0: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:8D:D7:4F:26:30:BB:45:B0:7A:75:5C:F2:32:DF:9F:0B:80:F5 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d2:91:d9:49:bc:c1:3a:17:a6:6c:7f:6c:b2:04:df:1b:3f: 8a:99:b3:e5:5e:19:88:20:81:48:e3:73:f2:d0:29:96:ea:a2: 8d:8a:7b:1b:da:b4:df:14:25:8f:cf:61:b3:b2:0d:1a:08:ba: 50:47:01:1e:67:d3:62:65:05:d8:89:7a:a1:86:b4:7c:c8:09: ae:58:28:6b:71:55:d3:24:89:ad:0e:71:ab:02:2c:33:18:6b: 99:07:72:6f:df:af:92:2b:2c:44:95:43:65:5c:a9:f4:0a:16: e2:7f:3b:56:8c:1f:21:d8:7e:ef:a2:d5:d4:3f:6d:65:8e:6b: 91:83:9b:2e:38:f1:72:86:6c:94:c6:c3:33:a9:86:21:45:71: 4d:32:01:99:89:14:aa:b1:86:84:1c:3b:31:22:10:1c:dc:11: 19:28:66:79:9e:99:3e:af:07:f8:48:82:ed:1a:d4:74:89:44: f7:5a:22:b5:05:78:93:15:cb:c2:65:91:b4:52:d6:9e:c9:ae: 18:10:68:ff:76:17:0f:77:9c:20:64:f1:41:d9:22:18:32:51: 67:20:88:56:a1:bb:be:d4:29:b8:19:3d:7b:9a:0c:57:87:19: 69:39:fb:66:9d:d8:28:a3:7f:b6:06:0b:34:ec:e4:c2:1e:ed: 33:60:20:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtK0CQVDRyo9cEde1OCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjI2MDYwMDQ3WhcNMjUxMjI3MDYwMDQ3WjAzMTEwLwYDVQQD Eyg1ZjcyOGRkNzRmMjYzMGJiNDViMDdhNzU1Y2YyMzJkZjlmMGI4MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZTIrIM768VSFKYMdrqOrGx2RPnq SwksYjmgXytE3ql5VKNIS4qb0+5eB9srF3ep93eeLLzi3UxYUdL2bWUxh1cB2SPN sAxNPG6aGaWK2hoNewN0S1zZBBNGO8Dih+ZBwcr4x9ki6r10Nma+0gGQEs1QjLIj XW2la9IZOBufpfQonO5yBEtJJ/k4+EKJoECOpUsXkAGMA/E66zdE2FiCAb/Pv/SF G7ZwYzKMP8NEWSdTVgNMzJgUXqxHgTVJGhwSIkfGTAkwh/45bSM8vrG5+U1BuMC4 hzW4z8KCq198tECPs8vNHcIsSyuI6IT5OiNBwjLvYiH1dMxsrs2QV7ArewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9yjddPJjC7RbB6dVzyMt+fC4D1MB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtKR2Um8 wToXpmx/bLIE3xs/ipmz5V4ZiCCBSONz8tApluqijYp7G9q03xQlj89hs7INGgi6 UEcBHmfTYmUF2Il6oYa0fMgJrlgoa3FV0ySJrQ5xqwIsMxhrmQdyb9+vkissRJVD ZVyp9AoW4n87VowfIdh+76LV1D9tZY5rkYObLjjxcoZslMbDM6mGIUVxTTIBmYkU qrGGhBw7MSIQHNwRGShmeZ6ZPq8H+EiC7RrUdIlE91oitQV4kxXLwmWRtFLWnsmu GBBo/3YXD3ecIGTxQdkiGDJRZyCIVqG7vtQpuBk9e5oMV4cZaTn7Zp3YKKN/tgYL NOzkwh7tM2Agng== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client