This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json) Hash identifier: fqTV9OP8/BhmUUfuRLWIRootWAt3ZRRbXj833IdKw4I= Subject key identifier: CA:B3:00:52:F2:8E:DC:40:6F:3B:2C:4C:AA:AF:BB:54:4D:5B:04:EB Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Certificate serial: 019B12017061A4268B0F003D08F8F5D3DC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 10:00:42 +0000 Manifest this update: Fri 12 Dec 2025 10:00:42 +0000 Manifest next update: Sat 13 Dec 2025 10:00:42 +0000 Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=) 2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=) 3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=) 4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: ViPFBbp/uF2uxTXDiGkAAgebBAmpOzCvnE0pNLP2KS4=) 5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:70:61:a4:26:8b:0f:00:3d:08:f8:f5:d3:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Validity Not Before: Dec 12 10:00:42 2025 GMT Not After : Dec 13 10:00:42 2025 GMT Subject: CN=cab30052f28edc406f3b2c4caaafbb544d5b04eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:a8:c1:20:27:39:da:12:a5:fb:49:81:4d: f3:f2:dd:90:6e:b2:3d:af:b5:f4:d9:c8:25:64:fb: 8f:e9:b4:ee:22:1c:9c:e0:fb:ed:64:b7:b4:dd:ed: 37:88:21:44:3a:69:77:cd:fc:3e:dd:bf:3b:da:e5: dc:81:9f:75:6b:fe:d6:6d:8f:95:bf:f3:c8:aa:7d: 56:53:d9:61:35:75:e9:71:e6:f5:34:c9:f0:a4:00: 72:ae:dd:91:f8:07:3c:d9:46:5c:64:b4:8e:18:17: b6:d6:37:5e:04:21:80:f4:bb:4d:fc:24:12:a3:c7: c5:7d:3e:fd:dd:f1:c5:8d:27:a1:92:db:b0:45:a6: 49:a2:9a:ee:05:7d:45:b5:33:46:21:03:d8:07:1c: 58:b1:48:11:ff:d4:24:8f:3a:75:ee:e6:e1:46:0e: 36:a3:52:68:6e:46:fb:05:7a:7d:4b:fd:d8:0e:8d: 36:56:9c:07:ad:32:a6:63:94:76:b9:f5:f0:03:2d: 36:01:9b:25:40:90:0a:03:13:c7:46:9f:de:2b:e8: 9b:5a:01:a8:a1:fc:8f:f4:bd:47:4d:e9:a4:8c:4f: 7d:ef:8f:77:0b:e1:76:80:b1:de:b0:2d:14:4d:20: f2:a5:07:f0:ed:61:13:7f:56:68:a2:de:9a:72:4c: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:00:52:F2:8E:DC:40:6F:3B:2C:4C:AA:AF:BB:54:4D:5B:04:EB X509v3 Authority Key Identifier: keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:d9:38:64:f6:d8:69:c7:07:f1:f6:f2:fd:9e:eb:d6:88: a2:4b:eb:55:e3:44:ec:49:37:b3:be:15:e5:33:9d:d5:9a:c4: ec:51:34:76:45:a1:a0:31:65:de:42:57:42:34:b6:47:a5:5b: 16:1d:4b:55:9b:0e:bb:d2:c9:62:36:9e:d7:5b:c0:77:28:53: c6:55:65:3e:eb:fc:bf:b9:61:6b:c5:d6:c6:b0:9d:3c:c6:c7: d5:eb:0a:2f:30:1c:13:db:e2:43:da:9c:70:26:4d:80:15:84: 47:ba:88:35:a0:66:e1:1c:a7:82:3d:18:b4:90:e9:60:49:83: 26:92:0a:45:d5:4b:79:ea:b8:59:8c:d4:b5:b9:84:5e:53:e0: d2:08:3e:d9:51:85:d5:17:1d:c9:a2:cf:e3:c3:26:eb:89:76: e1:ed:c9:19:25:25:b2:d6:78:70:10:89:dc:b1:9e:1e:b8:51: ef:83:c0:98:9e:38:3a:53:ba:f9:b2:6a:3a:94:45:4a:5f:4b: 53:82:73:34:51:a0:c8:a9:8e:15:f4:27:d3:3d:e9:b8:cd:9b: 77:f5:93:cc:05:12:fc:44:39:f8:cd:b1:b3:b7:fd:df:c2:b4: 8b:05:99:30:d0:ed:b1:bd:d5:d5:df:89:71:98:aa:cd:e1:d8: 4b:eb:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAXBhpCaLDwA9CPj109xgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx MjA2Y2UwHhcNMjUxMjEyMTAwMDQyWhcNMjUxMjEzMTAwMDQyWjAzMTEwLwYDVQQD EyhjYWIzMDA1MmYyOGVkYzQwNmYzYjJjNGNhYWFmYmI1NDRkNWIwNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5qowSAnOdoSpftJgU3z8t2QbrI9 r7X02cglZPuP6bTuIhyc4PvtZLe03e03iCFEOml3zfw+3b872uXcgZ91a/7WbY+V v/PIqn1WU9lhNXXpceb1NMnwpAByrt2R+Ac82UZcZLSOGBe21jdeBCGA9LtN/CQS o8fFfT793fHFjSehktuwRaZJopruBX1FtTNGIQPYBxxYsUgR/9Qkjzp17ubhRg42 o1Jobkb7BXp9S/3YDo02VpwHrTKmY5R2ufXwAy02AZslQJAKAxPHRp/eK+ibWgGo ofyP9L1HTemkjE997493C+F2gLHesC0UTSDypQfw7WETf1Zoot6ackwc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqzAFLyjtxAbzssTKqvu1RNWwTrMB8GA1UdIwQY MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUHZOGT2 2GnHB/H28v2e69aIokvrVeNE7Ek3s74V5TOd1ZrE7FE0dkWhoDFl3kJXQjS2R6Vb Fh1LVZsOu9LJYjae11vAdyhTxlVlPuv8v7lha8XWxrCdPMbH1esKLzAcE9viQ9qc cCZNgBWER7qINaBm4Ryngj0YtJDpYEmDJpIKRdVLeeq4WYzUtbmEXlPg0gg+2VGF 1RcdyaLP48Mm64l24e3JGSUlstZ4cBCJ3LGeHrhR74PAmJ44OlO6+bJqOpRFSl9L U4JzNFGgyKmOFfQn0z3puM2bd/WTzAUS/EQ5+M2xs7f938K0iwWZMNDtsb3V1d+J cZiqzeHYS+sWvg== -----END CERTIFICATE-----Generated at Fri Dec 12 17:02:56 2025 by rpki-client