This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft File: Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json) Hash identifier: 9Pchg6bRiFhyjvy2i3H/4BTPdYazlMzIxr+RNoAUomY= Subject key identifier: 95:69:22:E9:73:59:92:84:4F:42:71:14:2E:60:C5:2D:4E:DF:F7:2E Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Certificate serial: 019B35A0C0424E6597625D5FDD382BB715B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft Manifest number: 145B Signing time: Fri 19 Dec 2025 08:01:25 +0000 Manifest this update: Fri 19 Dec 2025 08:01:25 +0000 Manifest next update: Sat 20 Dec 2025 08:01:25 +0000 Files and hashes: 1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=) 2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: c8rEPXxuxNiMR99UNBZ6sZUSLYfhiSanFUxgL2JTpN8=) 3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=) 4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=) 5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=) 6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:c0:42:4e:65:97:62:5d:5f:dd:38:2b:b7:15:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Validity Not Before: Dec 19 08:01:25 2025 GMT Not After : Dec 20 08:01:25 2025 GMT Subject: CN=956922e9735992844f4271142e60c52d4edff72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:b9:b1:a1:a2:40:6d:fe:74:03:a1:d9:f1: f8:59:2e:71:4e:8a:e1:84:58:67:86:1a:36:72:b9: 86:ed:e3:98:c6:6a:6f:7b:ec:d9:ee:f4:4d:59:4b: 91:c2:ad:94:af:cf:62:06:91:3b:f2:51:8c:c1:ce: cf:b8:95:56:f1:fa:59:25:40:f4:15:9e:4d:40:98: 52:14:d7:60:3a:ed:0e:d4:ca:7f:a3:2b:87:0b:dc: 14:9f:65:7c:20:cb:0a:d1:76:e0:08:10:29:78:1a: 00:82:98:76:0a:5d:aa:5c:61:03:28:45:dd:38:a6: a6:8c:39:7b:b0:19:e5:52:5d:60:f7:85:ad:ee:6c: 6d:a8:df:05:c0:2d:4e:6d:78:f4:24:b5:9f:81:84: 2c:af:dd:7b:c7:66:90:32:c7:25:04:b8:98:e8:bd: 15:d8:1b:32:3b:cb:5d:24:44:0e:5a:64:22:e0:97: 9a:50:b6:8e:ef:51:12:11:b6:cd:bf:a2:b6:15:47: db:0e:47:0f:b6:b9:54:22:cf:c1:29:88:0e:a9:d7: 05:25:69:2e:22:d5:60:92:ff:27:ed:a8:d4:77:24: c7:aa:c5:0d:1a:e5:8a:f3:c1:61:2c:09:d1:fc:cf: a2:29:a6:54:59:2c:99:2b:a2:46:a8:8b:21:54:d8: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:69:22:E9:73:59:92:84:4F:42:71:14:2E:60:C5:2D:4E:DF:F7:2E X509v3 Authority Key Identifier: keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c5:f3:40:82:c5:36:04:e6:72:f4:8a:b3:29:96:e1:bf:5d: e7:92:95:9f:aa:ce:b3:20:49:13:97:e3:43:8c:65:aa:6a:c0: cf:8e:3f:80:bf:19:3c:ee:e1:3c:1b:4a:bc:49:29:e1:3b:23: c9:11:e9:f8:2f:b6:72:4d:b5:da:18:f5:d0:b4:c4:a5:91:d5: 6a:44:03:52:45:4d:ce:fd:39:b4:23:09:13:29:4c:7f:c4:be: 0c:de:b0:80:ea:9c:8b:0b:4d:50:73:8c:6d:8f:48:77:92:16: 39:ee:d0:d9:18:a2:a9:f5:a8:fb:99:58:32:75:77:11:09:31: d8:84:96:15:91:04:54:7e:ca:06:a6:34:44:70:ce:c0:83:a1: 5e:fa:69:77:c3:eb:94:47:44:ae:b6:91:b7:3c:41:69:a7:ae: 66:ae:c9:7b:c6:1b:cf:ec:df:ea:ca:51:2d:fd:c0:de:70:98: 2b:10:5a:0b:fa:2a:a7:d2:3c:70:10:3d:9e:d1:19:0b:a3:f2: d1:56:b9:ce:c0:8b:68:b5:78:03:b0:b6:91:0a:16:85:e8:b1: e0:4a:91:85:ef:5e:f7:d8:0d:b0:44:60:d4:5c:22:a7:fd:56: a2:d9:e5:a2:04:ff:fe:2d:4d:83:96:2b:b5:59:d9:c8:6f:e5: 76:62:94:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMBCTmWXYl1f3TgrtxWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm ZGQ1MGIwHhcNMjUxMjE5MDgwMTI1WhcNMjUxMjIwMDgwMTI1WjAzMTEwLwYDVQQD Eyg5NTY5MjJlOTczNTk5Mjg0NGY0MjcxMTQyZTYwYzUyZDRlZGZmNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SS5saGiQG3+dAOh2fH4WS5xTorh hFhnhho2crmG7eOYxmpve+zZ7vRNWUuRwq2Ur89iBpE78lGMwc7PuJVW8fpZJUD0 FZ5NQJhSFNdgOu0O1Mp/oyuHC9wUn2V8IMsK0XbgCBApeBoAgph2Cl2qXGEDKEXd OKamjDl7sBnlUl1g94Wt7mxtqN8FwC1ObXj0JLWfgYQsr917x2aQMsclBLiY6L0V 2BsyO8tdJEQOWmQi4JeaULaO71ESEbbNv6K2FUfbDkcPtrlUIs/BKYgOqdcFJWku ItVgkv8n7ajUdyTHqsUNGuWK88FhLAnR/M+iKaZUWSyZK6JGqIshVNg4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVpIulzWZKET0JxFC5gxS1O3/cuMB8GA1UdIwQY MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt ZGUwNWM1NDA0NWJiLzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8XzQILF NgTmcvSKsymW4b9d55KVn6rOsyBJE5fjQ4xlqmrAz44/gL8ZPO7hPBtKvEkp4Tsj yRHp+C+2ck212hj10LTEpZHVakQDUkVNzv05tCMJEylMf8S+DN6wgOqciwtNUHOM bY9Id5IWOe7Q2RiiqfWo+5lYMnV3EQkx2ISWFZEEVH7KBqY0RHDOwIOhXvppd8Pr lEdErraRtzxBaaeuZq7Je8Ybz+zf6spRLf3A3nCYKxBaC/oqp9I8cBA9ntEZC6Py 0Va5zsCLaLV4A7C2kQoWheix4EqRhe9e99gNsERg1Fwip/1WotnlogT//i1Ng5Yr tVnZyG/ldmKU+g== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:46 2025 by rpki-client