This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json) Hash identifier: as7H900y9knV14xTZVPogGs1mRpMntZIdAQWHdCWcvE= Subject key identifier: 45:BC:81:C2:CB:A7:13:05:D4:52:37:97:33:27:2F:8E:50:0F:4E:E7 Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Certificate serial: 019B41A4884B6F9EB3DBFDBE7C550307F347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft Manifest number: 03B0 Signing time: Sun 21 Dec 2025 16:01:00 +0000 Manifest this update: Sun 21 Dec 2025 16:01:00 +0000 Manifest next update: Mon 22 Dec 2025 16:01:00 +0000 Files and hashes: 1: MJaKjYCmx7hqbl_Sgp0HlxFEPTo.roa (hash: 7qpw/goTRYdFqZs/4SurZemQFQCz3pPQoJv09aj5YOE=) 2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: M7lLdEskXoih3JxngEB3tO5Tqm75uHEpnlxxmOpriew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:88:4b:6f:9e:b3:db:fd:be:7c:55:03:07:f3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd Validity Not Before: Dec 21 16:01:00 2025 GMT Not After : Dec 22 16:01:00 2025 GMT Subject: CN=45bc81c2cba71305d452379733272f8e500f4ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:9e:f0:44:b8:78:a6:1c:1c:6e:9f:51:4a: 10:45:36:cb:a4:b2:56:ae:1d:c7:93:00:8f:40:f9: 7a:d3:a2:18:96:2d:b1:7a:97:a5:96:d0:c5:17:76: 7e:5d:e8:a6:89:12:21:19:8e:ea:45:8e:78:d3:0c: d9:23:88:93:ab:59:2d:04:54:e6:aa:f9:13:e0:75: 8b:81:b8:3f:83:49:03:ac:3a:5a:e9:9d:05:73:87: 7f:2e:34:bd:42:03:43:0e:da:77:b6:2e:cc:69:db: 06:22:18:e5:ae:6e:9f:b6:f1:ec:f3:78:36:d2:b4: b9:48:63:f7:1d:6f:77:43:83:85:1b:c6:16:6c:a0: 36:c3:34:84:00:91:da:36:dc:9b:0d:cb:08:d9:ac: 21:61:1a:bf:a2:4b:8b:cf:5f:ff:a4:3f:6e:d2:4c: 70:1a:6f:79:c1:ca:7a:32:ee:08:04:ba:3d:07:34: 6d:ea:ff:75:57:74:4e:a3:35:d0:38:90:1b:f0:3c: 4f:2b:7d:71:b5:c9:5a:21:17:66:fd:1d:a6:22:84: 04:49:3c:8e:ab:83:54:e5:5e:86:4c:71:9d:54:5d: b7:c1:97:cd:0a:0c:75:3a:d4:a7:35:83:24:bf:62: f2:5c:e5:e9:6a:88:10:05:59:71:00:fa:88:1d:dd: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:81:C2:CB:A7:13:05:D4:52:37:97:33:27:2F:8E:50:0F:4E:E7 X509v3 Authority Key Identifier: keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:1f:55:6f:74:99:c6:f4:e6:54:f5:4e:e8:8c:7e:82:0e: 37:46:05:af:f6:6d:c3:ec:e3:fa:aa:76:0d:d6:eb:10:c4:f5: d8:27:59:8c:b2:db:d1:df:c3:d4:f5:4e:96:8c:00:63:b1:bb: 9e:12:12:7f:aa:6b:68:3b:a9:fa:89:45:10:8a:64:b2:fb:9d: 16:6f:a9:c6:eb:05:1c:e2:69:82:6f:5e:ff:49:dc:c3:76:90: cc:f3:6c:8e:63:39:64:b9:4a:ba:4d:41:87:23:2f:4d:c7:67: a5:ce:e2:85:a3:01:63:1b:78:5c:f1:be:a0:c1:de:65:e8:1d: e5:05:22:e0:fb:06:2a:f3:11:1c:ca:72:46:59:57:b0:73:16: f4:08:8f:03:cf:6c:38:20:e5:61:1e:ee:50:4f:1f:bf:50:75: 1a:d9:01:b6:dc:66:e5:b1:dc:b2:e4:ad:24:65:76:ea:9e:c8: ab:7a:aa:a9:f6:fd:67:d2:a1:29:ca:1d:66:92:04:4d:2d:77: 11:e9:0e:4f:53:25:ba:23:aa:2e:ff:c1:cc:90:2f:05:8a:41: 94:4e:02:25:50:7c:ab:df:ea:06:9a:f8:62:5a:45:dd:37:64: 5b:c5:55:78:94:99:97:86:19:6c:db:ff:63:d2:48:3e:e4:32: a3:cb:b3:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpIhLb56z2/2+fFUDB/NHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGY4NzlmM2Y5N2FkOGNkNzMxOTNkODA2OWU0OWIwMWI2 YmFkZGQwHhcNMjUxMjIxMTYwMTAwWhcNMjUxMjIyMTYwMTAwWjAzMTEwLwYDVQQD Eyg0NWJjODFjMmNiYTcxMzA1ZDQ1MjM3OTczMzI3MmY4ZTUwMGY0ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnae8ES4eKYcHG6fUUoQRTbLpLJW rh3HkwCPQPl606IYli2xepelltDFF3Z+XeimiRIhGY7qRY540wzZI4iTq1ktBFTm qvkT4HWLgbg/g0kDrDpa6Z0Fc4d/LjS9QgNDDtp3ti7MadsGIhjlrm6ftvHs83g2 0rS5SGP3HW93Q4OFG8YWbKA2wzSEAJHaNtybDcsI2awhYRq/okuLz1//pD9u0kxw Gm95wcp6Mu4IBLo9BzRt6v91V3ROozXQOJAb8DxPK31xtclaIRdm/R2mIoQESTyO q4NU5V6GTHGdVF23wZfNCgx1OtSnNYMkv2LyXOXpaogQBVlxAPqIHd24tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW8gcLLpxMF1FI3lzMnL45QD07nMB8GA1UdIwQY MBaAFK1Ph58/l62M1zGT2AaeSbAba63dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQt OTRlZjE5NzA3MzgyLzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yZjEyMDctZWEwYS00NTA3LTlhNTQtOTRlZjE5NzA3Mzgy LzEvclUtSG56LVhyWXpYTVpQWUJwNUpzQnRycmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuofVW90 mcb05lT1TuiMfoION0YFr/Ztw+zj+qp2DdbrEMT12CdZjLLb0d/D1PVOlowAY7G7 nhISf6praDup+olFEIpksvudFm+pxusFHOJpgm9e/0ncw3aQzPNsjmM5ZLlKuk1B hyMvTcdnpc7ihaMBYxt4XPG+oMHeZegd5QUi4PsGKvMRHMpyRllXsHMW9AiPA89s OCDlYR7uUE8fv1B1GtkBttxm5bHcsuStJGV26p7Iq3qqqfb9Z9KhKcodZpIETS13 EekOT1MluiOqLv/BzJAvBYpBlE4CJVB8q9/qBpr4YlpF3TdkW8VVeJSZl4YZbNv/ Y9JIPuQyo8uzIA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:49:16 2025 by rpki-client