This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json) Hash identifier: 79TB9HGWybMuy7fo8grEnFv+t4fIppJSI6MsKCq7G0w= Subject key identifier: BA:41:C6:CD:A9:37:D9:32:4B:3C:E4:85:E0:3C:A9:45:76:FF:1C:77 Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99 Certificate serial: 019B194D937B59E3180C68604CA6DDF8C730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft Manifest number: 09B3 Signing time: Sat 13 Dec 2025 20:01:12 +0000 Manifest this update: Sat 13 Dec 2025 20:01:12 +0000 Manifest next update: Sun 14 Dec 2025 20:01:12 +0000 Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=) 2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: 0k18obnrwDBrULi4ucmwK3H9DtLOzU1k1Sn7kaj5b+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:93:7b:59:e3:18:0c:68:60:4c:a6:dd:f8:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99 Validity Not Before: Dec 13 20:01:12 2025 GMT Not After : Dec 14 20:01:12 2025 GMT Subject: CN=ba41c6cda937d9324b3ce485e03ca94576ff1c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:08:6a:95:f9:16:f3:16:89:c0:8d:ce:8f: 72:4f:fa:be:5e:1a:e7:e9:5c:17:e4:a2:ad:a3:e0: 75:34:01:d6:a2:5b:f7:28:62:b2:37:82:e7:0b:07: b1:ee:77:84:13:a9:7e:23:a9:ed:89:76:89:0a:c2: d7:a2:91:dc:7d:52:cd:76:cc:89:fe:e8:d3:06:e0: ae:e7:b9:71:c7:ad:55:ba:92:0d:76:a1:67:dc:dd: 87:b3:4b:24:8d:37:e2:cd:e4:d9:7e:4d:82:f3:b3: 46:bc:6e:86:98:5e:9b:5f:34:6a:10:c9:a8:08:8f: f9:42:21:d8:91:02:8b:54:45:be:a2:ee:bd:71:0f: 05:09:40:54:c3:d7:7c:9e:89:7b:06:98:6d:ec:9b: 18:3e:b8:c8:c9:fe:80:f9:f4:35:ad:99:6b:13:81: 55:ea:4f:fc:ea:3b:82:9e:18:62:34:c2:2b:f2:be: d3:cc:2b:e1:53:ae:c1:34:fd:5c:c0:ce:0e:9c:b9: 3e:79:78:4f:99:7a:8a:04:87:fb:48:a0:63:96:93: bb:9c:c9:34:22:07:46:c4:3a:a3:9d:d8:41:1f:83: f8:b9:11:52:87:66:70:66:f0:f0:d6:38:fd:aa:a6: db:e8:bd:e7:e1:b2:ee:6f:21:58:d2:92:46:bf:24: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:C6:CD:A9:37:D9:32:4B:3C:E4:85:E0:3C:A9:45:76:FF:1C:77 X509v3 Authority Key Identifier: keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5e:eb:5e:fd:ac:5a:69:d4:87:07:68:14:34:ec:22:1f:1f: 6f:7a:98:a6:67:f6:23:07:90:c6:2d:1f:fc:75:68:06:4f:51: e9:90:d9:a4:26:6d:f1:94:b2:90:4b:d4:73:53:af:eb:0c:d6: 48:80:68:2d:ed:e4:4a:ed:54:ca:ce:68:e0:9f:71:f8:a5:20: bb:36:95:6b:0a:23:09:56:8c:ae:10:70:24:a6:64:5b:a4:c2: e7:0a:22:07:8e:43:cd:7a:fd:94:d1:f2:c0:ba:d9:95:71:ce: c4:61:33:26:e7:dd:b6:69:67:cc:5a:d8:f1:d6:66:c8:67:a6: 76:27:4e:8c:eb:f8:63:ff:b2:56:e9:0d:41:19:28:d3:bd:34: fa:50:48:ce:e5:61:43:bb:2f:0d:00:e6:12:f5:9a:77:38:e8: e8:71:69:28:95:46:8f:2f:ce:80:1e:37:ff:1a:de:c8:a5:fd: 42:ce:0b:92:44:f5:50:09:d6:9b:22:3c:b5:4f:b7:61:2d:93: f0:1f:2b:97:c5:f2:ec:5b:75:6e:1b:c2:2a:c0:24:22:9e:b1: f1:49:69:db:ca:e5:c1:25:04:d7:8d:49:95:e2:b0:b1:a9:8d: 16:05:ce:09:b5:9f:0d:36:6d:61:2a:c3:81:b7:43:a7:42:88: b3:49:ab:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTZN7WeMYDGhgTKbd+McwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw MzhkOTkwHhcNMjUxMjEzMjAwMTEyWhcNMjUxMjE0MjAwMTEyWjAzMTEwLwYDVQQD EyhiYTQxYzZjZGE5MzdkOTMyNGIzY2U0ODVlMDNjYTk0NTc2ZmYxYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOAIapX5FvMWicCNzo9yT/q+Xhrn 6VwX5KKto+B1NAHWolv3KGKyN4LnCwex7neEE6l+I6ntiXaJCsLXopHcfVLNdsyJ /ujTBuCu57lxx61VupINdqFn3N2Hs0skjTfizeTZfk2C87NGvG6GmF6bXzRqEMmo CI/5QiHYkQKLVEW+ou69cQ8FCUBUw9d8nol7Bpht7JsYPrjIyf6A+fQ1rZlrE4FV 6k/86juCnhhiNMIr8r7TzCvhU67BNP1cwM4OnLk+eXhPmXqKBIf7SKBjlpO7nMk0 IgdGxDqjndhBH4P4uRFSh2ZwZvDw1jj9qqbb6L3n4bLubyFY0pJGvyRkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpBxs2pN9kySzzkheA8qUV2/xx3MB8GA1UdIwQY MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF7rXv2s WmnUhwdoFDTsIh8fb3qYpmf2IweQxi0f/HVoBk9R6ZDZpCZt8ZSykEvUc1Ov6wzW SIBoLe3kSu1Uys5o4J9x+KUguzaVawojCVaMrhBwJKZkW6TC5woiB45DzXr9lNHy wLrZlXHOxGEzJufdtmlnzFrY8dZmyGemdidOjOv4Y/+yVukNQRko0700+lBIzuVh Q7svDQDmEvWadzjo6HFpKJVGjy/OgB43/xreyKX9Qs4LkkT1UAnWmyI8tU+3YS2T 8B8rl8Xy7Ft1bhvCKsAkIp6x8Ulp28rlwSUE141JleKwsamNFgXOCbWfDTZtYSrD gbdDp0KIs0mrDw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:07 2025 by rpki-client