This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json) Hash identifier: ZDqVSGMD9p5Kb2/6/0t9Xkvl1lhYW1VAvWvKjUVxKl8= Subject key identifier: 02:01:D6:13:20:7F:2D:A0:45:33:79:2C:0A:05:69:C2:BD:9F:DD:CD Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Certificate serial: 019AACB9C085EF45F467CC0324C9E8E08FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft Manifest number: 173F Signing time: Sat 22 Nov 2025 18:00:45 +0000 Manifest this update: Sat 22 Nov 2025 18:00:45 +0000 Manifest next update: Sun 23 Nov 2025 18:00:45 +0000 Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=) 2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=) 3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: EFoU7CnB56RMTpOoJq0+1kU7/uhme2oxqDf8rIeHq8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:c0:85:ef:45:f4:67:cc:03:24:c9:e8:e0:8f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Validity Not Before: Nov 22 18:00:45 2025 GMT Not After : Nov 23 18:00:45 2025 GMT Subject: CN=0201d613207f2da04533792c0a0569c2bd9fddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:68:d9:a4:dd:08:39:d4:12:28:c7:7d:16:74: 5b:10:f4:1a:80:9b:b0:7a:0a:32:ac:ab:f0:fb:26: 29:29:15:1b:ce:36:7e:eb:71:7b:29:d0:a8:86:48: a0:d4:2e:95:90:ce:ab:dd:1f:5b:e5:32:1d:44:c2: 70:18:04:9d:70:6d:f1:e8:30:0b:f7:b9:44:5d:92: e2:fa:dd:44:0d:1e:1e:2b:1a:60:5a:c9:35:c7:bf: 95:33:38:2d:9a:e4:5a:49:a5:90:f9:f6:57:c3:4a: 9f:22:34:6c:31:25:d0:e4:4b:55:e4:0c:4b:73:37: 9f:28:36:df:a2:5f:06:7e:d6:7f:86:41:ab:63:87: 15:f0:fa:1a:0f:59:53:80:e6:99:df:5c:27:f8:68: 47:87:99:c0:de:28:a5:5f:72:09:cd:28:e9:20:06: 46:0b:b3:07:00:6d:cd:47:90:b9:4f:b1:c2:3e:a4: c2:12:28:be:3a:10:d0:36:a1:eb:87:45:db:9c:60: 1d:2a:be:20:f0:e3:83:7f:12:cf:89:96:be:e3:8e: 96:c3:45:0d:0f:81:57:9a:f7:01:59:d7:b0:42:02: 26:5b:c4:7f:54:0a:5c:88:7c:e1:38:13:3a:db:0f: bc:49:0a:54:df:1d:6e:ba:cb:ac:1c:7e:d6:a2:af: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:D6:13:20:7F:2D:A0:45:33:79:2C:0A:05:69:C2:BD:9F:DD:CD X509v3 Authority Key Identifier: keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:82:73:68:aa:f0:8e:ff:e6:77:00:e7:fe:40:44:97:4d:a4: 7d:9c:81:25:cd:3f:c3:aa:d9:3e:05:fc:f5:1c:4a:c7:80:2f: e3:1a:10:f6:de:e3:86:2b:b6:92:af:90:53:10:14:d8:4c:83: 92:29:72:03:1a:a5:b7:48:be:bc:61:96:b4:52:a7:82:81:5c: ed:e2:b9:ea:bb:09:83:fd:21:ae:74:58:aa:61:65:85:de:7d: 21:b1:b4:1d:26:24:d0:a2:a4:9e:3e:34:c0:34:07:b2:a8:68: 54:92:f0:99:00:0b:b4:6d:8d:05:28:c9:cb:83:3c:c6:e5:14: 9d:dc:5c:97:cd:30:f9:06:7e:b8:80:2d:4b:96:6d:5b:f5:8d: 26:6d:29:2d:0a:c3:1e:34:95:11:30:e2:ea:ab:e9:11:87:6c: a6:d9:c4:58:33:e1:82:4a:db:41:f5:23:df:84:5f:c1:88:bf: 71:82:15:98:f7:88:1d:db:20:6a:4b:0d:a2:23:9a:9d:da:01: 31:62:a0:20:ff:55:fe:23:ee:e9:86:1d:6e:9d:ad:06:63:7a: 0b:3e:e8:65:37:17:5e:94:9d:43:ad:13:0f:ff:72:d7:ce:65: 56:bf:2a:39:66:f2:55:6b:45:ca:92:32:93:c2:8b:44:b2:05: 5a:ce:e4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsucCF70X0Z8wDJMno4I+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4 YTlmZGMwHhcNMjUxMTIyMTgwMDQ1WhcNMjUxMTIzMTgwMDQ1WjAzMTEwLwYDVQQD EygwMjAxZDYxMzIwN2YyZGEwNDUzMzc5MmMwYTA1NjljMmJkOWZkZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GjZpN0IOdQSKMd9FnRbEPQagJuw egoyrKvw+yYpKRUbzjZ+63F7KdCohkig1C6VkM6r3R9b5TIdRMJwGASdcG3x6DAL 97lEXZLi+t1EDR4eKxpgWsk1x7+VMzgtmuRaSaWQ+fZXw0qfIjRsMSXQ5EtV5AxL czefKDbfol8GftZ/hkGrY4cV8PoaD1lTgOaZ31wn+GhHh5nA3iilX3IJzSjpIAZG C7MHAG3NR5C5T7HCPqTCEii+OhDQNqHrh0XbnGAdKr4g8OODfxLPiZa+446Ww0UN D4FXmvcBWdewQgImW8R/VApciHzhOBM62w+8SQpU3x1uususHH7Woq9XSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIB1hMgfy2gRTN5LAoFacK9n93NMB8GA1UdIwQY MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoJzaKrw jv/mdwDn/kBEl02kfZyBJc0/w6rZPgX89RxKx4Av4xoQ9t7jhiu2kq+QUxAU2EyD kilyAxqlt0i+vGGWtFKngoFc7eK56rsJg/0hrnRYqmFlhd59IbG0HSYk0KKknj40 wDQHsqhoVJLwmQALtG2NBSjJy4M8xuUUndxcl80w+QZ+uIAtS5ZtW/WNJm0pLQrD HjSVETDi6qvpEYdsptnEWDPhgkrbQfUj34RfwYi/cYIVmPeIHdsgaksNoiOandoB MWKgIP9V/iPu6YYdbp2tBmN6Cz7oZTcXXpSdQ60TD/9y185lVr8qOWbyVWtFypIy k8KLRLIFWs7k7g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:30 2025 by rpki-client