This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json) Hash identifier: fMmPWCgE+mj1xEWxOaiLbJii3DLZYFChOEO0E0YS2I4= Subject key identifier: EC:36:20:CF:1E:AD:AF:D2:15:3D:F1:AC:42:86:4E:DC:35:DE:2B:AB Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1 Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1 Certificate serial: 019AF208E8C5DB6A6A70AF823A43FB114CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft Manifest number: 0FBD Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=) 2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: 1/V1hTqw1XXEd5ElzfsCXsD9DlPc+S+sY+YV1EXYdoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e8:c5:db:6a:6a:70:af:82:3a:43:fb:11:4c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=ec3620cf1eadafd2153df1ac42864edc35de2bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:fa:18:c4:8b:7a:cd:b7:f4:57:e7:47:7e: 4d:0b:49:61:d9:91:65:49:12:7d:4e:dc:e8:3d:34: f4:84:c6:33:0f:6b:51:bd:51:6b:c8:10:9f:b4:95: 18:7c:99:dc:8f:a3:46:ef:c9:d8:a9:78:2d:32:49: 17:ff:4c:2d:e6:79:56:69:27:28:25:c2:61:80:bd: 5d:5e:f3:40:ee:be:64:8f:d9:ee:3d:ef:a2:ea:d2: 48:21:10:43:21:c3:1b:56:b0:e3:a2:e3:26:07:36: 52:e7:d5:c8:46:57:84:2e:91:65:91:86:f2:fb:87: d2:7a:96:31:30:4e:72:2d:09:d0:9b:a3:97:80:10: dd:81:81:6c:a3:ca:c7:1f:47:df:fa:89:ef:2f:14: 49:4d:e8:ae:bc:0a:4b:e8:5e:51:6e:d7:9b:59:17: b0:b9:6f:dc:76:76:2e:6c:80:e8:a2:54:10:e7:30: ec:37:33:88:ed:5e:d1:9c:99:6f:53:87:ee:64:eb: d2:8d:39:a1:39:b6:9b:8c:cc:fa:8d:cf:2c:e7:3c: f9:e3:12:1f:9a:b0:80:fe:c6:4d:7f:7d:28:ac:09: 42:a9:2f:d5:10:e6:e0:5e:ad:e9:42:ff:20:01:b1: d9:92:7f:09:d2:77:58:dc:4e:1d:d0:df:ed:b6:e4: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:20:CF:1E:AD:AF:D2:15:3D:F1:AC:42:86:4E:DC:35:DE:2B:AB X509v3 Authority Key Identifier: keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:41:6e:12:bb:e4:04:a6:01:88:59:7c:c7:7a:5e:d8:96:ce: 60:16:ee:e7:aa:be:9a:34:1b:5c:d0:4f:9a:16:3d:ed:41:65: 7d:df:da:fb:2f:4e:91:ca:76:ff:db:00:97:d7:70:1b:7e:b6: 1f:22:27:95:60:39:44:fa:86:1b:ec:e5:a0:17:bd:ad:1d:0a: c4:2c:2e:46:a6:41:c1:5a:9d:a7:1c:f8:48:10:7a:26:5a:87: 5c:5f:bb:ad:26:3f:76:28:fc:ca:8d:c3:a6:b5:b7:81:b5:8e: ff:57:6e:5a:a6:41:42:6a:4d:bc:d8:6e:ef:ce:cf:6d:ed:3c: 87:18:46:29:d6:9e:2a:1d:ed:ee:a7:79:36:b3:09:20:d3:eb: 66:41:b0:b9:b6:87:2a:2c:36:21:b6:46:a5:aa:c1:7e:f7:14: 3d:ca:1a:ac:98:19:26:c1:da:99:4a:94:3e:b3:49:64:be:96: 4a:29:bc:30:e2:fa:3e:49:78:f3:25:32:b1:76:62:18:49:f6: 52:ea:c7:fc:65:19:01:cb:e5:c2:09:51:c0:91:e8:90:dd:89: 3a:84:9c:a8:3c:24:2c:51:39:20:3a:9c:d3:6e:5d:8c:5a:90: e5:7e:d6:a0:fc:86:b9:f9:14:c7:0f:88:30:d2:36:81:ac:33: 94:d8:50:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOjF22pqcK+COkP7EUzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTEyYzgwNGE3ZjRhNzRjZTU4Y2M3MWM5OTRmNWE5ZDU2 MTIyYjEwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD EyhlYzM2MjBjZjFlYWRhZmQyMTUzZGYxYWM0Mjg2NGVkYzM1ZGUyYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRP6GMSLes239FfnR35NC0lh2ZFl SRJ9TtzoPTT0hMYzD2tRvVFryBCftJUYfJncj6NG78nYqXgtMkkX/0wt5nlWaSco JcJhgL1dXvNA7r5kj9nuPe+i6tJIIRBDIcMbVrDjouMmBzZS59XIRleELpFlkYby +4fSepYxME5yLQnQm6OXgBDdgYFso8rHH0ff+onvLxRJTeiuvApL6F5RbtebWRew uW/cdnYubIDoolQQ5zDsNzOI7V7RnJlvU4fuZOvSjTmhObabjMz6jc8s5zz54xIf mrCA/sZNf30orAlCqS/VEObgXq3pQv8gAbHZkn8J0ndY3E4d0N/ttuRHJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw2IM8era/SFT3xrEKGTtw13iurMB8GA1UdIwQY MBaAFLkRLIBKf0p0zljMccmU9anVYSKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMt NWUyYzlkYWI4NDAzLzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMtNWUyYzlkYWI4NDAz LzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkFuErvk BKYBiFl8x3pe2JbOYBbu56q+mjQbXNBPmhY97UFlfd/a+y9Okcp2/9sAl9dwG362 HyInlWA5RPqGG+zloBe9rR0KxCwuRqZBwVqdpxz4SBB6JlqHXF+7rSY/dij8yo3D prW3gbWO/1duWqZBQmpNvNhu787Pbe08hxhGKdaeKh3t7qd5NrMJINPrZkGwubaH Kiw2IbZGparBfvcUPcoarJgZJsHamUqUPrNJZL6WSim8MOL6Pkl48yUysXZiGEn2 UurH/GUZAcvlwglRwJHokN2JOoScqDwkLFE5IDqc025djFqQ5X7WoPyGufkUxw+I MNI2gawzlNhQXw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:30 2025 by rpki-client