This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft File: uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json) Hash identifier: 5QR0Br6HfaOik8+FYn4bZ3XSgaRsjNvnSOXtWQwRhxM= Subject key identifier: A0:A8:35:97:40:1F:C0:DF:16:E4:FC:2A:18:34:9A:61:51:FB:EB:12 Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9 Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9 Certificate serial: 019B32312E0EF13D4DD453AF9E079CBF8E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft Manifest number: 123A Signing time: Thu 18 Dec 2025 16:00:42 +0000 Manifest this update: Thu 18 Dec 2025 16:00:42 +0000 Manifest next update: Fri 19 Dec 2025 16:00:42 +0000 Files and hashes: 1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=) 2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: jKw0JIvfuR70PkWOns4S4Y7heoftDm5Kpb6OlPQO6+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:2e:0e:f1:3d:4d:d4:53:af:9e:07:9c:bf:8e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9 Validity Not Before: Dec 18 16:00:42 2025 GMT Not After : Dec 19 16:00:42 2025 GMT Subject: CN=a0a83597401fc0df16e4fc2a18349a6151fbeb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:22:1b:98:8d:f0:93:ef:17:ef:c1:65:66: 50:20:d5:06:3c:6c:08:4b:43:84:44:98:94:32:cb: a3:4f:d0:8b:2c:ea:e9:3e:8e:02:30:84:ee:1b:01: 8e:80:33:ea:d4:d1:6e:3d:8f:18:a9:6d:70:f1:3b: d4:a3:fe:99:bb:8f:21:17:e7:fa:20:a9:47:74:c5: 76:07:c3:cb:ba:45:20:dd:d6:c3:ed:fb:03:b4:32: 1f:96:53:0d:a8:52:b8:ae:19:f5:e0:e3:8b:fe:84: 34:2d:03:7f:9b:12:fb:35:62:0b:6d:7a:c7:43:d8: 6c:39:57:6f:29:85:94:28:71:f9:4a:d7:c4:01:ad: fc:eb:d0:71:10:74:42:b3:5a:b0:55:50:34:d6:43: 49:a3:11:d3:a5:08:c8:ec:b3:59:df:03:b0:9e:c9: 3a:65:d7:f8:6f:0a:3e:ee:d2:62:70:a6:ba:fa:3b: b1:b6:e1:92:d4:21:25:40:ad:db:f7:2a:92:18:24: ab:cd:b9:5f:27:c0:a5:5c:0c:31:91:b2:7f:6d:61: 23:2b:45:ff:ae:93:e4:f7:2b:76:98:9c:3e:36:3c: 62:a5:9c:5a:96:96:93:b2:44:da:60:e8:e8:5e:65: cb:47:d5:34:96:1a:9d:df:cc:1f:a8:dd:1f:11:7d: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:35:97:40:1F:C0:DF:16:E4:FC:2A:18:34:9A:61:51:FB:EB:12 X509v3 Authority Key Identifier: keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3f:93:35:85:e3:f6:e3:11:13:26:4a:26:78:5a:ca:79:7a: c4:78:ed:d5:59:65:68:23:52:24:a1:5a:de:57:ee:e6:d5:05: 87:8f:82:b0:5b:6b:ea:10:f2:0a:d3:75:8c:45:a6:7b:59:7a: e5:72:ea:24:e4:cd:36:24:bb:72:70:97:bf:c0:73:e7:7b:bc: f7:ea:12:fb:bb:e5:2b:51:06:3a:f4:4e:de:49:8e:7d:ee:c6: 77:2c:37:10:ed:22:22:60:ca:7f:03:56:dc:ba:76:5c:d3:a3: 93:87:b4:7b:dc:c2:18:c0:88:c7:58:78:61:98:28:af:94:c8: 4d:aa:16:24:30:a7:c6:31:e1:64:36:7b:40:72:33:2a:e0:53: c6:0c:13:f1:72:cf:01:43:23:71:19:7f:6e:4e:7f:aa:0b:d7: dd:1e:74:08:7a:d9:b0:55:b1:c8:cc:21:02:bc:4f:fc:21:fc: 54:1e:cd:c3:d3:55:86:f3:1a:4a:e8:2e:8d:af:33:9b:4f:74: 83:45:38:37:0c:13:a2:05:13:98:e9:de:d0:86:e0:e4:18:3c: 8e:c4:9b:99:57:bf:70:8d:9b:27:b5:96:4d:4f:88:0e:66:0a: 6b:5f:bf:29:6a:03:19:db:89:21:d8:58:62:da:9c:e5:c4:ba: 6b:c4:99:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMS4O8T1N1FOvngecv45IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4 ODljZDkwHhcNMjUxMjE4MTYwMDQyWhcNMjUxMjE5MTYwMDQyWjAzMTEwLwYDVQQD EyhhMGE4MzU5NzQwMWZjMGRmMTZlNGZjMmExODM0OWE2MTUxZmJlYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIAiG5iN8JPvF+/BZWZQINUGPGwI S0OERJiUMsujT9CLLOrpPo4CMITuGwGOgDPq1NFuPY8YqW1w8TvUo/6Zu48hF+f6 IKlHdMV2B8PLukUg3dbD7fsDtDIfllMNqFK4rhn14OOL/oQ0LQN/mxL7NWILbXrH Q9hsOVdvKYWUKHH5StfEAa3869BxEHRCs1qwVVA01kNJoxHTpQjI7LNZ3wOwnsk6 Zdf4bwo+7tJicKa6+juxtuGS1CElQK3b9yqSGCSrzblfJ8ClXAwxkbJ/bWEjK0X/ rpPk9yt2mJw+NjxipZxalpaTskTaYOjoXmXLR9U0lhqd38wfqN0fEX143wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCoNZdAH8DfFuT8Khg0mmFR++sSMB8GA1UdIwQY MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt NWNlYzM2ZmY4ZTczLzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID+TNYXj 9uMREyZKJnhaynl6xHjt1VllaCNSJKFa3lfu5tUFh4+CsFtr6hDyCtN1jEWme1l6 5XLqJOTNNiS7cnCXv8Bz53u89+oS+7vlK1EGOvRO3kmOfe7Gdyw3EO0iImDKfwNW 3Lp2XNOjk4e0e9zCGMCIx1h4YZgor5TITaoWJDCnxjHhZDZ7QHIzKuBTxgwT8XLP AUMjcRl/bk5/qgvX3R50CHrZsFWxyMwhArxP/CH8VB7Nw9NVhvMaSuguja8zm090 g0U4NwwTogUTmOne0Ibg5Bg8jsSbmVe/cI2bJ7WWTU+IDmYKa1+/KWoDGduJIdhY Ytqc5cS6a8SZiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 21:47:11 2025 by rpki-client