This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json) Hash identifier: olu/N9xZd4kbU0YMtC2B0Dno3Bsfw8Yi4f6qDf62bAo= Subject key identifier: E7:D9:A8:DA:13:D5:FD:55:54:81:C3:D7:26:53:B7:9F:D1:4E:B2:75 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019B3231A3F90AEEAB43E9237BF2333576BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft Manifest number: 04B8 Signing time: Thu 18 Dec 2025 16:01:12 +0000 Manifest this update: Thu 18 Dec 2025 16:01:12 +0000 Manifest next update: Fri 19 Dec 2025 16:01:12 +0000 Files and hashes: 1: 5h63SaxNOR-ikBa8qbYQgrq2NHI.roa (hash: aOvUDp+jGrnIyS18ub1nFjpUSp2FPZ4VntW0ZKOxZU0=) 2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: NXAgnaHr2wVN00E6WpQ4skscIoO/gaV1dPsoHB22Ltc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:a3:f9:0a:ee:ab:43:e9:23:7b:f2:33:35:76:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 18 16:01:12 2025 GMT Not After : Dec 19 16:01:12 2025 GMT Subject: CN=e7d9a8da13d5fd555481c3d72653b79fd14eb275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:5f:f3:24:3c:8e:a6:83:83:4d:92:80:dd: 82:e6:32:2c:7a:55:3e:7a:0a:f1:79:4b:69:10:93: 70:b0:24:8c:ee:d3:71:b8:fa:92:1b:4a:e4:d8:ef: 05:3a:2e:6b:67:29:4e:b1:56:9e:31:7b:11:f4:6f: c0:91:a0:ff:ff:b5:cb:04:df:c7:2a:03:8b:61:2e: f8:20:cb:83:76:4f:ff:76:23:d5:39:18:d1:9e:bb: 78:0a:90:ac:10:31:ac:54:04:87:65:50:f6:fd:f5: 85:66:d8:2d:73:11:14:3f:f3:22:7a:de:5c:ab:c3: 58:a4:9c:01:86:6b:31:bc:7f:93:23:28:e6:d5:09: 23:1a:28:75:50:f7:d8:d1:91:ee:7f:a2:b8:36:e3: 2a:6b:53:06:e4:d7:53:58:6e:ba:24:93:4f:94:94: c8:2e:52:c4:e3:bb:b5:1d:92:d7:90:1c:49:b9:c9: a0:ce:9b:64:52:da:48:76:2f:2b:93:87:4a:d5:3b: 75:dd:10:7e:21:82:11:4e:ec:a8:81:eb:08:3d:21: 50:26:24:c6:b8:93:9f:c9:31:78:3a:29:c9:f3:d8: 67:8b:88:eb:16:97:db:91:87:c9:33:d4:26:bc:d7: 75:ce:db:c1:be:cb:fc:95:ec:fb:64:7c:0e:57:8d: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:A8:DA:13:D5:FD:55:54:81:C3:D7:26:53:B7:9F:D1:4E:B2:75 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:33:94:33:46:7a:11:80:55:1c:b7:e7:9b:0a:49:2b:2c: 95:16:0a:f9:ae:5f:31:e4:31:32:f6:26:db:14:8e:54:17:7b: 2d:00:d3:c8:6a:6f:7a:ad:ca:9b:c0:a9:e9:1e:c7:7a:5c:20: c1:7b:46:52:cc:bc:a8:ac:ee:2a:d7:9c:a6:9d:a8:94:a7:10: 5d:ca:ba:6d:07:37:7c:36:2e:4b:4b:ea:6a:f0:d4:38:f3:bb: bf:86:8b:6b:ce:80:40:c4:92:c1:e9:20:cb:29:80:5f:02:6a: cc:72:4d:8f:ff:3f:f3:93:cb:56:9f:a5:2b:44:36:ec:96:60: bb:56:65:58:17:88:9c:a7:98:48:66:60:34:16:64:48:08:d9: 25:16:30:f7:a0:71:7e:64:f9:bc:81:67:c8:b6:bc:a3:b1:fe: bf:84:38:6d:39:85:ee:6f:f5:25:7a:de:60:59:61:af:be:05: 75:11:07:59:d3:fa:f4:11:03:95:35:7b:e0:37:ed:70:05:e9: 75:42:7a:68:5e:ec:45:05:34:2f:ca:99:01:b8:3f:04:2f:ad: c0:f9:b0:f7:5d:db:87:2e:04:34:36:5e:d1:b6:13:b6:0b:20: 6d:bb:fc:00:1b:03:c6:7c:c9:23:21:04:dc:5f:2b:d1:e2:e3: 0d:6f:60:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMaP5Cu6rQ+kje/IzNXa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjE4MTYwMTEyWhcNMjUxMjE5MTYwMTEyWjAzMTEwLwYDVQQD EyhlN2Q5YThkYTEzZDVmZDU1NTQ4MWMzZDcyNjUzYjc5ZmQxNGViMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdf8yQ8jqaDg02SgN2C5jIselU+ egrxeUtpEJNwsCSM7tNxuPqSG0rk2O8FOi5rZylOsVaeMXsR9G/AkaD//7XLBN/H KgOLYS74IMuDdk//diPVORjRnrt4CpCsEDGsVASHZVD2/fWFZtgtcxEUP/Miet5c q8NYpJwBhmsxvH+TIyjm1QkjGih1UPfY0ZHuf6K4NuMqa1MG5NdTWG66JJNPlJTI LlLE47u1HZLXkBxJucmgzptkUtpIdi8rk4dK1Tt13RB+IYIRTuyogesIPSFQJiTG uJOfyTF4OinJ89hni4jrFpfbkYfJM9QmvNd1ztvBvsv8lez7ZHwOV41ZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfZqNoT1f1VVIHD1yZTt5/RTrJ1MB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeAzlDNG ehGAVRy355sKSSsslRYK+a5fMeQxMvYm2xSOVBd7LQDTyGpveq3Km8Cp6R7Helwg wXtGUsy8qKzuKtecpp2olKcQXcq6bQc3fDYuS0vqavDUOPO7v4aLa86AQMSSwekg yymAXwJqzHJNj/8/85PLVp+lK0Q27JZgu1ZlWBeInKeYSGZgNBZkSAjZJRYw96Bx fmT5vIFnyLa8o7H+v4Q4bTmF7m/1JXreYFlhr74FdREHWdP69BEDlTV74DftcAXp dUJ6aF7sRQU0L8qZAbg/BC+twPmw913bhy4ENDZe0bYTtgsgbbv8ABsDxnzJIyEE 3F8r0eLjDW9gfw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:31 2025 by rpki-client