This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json) Hash identifier: EBUTif/XtIUlAn7XbyC9wS4eB5FIGqOD3c51CUMXAJ8= Subject key identifier: 40:15:E3:54:E4:6C:72:3F:ED:C0:99:32:1F:8A:D6:23:5D:6A:76:0B Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019AF2AD6A36F47B9283A766B4DF6079FDCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft Manifest number: 048F Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: 85g2kVlw-PgdqHeeR9eVh-mfFSA.roa (hash: oQm3CbtlDIgURUMJx9pEjjzjgEzQrMItwbw8AbxJLEg=) 2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: 8GrjNmWNK3WS37pDOwmSAixd0dWDmQXGrXwU9qqX5Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6a:36:f4:7b:92:83:a7:66:b4:df:60:79:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=4015e354e46c723fedc099321f8ad6235d6a760b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:cc:58:ba:27:68:7e:f5:da:c7:33:4d:6a: 18:d3:4f:61:94:06:e8:44:93:50:cd:91:da:53:cd: dd:01:e3:84:4b:5f:1e:e7:71:b7:d8:44:56:92:f6: c3:d2:f0:da:36:1c:14:a1:cb:b1:74:84:65:76:d2: 02:4a:cc:5a:3f:f9:0b:67:a5:46:9c:a0:a3:00:f2: 2a:7e:a3:e7:f1:41:a5:0b:19:88:ed:88:78:2e:f4: 06:8b:e9:34:b1:a7:b8:8d:34:fc:f9:f5:74:af:44: 61:f4:d4:41:bb:65:8f:f7:3a:23:76:88:dd:25:43: 2f:39:de:08:1b:b2:ac:67:66:2c:43:3d:8e:a0:bc: a2:d7:7f:d6:53:9d:fd:42:f8:93:7a:51:49:6e:f6: aa:b1:5f:1e:9a:02:5b:f4:f8:6b:22:70:5e:61:1f: f4:1a:75:fa:8d:1c:99:26:f3:aa:45:ba:49:0d:04: 67:96:6e:1a:80:64:af:76:2a:e2:dd:fe:c7:14:29: 56:3c:2e:0c:33:c1:c7:b8:d0:ef:71:0a:02:39:38: e9:16:c9:81:20:02:ac:17:14:99:97:89:46:d2:f3: c6:62:94:6b:35:3d:cf:a8:72:6a:58:5d:85:85:90: d0:19:a0:97:6c:15:76:7c:02:3d:61:48:72:30:95: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:15:E3:54:E4:6C:72:3F:ED:C0:99:32:1F:8A:D6:23:5D:6A:76:0B X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6d:10:de:64:06:10:a2:d7:75:a0:ab:0b:3f:91:01:2b:70: 09:c1:b4:32:ae:4b:2c:01:76:6c:9e:f4:a2:71:72:66:1f:b8: 20:ac:56:bc:d0:32:f3:5a:7f:a5:f1:b3:42:55:74:cc:0b:70: 3f:2e:db:b2:a7:c6:b8:a0:c0:c8:53:3d:5f:fd:9a:c9:78:8d: 69:81:98:c5:cd:d0:89:d7:c7:00:0b:91:bc:9b:ae:f5:d4:fb: 52:c7:c2:d0:59:f1:28:98:78:04:8c:f9:9b:1f:6d:df:d2:72: cf:be:ee:82:05:46:63:a7:b6:d0:c1:1a:5c:3f:04:08:d6:36: 62:04:60:40:10:55:29:55:14:26:6c:b9:76:38:d0:23:40:b7: 8a:76:08:4e:2c:05:4a:04:c2:7b:d5:48:14:ca:60:84:ed:d6: 0a:0f:8b:08:21:0f:1d:37:a2:8a:99:a1:91:02:23:6a:12:d2: e5:2d:80:6d:b3:bf:0e:64:d2:93:d7:7b:63:5d:0e:04:3c:1d: 2e:29:9e:44:55:40:66:2d:35:f4:d0:79:b4:29:a3:db:b0:79: c9:ca:50:21:13:fc:e4:8d:ca:88:4b:9e:f8:cc:55:7b:61:94: 64:ff:ad:c5:66:37:84:9f:bb:c9:84:7d:0a:50:22:d1:ca:5f: d9:45:d9:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWo29HuSg6dmtN9gef3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg0MDE1ZTM1NGU0NmM3MjNmZWRjMDk5MzIxZjhhZDYyMzVkNmE3NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUzMWLonaH712sczTWoY009hlAbo RJNQzZHaU83dAeOES18e53G32ERWkvbD0vDaNhwUocuxdIRldtICSsxaP/kLZ6VG nKCjAPIqfqPn8UGlCxmI7Yh4LvQGi+k0sae4jTT8+fV0r0Rh9NRBu2WP9zojdojd JUMvOd4IG7KsZ2YsQz2OoLyi13/WU539QviTelFJbvaqsV8emgJb9PhrInBeYR/0 GnX6jRyZJvOqRbpJDQRnlm4agGSvdiri3f7HFClWPC4MM8HHuNDvcQoCOTjpFsmB IAKsFxSZl4lG0vPGYpRrNT3PqHJqWF2FhZDQGaCXbBV2fAI9YUhyMJXvwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAV41TkbHI/7cCZMh+K1iNdanYLMB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV20Q3mQG EKLXdaCrCz+RAStwCcG0Mq5LLAF2bJ70onFyZh+4IKxWvNAy81p/pfGzQlV0zAtw Py7bsqfGuKDAyFM9X/2ayXiNaYGYxc3QidfHAAuRvJuu9dT7UsfC0FnxKJh4BIz5 mx9t39Jyz77uggVGY6e20MEaXD8ECNY2YgRgQBBVKVUUJmy5djjQI0C3inYITiwF SgTCe9VIFMpghO3WCg+LCCEPHTeiipmhkQIjahLS5S2AbbO/DmTSk9d7Y10OBDwd LimeRFVAZi019NB5tCmj27B5ycpQIRP85I3KiEue+MxVe2GUZP+txWY3hJ+7yYR9 ClAi0cpf2UXZxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:23 2025 by rpki-client