This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json) Hash identifier: w5k0ZSrpeUU2s1noDzJPd5p95YR+i26hTUUZnszJaRs= Subject key identifier: 38:AC:30:CD:68:11:A1:A6:BC:88:16:D4:41:2F:07:39:78:A2:E7:EB Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa Certificate serial: 019AF088951E8F43B28C6860B664E4D612B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft Manifest number: 01BA Signing time: Fri 05 Dec 2025 22:01:14 +0000 Manifest this update: Fri 05 Dec 2025 22:01:14 +0000 Manifest next update: Sat 06 Dec 2025 22:01:14 +0000 Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=) 2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=) 3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: Rqljk/FfMnHi05NWGFV3AK9ATqPq7WbLU+Xt4/pHkug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:95:1e:8f:43:b2:8c:68:60:b6:64:e4:d6:12:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa Validity Not Before: Dec 5 22:01:14 2025 GMT Not After : Dec 6 22:01:14 2025 GMT Subject: CN=38ac30cd6811a1a6bc8816d4412f073978a2e7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:e9:6d:46:d0:29:48:86:1d:a5:8e:2c:06: 39:29:61:47:51:11:c9:3b:75:ee:69:15:38:58:a3: d2:c1:dc:32:10:f5:6e:00:69:66:fc:05:4a:02:9e: 38:9c:0a:46:b2:4f:d6:17:9f:27:3a:7d:af:f3:70: 75:0f:d5:1c:46:fb:e4:47:e1:d1:cc:c3:bc:e7:67: 23:c5:c7:09:dd:c0:2f:bc:89:f0:00:0e:98:92:c9: 30:1a:ba:e2:58:99:ba:eb:93:58:67:f7:d6:bb:17: 04:c5:e9:27:5b:81:45:a9:bc:6b:4d:9b:62:72:15: 47:0d:b8:a9:1b:b7:3d:98:a6:07:e8:9b:ca:3c:f3: 72:8e:d0:9e:83:bf:9a:ad:dc:14:77:59:64:b5:43: ed:1f:25:9c:de:24:0b:86:a8:3b:0a:11:2f:8c:e3: 07:bb:3c:36:34:49:25:18:08:77:ae:be:72:c5:3e: e6:6a:71:b7:9a:a3:58:c7:9a:24:cc:4d:1e:8a:87: 5e:fc:ee:7c:9a:7a:5a:bf:a8:4a:36:f3:3a:20:fa: 6b:02:d7:ad:54:ca:3b:f3:d7:f7:fc:af:2f:77:23: e6:44:b4:80:41:4f:f5:85:4c:11:e9:3f:c7:82:df: 51:96:5c:e9:5e:e7:93:00:ad:89:67:bb:f2:e3:27: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AC:30:CD:68:11:A1:A6:BC:88:16:D4:41:2F:07:39:78:A2:E7:EB X509v3 Authority Key Identifier: keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:50:7d:d4:69:54:ec:36:f2:c6:02:1f:34:fa:78:64:d0:98: 8f:b0:7a:0d:22:f9:0e:a6:94:79:47:fb:43:dc:a1:83:d7:15: fc:d6:f6:f8:ec:91:c0:cb:ed:bd:3c:ad:b4:56:3e:5f:02:30: cd:02:62:3b:5d:2b:21:b6:78:d4:2c:07:53:44:a1:9f:98:2c: e4:ad:9f:77:03:3b:8e:4a:5e:83:98:8f:a8:de:f5:85:f6:3e: 65:15:18:be:e5:a9:e0:7f:c6:ce:ca:61:b3:89:5a:53:e7:80: 3f:f8:2f:d6:ed:2b:8b:26:d3:10:35:aa:cb:8b:1f:38:d8:57: fe:b6:27:58:37:a0:0f:fa:bb:8b:f4:e7:ed:a3:a0:6a:bb:d1: ec:04:28:e1:74:5c:96:00:f7:e6:24:b9:ca:ae:95:44:dc:fd: b3:15:0f:50:1b:81:86:6f:3d:a6:3c:46:c5:0e:db:50:c2:f9: d8:c5:b0:a2:2d:c8:7d:3f:4d:f3:dc:a4:91:ec:7d:3e:a0:06: f4:9e:8c:96:79:5f:31:29:86:23:e9:de:5e:4a:25:f4:8d:b2: dd:fd:7b:c6:97:9c:37:c4:13:6e:5c:78:89:69:bd:2c:84:15: 61:fe:cc:c3:da:f0:90:cb:b6:76:2e:6e:d7:81:0a:07:73:6b: 8f:47:8f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJUej0OyjGhgtmTk1hK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWFlNmFkNGJiMjc2MmUyMTk0ZTVkZjUxY2QwZDJjZDNl NjljYWEwHhcNMjUxMjA1MjIwMTE0WhcNMjUxMjA2MjIwMTE0WjAzMTEwLwYDVQQD EygzOGFjMzBjZDY4MTFhMWE2YmM4ODE2ZDQ0MTJmMDczOTc4YTJlN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNTpbUbQKUiGHaWOLAY5KWFHURHJ O3XuaRU4WKPSwdwyEPVuAGlm/AVKAp44nApGsk/WF58nOn2v83B1D9UcRvvkR+HR zMO852cjxccJ3cAvvInwAA6YkskwGrriWJm665NYZ/fWuxcExeknW4FFqbxrTZti chVHDbipG7c9mKYH6JvKPPNyjtCeg7+ardwUd1lktUPtHyWc3iQLhqg7ChEvjOMH uzw2NEklGAh3rr5yxT7manG3mqNYx5okzE0eiode/O58mnpav6hKNvM6IPprAtet VMo789f3/K8vdyPmRLSAQU/1hUwR6T/Hgt9RllzpXueTAK2JZ7vy4yeFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDisMM1oEaGmvIgW1EEvBzl4oufrMB8GA1UdIwQY MBaAFJLq5q1LsnYuIZTl31HNDSzT5pyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWIt N2U5NzY1MGQwZjg2LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWItN2U5NzY1MGQwZjg2 LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVB91GlU 7DbyxgIfNPp4ZNCYj7B6DSL5DqaUeUf7Q9yhg9cV/Nb2+OyRwMvtvTyttFY+XwIw zQJiO10rIbZ41CwHU0Shn5gs5K2fdwM7jkpeg5iPqN71hfY+ZRUYvuWp4H/Gzsph s4laU+eAP/gv1u0riybTEDWqy4sfONhX/rYnWDegD/q7i/Tn7aOgarvR7AQo4XRc lgD35iS5yq6VRNz9sxUPUBuBhm89pjxGxQ7bUML52MWwoi3IfT9N89ykkex9PqAG 9J6MlnlfMSmGI+neXkol9I2y3f17xpecN8QTblx4iWm9LIQVYf7Mw9rwkMu2di5u 14EKB3Nrj0ePvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:02 2025 by rpki-client