This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: 7+DQHQg5RhRu9o/DrvnavUP8wgR02X3qtmFlMv4fQ3Q= Subject key identifier: A2:CF:6D:C1:55:C9:9A:25:16:81:CD:E7:7E:C0:D8:18:7D:21:6A:C1 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019AF352512B68F3E6248594D20E7E56D413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1791 Signing time: Sat 06 Dec 2025 11:00:49 +0000 Manifest this update: Sat 06 Dec 2025 11:00:49 +0000 Manifest next update: Sun 07 Dec 2025 11:00:49 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa (hash: I/8Gokk6XG3QeOAJYtW+jvmWnIyDjJaFgsMUIbtc+Tw=) 5: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 6: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 7: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 8: Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa (hash: MCR5uR19iNBi1hjIv4S5IsAnt3QNxZlCjl9ClZPKKuo=) 9: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 2ugBlMaXOEapskvqdKXx37EqVYiOKicX5WRpTGRBp7I=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:51:2b:68:f3:e6:24:85:94:d2:0e:7e:56:d4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 6 11:00:49 2025 GMT Not After : Dec 7 11:00:49 2025 GMT Subject: CN=a2cf6dc155c99a251681cde77ec0d8187d216ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:23:46:4d:61:b4:5a:4d:b9:39:c9:1f:21: ad:dd:87:c8:42:3b:3b:e7:41:f3:8c:0f:b3:64:c0: a2:7e:bf:53:d5:4f:2e:ce:d5:55:0b:13:e4:12:90: 12:6f:e0:e6:bc:97:29:81:72:26:82:94:c7:04:7c: 68:50:b5:49:02:30:70:3a:cd:84:1a:d2:77:bf:18: b6:6b:bb:71:83:e0:e4:ef:ea:56:fb:2b:94:9c:a8: f3:ad:d7:ef:a1:8c:ea:61:2e:be:1e:08:5b:e3:e9: 3b:e1:5a:c4:ce:1f:6f:b4:75:e1:76:d0:20:45:3a: 5f:ac:11:dd:86:21:15:fa:4c:48:92:59:52:b4:05: d6:04:7f:40:34:5f:a7:c1:e6:1f:82:ca:aa:b4:7a: 5a:f2:b0:46:a5:3c:30:9f:2e:78:4f:98:aa:35:d4: d2:cb:13:a9:8f:10:f4:bb:76:57:65:ea:bb:ee:e7: 5b:7f:3d:db:81:90:88:1c:44:cb:a6:e4:c5:4d:3c: 63:88:7a:a4:90:01:53:79:04:8d:a6:cb:31:f9:c8: 95:af:08:c3:af:eb:46:8d:81:db:bc:9c:f7:ab:f2: 67:11:74:23:8b:b6:67:ce:c9:90:7f:38:f4:ff:9c: 16:6b:47:5d:a2:fd:62:de:14:2e:6a:ce:bd:a0:5b: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CF:6D:C1:55:C9:9A:25:16:81:CD:E7:7E:C0:D8:18:7D:21:6A:C1 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:94:ac:29:38:61:c8:ed:af:32:b7:36:2c:06:10:e5:f8:de: dd:5d:c3:b0:d5:1e:a1:59:b9:c5:52:f2:cc:dc:80:79:bd:c5: d7:95:9a:e0:b9:6b:ed:10:dc:7e:06:d5:e3:97:83:69:6f:24: 7e:5c:c0:81:ac:93:0c:28:32:13:fe:e8:a7:f2:e0:89:9e:89: 35:9a:ce:27:0c:e2:c5:1a:b2:24:55:f7:e4:41:ad:a2:15:55: 82:a8:66:c1:9f:fd:a9:65:59:93:56:dc:b7:86:03:ba:e9:a3: ed:a9:b9:1a:2e:f4:43:a0:3e:b0:63:c7:05:65:a4:d9:94:71: ba:06:ef:7b:e5:26:7c:87:d6:49:e7:ef:c5:42:d6:f6:e1:e8: 1f:21:fb:9f:e8:4e:b4:e0:e4:89:03:53:7f:02:9c:6d:b8:3d: ea:fa:42:5b:70:a3:ac:70:c0:9a:e8:de:b4:37:3b:59:ea:88: 1c:c0:81:d8:cc:ad:03:db:aa:84:c6:85:c5:c4:ce:be:0c:69: ed:e6:18:5e:1b:5e:89:71:ab:0d:42:7a:09:21:f1:cf:22:a9: 0c:f0:9f:4a:0a:51:60:a2:e3:1c:70:b5:c3:0e:5a:fe:74:4f: 3e:bb:85:d5:4a:08:0c:b0:01:bd:fb:2c:8c:5b:c5:61:b1:9e: 97:8e:09:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlEraPPmJIWU0g5+VtQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjA2MTEwMDQ5WhcNMjUxMjA3MTEwMDQ5WjAzMTEwLwYDVQQD EyhhMmNmNmRjMTU1Yzk5YTI1MTY4MWNkZTc3ZWMwZDgxODdkMjE2YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCUjRk1htFpNuTnJHyGt3YfIQjs7 50HzjA+zZMCifr9T1U8uztVVCxPkEpASb+DmvJcpgXImgpTHBHxoULVJAjBwOs2E GtJ3vxi2a7txg+Dk7+pW+yuUnKjzrdfvoYzqYS6+Hghb4+k74VrEzh9vtHXhdtAg RTpfrBHdhiEV+kxIkllStAXWBH9ANF+nweYfgsqqtHpa8rBGpTwwny54T5iqNdTS yxOpjxD0u3ZXZeq77udbfz3bgZCIHETLpuTFTTxjiHqkkAFTeQSNpssx+ciVrwjD r+tGjYHbvJz3q/JnEXQji7ZnzsmQfzj0/5wWa0ddov1i3hQuas69oFu4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLPbcFVyZolFoHN537A2Bh9IWrBMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5SsKThh yO2vMrc2LAYQ5fje3V3DsNUeoVm5xVLyzNyAeb3F15Wa4Llr7RDcfgbV45eDaW8k flzAgayTDCgyE/7op/LgiZ6JNZrOJwzixRqyJFX35EGtohVVgqhmwZ/9qWVZk1bc t4YDuumj7am5Gi70Q6A+sGPHBWWk2ZRxugbve+UmfIfWSefvxULW9uHoHyH7n+hO tODkiQNTfwKcbbg96vpCW3CjrHDAmujetDc7WeqIHMCB2MytA9uqhMaFxcTOvgxp 7eYYXhteiXGrDUJ6CSHxzyKpDPCfSgpRYKLjHHC1ww5a/nRPPruF1UoIDLABvfss jFvFYbGel44JLA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:07 2025 by rpki-client