This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json) Hash identifier: V2YK7HOsL6Qif60+YFO10LVEayHtvLH+Cn6WyGlyHFU= Subject key identifier: 8E:47:8C:04:63:3E:F3:E3:62:A9:46:FF:78:C6:BD:D9:3D:64:02:F6 Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Certificate serial: 019AF2ADC74541B9A89450F23235D03621CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 08:01:06 +0000 Manifest this update: Sat 06 Dec 2025 08:01:06 +0000 Manifest next update: Sun 07 Dec 2025 08:01:06 +0000 Files and hashes: 1: NBFkOVFjhr5cFEclo5MbI_qhtaE.roa (hash: aEnSyjmzjCXkq9QNcUbxZtFecm4VYBNFEkBBtcfxmSI=) 2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: H/+0Oc9bNw6ynUMmsQB8lZmOniHqXkC62zAvey5cpmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c7:45:41:b9:a8:94:50:f2:32:35:d0:36:21:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Validity Not Before: Dec 6 08:01:06 2025 GMT Not After : Dec 7 08:01:06 2025 GMT Subject: CN=8e478c04633ef3e362a946ff78c6bdd93d6402f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:56:82:b8:3f:bf:b5:bc:de:f7:1e:74:40: c5:7e:37:d0:9b:5b:f9:78:d6:b8:51:c8:48:ec:08: 97:da:f3:4c:3d:7b:c9:68:9c:2e:16:52:5e:25:0c: 23:77:28:21:c8:06:e4:cf:08:5e:6a:0f:35:0e:14: 23:48:41:08:17:30:19:16:d2:d8:e3:8f:5a:e0:78: aa:fb:56:a8:70:da:78:ee:ba:bf:04:32:b7:52:ed: 37:e5:25:3c:69:03:ba:d3:97:f0:be:44:d9:81:49: 7d:54:66:1b:fd:c8:d6:10:9a:42:9b:60:bf:88:46: 17:3b:d1:6e:77:f0:a6:32:25:b7:6b:dc:9d:d7:d4: 9f:e5:1e:7a:bb:7d:9e:08:96:bd:23:bc:53:d2:4a: f6:22:1f:05:07:b0:17:a8:73:63:c3:38:3a:a9:4b: 88:7e:30:c2:4c:2f:a7:80:7a:b8:32:df:df:fa:c9: 26:17:a1:67:d4:92:6b:a1:4f:24:75:e9:8e:75:3d: 92:e2:61:25:2f:57:61:98:72:7f:98:45:e6:ca:63: ba:ea:90:ae:45:47:bd:8f:8c:13:d5:66:bd:53:e5: de:a1:9e:bd:f1:ed:00:2f:88:2e:a7:0c:26:8d:02: c1:22:3e:ea:6b:37:49:6e:9c:ce:15:24:48:13:bf: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:8C:04:63:3E:F3:E3:62:A9:46:FF:78:C6:BD:D9:3D:64:02:F6 X509v3 Authority Key Identifier: keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:42:03:f6:a5:0a:40:04:52:cb:69:93:0d:65:ab:fa:7a:e9: 58:38:43:b7:4f:45:e0:82:b3:7b:a8:5a:bf:30:ef:d0:32:54: 06:c8:57:cf:5f:21:90:65:15:be:ca:c5:09:1c:f7:a0:83:9a: 46:52:20:dc:63:92:27:95:7c:d3:3d:1c:c2:8e:85:71:66:4e: 40:32:e7:a6:ee:a0:45:31:67:c1:65:34:ef:ab:fd:2f:57:98: 5d:67:72:2e:7b:ff:d8:0f:f1:81:43:da:45:e1:b1:27:42:ea: 5d:22:a3:4e:94:29:07:e3:54:91:5f:8e:4f:e1:35:c4:28:1d: 4a:61:5e:20:8f:97:37:7a:9b:48:4a:70:e8:ba:f8:e8:1f:fe: 90:1b:73:5c:54:dc:5f:f7:bf:65:bf:95:fb:c1:67:4f:4e:7b: 53:ad:8e:0a:5e:9d:b4:01:3e:37:85:10:4b:ac:3b:2f:8b:83: 3c:b0:16:49:be:d4:4f:55:74:41:16:ce:e7:79:1d:7c:d2:33: 2f:6e:33:0a:c1:57:0b:09:ac:38:d4:92:a7:05:f6:85:69:1d: 8c:a4:04:0c:46:a8:13:00:90:4d:9f:02:a2:f1:13:25:9f:a8: a0:df:96:77:23:a7:a3:68:72:5c:fe:41:be:be:c9:79:a3:4b: f2:76:74:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcdFQbmolFDyMjXQNiHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw NmVhZjIwHhcNMjUxMjA2MDgwMTA2WhcNMjUxMjA3MDgwMTA2WjAzMTEwLwYDVQQD Eyg4ZTQ3OGMwNDYzM2VmM2UzNjJhOTQ2ZmY3OGM2YmRkOTNkNjQwMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJWgrg/v7W83vcedEDFfjfQm1v5 eNa4UchI7AiX2vNMPXvJaJwuFlJeJQwjdyghyAbkzwheag81DhQjSEEIFzAZFtLY 449a4Hiq+1aocNp47rq/BDK3Uu035SU8aQO605fwvkTZgUl9VGYb/cjWEJpCm2C/ iEYXO9Fud/CmMiW3a9yd19Sf5R56u32eCJa9I7xT0kr2Ih8FB7AXqHNjwzg6qUuI fjDCTC+ngHq4Mt/f+skmF6Fn1JJroU8kdemOdT2S4mElL1dhmHJ/mEXmymO66pCu RUe9j4wT1Wa9U+XeoZ698e0AL4gupwwmjQLBIj7qazdJbpzOFSRIE7856QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5HjARjPvPjYqlG/3jGvdk9ZAL2MB8GA1UdIwQY MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEID9qUK QARSy2mTDWWr+nrpWDhDt09F4IKze6havzDv0DJUBshXz18hkGUVvsrFCRz3oIOa RlIg3GOSJ5V80z0cwo6FcWZOQDLnpu6gRTFnwWU076v9L1eYXWdyLnv/2A/xgUPa ReGxJ0LqXSKjTpQpB+NUkV+OT+E1xCgdSmFeII+XN3qbSEpw6Lr46B/+kBtzXFTc X/e/Zb+V+8FnT057U62OCl6dtAE+N4UQS6w7L4uDPLAWSb7UT1V0QRbO53kdfNIz L24zCsFXCwmsONSSpwX2hWkdjKQEDEaoEwCQTZ8CovETJZ+ooN+WdyOno2hyXP5B vr7JeaNL8nZ00g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:48 2025 by rpki-client