This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json) Hash identifier: AL3F2lJYArNT/G2kmhx4urqMmxIlLit8y1120TWWQJ8= Subject key identifier: 9E:92:76:E7:38:05:8D:24:7A:A3:05:ED:B3:CD:82:2D:FB:33:82:D3 Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Certificate serial: 019AF23FA68996C38C0981ABCE7BF3253214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft Manifest number: 0AC8 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=) 2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: FHAa6moZjbnYBjACkDDJFKvYdqKoWeewy9lLjshoNB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a6:89:96:c3:8c:09:81:ab:ce:7b:f3:25:32:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=9e9276e738058d247aa305edb3cd822dfb3382d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:e6:98:2a:13:87:38:2d:f7:5c:72:47:b1: 1b:19:67:9c:95:0a:1f:03:b8:a5:26:03:bf:dd:5e: f8:64:8e:26:73:d8:c1:eb:51:2b:72:4c:d0:47:b8: 0e:2a:3f:a6:79:79:da:04:ee:8a:66:20:0c:39:1f: f3:a5:e8:e0:b3:e7:52:15:ff:fa:39:86:74:a1:75: 7c:5f:19:59:83:98:a0:9d:49:a6:60:1e:7c:e1:0c: a0:fb:99:0b:38:3d:f6:60:79:d0:8e:9e:2f:77:d8: c4:6f:de:f8:72:2e:a7:c3:33:50:95:b0:b6:9c:1b: cb:a4:31:7f:24:50:3e:3a:5c:12:70:68:1a:5e:5d: 35:de:48:2f:20:73:c9:7b:a4:4a:22:f1:fa:a8:78: c3:4e:73:13:48:e0:cf:77:31:03:87:c2:52:0f:21: ef:59:bf:5f:37:15:b4:5a:04:02:30:25:a8:ea:53: 26:98:c9:62:b4:96:38:26:41:10:28:81:9e:bc:44: 09:c0:17:fb:71:23:22:e0:9c:3b:1d:2f:2a:d7:6c: 64:d5:8f:db:e0:b4:a2:fa:31:a4:48:07:6e:63:3c: e7:28:d5:da:e9:8f:04:80:5d:8c:87:70:a6:0a:27: 6d:2d:4e:15:01:e3:46:61:39:e0:57:60:b1:82:5c: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:92:76:E7:38:05:8D:24:7A:A3:05:ED:B3:CD:82:2D:FB:33:82:D3 X509v3 Authority Key Identifier: keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f6:d2:a3:0c:bc:93:37:b3:08:80:3d:5b:36:20:37:44:11: 2e:5c:35:ac:28:6e:b5:bb:92:f0:7e:dd:6f:77:64:5f:03:d4: 51:35:73:39:01:ec:70:55:9d:f7:26:11:b6:70:32:18:b9:2e: d6:6d:8d:4b:dd:63:c7:f4:f8:47:49:20:42:a9:78:e0:0f:35: ed:ac:b3:23:30:0a:85:ca:66:df:d4:1e:8d:9f:31:27:1e:43: 9a:0d:9c:2b:10:89:6b:63:a9:fd:b8:d3:c0:dc:15:1b:b8:b6: 03:05:30:66:87:b2:4b:52:14:be:fb:fe:74:de:5c:26:0b:2d: 51:49:b5:74:79:33:c4:14:e8:c6:b9:b3:ab:8b:3e:db:6c:65: fc:ba:44:f7:8b:24:e3:b6:b0:ef:02:51:26:07:93:16:59:b7: 37:d3:4d:c8:d2:1f:81:c3:6e:93:10:f6:c9:d5:af:7c:ad:e2: 13:72:fc:da:0e:fc:b6:c2:33:cd:fb:2e:80:29:dc:68:8d:3b: fc:e1:b9:5b:25:38:ac:a8:0b:4e:16:ff:88:24:88:38:2e:8d: 3c:25:d6:1f:9c:26:ed:ee:6e:2d:33:f7:05:b3:34:14:bf:91: 2b:54:7a:4e:b5:9e:ae:fb:cd:4a:40:4e:2c:42:2c:b2:e1:d8: b5:20:d7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6aJlsOMCYGrznvzJTIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm NmEwY2IwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg5ZTkyNzZlNzM4MDU4ZDI0N2FhMzA1ZWRiM2NkODIyZGZiMzM4MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jmmCoThzgt91xyR7EbGWeclQof A7ilJgO/3V74ZI4mc9jB61ErckzQR7gOKj+meXnaBO6KZiAMOR/zpejgs+dSFf/6 OYZ0oXV8XxlZg5ignUmmYB584Qyg+5kLOD32YHnQjp4vd9jEb974ci6nwzNQlbC2 nBvLpDF/JFA+OlwScGgaXl013kgvIHPJe6RKIvH6qHjDTnMTSODPdzEDh8JSDyHv Wb9fNxW0WgQCMCWo6lMmmMlitJY4JkEQKIGevEQJwBf7cSMi4Jw7HS8q12xk1Y/b 4LSi+jGkSAduYzznKNXa6Y8EgF2Mh3CmCidtLU4VAeNGYTngV2CxglxbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6Sduc4BY0keqMF7bPNgi37M4LTMB8GA1UdIwQY MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt MTc5MTE1OTRhZTUxLzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfbSowy8 kzezCIA9WzYgN0QRLlw1rChutbuS8H7db3dkXwPUUTVzOQHscFWd9yYRtnAyGLku 1m2NS91jx/T4R0kgQql44A817ayzIzAKhcpm39QejZ8xJx5Dmg2cKxCJa2Op/bjT wNwVG7i2AwUwZoeyS1IUvvv+dN5cJgstUUm1dHkzxBToxrmzq4s+22xl/LpE94sk 47aw7wJRJgeTFlm3N9NNyNIfgcNukxD2ydWvfK3iE3L82g78tsIzzfsugCncaI07 /OG5WyU4rKgLThb/iCSIOC6NPCXWH5wm7e5uLTP3BbM0FL+RK1R6TrWervvNSkBO LEIssuHYtSDXTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:49:25 2025 by rpki-client