This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json) Hash identifier: bIJcP1ppEVABriSnebRIiPQc2nNog8YrQo8G8VWAs1w= Subject key identifier: E0:21:14:FE:09:CF:F5:42:EA:C5:93:35:09:6A:62:A6:38:6B:CD:8C Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e Certificate serial: 019AF3C00926C74F12ECD99C302D44686BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa (hash: pDGrFl+zPntVOdC+wAqPCIkri5GYwFIWXTpGxCwXD/o=) 2: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: BXVAIvtZB2az/2eODOf5PillHWk/wSVoQhquBKESnbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:09:26:c7:4f:12:ec:d9:9c:30:2d:44:68:6b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=e02114fe09cff542eac59335096a62a6386bcd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:9b:05:fa:eb:a8:ad:01:d0:cd:84:78:78: 50:40:6e:09:9e:54:ef:b4:c0:2a:70:73:cb:4f:07: 63:4a:12:83:39:53:d3:24:56:fa:5d:7b:e0:96:de: cf:cc:f2:5e:dd:49:8e:48:50:5f:51:b3:af:83:b6: 06:8c:69:74:4e:f1:d1:99:95:4f:f0:d1:a0:c3:4d: a3:33:f7:d6:1c:2c:62:c2:68:42:47:b3:f0:90:04: 6c:18:90:2b:fd:2c:61:98:fa:eb:33:e7:0b:6c:26: 9a:a1:ea:dc:15:bd:7a:a0:14:85:9f:b5:b8:f6:d3: f6:04:9f:ae:59:15:8d:94:22:9a:30:1f:3f:a1:02: 88:32:4c:82:3e:4d:bb:c7:1f:d2:18:21:8c:b8:21: 46:0e:8e:d9:a8:02:71:3a:64:e2:b4:d5:49:d3:c6: bc:20:46:08:84:d2:1e:cf:61:a8:0d:cd:0e:41:ac: 78:c9:12:0b:8d:0d:0c:21:5d:b5:ea:6f:fd:20:fd: b4:d2:42:b8:21:2f:16:a2:f0:84:59:b5:10:ad:e7: c3:e5:f8:d0:e8:9b:ba:88:55:af:ea:cb:2b:1b:96: 67:a6:7d:ba:9f:a8:c4:d2:b0:54:7f:f1:e4:9f:b1: 33:a3:66:07:ab:46:96:03:c6:ef:32:40:4a:ba:3a: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:14:FE:09:CF:F5:42:EA:C5:93:35:09:6A:62:A6:38:6B:CD:8C X509v3 Authority Key Identifier: keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:12:d0:84:6a:e0:50:5b:0a:dc:80:ea:10:f8:60:10:cb:aa: e6:05:08:03:29:da:a6:a6:49:dd:43:1b:05:fd:56:cf:bb:4e: ba:59:a8:35:8b:97:d8:c3:95:c3:fe:13:78:07:2b:2c:76:98: 04:63:66:25:54:d6:87:74:b6:69:f1:47:99:13:83:5d:33:6c: aa:ef:8b:5e:38:65:4b:c1:ba:a1:1e:32:6c:f3:ec:18:8b:cb: da:49:ea:0a:42:3d:ac:1c:09:8c:51:52:1c:8a:b2:2f:3c:cf: 04:7c:96:5a:7c:2d:dc:f7:89:eb:a7:b3:05:36:f9:c4:c0:90: e0:af:18:72:61:38:fa:35:70:1f:fc:81:ce:29:09:7c:75:cf: 76:dc:22:a5:dd:dd:1f:63:fc:9d:fd:38:0c:f3:c5:e3:2e:a7: d3:91:9a:77:57:65:65:e6:9f:68:58:72:44:4e:39:70:25:7a: 25:cd:4e:af:97:7c:b1:27:e6:a7:41:a0:bc:38:20:19:86:ee: a6:d7:89:58:d4:2c:2f:a8:ad:ec:3e:d6:14:39:7c:86:bb:3b: 04:81:23:b7:ba:01:b2:db:18:ee:a4:5f:e5:e1:19:ac:66:28: eb:b6:ab:b7:81:f1:04:54:d1:74:69:c6:be:f0:cd:4d:3e:19: 52:d9:ca:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAkmx08S7NmcMC1EaGvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ1MzE1YjQ0Y2I2NWQyYTc5MWEwYWU1ODIzNjY0ZDBj NDQ0NWUwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD EyhlMDIxMTRmZTA5Y2ZmNTQyZWFjNTkzMzUwOTZhNjJhNjM4NmJjZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6bBfrrqK0B0M2EeHhQQG4JnlTv tMAqcHPLTwdjShKDOVPTJFb6XXvglt7PzPJe3UmOSFBfUbOvg7YGjGl0TvHRmZVP 8NGgw02jM/fWHCxiwmhCR7PwkARsGJAr/SxhmPrrM+cLbCaaoercFb16oBSFn7W4 9tP2BJ+uWRWNlCKaMB8/oQKIMkyCPk27xx/SGCGMuCFGDo7ZqAJxOmTitNVJ08a8 IEYIhNIez2GoDc0OQax4yRILjQ0MIV216m/9IP200kK4IS8WovCEWbUQrefD5fjQ 6Ju6iFWv6ssrG5Znpn26n6jE0rBUf/Hkn7Ezo2YHq0aWA8bvMkBKujrNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAhFP4Jz/VC6sWTNQlqYqY4a82MMB8GA1UdIwQY MBaAFLkUUxW0TLZdKnkaCuWCNmTQxEReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMt ZGZiOTQ2ZDE3ZDBjLzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80Zjg4N2UtM2Y2Yy00OGEzLWJiMDMtZGZiOTQ2ZDE3ZDBj LzEvdVJSVEZiUk10bDBxZVJvSzVZSTJaTkRFUkY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRLQhGrg UFsK3IDqEPhgEMuq5gUIAynapqZJ3UMbBf1Wz7tOulmoNYuX2MOVw/4TeAcrLHaY BGNmJVTWh3S2afFHmRODXTNsqu+LXjhlS8G6oR4ybPPsGIvL2knqCkI9rBwJjFFS HIqyLzzPBHyWWnwt3PeJ66ezBTb5xMCQ4K8YcmE4+jVwH/yBzikJfHXPdtwipd3d H2P8nf04DPPF4y6n05Gad1dlZeafaFhyRE45cCV6Jc1Or5d8sSfmp0GgvDggGYbu pteJWNQsL6it7D7WFDl8hrs7BIEjt7oBstsY7qRf5eEZrGYo67art4HxBFTRdGnG vvDNTT4ZUtnK8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:09 2025 by rpki-client