This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json) Hash identifier: rzRmTPVHtI6i34e5rsYju8x4tunmsBBj8V953slFitg= Subject key identifier: 2F:33:6B:6F:5F:A8:55:95:99:1A:1E:D1:81:E0:2F:5B:28:F9:1D:BE Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99 Certificate serial: 019AF2ADD4250A4E05129A311B7F3B35A208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft Manifest number: 099F Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=) 2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: WxR2o+nLfYaCQ4teCtA+XxJlyDg73UMBbJRJkqhqo7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d4:25:0a:4e:05:12:9a:31:1b:7f:3b:35:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=2f336b6f5fa85595991a1ed181e02f5b28f91dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:7b:e0:67:0f:2b:a3:17:4d:03:72:81:66: df:d8:84:0c:7d:0d:b7:36:a1:aa:b9:b1:aa:f9:cf: b9:3d:57:e1:cc:a5:96:e5:fb:24:80:69:71:eb:b7: 1b:22:55:d5:f2:ec:7e:8e:c7:88:75:14:90:9d:39: 6e:11:9f:fd:33:33:58:d7:f3:3e:d5:23:c1:d5:c9: 60:31:83:b6:ca:1c:5f:6f:8a:9c:a1:ce:b2:3f:cf: 82:fb:29:5f:55:99:55:de:b8:02:4a:1d:97:d2:6f: 7e:33:3e:de:b1:a9:92:b2:77:41:b5:f8:98:98:ec: 38:52:5d:9f:f1:66:9a:77:99:c5:f7:e7:7f:21:c8: f1:11:bd:cd:40:eb:0c:c0:13:84:9b:77:1d:e5:57: d3:72:0f:c1:7d:f1:2c:90:45:ae:c2:61:85:60:8c: d2:4e:13:59:11:53:bd:ae:13:36:dd:26:16:18:ac: aa:d7:49:63:34:f1:21:82:37:ce:e7:8d:e4:e2:52: 1a:aa:db:16:54:72:64:cc:a5:3c:51:b2:f6:89:17: a6:98:f6:8e:1c:17:05:99:b5:18:af:83:7b:3d:6a: 0c:11:8e:47:0b:ee:b0:2a:b9:dd:73:56:d6:97:9a: 8d:97:64:40:cd:52:7f:8e:c9:7f:16:49:fc:51:30: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:6B:6F:5F:A8:55:95:99:1A:1E:D1:81:E0:2F:5B:28:F9:1D:BE X509v3 Authority Key Identifier: keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:a4:ba:08:4a:c2:82:fd:01:ce:51:7d:18:7b:31:41:ce: 68:5e:20:be:71:3d:f9:81:0a:c4:00:71:76:be:bb:91:32:cc: 17:14:7f:1b:d9:65:0f:91:d9:49:4e:70:ad:ae:5a:ee:d7:7e: c0:8c:e4:37:5b:d5:db:cd:43:a8:49:35:c8:b4:56:f9:8c:cb: 71:a7:41:75:88:bb:a7:4c:eb:3b:0b:8d:55:2c:dd:ca:ec:79: be:f6:ec:d6:b4:5b:1e:43:72:7c:02:48:34:7f:5a:ac:53:c3: 51:04:d7:47:cd:f4:2e:e0:9d:90:58:bc:a6:2e:5b:53:e5:94: 2c:87:92:07:b5:31:9a:6f:aa:88:7e:ca:e6:72:61:52:13:bb: 92:15:fa:3a:13:ab:d5:e9:4f:b2:7f:a3:0a:57:e7:37:34:82: 00:e6:8e:b5:9f:e2:86:a9:0a:b8:63:fe:af:ea:5b:80:04:ad: 7d:d5:62:75:01:ea:f2:2b:15:69:7b:54:04:6d:bb:c6:2d:3b: 7f:4e:98:d2:dc:f1:9c:7d:d0:c5:fc:a0:5e:c2:74:5c:11:45: 9a:0a:f7:59:37:60:3f:14:7f:70:dc:21:be:e7:53:e1:19:59: 6d:aa:98:0e:57:41:14:ea:94:ab:f7:2b:39:7d:8f:99:ad:57: 92:0c:0a:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdQlCk4FEpoxG387NaIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWJlMmIzNjc5OTA0YjYwYTJmYzM5OWI3ODA4MWM4NmIw MzhkOTkwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD EygyZjMzNmI2ZjVmYTg1NTk1OTkxYTFlZDE4MWUwMmY1YjI4ZjkxZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXR74GcPK6MXTQNygWbf2IQMfQ23 NqGqubGq+c+5PVfhzKWW5fskgGlx67cbIlXV8ux+jseIdRSQnTluEZ/9MzNY1/M+ 1SPB1clgMYO2yhxfb4qcoc6yP8+C+ylfVZlV3rgCSh2X0m9+Mz7esamSsndBtfiY mOw4Ul2f8Waad5nF9+d/IcjxEb3NQOsMwBOEm3cd5VfTcg/BffEskEWuwmGFYIzS ThNZEVO9rhM23SYWGKyq10ljNPEhgjfO543k4lIaqtsWVHJkzKU8UbL2iRemmPaO HBcFmbUYr4N7PWoMEY5HC+6wKrndc1bWl5qNl2RAzVJ/jsl/Fkn8UTACJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8za29fqFWVmRoe0YHgL1so+R2+MB8GA1UdIwQY MBaAFLkb4rNnmQS2Ci/DmbeAgchrA42ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTkt MmI5YmY4MDUxYzhiLzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MmQzZGItZTBjMy00YTQxLWI3ZTktMmI5YmY4MDUxYzhi LzEvdVJ2aXMyZVpCTFlLTDhPWnQ0Q0J5R3NEalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8akughK woL9Ac5RfRh7MUHOaF4gvnE9+YEKxABxdr67kTLMFxR/G9llD5HZSU5wra5a7td+ wIzkN1vV281DqEk1yLRW+YzLcadBdYi7p0zrOwuNVSzdyux5vvbs1rRbHkNyfAJI NH9arFPDUQTXR830LuCdkFi8pi5bU+WULIeSB7Uxmm+qiH7K5nJhUhO7khX6OhOr 1elPsn+jClfnNzSCAOaOtZ/ihqkKuGP+r+pbgAStfdVidQHq8isVaXtUBG27xi07 f06Y0tzxnH3QxfygXsJ0XBFFmgr3WTdgPxR/cNwhvudT4RlZbaqYDldBFOqUq/cr OX2Pma1XkgwKFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:19 2025 by rpki-client