This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json) Hash identifier: smJYqaXa0XzSpRJQjxqAJP+SzFxqZhU5DD0j4QgE3ww= Subject key identifier: 15:99:37:D8:49:2C:44:62:96:A9:33:68:AD:7E:F3:84:E2:46:BE:CE Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16 Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16 Certificate serial: 019AF12E1101B07FAD067733A252733E4D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft Manifest number: 1147 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: rUYkB3WjH9eOMj3Fhhy1IzJziOZgrlfXbyCLVfNIXZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:11:01:b0:7f:ad:06:77:33:a2:52:73:3e:4d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=159937d8492c446296a93368ad7ef384e246bece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:16:c0:2c:fa:87:b7:45:10:9b:99:d7:bb: 1f:d4:78:8e:f1:a7:4a:2a:fe:40:4f:43:9d:c3:26: 63:2a:e2:d3:20:9d:24:4b:18:65:51:d6:e3:80:ec: 5d:c8:d1:ff:cb:8c:a7:c1:6f:49:76:ce:3c:4e:84: d5:07:c0:2d:3d:1b:0b:86:07:a5:e6:c6:7d:a3:f6: ae:5e:ae:47:9f:23:60:17:9f:cd:db:ab:6d:b9:73: c4:a8:7e:5e:9a:8f:a2:6c:df:64:bd:40:6e:4c:9f: d6:64:f3:a8:95:b7:23:14:fc:e0:84:b5:70:95:ed: 5a:f8:65:06:53:0c:07:82:ba:79:16:b2:cc:72:09: a7:56:88:cb:6c:46:e3:b7:c9:58:1b:6a:e4:35:fb: a5:f1:44:bb:72:f1:ed:b3:5f:03:60:23:86:b7:e2: 3b:23:37:40:f4:b1:c3:11:dc:1a:88:eb:f2:16:27: 59:2a:b8:27:c8:e4:27:67:0b:a6:47:18:69:ff:5b: 3b:cd:fc:ec:42:71:fa:22:d6:7c:96:bf:ad:8e:0f: 66:b1:9c:1d:1e:93:28:fa:20:6c:80:bf:50:63:9c: 5b:7d:81:4b:df:d3:82:5a:86:ab:29:c8:b9:81:c5: b0:09:15:c6:d6:ce:3c:3f:29:c6:24:87:5a:22:7c: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:37:D8:49:2C:44:62:96:A9:33:68:AD:7E:F3:84:E2:46:BE:CE X509v3 Authority Key Identifier: keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:e5:e1:68:10:6f:d0:13:84:04:d8:a5:17:f8:31:e6:64: 93:95:bb:08:87:44:b0:65:f5:b8:6e:1a:5e:27:87:cc:c9:00: e2:d9:88:d9:c3:8c:c0:11:d1:d0:06:d3:bd:48:ff:cb:26:c3: ec:26:db:de:40:83:56:df:0b:2f:70:4c:02:e3:28:30:ac:9f: c6:8f:d1:ea:57:7c:17:c8:3b:4b:ad:b8:6a:72:3e:03:77:e7: 3b:e4:78:c8:2a:6d:e5:c5:02:f1:4b:43:a6:18:4f:a4:1f:c7: 7e:47:20:a7:a4:bb:35:40:10:a6:08:bf:01:40:2e:4b:c2:fb: e7:f9:42:2a:56:0a:4c:a1:22:68:7a:1d:57:26:06:54:63:ad: b8:bb:5c:64:21:5e:e1:e1:5f:5e:7e:99:52:a7:3f:ad:f9:9a: e1:9c:53:77:a9:cd:e3:9a:d3:d0:55:47:72:e3:93:da:7b:6b: 6c:91:f2:88:ca:16:70:e3:7d:27:57:4d:0e:56:9c:80:17:59: 0a:77:12:da:b1:a1:7c:17:e0:25:af:25:7b:91:f7:41:c7:07: 43:51:b7:cc:3a:d9:d0:20:7b:19:01:e7:df:f6:57:84:71:42: b3:ad:a9:57:b3:d2:29:70:fb:90:54:bb:a5:62:c9:34:9c:3e: 1d:6f:6b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhEBsH+tBnczolJzPk1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjhkM2QzMzBiZDY2MjBiYjE3ZDQ4N2U0MDU1ZDk1YjI3 NGFmMTYwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EygxNTk5MzdkODQ5MmM0NDYyOTZhOTMzNjhhZDdlZjM4NGUyNDZiZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolgWwCz6h7dFEJuZ17sf1HiO8adK Kv5AT0OdwyZjKuLTIJ0kSxhlUdbjgOxdyNH/y4ynwW9Jds48ToTVB8AtPRsLhgel 5sZ9o/auXq5HnyNgF5/N26ttuXPEqH5emo+ibN9kvUBuTJ/WZPOolbcjFPzghLVw le1a+GUGUwwHgrp5FrLMcgmnVojLbEbjt8lYG2rkNful8US7cvHts18DYCOGt+I7 IzdA9LHDEdwaiOvyFidZKrgnyOQnZwumRxhp/1s7zfzsQnH6ItZ8lr+tjg9msZwd HpMo+iBsgL9QY5xbfYFL39OCWoarKci5gcWwCRXG1s48PynGJIdaInxgUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWZN9hJLERilqkzaK1+84TiRr7OMB8GA1UdIwQY MBaAFFK409MwvWYguxfUh+QFXZWydK8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMt YmJiZWI2MDkwNTIxLzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMtYmJiZWI2MDkwNTIx LzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPzl4WgQ b9AThATYpRf4MeZkk5W7CIdEsGX1uG4aXieHzMkA4tmI2cOMwBHR0AbTvUj/yybD 7Cbb3kCDVt8LL3BMAuMoMKyfxo/R6ld8F8g7S624anI+A3fnO+R4yCpt5cUC8UtD phhPpB/Hfkcgp6S7NUAQpgi/AUAuS8L75/lCKlYKTKEiaHodVyYGVGOtuLtcZCFe 4eFfXn6ZUqc/rfma4ZxTd6nN45rT0FVHcuOT2ntrbJHyiMoWcON9J1dNDlacgBdZ CncS2rGhfBfgJa8le5H3QccHQ1G3zDrZ0CB7GQHn3/ZXhHFCs62pV7PSKXD7kFS7 pWLJNJw+HW9r8w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:59 2025 by rpki-client