This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json) Hash identifier: E3vstgHJo9DvVsfYUifQTx8xReCiaT89wwVtA9w3FAQ= Subject key identifier: F5:A0:AC:02:95:DE:70:5F:80:BB:AE:17:C5:B5:F8:BD:4E:F1:23:77 Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c Certificate serial: 019AF20972702A9D6C0B3C44D6F9338FF5A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: 36xdA/3u17ZeeF1De+8QC0GyNiJfkBl3Dm6WJUtKB7c=) 2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:72:70:2a:9d:6c:0b:3c:44:d6:f9:33:8f:f5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=f5a0ac0295de705f80bbae17c5b5f8bd4ef12377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:7b:30:5f:2f:14:83:1b:3b:22:d6:19:c2: 25:0b:5f:cc:2d:6d:e3:98:e1:43:21:25:97:de:84: 34:37:d2:ba:ea:ff:00:3e:da:99:f0:f7:ba:e0:d3: 5c:36:8e:f8:17:14:c1:ae:93:3c:7f:c3:c8:37:53: fc:ad:8e:4a:14:0a:b0:e4:97:31:5c:3b:ca:63:77: fa:ce:8e:df:0e:a7:a8:d4:eb:52:ec:0e:0e:d9:e1: 01:11:8c:e2:32:2f:09:66:6f:6d:11:96:70:a2:a0: 3c:b1:4c:5f:0e:b0:20:ec:5e:e7:19:5c:46:ae:1a: db:4f:12:61:a2:29:21:58:b6:e4:0e:e7:95:69:70: d7:a3:1d:56:7e:d2:cf:bf:cf:72:4a:9e:3d:9e:9d: 90:4d:42:a5:1c:0c:d6:eb:92:26:e4:b7:6b:d5:3a: 48:d0:02:af:20:da:00:2b:20:21:e9:8a:ba:88:53: 90:fe:15:14:26:51:92:48:dc:16:19:16:63:84:11: 82:c4:1a:32:ad:bf:9f:61:dc:e6:68:0a:33:37:71: 69:6b:eb:37:9d:d6:1c:0c:30:93:08:30:3b:da:ed: bb:7c:31:ee:43:8d:96:5f:0f:ce:fa:bc:0d:fe:3e: 28:d8:fe:da:19:1d:b8:93:cf:e4:f0:5b:ed:7a:31: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:AC:02:95:DE:70:5F:80:BB:AE:17:C5:B5:F8:BD:4E:F1:23:77 X509v3 Authority Key Identifier: keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:41:7f:e6:1f:20:ee:f3:bb:fd:79:b5:d8:3f:7c:63:5c:bf: 55:cb:59:43:ff:6b:f0:c6:3d:f8:3c:c2:04:ad:3c:84:9b:e5: 4b:69:4d:cf:36:b0:6e:13:04:8e:17:d8:26:46:83:e2:f7:9c: 4a:fa:61:1e:42:40:81:16:82:dc:5f:7d:20:10:83:d3:62:43: 3b:d1:06:d5:8f:fa:70:fe:d8:ab:d7:61:55:51:9e:2f:b9:81: b2:f8:7e:f7:ea:20:75:e3:51:1a:bc:ee:e8:a6:7e:bd:e3:d3: 8e:ba:92:9a:ff:aa:35:84:38:03:28:41:f5:28:90:41:2b:37: 77:c7:f0:8d:20:88:78:3d:47:5b:67:4b:07:5d:65:1b:16:ac: 9e:83:29:a2:ee:b5:b3:1a:2b:b3:98:08:ba:f9:31:f3:2c:16: b7:65:01:80:ea:2f:e0:ff:49:72:bb:70:28:0c:e1:2a:74:3d: 3c:9a:bb:3f:be:15:73:6b:36:d8:aa:63:ae:8d:51:42:9e:28: 0e:f2:e7:ab:37:1d:9c:29:40:6d:a4:2d:fc:9a:25:de:0f:d5: d2:9e:2a:dc:88:f4:76:7b:6f:73:fa:7b:b1:86:6a:28:aa:cd: de:e4:3b:f7:67:0b:4b:55:ee:c6:70:26:58:e7:18:52:21:5a: 97:5b:89:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXJwKp1sCzxE1vkzj/WjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjczNjc2ZmFiYWYxMjA1NmVkYmI5Yzc5ZDcxNTRmZWRl MDFmMmMwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EyhmNWEwYWMwMjk1ZGU3MDVmODBiYmFlMTdjNWI1ZjhiZDRlZjEyMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupB7MF8vFIMbOyLWGcIlC1/MLW3j mOFDISWX3oQ0N9K66v8APtqZ8Pe64NNcNo74FxTBrpM8f8PIN1P8rY5KFAqw5Jcx XDvKY3f6zo7fDqeo1OtS7A4O2eEBEYziMi8JZm9tEZZwoqA8sUxfDrAg7F7nGVxG rhrbTxJhoikhWLbkDueVaXDXox1WftLPv89ySp49np2QTUKlHAzW65Im5Ldr1TpI 0AKvINoAKyAh6Yq6iFOQ/hUUJlGSSNwWGRZjhBGCxBoyrb+fYdzmaAozN3Fpa+s3 ndYcDDCTCDA72u27fDHuQ42WXw/O+rwN/j4o2P7aGR24k8/k8FvtejFJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWgrAKV3nBfgLuuF8W1+L1O8SN3MB8GA1UdIwQY MBaAFLq3Nnb6uvEgVu27nHnXFU/t4B8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85M2Y4ZmItZDQyNC00ZGFiLTlhMGUt MGY1YmUyMjRmODIwLzEvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85M2Y4ZmItZDQyNC00ZGFiLTlhMGUtMGY1YmUyMjRmODIw LzEvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0F/5h8g 7vO7/Xm12D98Y1y/VctZQ/9r8MY9+DzCBK08hJvlS2lNzzawbhMEjhfYJkaD4vec SvphHkJAgRaC3F99IBCD02JDO9EG1Y/6cP7Yq9dhVVGeL7mBsvh+9+ogdeNRGrzu 6KZ+vePTjrqSmv+qNYQ4AyhB9SiQQSs3d8fwjSCIeD1HW2dLB11lGxasnoMpou61 sxors5gIuvkx8ywWt2UBgOov4P9JcrtwKAzhKnQ9PJq7P74Vc2s22Kpjro1RQp4o DvLnqzcdnClAbaQt/Jol3g/V0p4q3Ij0dntvc/p7sYZqKKrN3uQ792cLS1XuxnAm WOcYUiFal1uJJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:05 2025 by rpki-client