This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json) Hash identifier: ipHdN5URl05ysDvGb4t2BfrPhHJL/Rt4dUyOyQik7sA= Subject key identifier: 7B:60:9F:F7:65:C1:AE:54:1F:A1:74:49:5B:0F:29:1B:C6:D5:B7:A2 Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01 Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101 Certificate serial: 019AF2099BF5051E68C7FB4C760BEED57528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft Manifest number: 1150 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: a1ooxCudazQsV0yEFNqXuogF87TURaYbpqrew92wcGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:f5:05:1e:68:c7:fb:4c:76:0b:ee:d5:75:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=7b609ff765c1ae541fa174495b0f291bc6d5b7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f4:ef:b4:4c:98:24:76:2b:f8:a7:3c:ea:d6: 98:97:ca:40:92:97:99:8d:7d:5e:6d:d9:f7:61:95: 2b:46:e9:0a:b9:ae:22:9b:ee:4d:79:e9:c8:bb:09: b8:16:66:99:97:ba:04:51:34:71:0e:91:cd:c2:1e: 63:7e:76:c7:0a:34:23:f6:4a:a5:c0:5d:d2:b7:d1: 38:7e:81:2f:ac:1c:98:e0:9e:e7:59:09:94:8c:37: 5a:db:66:59:a3:41:12:cc:d1:d9:60:5a:0c:06:b4: 85:83:19:71:2c:8e:74:f1:e3:4f:ff:e3:65:d7:05: 3b:6e:be:5a:20:bd:63:2d:56:20:0c:4f:a2:e6:8b: 2f:cd:9e:68:bc:63:5d:4c:6f:34:7f:27:fa:16:31: 9e:79:7b:d4:1e:ba:ed:8d:f1:14:76:17:ce:d2:38: 3b:93:15:37:a6:4d:31:f0:a7:91:42:77:c6:20:03: 5d:b5:f4:47:8b:e9:3e:1a:49:53:9c:f9:58:6e:3e: c3:b2:eb:e5:5e:9d:a7:6d:28:54:55:ce:42:98:cf: 8c:95:d1:f7:7a:e4:1e:5c:c4:0a:03:45:31:f4:00: 68:1c:fc:0c:cf:a2:af:43:fb:a2:3d:82:2c:cf:43: ef:90:b6:15:d5:eb:74:b9:11:f8:07:4f:07:35:c5: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:9F:F7:65:C1:AE:54:1F:A1:74:49:5B:0F:29:1B:C6:D5:B7:A2 X509v3 Authority Key Identifier: keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:68:3c:f0:ad:6f:be:1d:08:fe:18:ea:9f:a5:87:81:12: 9f:32:d0:c7:af:27:2b:0e:f9:1e:13:de:d8:cb:60:21:97:f1: 67:db:84:22:dc:08:42:c4:0d:e4:ff:83:e1:0a:27:14:ff:bf: 3f:93:82:e3:d6:9b:85:9f:86:ab:67:af:7a:89:89:3b:74:39: bb:5b:cc:7a:d6:9e:0a:5a:7f:d5:8e:34:8e:68:5d:41:89:cc: 58:12:19:d5:ab:5f:bc:1a:0f:fb:16:24:0d:97:8e:77:90:85: 20:73:64:93:9f:5a:23:e4:10:d7:c3:a4:4c:85:04:d5:71:06: 51:2d:4e:c8:9b:50:fe:63:ed:17:dc:e7:fc:7b:7f:f6:28:7e: 29:78:8d:1f:a5:55:ed:34:3d:47:20:2f:ef:bb:1b:7b:d4:da: 11:c6:16:77:6a:cb:24:03:a5:eb:64:04:35:b3:1e:aa:74:df: e6:cb:e6:53:5c:75:1b:d1:9b:30:42:71:82:dc:9e:d3:91:05: 76:c3:1a:9a:aa:4b:43:a7:05:b2:06:a6:23:cc:0c:f6:71:34: 17:ae:37:97:94:3e:76:57:b8:33:1b:55:a6:db:07:f6:ea:94: 5d:ae:f2:1d:07:8a:6f:61:f5:91:16:62:78:4e:16:5f:5d:76: 44:e3:b1:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZv1BR5ox/tMdgvu1XUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjM4ZjQ5ZTA3MjQ3OGJlNTUzZWNmZjM2MzVmM2RkOTc3 NTgxMDEwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg3YjYwOWZmNzY1YzFhZTU0MWZhMTc0NDk1YjBmMjkxYmM2ZDViN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/TvtEyYJHYr+Kc86taYl8pAkpeZ jX1ebdn3YZUrRukKua4im+5NeenIuwm4FmaZl7oEUTRxDpHNwh5jfnbHCjQj9kql wF3St9E4foEvrByY4J7nWQmUjDda22ZZo0ESzNHZYFoMBrSFgxlxLI508eNP/+Nl 1wU7br5aIL1jLVYgDE+i5osvzZ5ovGNdTG80fyf6FjGeeXvUHrrtjfEUdhfO0jg7 kxU3pk0x8KeRQnfGIANdtfRHi+k+GklTnPlYbj7DsuvlXp2nbShUVc5CmM+MldH3 euQeXMQKA0Ux9ABoHPwMz6KvQ/uiPYIsz0PvkLYV1et0uRH4B08HNcV/QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtgn/dlwa5UH6F0SVsPKRvG1beiMB8GA1UdIwQY MBaAFLqzj0ngckeL5VPs/zY1892XdYEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgt MzQ5YjUyMzM4ZGJkLzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zOTJiMjMtYTVlYS00NThiLWJjMzgtMzQ5YjUyMzM4ZGJk LzEvdXJPUFNlQnlSNHZsVS16X05qWHozWmQxZ1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlRoPPCt b74dCP4Y6p+lh4ESnzLQx68nKw75HhPe2MtgIZfxZ9uEItwIQsQN5P+D4QonFP+/ P5OC49abhZ+Gq2eveomJO3Q5u1vMetaeClp/1Y40jmhdQYnMWBIZ1atfvBoP+xYk DZeOd5CFIHNkk59aI+QQ18OkTIUE1XEGUS1OyJtQ/mPtF9zn/Ht/9ih+KXiNH6VV 7TQ9RyAv77sbe9TaEcYWd2rLJAOl62QENbMeqnTf5svmU1x1G9GbMEJxgtye05EF dsMamqpLQ6cFsgamI8wM9nE0F643l5Q+dle4MxtVptsH9uqUXa7yHQeKb2H1kRZi eE4WX112ROOxAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:14 2025 by rpki-client