This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json) Hash identifier: sUFSe/P5z4HAvZsHkTmwV9ZX3pZnSpPnBZRiczQsVt8= Subject key identifier: 89:37:D9:42:CB:FE:EC:76:2E:2C:25:F2:C5:79:5A:B9:42:4C:D0:49 Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4 Certificate serial: 019AF0BF5EFA75799417ACDCE928646B8E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=) 2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: b+5BlmLAMdjOW5IB62N3dl4WOHGJ5WTnI4JvRbU9hAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5e:fa:75:79:94:17:ac:dc:e9:28:64:6b:8e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=8937d942cbfeec762e2c25f2c5795ab9424cd049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:2e:94:5a:65:7e:31:fb:b7:0b:58:0c:ad: 2c:38:7e:c0:c9:02:e6:c1:9f:92:59:62:7f:ff:b0: 4c:3d:ce:1d:ea:60:57:f2:bb:40:55:4d:01:12:3e: a5:67:f8:02:e7:55:02:e8:79:fe:8c:0d:81:81:21: 1c:23:68:f9:1a:e8:fa:96:d8:43:e5:c4:ae:a9:f1: eb:75:a6:8e:3d:de:1d:e6:61:0b:33:36:22:91:b8: e7:e6:b2:3e:9e:96:43:42:47:5a:f9:1a:4f:2e:c7: de:10:2d:03:d1:5e:9a:df:1f:42:1e:dd:49:ea:4c: f9:14:11:eb:d5:f3:06:b2:03:12:df:91:ba:75:94: 50:3d:0c:76:11:b3:b8:32:4a:71:08:94:f4:cc:55: bc:b3:15:42:28:cd:73:50:87:75:5a:c2:09:15:69: ac:90:87:82:90:dd:f0:5e:f2:7a:63:60:af:75:ac: 2b:fd:59:7d:a4:44:78:71:bb:9a:6a:c0:a3:5e:37: 2f:30:66:83:f5:35:ff:31:28:05:c5:dd:0d:1d:38: 90:8a:ad:e8:f1:b8:54:80:b5:31:d0:09:77:24:78: 78:5c:b7:60:53:27:30:15:f5:03:28:d1:8a:b4:07: 53:38:ef:ce:23:02:00:00:72:53:f4:d0:63:3f:38: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:D9:42:CB:FE:EC:76:2E:2C:25:F2:C5:79:5A:B9:42:4C:D0:49 X509v3 Authority Key Identifier: keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e8:18:a6:05:0e:ac:17:ef:07:a8:27:ff:ef:51:1f:b2:12: 8f:c0:95:43:e9:2e:96:b4:12:60:dd:0a:41:7b:b7:59:85:dc: 21:5b:94:db:4b:25:7a:79:a3:f4:c1:2c:70:bf:48:04:59:68: 26:d1:60:0e:75:d1:87:a2:81:fe:c0:4b:45:d9:b1:ca:58:3f: 11:45:97:62:58:ea:37:2c:12:64:4e:a6:f5:89:a2:8f:3b:db: e9:36:67:a7:d4:6a:b1:5f:7a:14:2d:0b:42:8f:45:db:15:d4: 46:b3:28:e6:db:54:b8:20:d6:a4:e1:89:89:b1:9e:2a:7d:4d: a1:32:4a:cb:6e:48:af:55:60:43:3f:4c:5a:99:58:d8:97:aa: ba:5d:14:50:e3:b9:e9:af:a2:43:c8:39:dd:3e:0a:f2:93:e2: f4:a5:98:8d:4b:e1:3e:bf:07:b0:23:78:5f:2c:c0:eb:b3:b0: 7b:c5:e7:70:b5:92:f6:fa:c8:c4:c9:36:b0:72:32:b7:bc:44: bd:7c:20:4f:88:f4:b7:35:77:42:7f:22:0a:bd:d8:98:c7:fa: 2f:18:92:c0:1c:bd:7a:db:45:f7:3e:c0:6f:3a:3b:88:d7:9c: 5f:b8:7f:38:eb:0e:94:06:2d:88:46:55:4a:ad:98:cc:cd:3e: 4e:fd:0c:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv176dXmUF6zc6Shka45zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTVhZjU5ZDI0ZjU5YTYwZDk3YzFjODhhYjk3OWExNGM1 ODBmZjQwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD Eyg4OTM3ZDk0MmNiZmVlYzc2MmUyYzI1ZjJjNTc5NWFiOTQyNGNkMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCEulFplfjH7twtYDK0sOH7AyQLm wZ+SWWJ//7BMPc4d6mBX8rtAVU0BEj6lZ/gC51UC6Hn+jA2BgSEcI2j5Guj6lthD 5cSuqfHrdaaOPd4d5mELMzYikbjn5rI+npZDQkda+RpPLsfeEC0D0V6a3x9CHt1J 6kz5FBHr1fMGsgMS35G6dZRQPQx2EbO4MkpxCJT0zFW8sxVCKM1zUId1WsIJFWms kIeCkN3wXvJ6Y2Cvdawr/Vl9pER4cbuaasCjXjcvMGaD9TX/MSgFxd0NHTiQiq3o 8bhUgLUx0Al3JHh4XLdgUycwFfUDKNGKtAdTOO/OIwIAAHJT9NBjPzg66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIk32ULL/ux2Liwl8sV5WrlCTNBJMB8GA1UdIwQY MBaAFLkVr1nST1mmDZfByIq5eaFMWA/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODct ZDQ3MmQ5YWZlMTM0LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODctZDQ3MmQ5YWZlMTM0 LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+gYpgUO rBfvB6gn/+9RH7ISj8CVQ+kulrQSYN0KQXu3WYXcIVuU20slenmj9MEscL9IBFlo JtFgDnXRh6KB/sBLRdmxylg/EUWXYljqNywSZE6m9Ymijzvb6TZnp9RqsV96FC0L Qo9F2xXURrMo5ttUuCDWpOGJibGeKn1NoTJKy25Ir1VgQz9MWplY2Jequl0UUOO5 6a+iQ8g53T4K8pPi9KWYjUvhPr8HsCN4XyzA67Owe8XncLWS9vrIxMk2sHIyt7xE vXwgT4j0tzV3Qn8iCr3YmMf6LxiSwBy9ettF9z7Abzo7iNecX7h/OOsOlAYtiEZV Sq2YzM0+Tv0Mtg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:46 2025 by rpki-client