This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json) Hash identifier: SHwzzgmFJwFVml2hZlmU3ZOEr8vyyLNvqGb6UwNKkPo= Subject key identifier: B0:0E:C4:A9:C4:34:13:B0:14:B4:44:9D:74:F0:AD:C8:4A:6A:86:7C Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Certificate serial: 019AF163DE4FB2000E1D8022B7519C965E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: NVT5ElowawlO6xhtgnjNVI-MrRY.roa (hash: eokuWXBRCzzEFTJDGG6W73lsSws+UPHi7dsJni5axaU=) 2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: eaYTbtNJ6m3TX8qZBETOARKoIuGTcAq7h4FG1KInXvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:de:4f:b2:00:0e:1d:80:22:b7:51:9c:96:5e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=b00ec4a9c43413b014b4449d74f0adc84a6a867c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5e:29:26:95:30:33:a3:e8:1a:98:d7:55:f0: 62:3e:02:bb:c6:7e:76:47:24:48:fa:8e:07:fe:4e: 39:86:b0:ac:96:c9:03:d0:58:bd:4c:81:93:07:7e: b2:23:51:38:48:60:b0:0b:d9:6f:7b:77:50:e8:d9: 4a:b3:b2:8b:6d:3a:84:62:9a:d2:a9:31:e8:39:d3: 6d:e9:b2:39:2e:d5:fa:85:9a:d1:ac:b6:a7:d7:9f: 26:2f:fe:89:8a:d2:25:db:55:0a:0c:63:a5:e4:01: eb:5c:6d:04:3e:29:1d:0c:b4:b1:2e:a8:c3:87:be: 95:20:9a:ac:d6:c6:30:0e:bf:cc:c3:8c:cb:1e:f6: 2d:c5:47:cf:9c:85:c0:03:26:f2:43:ba:0a:4d:00: ec:89:a2:bf:78:d2:97:6d:52:4d:2d:69:15:75:d3: 80:4c:82:86:75:80:09:8e:90:08:b7:1e:db:fc:6b: c2:10:56:bb:b7:46:a8:60:43:df:f0:ef:3f:3a:53: d4:b3:99:76:fc:f3:9c:10:78:2a:1e:c0:8e:27:06: 09:87:23:86:1c:9c:e9:1c:04:4c:bf:46:b0:6c:c8: 37:fb:a8:2e:d8:ba:4b:f0:4d:af:0c:fe:3b:27:b7: 67:89:00:6d:9f:a2:ae:79:49:60:05:77:e8:ef:27: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0E:C4:A9:C4:34:13:B0:14:B4:44:9D:74:F0:AD:C8:4A:6A:86:7C X509v3 Authority Key Identifier: keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1e:ce:fb:29:e7:34:e8:dd:50:6e:07:5a:73:d8:35:10:bb: 78:b5:d7:e1:46:dc:40:04:a6:61:8a:9d:6c:27:c2:db:ff:4b: 39:68:c0:96:3b:e8:f3:58:10:1c:d4:d8:0c:ca:ed:6a:28:be: 9d:76:bd:00:54:28:e5:cc:70:71:3f:55:ce:cf:6b:ca:1b:34: 67:27:f1:1e:37:d0:5d:81:b5:fc:73:57:6e:25:dd:32:9a:34: a9:eb:1d:ff:52:8b:8b:50:d2:11:40:89:0c:ac:4f:df:d6:13: b8:c9:7f:1d:5e:74:c2:5c:e4:82:43:f2:f1:9f:4b:af:95:ad: 55:9e:21:ce:18:30:b8:7e:27:8d:b6:e9:2b:69:73:a1:88:2a: 8a:4d:e0:79:d5:4c:9c:2d:19:99:d8:df:54:63:ab:50:9f:c6: 77:15:99:30:10:4a:13:9a:9a:5f:10:43:6e:5f:4b:72:38:c8: a0:86:10:27:b7:8a:a5:99:ad:ec:b9:58:86:b1:9f:7d:66:48: 63:c4:37:64:29:34:8a:1b:51:6a:6d:b2:2e:8d:d6:ac:38:16: 53:a9:f7:16:8c:61:cc:dd:f4:1e:04:80:9b:e8:7c:75:3a:30: bb:33:ad:e2:e7:d7:53:cf:be:e9:87:2c:db:76:42:4f:7b:f8: 8f:6c:f4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY95PsgAOHYAit1Gcll5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz NmY4MjcwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EyhiMDBlYzRhOWM0MzQxM2IwMTRiNDQ0OWQ3NGYwYWRjODRhNmE4NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV4pJpUwM6PoGpjXVfBiPgK7xn52 RyRI+o4H/k45hrCslskD0Fi9TIGTB36yI1E4SGCwC9lve3dQ6NlKs7KLbTqEYprS qTHoOdNt6bI5LtX6hZrRrLan158mL/6JitIl21UKDGOl5AHrXG0EPikdDLSxLqjD h76VIJqs1sYwDr/Mw4zLHvYtxUfPnIXAAybyQ7oKTQDsiaK/eNKXbVJNLWkVddOA TIKGdYAJjpAItx7b/GvCEFa7t0aoYEPf8O8/OlPUs5l2/POcEHgqHsCOJwYJhyOG HJzpHARMv0awbMg3+6gu2LpL8E2vDP47J7dniQBtn6KueUlgBXfo7yfUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAOxKnENBOwFLREnXTwrchKaoZ8MB8GA1UdIwQY MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR7O+ynn NOjdUG4HWnPYNRC7eLXX4UbcQASmYYqdbCfC2/9LOWjAljvo81gQHNTYDMrtaii+ nXa9AFQo5cxwcT9Vzs9ryhs0ZyfxHjfQXYG1/HNXbiXdMpo0qesd/1KLi1DSEUCJ DKxP39YTuMl/HV50wlzkgkPy8Z9Lr5WtVZ4hzhgwuH4njbbpK2lzoYgqik3gedVM nC0ZmdjfVGOrUJ/GdxWZMBBKE5qaXxBDbl9LcjjIoIYQJ7eKpZmt7LlYhrGffWZI Y8Q3ZCk0ihtRam2yLo3WrDgWU6n3FoxhzN30HgSAm+h8dTowuzOt4ufXU8++6Ycs 23ZCT3v4j2z0jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:49 2025 by rpki-client