This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json) Hash identifier: X4iV+awTbZKIorEDCFx57ncIk4a5C2HRWy9DbvoEGIc= Subject key identifier: A6:4D:32:A4:82:91:88:8E:0B:0B:B2:48:D9:EA:7E:E2:9B:94:DB:75 Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5 Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5 Certificate serial: 019B3D59A80E8BA7FDD7851CF765F580A7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft Manifest number: 0495 Signing time: Sat 20 Dec 2025 20:00:44 +0000 Manifest this update: Sat 20 Dec 2025 20:00:44 +0000 Manifest next update: Sun 21 Dec 2025 20:00:44 +0000 Files and hashes: 1: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: jQ9FCjIWBTbuW3DSPBpNmfGv/yOX4d0rL4FZo3zBAVA=) 2: zVUl367uAuWMVUPRoi840j0jiPg.roa (hash: qS11jDGkCNzMKbCIBI9UQyUrb/zBjJR7FmPuRC9w0J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a8:0e:8b:a7:fd:d7:85:1c:f7:65:f5:80:a7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5 Validity Not Before: Dec 20 20:00:44 2025 GMT Not After : Dec 21 20:00:44 2025 GMT Subject: CN=a64d32a48291888e0b0bb248d9ea7ee29b94db75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:49:67:04:d1:8c:09:de:38:58:27:06:6e: c4:d8:e3:7d:a7:b4:82:bb:3d:6d:ff:27:fc:2a:b4: f8:d3:0e:d7:ca:3f:00:41:63:79:77:ab:9a:a2:ed: 45:2f:d1:21:71:cc:2b:af:ba:8c:a8:c3:33:f9:04: 73:c6:19:69:31:57:28:2c:9c:d4:97:aa:9d:36:b2: b5:77:07:73:90:63:6b:83:c1:58:9c:6a:ad:98:93: bb:5c:3a:ef:2c:33:35:6f:10:21:e8:ae:bc:8c:7a: 83:0f:09:97:37:43:0c:8e:45:8a:b1:5c:3c:36:c2: e6:30:31:e0:22:fc:aa:16:08:68:27:d2:d2:a7:47: 14:ce:ca:b1:a7:e1:ee:7f:a4:46:fe:3f:71:4d:b5: 8a:6d:e8:cf:42:2b:b6:d5:6e:b6:2a:ae:91:db:d8: a0:7d:31:f5:5f:35:f1:bf:5c:b7:b8:8b:b0:6f:e9: 59:e8:84:43:a2:8e:b2:d0:f2:e1:8f:e9:ae:e4:56: d0:d9:ce:bf:1f:c5:fc:3c:95:ff:82:84:02:68:b1: 09:1a:fa:98:57:a2:35:e4:2f:cf:26:00:7b:c3:9a: 97:54:7a:0c:5c:d7:6a:d5:4c:48:31:55:ad:27:88: 96:33:7b:96:4a:96:e0:1a:5a:fa:47:81:a8:ea:ee: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:32:A4:82:91:88:8E:0B:0B:B2:48:D9:EA:7E:E2:9B:94:DB:75 X509v3 Authority Key Identifier: keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:3d:df:82:ac:80:ce:d3:70:8f:02:63:6d:84:79:f3:99:10: 18:10:80:62:b5:03:09:1f:a0:e0:47:fa:80:dc:75:02:74:66: b3:e5:f3:b6:a3:85:3e:51:dd:6a:c5:07:ac:9a:eb:ab:ce:e6: 49:db:a4:20:65:92:2c:c4:e8:22:16:89:49:30:b9:c0:c7:cb: 71:ed:00:3b:59:06:54:4d:67:44:37:b5:bb:8c:cf:d4:91:3d: f8:96:2a:bb:8a:55:8f:b3:be:42:c3:94:a8:e5:ef:1a:3b:e9: dc:07:ae:34:25:66:a1:02:b7:92:c9:b4:a4:30:8d:10:63:f4: ac:52:06:14:e3:33:60:5a:53:90:95:8b:db:28:bd:b8:50:41: f1:4d:0b:fa:be:5c:42:f0:fa:31:6e:af:84:06:9b:98:eb:fd: 38:6a:15:40:c5:54:cd:73:96:83:e4:4a:fb:5d:a1:71:e4:52: dc:6a:2d:3d:91:ad:28:fb:2b:fa:2d:18:a3:0c:1c:d1:8e:1c: 50:98:63:88:ef:32:0b:7e:46:85:25:3e:81:40:59:e9:bb:d8: 3b:bc:52:7f:66:ed:40:13:00:c8:ec:51:3e:a6:62:b6:13:f0: 1d:dc:69:c3:e0:b2:12:69:8f:58:83:c3:95:d9:ff:2f:d8:51: 96:60:3b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WagOi6f914Uc92X1gKfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMTFiZmQyOTBhZmI1MjBlYmE0MTRmNzhhMzk3NTBiN2U5 OWY0YzUwHhcNMjUxMjIwMjAwMDQ0WhcNMjUxMjIxMjAwMDQ0WjAzMTEwLwYDVQQD EyhhNjRkMzJhNDgyOTE4ODhlMGIwYmIyNDhkOWVhN2VlMjliOTRkYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrhJZwTRjAneOFgnBm7E2ON9p7SC uz1t/yf8KrT40w7Xyj8AQWN5d6uaou1FL9Ehccwrr7qMqMMz+QRzxhlpMVcoLJzU l6qdNrK1dwdzkGNrg8FYnGqtmJO7XDrvLDM1bxAh6K68jHqDDwmXN0MMjkWKsVw8 NsLmMDHgIvyqFghoJ9LSp0cUzsqxp+Huf6RG/j9xTbWKbejPQiu21W62Kq6R29ig fTH1XzXxv1y3uIuwb+lZ6IRDoo6y0PLhj+mu5FbQ2c6/H8X8PJX/goQCaLEJGvqY V6I15C/PJgB7w5qXVHoMXNdq1UxIMVWtJ4iWM3uWSpbgGlr6R4Go6u5XiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZNMqSCkYiOCwuySNnqfuKblNt1MB8GA1UdIwQY MBaAFFERv9KQr7Ug66QU94o5dQt+mfTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVJHXzBwQ3Z0U0RycEJUM2lqbDFDMzZaOU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lMjAxZWUtOWI1OC00Yjk0LWE2ODYt NmEzMTE0ZmNjNmFjLzEvVVJHXzBwQ3Z0U0RycEJUM2lqbDFDMzZaOU1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lMjAxZWUtOWI1OC00Yjk0LWE2ODYtNmEzMTE0ZmNjNmFj LzEvVVJHXzBwQ3Z0U0RycEJUM2lqbDFDMzZaOU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqD3fgqyA ztNwjwJjbYR585kQGBCAYrUDCR+g4Ef6gNx1AnRms+XztqOFPlHdasUHrJrrq87m SdukIGWSLMToIhaJSTC5wMfLce0AO1kGVE1nRDe1u4zP1JE9+JYqu4pVj7O+QsOU qOXvGjvp3AeuNCVmoQK3ksm0pDCNEGP0rFIGFOMzYFpTkJWL2yi9uFBB8U0L+r5c QvD6MW6vhAabmOv9OGoVQMVUzXOWg+RK+12hceRS3GotPZGtKPsr+i0Yowwc0Y4c UJhjiO8yC35GhSU+gUBZ6bvYO7xSf2btQBMAyOxRPqZithPwHdxpw+CyEmmPWIPD ldn/L9hRlmA78Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:46 2025 by rpki-client