This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json) Hash identifier: Ih8aJ2haOd8hDdHDFXahxlvDeezNbCwUoE+e+2uHk6Y= Subject key identifier: DC:FD:28:F0:74:23:A1:3C:47:01:CD:43:1F:B6:03:97:1E:02:42:AD Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Certificate serial: 019AF20997CB30FE66702C9DCA5361F2857A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft Manifest number: 018C Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: K1j6OVd7oIggkHpgrrQDKhTlTDR4thC2dt/ZQ1ApDFg=) 2: dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa (hash: lU+saX5Y8NpUNdHr5ny3vDxig5SKi8AIgZItEb0hTg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:97:cb:30:fe:66:70:2c:9d:ca:53:61:f2:85:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=dcfd28f07423a13c4701cd431fb603971e0242ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:eb:90:c9:4c:4c:96:da:c3:32:22:c6:c5: d4:ce:ca:0f:20:70:15:81:a8:77:31:68:27:82:af: c7:ec:19:3d:27:8f:31:43:10:86:86:bd:e9:33:f9: bb:3c:d3:09:a6:9e:d2:92:83:58:f5:76:56:7d:df: 51:05:cd:e7:7c:46:b8:1c:cd:94:9b:88:f1:e3:89: 92:e6:31:cc:60:8b:2a:cd:d3:6d:70:97:db:02:d8: b9:46:1a:10:f7:f1:1c:89:75:98:8f:b6:69:94:15: 0e:8e:bc:8b:c5:4b:7d:ea:cd:8d:cd:d9:40:ed:26: a7:9b:24:76:de:92:0f:85:c9:c8:86:46:db:7e:14: 98:7a:52:08:04:db:58:34:d7:01:ea:0f:6b:3c:85: d0:22:a8:71:bb:9d:be:2f:cc:40:91:f5:73:21:5b: c5:3e:64:aa:20:7b:f0:89:ae:35:04:86:87:0f:e5: 63:9d:c7:45:a0:ca:c1:5d:24:f1:67:9a:bd:82:7b: 24:72:c3:f0:cc:1a:3e:f3:ef:f9:4d:29:d0:bf:4e: e6:00:84:e1:3e:46:92:40:0d:b5:a7:30:eb:4a:23: 2e:78:b8:2e:d9:cc:ab:8f:30:83:1c:66:20:27:7f: 87:53:65:ca:6c:ef:57:17:41:d8:67:8a:28:9b:77: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:28:F0:74:23:A1:3C:47:01:CD:43:1F:B6:03:97:1E:02:42:AD X509v3 Authority Key Identifier: keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:39:e6:e8:ac:2e:68:8a:74:59:18:bc:ab:a3:d8:c2:0f:f9: 59:6e:64:9c:2a:dc:64:10:5b:d0:f8:94:e8:05:4a:22:41:31: 4b:97:fe:26:a3:26:72:bd:42:3a:01:e5:0a:7d:80:e3:e6:d4: af:8b:65:50:0b:e5:fe:27:0b:f0:ba:53:95:e1:7f:0d:5f:5d: 03:00:ab:56:63:c6:ef:90:d1:ee:01:45:ff:44:a3:dd:6b:20: a7:27:5c:c8:0f:45:7e:aa:28:cd:32:5d:be:d7:f6:1b:da:8d: 7a:92:73:d9:d8:92:e0:7f:09:a7:d7:f0:05:a2:2b:aa:17:ce: 40:d2:af:8e:a5:b5:03:ae:ec:ed:e4:6b:28:bf:b3:44:7e:f4: 25:2c:3a:a6:42:c3:95:34:67:e3:38:5a:ba:0e:64:05:46:29: 75:d8:99:54:e0:2d:05:2e:88:c1:18:b1:2e:c2:8a:59:ed:1c: 54:46:64:1f:d7:62:b5:fb:93:ad:a8:20:71:eb:80:fc:a5:47: 7e:35:83:a9:1a:67:1f:fc:bf:d1:e2:af:a0:a8:d5:bf:0a:1e: ce:0c:6d:9d:70:81:b6:d3:4d:f6:07:6e:0a:c8:48:86:e8:d0: 99:fa:9b:15:d1:1f:4f:e7:60:bb:07:fb:1e:6e:80:b1:48:36: 66:12:43:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZfLMP5mcCydylNh8oV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjRhNjhmNmFmZjdlMDY4MGI2ZjE1NDQzMGNlZTc0YTUw M2I2NjgwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhkY2ZkMjhmMDc0MjNhMTNjNDcwMWNkNDMxZmI2MDM5NzFlMDI0MmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHrkMlMTJbawzIixsXUzsoPIHAV gah3MWgngq/H7Bk9J48xQxCGhr3pM/m7PNMJpp7SkoNY9XZWfd9RBc3nfEa4HM2U m4jx44mS5jHMYIsqzdNtcJfbAti5RhoQ9/EciXWYj7ZplBUOjryLxUt96s2NzdlA 7SanmyR23pIPhcnIhkbbfhSYelIIBNtYNNcB6g9rPIXQIqhxu52+L8xAkfVzIVvF PmSqIHvwia41BIaHD+VjncdFoMrBXSTxZ5q9gnskcsPwzBo+8+/5TSnQv07mAITh PkaSQA21pzDrSiMueLgu2cyrjzCDHGYgJ3+HU2XKbO9XF0HYZ4oom3e6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz9KPB0I6E8RwHNQx+2A5ceAkKtMB8GA1UdIwQY MBaAFFK0po9q/34GgLbxVEMM7nSlA7ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYt MGQyYzJmZTQ5ZmRhLzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYtMGQyYzJmZTQ5ZmRh LzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDnm6Kwu aIp0WRi8q6PYwg/5WW5knCrcZBBb0PiU6AVKIkExS5f+JqMmcr1COgHlCn2A4+bU r4tlUAvl/icL8LpTleF/DV9dAwCrVmPG75DR7gFF/0Sj3WsgpydcyA9FfqoozTJd vtf2G9qNepJz2diS4H8Jp9fwBaIrqhfOQNKvjqW1A67s7eRrKL+zRH70JSw6pkLD lTRn4zhaug5kBUYpddiZVOAtBS6IwRixLsKKWe0cVEZkH9ditfuTraggceuA/KVH fjWDqRpnH/y/0eKvoKjVvwoezgxtnXCBttNN9gduCshIhujQmfqbFdEfT+dguwf7 Hm6AsUg2ZhJDxA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:40 2025 by rpki-client