This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json) Hash identifier: BsKDCYsU7vX/YiZNOaqhqYW9Ztnam0ZYxR8uhW78Cmo= Subject key identifier: 39:33:90:81:9E:A1:9F:BB:7E:81:2A:62:9C:7A:FB:04:83:BC:80:59 Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Certificate serial: 019B32D66832B0AC84D6308B2BC98B3FB99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft Manifest number: 101B Signing time: Thu 18 Dec 2025 19:01:10 +0000 Manifest this update: Thu 18 Dec 2025 19:01:10 +0000 Manifest next update: Fri 19 Dec 2025 19:01:10 +0000 Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=) 2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: 38+QT2hYOSfW2ZUyIT609t1Zu7iHv1NtiBwYhtPqr2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:68:32:b0:ac:84:d6:30:8b:2b:c9:8b:3f:b9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Validity Not Before: Dec 18 19:01:10 2025 GMT Not After : Dec 19 19:01:10 2025 GMT Subject: CN=393390819ea19fbb7e812a629c7afb0483bc8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:64:c4:d0:9c:ea:78:bd:d6:69:16:bf:4c: c8:2d:6b:e2:f4:a5:d3:1d:7f:85:87:96:da:4c:eb: bc:c0:53:c3:83:c2:9c:aa:49:68:40:e2:64:53:2c: 1c:2a:d0:d9:d1:eb:1c:2a:18:23:fd:94:9e:2a:70: 6d:f3:9f:dd:dd:f1:00:f4:e6:1a:a0:a2:aa:b5:98: 67:a8:d0:13:6c:81:1b:17:1a:e4:43:89:47:c8:33: 94:fb:46:9c:70:e3:26:96:92:1b:c8:6f:0a:32:6f: e0:00:ae:a2:b6:2f:ea:95:55:32:54:d1:3d:7e:f7: d7:d6:9b:e8:ab:26:0e:8e:12:f8:b3:62:be:f2:f9: 47:42:68:75:01:0d:e6:99:77:fd:86:5e:80:4b:08: ed:ac:59:d6:d2:0c:92:e5:d3:be:d6:07:7c:f6:17: 4f:95:66:15:fb:be:56:29:75:e5:ec:71:c6:72:0e: 6f:7d:95:ee:84:f7:c1:af:79:c0:6a:c3:ce:6f:85: 81:bb:7f:a7:27:cf:6e:d9:d0:45:7f:a0:f1:73:ba: 20:34:6c:72:2a:8d:0a:7b:b4:ec:22:d9:65:fa:66: e7:77:9f:42:7a:4c:18:a3:c1:b5:13:8a:aa:49:3a: d7:df:df:b9:3a:6c:07:20:48:89:db:71:89:d0:b1: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:90:81:9E:A1:9F:BB:7E:81:2A:62:9C:7A:FB:04:83:BC:80:59 X509v3 Authority Key Identifier: keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b4:95:c9:0a:ef:cd:04:21:2b:d2:67:ac:01:57:4e:14:99: 77:61:9f:6b:3e:b9:89:81:d4:89:79:6f:ed:0b:a9:de:f7:05: 32:d1:45:e0:de:df:36:71:75:fc:0b:6d:6f:85:9a:f1:19:e2: a1:ea:ff:f3:d4:90:a5:57:bd:97:44:49:48:f8:19:c6:97:6b: bb:fa:08:fb:6b:47:29:79:61:ed:6c:90:b2:c2:4c:e1:8a:ce: f0:da:da:7b:89:fb:0a:53:5f:cc:06:80:49:41:62:c3:25:be: 22:4d:71:be:bb:e6:2a:31:ca:c0:bb:08:45:0b:40:02:26:32: ac:b6:ee:4e:80:0b:e5:21:3e:24:00:e5:77:1c:65:68:16:d3: 71:de:ef:c3:09:d1:62:09:1f:10:55:c9:23:0d:22:b9:ce:5f: 1a:27:04:39:ef:6d:fc:b0:a1:c4:63:ec:d5:9f:1a:71:4c:7d: 3d:1e:dc:c0:cc:90:b8:40:fe:e9:e2:67:66:65:4e:0d:09:79: 0a:65:c3:cc:25:e2:a8:99:dd:c1:cd:d4:a2:f5:10:a6:f9:b1: f7:6a:96:ee:95:db:ad:24:0b:e6:b8:62:9f:26:b7:69:ee:48: 31:7e:f2:d3:53:38:eb:be:53:4e:a3:f0:cf:56:26:f2:5e:3c: 13:cd:2d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1mgysKyE1jCLK8mLP7meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw ODMwZTUwHhcNMjUxMjE4MTkwMTEwWhcNMjUxMjE5MTkwMTEwWjAzMTEwLwYDVQQD EygzOTMzOTA4MTllYTE5ZmJiN2U4MTJhNjI5YzdhZmIwNDgzYmM4MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G1kxNCc6ni91mkWv0zILWvi9KXT HX+Fh5baTOu8wFPDg8KcqkloQOJkUywcKtDZ0escKhgj/ZSeKnBt85/d3fEA9OYa oKKqtZhnqNATbIEbFxrkQ4lHyDOU+0accOMmlpIbyG8KMm/gAK6iti/qlVUyVNE9 fvfX1pvoqyYOjhL4s2K+8vlHQmh1AQ3mmXf9hl6ASwjtrFnW0gyS5dO+1gd89hdP lWYV+75WKXXl7HHGcg5vfZXuhPfBr3nAasPOb4WBu3+nJ89u2dBFf6Dxc7ogNGxy Ko0Ke7TsItll+mbnd59CekwYo8G1E4qqSTrX39+5OmwHIEiJ23GJ0LFqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkzkIGeoZ+7foEqYpx6+wSDvIBZMB8GA1UdIwQY MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2 LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bSVyQrv zQQhK9JnrAFXThSZd2Gfaz65iYHUiXlv7Qup3vcFMtFF4N7fNnF1/Attb4Wa8Rni oer/89SQpVe9l0RJSPgZxpdru/oI+2tHKXlh7WyQssJM4YrO8Nrae4n7ClNfzAaA SUFiwyW+Ik1xvrvmKjHKwLsIRQtAAiYyrLbuToAL5SE+JADldxxlaBbTcd7vwwnR YgkfEFXJIw0iuc5fGicEOe9t/LChxGPs1Z8acUx9PR7cwMyQuED+6eJnZmVODQl5 CmXDzCXiqJndwc3UovUQpvmx92qW7pXbrSQL5rhinya3ae5IMX7y01M4675TTqPw z1Ym8l48E80tEA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:33:33 2025 by rpki-client