This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json) Hash identifier: dOGOdWteWBrJiW+rS7qVKs+rXS/TzmSvKgCSu726XkM= Subject key identifier: D4:C2:68:60:A8:53:BC:22:4A:41:49:2C:F2:5A:A6:4E:0B:BD:F4:3D Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Certificate serial: 019B51F3579B030340925854F74BF1A54C6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 20:01:00 +0000 Manifest this update: Wed 24 Dec 2025 20:01:00 +0000 Manifest next update: Thu 25 Dec 2025 20:01:00 +0000 Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=) 2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=) 3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: B9g+6dA6OxLDudV4q5Oy5NQuevhrCB7/gHAgvwD7CGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:57:9b:03:03:40:92:58:54:f7:4b:f1:a5:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Validity Not Before: Dec 24 20:01:00 2025 GMT Not After : Dec 25 20:01:00 2025 GMT Subject: CN=d4c26860a853bc224a41492cf25aa64e0bbdf43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:ff:c7:45:22:c2:6a:d8:3d:62:65:8b:4a: 41:dc:05:5b:32:48:31:13:e6:c1:41:98:16:e4:9c: 8c:15:46:1d:5e:25:96:09:39:e3:5b:3d:48:89:ed: bf:10:26:e6:12:43:9e:44:4c:34:53:16:68:aa:a0: 75:4a:e6:87:84:fd:f8:ab:7b:fa:57:bd:28:4a:cd: 32:44:58:a5:5b:53:b4:9f:f9:dd:de:c3:3a:d7:d5: 45:0e:0c:7e:92:e6:fe:5e:4d:b7:b2:e5:fa:28:4c: ff:ee:b3:83:b4:c1:85:e4:c9:57:f5:13:fa:dd:45: 81:8d:71:1d:75:00:e7:29:e1:d4:ba:f9:df:5e:e4: b1:42:10:05:8b:20:ba:f7:fd:94:e3:65:50:38:dd: b2:c4:56:0a:f1:62:4f:bc:13:4f:90:bf:e5:07:56: 02:5f:d2:d6:5d:81:58:33:bf:ed:0c:de:63:0d:1a: 39:12:c4:ba:f1:40:4d:eb:82:19:c3:f7:df:b6:31: 71:95:d7:a6:8f:17:01:96:03:de:43:c1:04:a1:6c: 33:b0:a3:14:34:f8:34:e1:e8:19:23:f8:0e:cf:54: 97:e9:b2:3c:95:51:7d:ba:59:c3:82:51:56:62:f2: 17:5d:47:5d:a9:77:4b:7d:f4:42:f6:9b:d0:ef:bc: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:68:60:A8:53:BC:22:4A:41:49:2C:F2:5A:A6:4E:0B:BD:F4:3D X509v3 Authority Key Identifier: keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8b:dd:3f:ed:ba:fd:7b:b3:b9:f6:91:56:81:40:0d:27:0f: 33:ee:e8:67:9f:1f:b5:b4:2d:a9:c6:06:c2:20:c9:75:48:e5: 65:dc:1b:eb:c3:eb:20:c1:65:33:aa:44:eb:d8:68:3d:fb:76: fa:a4:d3:a1:e5:9d:ba:0e:bb:55:06:da:59:38:ad:c5:06:6a: 34:f9:91:7f:a6:9c:7e:89:b9:22:fe:70:3c:4c:1e:39:33:44: 5b:3c:61:ae:a3:a7:2d:57:12:85:17:a3:9e:ab:31:71:e2:68: 3a:46:3f:82:6d:23:08:23:ea:29:bf:8f:4b:5f:35:39:7a:fd: 78:a3:1d:0b:e6:d0:1b:e3:78:c7:cb:ce:1a:48:d6:29:f7:d0: 25:9d:88:fe:44:25:2e:7f:ab:8f:36:52:90:c9:43:29:06:4c: c9:19:82:1d:69:25:8a:ee:66:c5:0c:bf:52:c8:c9:81:c4:d7: 0f:1d:31:2e:2e:7a:c0:f2:b9:e8:10:99:e2:9e:21:00:b9:6e: 20:02:f7:f8:62:07:81:df:64:f4:3c:19:d3:8c:95:8b:56:68: 77:e8:ed:79:88:ca:14:1d:c1:6e:90:51:d0:c5:af:10:20:4f: ff:74:41:ad:8e:35:02:f7:37:eb:a5:36:e5:3f:3c:0a:55:fd: 8b:fd:45:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR81ebAwNAklhU90vxpUxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx OGU5MDMwHhcNMjUxMjI0MjAwMTAwWhcNMjUxMjI1MjAwMTAwWjAzMTEwLwYDVQQD EyhkNGMyNjg2MGE4NTNiYzIyNGE0MTQ5MmNmMjVhYTY0ZTBiYmRmNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAn/x0UiwmrYPWJli0pB3AVbMkgx E+bBQZgW5JyMFUYdXiWWCTnjWz1Iie2/ECbmEkOeREw0UxZoqqB1SuaHhP34q3v6 V70oSs0yRFilW1O0n/nd3sM619VFDgx+kub+Xk23suX6KEz/7rODtMGF5MlX9RP6 3UWBjXEddQDnKeHUuvnfXuSxQhAFiyC69/2U42VQON2yxFYK8WJPvBNPkL/lB1YC X9LWXYFYM7/tDN5jDRo5EsS68UBN64IZw/fftjFxldemjxcBlgPeQ8EEoWwzsKMU NPg04egZI/gOz1SX6bI8lVF9ulnDglFWYvIXXUddqXdLffRC9pvQ77z2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTCaGCoU7wiSkFJLPJapk4LvfQ9MB8GA1UdIwQY MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIvdP+26 /XuzufaRVoFADScPM+7oZ58ftbQtqcYGwiDJdUjlZdwb68PrIMFlM6pE69hoPft2 +qTToeWdug67VQbaWTitxQZqNPmRf6acfom5Iv5wPEweOTNEWzxhrqOnLVcShRej nqsxceJoOkY/gm0jCCPqKb+PS181OXr9eKMdC+bQG+N4x8vOGkjWKffQJZ2I/kQl Ln+rjzZSkMlDKQZMyRmCHWkliu5mxQy/UsjJgcTXDx0xLi56wPK56BCZ4p4hALlu IAL3+GIHgd9k9DwZ04yVi1Zod+jteYjKFB3BbpBR0MWvECBP/3RBrY41Avc366U2 5T88ClX9i/1FOQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:19:42 2025 by rpki-client