This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json) Hash identifier: 3rHvpb7jR/QTSA+kb2aMCv4lygCivXNCy1Qf+mJeo44= Subject key identifier: F7:23:F3:3F:68:35:5A:B0:C1:AD:28:5C:FB:A7:EC:D3:60:A5:03:03 Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019B3F48AE12A51EC4EFDA6545187D1BFFE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft Manifest number: 0ABB Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=) 2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: SETGPx1XEnMJT5jO1yWo9JboHkGIH5TV8Wj/kRRPt0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ae:12:a5:1e:c4:ef:da:65:45:18:7d:1b:ff:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=f723f33f68355ab0c1ad285cfba7ecd360a50303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:a7:8c:97:74:26:74:d0:9d:b5:43:1c:7d: d8:82:e6:0c:04:2b:9d:16:1c:bb:27:3c:10:d8:db: d5:8b:fa:76:d0:38:0c:ef:22:04:b8:94:cb:95:69: ca:11:e2:2d:d1:8f:bf:30:83:f9:c2:d7:e4:65:71: 9d:3c:96:30:35:1c:e6:db:e2:be:ef:44:c9:9e:6b: a9:7d:85:5a:7d:47:04:eb:43:41:7b:bf:34:03:07: b5:c2:35:0a:9c:f1:f1:10:44:32:6c:1b:bd:6b:2c: 53:5c:c5:7d:c0:7a:68:e4:c8:3a:35:dc:9e:22:49: 14:f6:74:ae:20:9e:11:25:c7:3c:25:e8:66:62:12: e0:27:11:43:ce:68:31:70:3c:da:14:58:67:0e:73: de:4d:7c:56:c8:29:15:36:53:3d:c0:71:d0:21:a7: 20:b2:5d:90:3e:b6:e6:94:b7:97:5b:2b:83:69:84: 7f:28:0c:25:ec:4e:c0:9b:dd:35:c7:f6:25:9f:37: ad:c8:a1:ce:55:60:77:c1:e8:c0:1e:9c:ac:5f:67: df:43:ea:de:4f:2a:fd:b0:84:e1:e6:41:c7:3d:1a: fb:b1:73:33:24:d6:92:15:e4:2d:b5:39:ce:a7:c4: 38:67:83:ee:e0:43:c7:00:03:aa:6d:55:33:d8:84: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:23:F3:3F:68:35:5A:B0:C1:AD:28:5C:FB:A7:EC:D3:60:A5:03:03 X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:24:30:2e:7f:d3:ee:65:47:af:2b:6c:59:ae:49:45:7f:fb: ca:58:5d:71:91:65:8f:62:af:27:c8:77:aa:a0:32:84:0a:84: 60:01:37:7a:5f:70:4e:f4:f7:cb:9c:2f:18:75:9d:8e:d3:d5: e1:e0:a6:00:d3:4b:21:e2:68:8e:ce:dc:47:7f:3d:fb:5f:b8: 6a:ab:c6:d6:6e:66:ee:7e:71:59:9e:f0:1f:35:20:6c:67:89: 80:87:8a:38:20:aa:0b:a1:e2:40:27:5b:4e:8e:b8:8e:3e:bb: 02:ae:96:2c:11:5c:17:d3:72:70:9d:8e:89:0f:4f:34:4e:bb: d9:9a:24:41:74:44:45:3e:76:49:1c:7e:e2:2a:d7:b3:fb:9e: da:b7:7a:57:76:1b:26:78:7b:36:18:e7:71:e7:60:e4:12:a8: 19:64:f6:59:66:6b:f7:e8:b2:cd:27:30:4f:30:7b:51:9f:b1: 88:a1:b0:a9:a2:b0:f3:08:8c:16:13:1b:ea:28:64:c4:34:a7: 9e:99:92:1c:8b:52:74:b3:be:76:ac:b7:20:68:0d:b3:ed:99: fe:1e:90:7f:2c:69:43:28:1c:92:67:27:dc:19:86:ea:56:a8: 36:73:54:2d:88:2f:7d:fa:2c:ac:6d:b3:52:00:71:74:a0:b6: 74:74:87:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SK4SpR7E79plRRh9G//kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD EyhmNzIzZjMzZjY4MzU1YWIwYzFhZDI4NWNmYmE3ZWNkMzYwYTUwMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqminjJd0JnTQnbVDHH3YguYMBCud Fhy7JzwQ2NvVi/p20DgM7yIEuJTLlWnKEeIt0Y+/MIP5wtfkZXGdPJYwNRzm2+K+ 70TJnmupfYVafUcE60NBe780Awe1wjUKnPHxEEQybBu9ayxTXMV9wHpo5Mg6Ndye IkkU9nSuIJ4RJcc8JehmYhLgJxFDzmgxcDzaFFhnDnPeTXxWyCkVNlM9wHHQIacg sl2QPrbmlLeXWyuDaYR/KAwl7E7Am901x/YlnzetyKHOVWB3wejAHpysX2ffQ+re Tyr9sITh5kHHPRr7sXMzJNaSFeQttTnOp8Q4Z4Pu4EPHAAOqbVUz2ISZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcj8z9oNVqwwa0oXPun7NNgpQMDMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiQwLn/T 7mVHrytsWa5JRX/7ylhdcZFlj2KvJ8h3qqAyhAqEYAE3el9wTvT3y5wvGHWdjtPV 4eCmANNLIeJojs7cR389+1+4aqvG1m5m7n5xWZ7wHzUgbGeJgIeKOCCqC6HiQCdb To64jj67Aq6WLBFcF9NycJ2OiQ9PNE672ZokQXRERT52SRx+4irXs/ue2rd6V3Yb Jnh7Nhjncedg5BKoGWT2WWZr9+iyzScwTzB7UZ+xiKGwqaKw8wiMFhMb6ihkxDSn npmSHItSdLO+dqy3IGgNs+2Z/h6QfyxpQygckmcn3BmG6laoNnNULYgvffosrG2z UgBxdKC2dHSHNw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:53 2025 by rpki-client