This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json) Hash identifier: N3pBme0eAF5h3XwjfvksPdWOalHvlREty+vqChklYNM= Subject key identifier: D3:60:A4:35:69:E2:8E:23:04:0B:1C:93:69:3E:BE:AF:9E:0D:52:0C Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Certificate serial: 019B6B7C512960756635F78E3F55E55BF8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 19:01:07 +0000 Manifest this update: Mon 29 Dec 2025 19:01:07 +0000 Manifest next update: Tue 30 Dec 2025 19:01:07 +0000 Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=) 2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: dZMc12JYoXvC+1JyPTQ6jh2MqmWI3yDG87ODsy8KR88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:51:29:60:75:66:35:f7:8e:3f:55:e5:5b:f8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Validity Not Before: Dec 29 19:01:07 2025 GMT Not After : Dec 30 19:01:07 2025 GMT Subject: CN=d360a43569e28e23040b1c93693ebeaf9e0d520c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:1e:a1:14:ef:1d:75:9b:0e:96:d3:7b:39: 34:05:f0:1e:d5:7d:11:74:55:17:54:93:03:79:d6: 1c:1a:36:fb:77:08:a0:fa:f7:31:7b:94:fa:b8:72: 3f:e0:0a:7b:04:bf:55:32:34:83:b9:2a:ab:3a:9e: 28:99:43:ca:d8:c0:4a:67:fd:ed:70:81:f6:29:71: 5d:d0:9b:38:3b:c1:6a:df:ce:74:80:eb:4e:96:fa: 7f:dd:57:be:8a:69:62:22:95:73:79:45:59:24:10: 3a:b7:8a:3f:b9:7b:cd:0d:78:cf:98:92:f0:23:2d: 54:04:d2:a0:c1:ac:36:63:49:28:a0:f5:1a:81:75: b2:65:5b:57:bd:1d:a1:28:f5:16:f1:aa:ed:1d:d2: 20:46:d0:f7:c7:ca:89:ba:2f:f3:6c:82:8d:f6:9d: 3c:1a:6d:0e:bc:a6:f3:29:37:56:25:e0:c7:9b:0c: 24:f5:14:3b:e7:15:95:08:dd:bc:94:71:2a:39:30: 77:fa:74:cb:ea:f1:d5:60:d3:59:45:39:02:83:35: 89:37:db:3a:ee:9b:6c:85:67:5c:1b:34:aa:14:3d: a9:64:71:ef:22:95:30:34:0a:c4:44:a2:4e:af:2b: e7:c0:34:7b:88:d3:8d:69:58:90:b7:e1:ee:d9:a1: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:60:A4:35:69:E2:8E:23:04:0B:1C:93:69:3E:BE:AF:9E:0D:52:0C X509v3 Authority Key Identifier: keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:1d:ff:40:4e:12:11:16:13:72:9d:ca:18:8c:1b:46:3d: c3:d3:bf:d1:3b:c6:7d:85:49:5c:9c:67:50:22:af:37:cf:7d: e0:8f:ac:c8:4c:56:16:ed:ab:32:fc:58:35:74:a8:1f:96:e4: 4f:00:91:fd:be:18:ab:4e:bd:85:1b:26:bd:dc:52:45:3d:45: e9:20:6c:b9:d4:b1:b4:ae:55:ac:e3:40:23:7f:f3:b0:aa:04: 2f:9c:ff:2e:69:58:b3:66:5e:22:84:d6:1c:92:07:08:f0:b8: 90:70:4e:b0:14:99:c0:9b:32:43:bc:b7:69:cb:9f:e5:cb:8b: 7d:f2:4e:ac:bf:e6:23:4b:b3:7a:99:3d:e8:34:89:e5:12:94: bb:31:9c:2c:01:5c:d7:fd:50:61:80:c7:44:88:1e:04:27:d4: 4a:ed:1d:a3:a8:68:9e:dd:4c:3b:dd:e8:a7:cd:05:98:8e:ac: 56:21:ba:54:56:5b:7c:15:07:6a:15:b1:4e:90:d5:0b:09:cc: 38:c9:3b:85:7a:7d:98:09:2e:ae:57:ca:99:97:a1:aa:ee:94: 34:bd:03:6a:71:59:d0:ea:ab:43:9b:fd:ae:23:0e:6e:2b:7a: 46:0c:00:ea:08:1a:b1:6d:cf:35:80:df:d8:72:e2:87:a7:e7: bd:4a:74:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfFEpYHVmNfeOP1XlW/i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4 NDNjNTYwHhcNMjUxMjI5MTkwMTA3WhcNMjUxMjMwMTkwMTA3WjAzMTEwLwYDVQQD EyhkMzYwYTQzNTY5ZTI4ZTIzMDQwYjFjOTM2OTNlYmVhZjllMGQ1MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNYeoRTvHXWbDpbTezk0BfAe1X0R dFUXVJMDedYcGjb7dwig+vcxe5T6uHI/4Ap7BL9VMjSDuSqrOp4omUPK2MBKZ/3t cIH2KXFd0Js4O8Fq3850gOtOlvp/3Ve+imliIpVzeUVZJBA6t4o/uXvNDXjPmJLw Iy1UBNKgwaw2Y0kooPUagXWyZVtXvR2hKPUW8artHdIgRtD3x8qJui/zbIKN9p08 Gm0OvKbzKTdWJeDHmwwk9RQ75xWVCN28lHEqOTB3+nTL6vHVYNNZRTkCgzWJN9s6 7ptshWdcGzSqFD2pZHHvIpUwNArERKJOryvnwDR7iNONaViQt+Hu2aE8fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNgpDVp4o4jBAsck2k+vq+eDVIMMB8GA1UdIwQY MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0 LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7Qd/0BO EhEWE3KdyhiMG0Y9w9O/0TvGfYVJXJxnUCKvN8994I+syExWFu2rMvxYNXSoH5bk TwCR/b4Yq069hRsmvdxSRT1F6SBsudSxtK5VrONAI3/zsKoEL5z/LmlYs2ZeIoTW HJIHCPC4kHBOsBSZwJsyQ7y3acuf5cuLffJOrL/mI0uzepk96DSJ5RKUuzGcLAFc 1/1QYYDHRIgeBCfUSu0do6hont1MO93op80FmI6sViG6VFZbfBUHahWxTpDVCwnM OMk7hXp9mAkurlfKmZehqu6UNL0DanFZ0OqrQ5v9riMObit6RgwA6ggasW3PNYDf 2HLih6fnvUp0GA== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:31 2025 by rpki-client