This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json) Hash identifier: bdMb2vaRDN5ofXLCGZbAHJMKR3OZvvaiK40vK9xcTkE= Subject key identifier: 78:0B:0C:AC:20:F8:C6:A8:94:65:1F:C6:90:A2:39:65:F0:E1:20:DE Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Certificate serial: 019B3D233DE95CB94A632D299943D7BC8E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=) 2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: zg8ft+FDddWoyUBOGYtnP+oMA3PeqD45TVkKNHZxo0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3d:e9:5c:b9:4a:63:2d:29:99:43:d7:bc:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=780b0cac20f8c6a894651fc690a23965f0e120de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:6f:d2:26:47:54:32:ec:48:dc:f7:4d:c8: d9:54:29:e4:0c:75:27:58:9d:43:ca:3d:fe:49:ce: 0e:08:4a:3b:e9:0c:93:51:0f:2b:bf:d1:c0:30:85: f3:d0:6b:c9:01:ba:3d:25:f9:ad:bc:b0:12:1f:6e: 67:b4:2f:76:66:fa:8d:8b:1a:02:75:62:07:a4:fa: 43:4a:9a:d7:68:ec:0f:05:9f:cc:ea:1f:24:94:79: 86:ed:03:e5:27:c3:98:66:1d:2a:ad:71:49:16:04: 45:52:64:49:7d:89:44:1c:fa:fe:70:93:e9:98:f4: 34:a3:9a:0f:90:38:eb:12:a2:f5:0e:52:62:d2:34: bc:4c:b1:c4:88:dc:85:fb:de:72:d6:5b:36:80:72: d3:4f:de:b5:d9:72:4a:07:79:62:3d:46:99:7f:ac: 15:b8:1d:f5:7b:cf:09:46:0e:00:d0:99:7a:bb:28: 46:7b:8f:59:c8:54:d4:2f:cd:85:ac:d4:d6:03:bf: 31:58:49:90:69:98:b0:d3:dc:00:6a:75:b2:63:e4: 7b:80:e2:27:d2:80:4c:5f:98:f2:34:d6:98:ab:cc: f3:27:6a:1d:be:27:72:23:34:66:c8:77:ed:5e:d7: 69:fa:30:9a:06:85:8e:6f:dc:ac:fd:eb:11:70:4d: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:0C:AC:20:F8:C6:A8:94:65:1F:C6:90:A2:39:65:F0:E1:20:DE X509v3 Authority Key Identifier: keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:52:0c:a2:0f:8c:46:cd:27:98:35:d3:c6:da:ef:40:f7:e2: fb:2f:d8:6c:2b:9c:cd:e9:5a:b0:5b:38:21:81:49:2c:0d:57: de:7a:a2:0d:72:0a:a1:17:cd:81:2e:b2:4b:5e:4b:da:d1:25: b2:bb:ad:99:c0:23:60:43:24:62:e2:f1:a2:d2:4e:a5:03:e8: 04:6f:c1:bc:94:25:8b:63:50:a6:fa:07:c8:e1:cf:a0:a6:9a: de:f3:00:f8:85:69:3e:3a:29:7d:b2:a0:fd:be:76:c4:ef:49: e2:6f:c0:da:5d:b6:7e:64:1c:cf:7d:c1:fc:08:9d:14:59:5e: 7a:7f:ee:16:ce:49:47:ac:d4:0b:f1:fe:4a:c9:8c:32:19:cc: 6d:c8:b3:82:c8:66:bd:e4:89:33:aa:c0:a7:cc:b5:70:8c:f7: 9b:79:d8:24:71:86:dc:ef:4f:eb:b3:b8:f0:0c:a7:99:c6:c4: 8a:18:f1:a8:f7:26:59:a7:c4:d2:88:6a:a3:be:c6:fe:23:c8: 84:08:91:c4:dc:b2:d8:a3:39:b2:ef:78:a8:65:ee:71:87:a4: 20:54:fd:96:31:a7:ca:a9:8a:eb:c1:8d:a9:09:46:99:ad:ea: 11:25:1f:f7:37:21:9a:bb:4d:cd:8e:55:94:c7:f7:f4:9b:ec: e1:a4:50:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz3pXLlKYy0pmUPXvI5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4 NDNjNTYwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD Eyg3ODBiMGNhYzIwZjhjNmE4OTQ2NTFmYzY5MGEyMzk2NWYwZTEyMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY5v0iZHVDLsSNz3TcjZVCnkDHUn WJ1Dyj3+Sc4OCEo76QyTUQ8rv9HAMIXz0GvJAbo9JfmtvLASH25ntC92ZvqNixoC dWIHpPpDSprXaOwPBZ/M6h8klHmG7QPlJ8OYZh0qrXFJFgRFUmRJfYlEHPr+cJPp mPQ0o5oPkDjrEqL1DlJi0jS8TLHEiNyF+95y1ls2gHLTT9612XJKB3liPUaZf6wV uB31e88JRg4A0Jl6uyhGe49ZyFTUL82FrNTWA78xWEmQaZiw09wAanWyY+R7gOIn 0oBMX5jyNNaYq8zzJ2odvidyIzRmyHftXtdp+jCaBoWOb9ys/esRcE1DtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgLDKwg+MaolGUfxpCiOWXw4SDeMB8GA1UdIwQY MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0 LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlIMog+M Rs0nmDXTxtrvQPfi+y/YbCuczelasFs4IYFJLA1X3nqiDXIKoRfNgS6yS15L2tEl srutmcAjYEMkYuLxotJOpQPoBG/BvJQli2NQpvoHyOHPoKaa3vMA+IVpPjopfbKg /b52xO9J4m/A2l22fmQcz33B/AidFFleen/uFs5JR6zUC/H+SsmMMhnMbcizgshm veSJM6rAp8y1cIz3m3nYJHGG3O9P67O48AynmcbEihjxqPcmWafE0ohqo77G/iPI hAiRxNyy2KM5su94qGXucYekIFT9ljGnyqmK68GNqQlGma3qESUf9zchmrtNzY5V lMf39Jvs4aRQVw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:18 2025 by rpki-client