This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json) Hash identifier: FkpOb98jRyx/UxT8ZhDLI9w25C47KyJc2Zn6oRIkdDw= Subject key identifier: CC:5C:DD:03:CD:F5:39:8D:10:6C:5B:C1:F8:53:9B:DE:A5:27:39:F3 Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea Certificate serial: 019B6CC5383AF8FA288102BBC982224C9FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 01:00:22 +0000 Manifest this update: Tue 30 Dec 2025 01:00:22 +0000 Manifest next update: Wed 31 Dec 2025 01:00:22 +0000 Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: DbOhWKZvtmkopQAQNRcaFgErya5l6S3GevxIctCoNQE=) 2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:38:3a:f8:fa:28:81:02:bb:c9:82:22:4c:9f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea Validity Not Before: Dec 30 01:00:22 2025 GMT Not After : Dec 31 01:00:22 2025 GMT Subject: CN=cc5cdd03cdf5398d106c5bc1f8539bdea52739f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:4f:f4:ca:e5:eb:c9:63:06:a8:87:fe:72: 54:d5:4d:d9:c5:32:54:f7:1a:a6:27:cf:80:52:27: ff:96:d1:31:10:38:f8:59:a1:26:f0:51:70:cd:9c: 97:44:a0:99:4b:97:6d:fb:d0:b2:64:94:18:db:2f: f4:f1:bf:ee:eb:1a:bf:52:46:18:a5:f8:33:40:df: a9:7e:38:8e:1b:3f:17:ac:99:ee:4c:00:e0:13:75: e7:8f:8f:d4:87:e2:da:e7:eb:5a:a7:f3:9c:0c:06: 82:bb:9b:9f:68:47:54:d8:ed:00:26:db:fc:3a:71: 66:4c:e0:3a:81:c7:55:7d:be:1b:04:cc:58:46:c2: 1c:4f:29:57:19:be:45:d7:48:19:d7:d9:a2:96:d0: df:28:ca:fb:44:2d:62:f2:39:2d:6f:e2:b3:bb:ec: e4:7e:61:ee:7c:fd:96:a2:99:0f:a0:f0:11:97:57: 2d:8f:4d:5e:2f:f6:1a:3e:cc:73:2f:46:b2:75:c7: 2d:5d:61:3c:cd:c2:31:96:51:bf:e7:4d:b4:c7:a5: 5d:b2:98:5b:12:19:5c:28:cd:29:d9:eb:c6:4a:2f: c8:e0:1b:f2:d8:0b:7e:0d:09:f6:f6:c1:d3:0f:d4: 7b:91:79:42:39:3d:7b:fa:6a:5f:e4:40:40:67:04: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5C:DD:03:CD:F5:39:8D:10:6C:5B:C1:F8:53:9B:DE:A5:27:39:F3 X509v3 Authority Key Identifier: keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f9:ce:21:73:c0:67:02:6e:bb:f4:b0:90:ad:6e:32:d6:a8: 52:43:25:38:28:00:e4:82:e0:48:46:ef:e3:f2:74:b3:8f:71: 63:47:70:d6:80:d6:38:5e:fe:4d:de:c3:7e:ff:71:5a:c9:d4: db:af:0e:7e:4b:0d:6f:27:bd:51:f1:36:4d:2b:5d:ea:9b:7d: 1f:71:62:99:13:fe:15:21:9c:80:bd:7d:c4:1f:42:2c:27:52: 1a:50:8a:9a:e2:21:41:20:92:1c:58:e4:af:2a:69:b8:f7:5b: 5f:24:c7:4c:f6:88:0a:da:2c:3d:20:f1:61:9b:b0:90:39:2b: fc:18:9e:7e:73:44:a9:9c:7e:05:90:fd:9b:b1:4a:31:a9:74: 00:5a:c3:d8:04:29:48:39:5b:a7:f2:4e:bf:50:92:64:7a:e8: 25:f9:d0:71:81:19:26:0b:3e:36:25:15:ee:02:0b:04:f8:c1: 91:77:33:63:a2:ea:1c:e4:24:70:b5:5d:52:32:8a:fa:05:1b: 56:b6:0c:f0:54:69:8c:95:5d:09:cd:91:ae:97:4f:4d:c8:a8: 8a:bf:1d:ca:f1:82:04:ba:de:88:28:e9:db:d6:21:39:3d:d5: 94:8e:52:86:6b:55:16:87:77:66:ae:c1:d8:72:a4:ae:f3:c6: 3a:49:2a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxTg6+PoogQK7yYIiTJ+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli NWJjZWEwHhcNMjUxMjMwMDEwMDIyWhcNMjUxMjMxMDEwMDIyWjAzMTEwLwYDVQQD EyhjYzVjZGQwM2NkZjUzOThkMTA2YzViYzFmODUzOWJkZWE1MjczOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBdP9Mrl68ljBqiH/nJU1U3ZxTJU 9xqmJ8+AUif/ltExEDj4WaEm8FFwzZyXRKCZS5dt+9CyZJQY2y/08b/u6xq/UkYY pfgzQN+pfjiOGz8XrJnuTADgE3Xnj4/Uh+La5+tap/OcDAaCu5ufaEdU2O0AJtv8 OnFmTOA6gcdVfb4bBMxYRsIcTylXGb5F10gZ19miltDfKMr7RC1i8jktb+Kzu+zk fmHufP2WopkPoPARl1ctj01eL/YaPsxzL0aydcctXWE8zcIxllG/5020x6Vdsphb EhlcKM0p2evGSi/I4Bvy2At+DQn29sHTD9R7kXlCOT17+mpf5EBAZwSllwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxc3QPN9TmNEGxbwfhTm96lJznzMB8GA1UdIwQY MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4 LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvnOIXPA ZwJuu/SwkK1uMtaoUkMlOCgA5ILgSEbv4/J0s49xY0dw1oDWOF7+Td7Dfv9xWsnU 268OfksNbye9UfE2TStd6pt9H3FimRP+FSGcgL19xB9CLCdSGlCKmuIhQSCSHFjk ryppuPdbXyTHTPaICtosPSDxYZuwkDkr/BiefnNEqZx+BZD9m7FKMal0AFrD2AQp SDlbp/JOv1CSZHroJfnQcYEZJgs+NiUV7gILBPjBkXczY6LqHOQkcLVdUjKK+gUb VrYM8FRpjJVdCc2RrpdPTcioir8dyvGCBLreiCjp29YhOT3VlI5ShmtVFod3Zq7B 2HKkrvPGOkkq3w== -----END CERTIFICATE-----Generated at Tue Dec 30 04:53:32 2025 by rpki-client