This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json) Hash identifier: jU8TTIp9vUTV2+mSDeMr2GWqTHZNio8PBksZFa8iUyE= Subject key identifier: 16:5E:60:7E:A3:B0:BE:52:61:BA:FC:20:2E:4C:F9:26:CA:BD:C4:6A Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Certificate serial: 019B3D233C52BB3574F94B531C3A01BA7A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft Manifest number: 109E Signing time: Sat 20 Dec 2025 19:01:17 +0000 Manifest this update: Sat 20 Dec 2025 19:01:17 +0000 Manifest next update: Sun 21 Dec 2025 19:01:17 +0000 Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=) 2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: uI/tNkCknOgycZ+Wcg6HODESIMn2Knu2kGnhBQhEPjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3c:52:bb:35:74:f9:4b:53:1c:3a:01:ba:7a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Validity Not Before: Dec 20 19:01:17 2025 GMT Not After : Dec 21 19:01:17 2025 GMT Subject: CN=165e607ea3b0be5261bafc202e4cf926cabdc46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:84:25:96:da:82:2d:f5:a7:12:fe:83:b4: e9:79:9d:d1:b1:9b:08:2c:09:9c:77:40:81:53:97: 6d:b0:31:08:4f:91:d5:8f:82:8c:cf:79:11:6d:48: ab:76:65:41:8e:9d:bc:bd:b0:fe:63:8a:6c:be:6e: 0f:e8:58:e3:15:e8:66:3a:09:95:98:fd:7a:2b:09: f7:0f:bb:51:af:91:77:e1:31:60:6a:de:35:66:11: 85:d9:49:2d:ed:1d:a6:18:a0:07:06:1b:66:b4:ab: fe:7e:f8:27:66:3f:a4:db:b0:03:1d:48:d7:4a:2a: 8f:43:a0:32:28:fb:03:c5:b3:b2:7d:f6:30:0e:55: f0:6b:26:5d:b9:21:41:e3:a4:d1:e7:b1:ca:4b:40: 4e:e0:3d:d2:84:f7:4f:df:68:14:33:6b:8e:68:60: aa:8a:f6:46:e8:fe:a8:7a:fe:10:e6:b6:3e:9c:14: cd:82:57:aa:e8:91:80:7f:6d:8b:d0:d8:2f:d0:cb: 5a:ca:ba:6b:7e:0b:77:69:91:1f:01:fd:77:02:9b: 4f:3f:ae:c5:79:a5:1b:d0:96:67:77:89:20:13:83: 23:0f:c6:74:f3:6c:8e:c5:f3:81:60:4b:a0:e4:59: 17:21:b8:84:98:78:31:82:c1:fc:5d:a1:be:c3:87: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5E:60:7E:A3:B0:BE:52:61:BA:FC:20:2E:4C:F9:26:CA:BD:C4:6A X509v3 Authority Key Identifier: keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e4:fb:fc:65:9a:68:35:62:ab:c8:bb:cb:f9:ad:8c:7b:9d: a0:6a:5f:68:18:3d:d2:26:1f:4d:3e:5e:37:ec:f1:9a:1e:d1: 7c:d8:4b:f3:96:e7:bd:1f:d2:d9:8c:2e:e1:90:89:8a:7c:6c: ff:60:0e:33:e5:9d:b1:6c:79:15:d5:99:4f:ee:35:e7:43:44: 4b:7a:e2:cc:93:a1:b5:03:49:58:5c:e7:2b:6c:38:b7:6f:64: 9e:eb:e7:9c:84:c5:b5:00:a0:bf:dd:4e:b0:25:1f:f7:4d:f6: d9:62:40:c6:0f:57:70:03:8d:34:dd:47:eb:a7:58:18:8e:6c: 74:cf:af:d8:73:43:d5:46:db:c3:2c:dd:4b:3f:c9:df:1d:e5: 88:6d:a2:49:1b:d2:e7:fa:d9:dc:16:81:52:46:0d:29:2a:71: 9b:cc:59:76:ef:68:b2:95:9f:83:30:86:fb:7b:2f:e9:b6:8e: c2:29:bc:8f:81:5c:af:4d:dc:85:a4:c6:3d:5e:4a:f7:e9:3e: 03:68:35:d6:b5:a4:69:eb:42:13:cd:26:a9:3e:ea:14:46:10: 1b:80:89:ae:62:a2:28:28:f6:0d:78:39:76:74:78:86:4d:2a: 4a:1d:9f:ac:5b:e4:cf:f3:6a:5f:fc:7e:e9:d9:49:0e:02:0c: 10:df:df:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IzxSuzV0+UtTHDoBunpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4 NTZhMTUwHhcNMjUxMjIwMTkwMTE3WhcNMjUxMjIxMTkwMTE3WjAzMTEwLwYDVQQD EygxNjVlNjA3ZWEzYjBiZTUyNjFiYWZjMjAyZTRjZjkyNmNhYmRjNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiGEJZbagi31pxL+g7TpeZ3RsZsI LAmcd0CBU5dtsDEIT5HVj4KMz3kRbUirdmVBjp28vbD+Y4psvm4P6FjjFehmOgmV mP16Kwn3D7tRr5F34TFgat41ZhGF2Ukt7R2mGKAHBhtmtKv+fvgnZj+k27ADHUjX SiqPQ6AyKPsDxbOyffYwDlXwayZduSFB46TR57HKS0BO4D3ShPdP32gUM2uOaGCq ivZG6P6oev4Q5rY+nBTNgleq6JGAf22L0Ngv0Mtayrprfgt3aZEfAf13AptPP67F eaUb0JZnd4kgE4MjD8Z082yOxfOBYEug5FkXIbiEmHgxgsH8XaG+w4dqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZeYH6jsL5SYbr8IC5M+SbKvcRqMB8GA1UdIwQY MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3 LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeT7/GWa aDViq8i7y/mtjHudoGpfaBg90iYfTT5eN+zxmh7RfNhL85bnvR/S2Ywu4ZCJinxs /2AOM+WdsWx5FdWZT+4150NES3rizJOhtQNJWFznK2w4t29knuvnnITFtQCgv91O sCUf90322WJAxg9XcAONNN1H66dYGI5sdM+v2HND1UbbwyzdSz/J3x3liG2iSRvS 5/rZ3BaBUkYNKSpxm8xZdu9ospWfgzCG+3sv6baOwim8j4Fcr03chaTGPV5K9+k+ A2g11rWkaetCE80mqT7qFEYQG4CJrmKiKCj2DXg5dnR4hk0qSh2frFvkz/NqX/x+ 6dlJDgIMEN/faA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:54:15 2025 by rpki-client