This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json) Hash identifier: lnkWw2TF1GmGUpxGuF2Y2pIR6xJ6eaVpmGJgXX9Dsts= Subject key identifier: 65:4F:59:DD:04:97:40:0F:1F:67:BB:E2:E5:55:BB:58:40:81:E9:FF Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153 Certificate serial: 019B38D853B537D64DD7054F3624F4B804A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft Manifest number: 1662 Signing time: Fri 19 Dec 2025 23:00:59 +0000 Manifest this update: Fri 19 Dec 2025 23:00:59 +0000 Manifest next update: Sat 20 Dec 2025 23:00:59 +0000 Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=) 2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: n0V2bRJ2fUXFKh7tMhj2YRnuzVCah3xTojUPpWw9xag=) 3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:53:b5:37:d6:4d:d7:05:4f:36:24:f4:b8:04:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153 Validity Not Before: Dec 19 23:00:59 2025 GMT Not After : Dec 20 23:00:59 2025 GMT Subject: CN=654f59dd0497400f1f67bbe2e555bb584081e9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:59:0d:27:c2:89:43:5a:30:43:e9:a3:44: e7:f5:2e:e5:da:d1:4d:5f:c7:8a:f9:54:9d:4f:9a: ff:e8:4a:dd:1c:6f:78:a7:4b:49:5f:6b:d1:cf:d8: 60:69:ff:8f:e1:c6:2c:8a:bd:47:94:c4:94:2b:f2: b3:bf:d5:24:6a:f1:a6:f1:50:ab:87:01:2b:cf:1e: 8a:14:7b:76:8d:e1:ab:f6:8f:9d:b4:28:ad:ec:c4: de:e4:99:6a:fb:d5:19:5f:19:98:48:78:68:1a:c0: 12:95:d3:4c:be:89:fa:8b:12:56:b2:9d:b1:9f:ab: eb:f7:00:90:7a:d2:3a:ab:e7:b2:8c:3e:ab:7a:7d: 71:9b:0a:62:d9:61:bb:2c:fc:0e:bd:eb:b9:a7:dd: e3:f0:93:18:33:2d:95:13:b2:a0:c4:04:db:dc:65: 6c:de:84:d2:c5:7a:93:d8:2f:93:8f:04:9a:64:60: 53:df:6c:ab:05:42:14:79:88:14:cf:78:ab:44:e0: 1f:3d:d2:96:45:9e:1d:2b:f5:08:d6:0e:da:57:2f: 0d:52:5a:ee:4d:7f:a6:fa:f9:bc:a6:99:04:90:d5: fc:7e:82:aa:a2:9b:a0:a6:66:62:1d:d3:3f:25:f4: 6b:01:a5:ad:41:40:79:94:fd:0f:4d:f6:19:79:1d: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4F:59:DD:04:97:40:0F:1F:67:BB:E2:E5:55:BB:58:40:81:E9:FF X509v3 Authority Key Identifier: keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:94:af:99:93:73:b0:95:18:46:be:59:e5:de:53:33:08:67: 73:6d:e5:6c:33:f2:35:d4:44:ef:ca:6b:a1:eb:3a:12:77:28: 73:61:1d:34:8a:cf:cc:73:1f:d7:0a:c9:28:42:0d:a6:7b:51: 43:dc:af:cc:54:99:60:c3:47:34:17:45:a3:93:d4:a6:09:85: 68:64:36:de:50:33:8b:fa:c7:4a:b9:1e:6a:d4:8b:a5:ce:21: 47:0b:49:40:e1:de:c0:0d:ee:32:2d:2e:34:76:f5:4e:ca:15: a4:02:10:cb:0c:25:dc:6f:95:4b:76:26:6a:4c:6b:55:67:a6: d5:6b:94:64:e9:c2:8c:bc:96:ea:8a:3a:25:7a:59:3c:64:96: 24:60:37:a9:02:65:d2:95:2d:e9:aa:e6:e1:4d:18:41:8c:92: 77:ba:d9:5c:fd:13:3d:35:d0:1f:3a:ba:06:9b:d4:ea:1b:99: 4c:1a:a5:fb:a4:56:00:b3:c3:e2:1e:c5:83:b1:ef:68:91:9e: e0:1b:d1:bd:7c:e3:26:a2:26:77:ed:f3:a1:70:8a:5b:f4:56: 40:be:e7:22:b8:20:a8:2e:cb:96:88:9a:f8:e3:25:7a:d9:56: f7:fa:05:af:41:56:4b:0e:7e:36:9d:5d:bf:19:a5:7d:bb:84: f6:43:ec:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42FO1N9ZN1wVPNiT0uASoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2 YjQxNTMwHhcNMjUxMjE5MjMwMDU5WhcNMjUxMjIwMjMwMDU5WjAzMTEwLwYDVQQD Eyg2NTRmNTlkZDA0OTc0MDBmMWY2N2JiZTJlNTU1YmI1ODQwODFlOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf1ZDSfCiUNaMEPpo0Tn9S7l2tFN X8eK+VSdT5r/6ErdHG94p0tJX2vRz9hgaf+P4cYsir1HlMSUK/Kzv9UkavGm8VCr hwErzx6KFHt2jeGr9o+dtCit7MTe5Jlq+9UZXxmYSHhoGsASldNMvon6ixJWsp2x n6vr9wCQetI6q+eyjD6ren1xmwpi2WG7LPwOveu5p93j8JMYMy2VE7KgxATb3GVs 3oTSxXqT2C+TjwSaZGBT32yrBUIUeYgUz3irROAfPdKWRZ4dK/UI1g7aVy8NUlru TX+m+vm8ppkEkNX8foKqopugpmZiHdM/JfRrAaWtQUB5lP0PTfYZeR1ASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVPWd0El0APH2e74uVVu1hAgen/MB8GA1UdIwQY MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZSvmZNz sJUYRr5Z5d5TMwhnc23lbDPyNdRE78proes6Encoc2EdNIrPzHMf1wrJKEINpntR Q9yvzFSZYMNHNBdFo5PUpgmFaGQ23lAzi/rHSrkeatSLpc4hRwtJQOHewA3uMi0u NHb1TsoVpAIQywwl3G+VS3YmakxrVWem1WuUZOnCjLyW6oo6JXpZPGSWJGA3qQJl 0pUt6arm4U0YQYySd7rZXP0TPTXQHzq6BpvU6huZTBql+6RWALPD4h7Fg7HvaJGe 4BvRvXzjJqImd+3zoXCKW/RWQL7nIrggqC7Lloia+OMletlW9/oFr0FWSw5+Np1d vxmlfbuE9kPsGg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:45 2025 by rpki-client