This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json) Hash identifier: AcywCfiooFS07CWltXH0+3+Ma9cAaw2/AYY5y4PjNHE= Subject key identifier: 40:8C:B3:55:EC:FC:42:27:97:EB:E8:C9:B3:B8:F3:B6:1B:4D:51:F0 Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019B36B3EF67A246557D110AF637D5D6573F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 13:02:00 +0000 Manifest this update: Fri 19 Dec 2025 13:02:00 +0000 Manifest next update: Sat 20 Dec 2025 13:02:00 +0000 Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=) 2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=) 3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=) 4: o9ILjFHyqHFBLmfa8iktUbEEHgc.roa (hash: AnlJF340Arx0CyHCuh9//rcp5JhktymE+WZs85nUSA4=) 5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: PlGyVlvDbrCLqxRzw0a0UahzjsDaJI/jnX2+l5M2r4I=) 6: ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa (hash: PUzNIv/ioXbZZoJUJezcZ8P2QSpd1W55TTBz10BXkDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:ef:67:a2:46:55:7d:11:0a:f6:37:d5:d6:57:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Dec 19 13:02:00 2025 GMT Not After : Dec 20 13:02:00 2025 GMT Subject: CN=408cb355ecfc422797ebe8c9b3b8f3b61b4d51f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5e:e7:c8:df:42:d4:0d:c7:b2:dd:40:25:e7: d4:18:c5:3a:d5:68:13:c9:a3:c5:f3:2a:76:d8:00: 28:3a:d4:1d:ea:a2:37:83:3b:16:02:43:b6:11:6d: 86:79:32:83:33:e2:f9:43:27:ca:08:dc:b5:52:23: 23:35:be:12:b8:db:12:d4:8e:47:54:ce:d3:32:4a: 0a:1e:72:93:61:c8:34:f4:0b:67:0a:86:dc:f0:8b: 25:8b:71:05:80:05:db:34:7d:c6:86:44:7f:bd:64: fb:9c:90:47:d0:3d:20:25:20:12:57:14:5b:08:fb: e6:eb:62:ca:1a:9f:41:3b:58:d0:0f:c9:fd:e3:3d: cb:7d:b9:9a:47:33:e5:1e:02:26:4c:cd:23:34:12: ef:12:ba:1c:e9:7f:73:a0:4c:2e:0e:54:24:91:1b: c6:fd:d8:87:51:4d:ee:f5:91:c7:8f:51:66:43:49: 3c:c0:ea:ae:05:d4:a0:e3:01:c4:0c:8d:1b:15:c2: 5b:fe:ee:ef:04:dd:0e:3c:cd:99:2d:da:1f:55:1f: 85:55:4d:42:40:39:0f:f2:96:cf:38:b4:cc:3f:4c: 8a:9d:2b:9f:04:e1:80:a5:ce:24:bd:1a:96:f5:2e: 7c:99:8e:8f:ad:98:4a:9a:08:30:9d:6f:b7:f3:57: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8C:B3:55:EC:FC:42:27:97:EB:E8:C9:B3:B8:F3:B6:1B:4D:51:F0 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:24:8f:65:a0:c0:09:47:7a:a0:b8:54:7a:67:a8:09:de:01: a6:54:3c:d9:76:7f:62:7d:69:ae:24:e9:c1:54:86:92:25:57: 4c:02:94:18:00:2d:f5:fe:cb:da:b2:48:80:8b:54:c7:87:d1: 7b:5f:09:e1:c9:0a:5b:b7:ed:3e:4a:1a:c6:00:92:63:46:e8: a7:dc:5d:ff:7f:83:54:21:96:86:c5:fa:78:df:c0:ca:5e:76: c6:3f:ca:aa:fb:47:9a:7d:96:6b:9e:82:38:f4:54:45:ae:56: bd:61:8a:93:23:30:92:2e:96:58:0c:6f:f8:60:57:07:07:82: 2f:cf:8d:23:6a:2b:58:6f:27:78:38:29:ff:71:8e:72:d7:21: 63:75:c2:d0:0f:e0:7a:a1:09:ba:a9:3e:35:21:2c:0d:43:e9: 52:ec:ba:6d:9e:1d:4d:54:95:5a:32:7c:5c:bd:7a:81:0b:f9: d6:09:a6:da:5f:80:c4:b9:5f:ae:28:7f:67:57:00:a5:1e:c3: 84:a9:0b:35:06:4c:01:ac:d2:bb:54:e2:1f:1c:0a:1f:ae:25: fd:24:b8:03:98:63:cf:5f:0a:db:f5:04:d9:19:7f:4e:c5:ce: 34:57:d7:69:df:df:ad:c0:97:20:7a:c2:9f:f5:b2:a0:ed:39: db:54:63:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s+9nokZVfREK9jfV1lc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjUxMjE5MTMwMjAwWhcNMjUxMjIwMTMwMjAwWjAzMTEwLwYDVQQD Eyg0MDhjYjM1NWVjZmM0MjI3OTdlYmU4YzliM2I4ZjNiNjFiNGQ1MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7nyN9C1A3Hst1AJefUGMU61WgT yaPF8yp22AAoOtQd6qI3gzsWAkO2EW2GeTKDM+L5QyfKCNy1UiMjNb4SuNsS1I5H VM7TMkoKHnKTYcg09AtnCobc8Isli3EFgAXbNH3GhkR/vWT7nJBH0D0gJSASVxRb CPvm62LKGp9BO1jQD8n94z3LfbmaRzPlHgImTM0jNBLvEroc6X9zoEwuDlQkkRvG /diHUU3u9ZHHj1FmQ0k8wOquBdSg4wHEDI0bFcJb/u7vBN0OPM2ZLdofVR+FVU1C QDkP8pbPOLTMP0yKnSufBOGApc4kvRqW9S58mY6PrZhKmggwnW+381c//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECMs1Xs/EInl+voybO487YbTVHwMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ySPZaDA CUd6oLhUemeoCd4BplQ82XZ/Yn1priTpwVSGkiVXTAKUGAAt9f7L2rJIgItUx4fR e18J4ckKW7ftPkoaxgCSY0bop9xd/3+DVCGWhsX6eN/Ayl52xj/KqvtHmn2Wa56C OPRURa5WvWGKkyMwki6WWAxv+GBXBweCL8+NI2orWG8neDgp/3GOctchY3XC0A/g eqEJuqk+NSEsDUPpUuy6bZ4dTVSVWjJ8XL16gQv51gmm2l+AxLlfrih/Z1cApR7D hKkLNQZMAazSu1TiHxwKH64l/SS4A5hjz18K2/UE2Rl/TsXONFfXad/frcCXIHrC n/WyoO0521Rj0w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:05 2025 by rpki-client