This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json) Hash identifier: +2wT4maWOqXu5DfnEe76LDM+/ccF8WylFEcpcdDGOho= Subject key identifier: DA:B9:B0:50:2B:21:D2:DE:9F:CF:C3:C2:75:72:85:E0:4E:65:CF:04 Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019B46944DC8BF32A626F8B8A3DB65E75E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 15:01:22 +0000 Manifest this update: Mon 22 Dec 2025 15:01:22 +0000 Manifest next update: Tue 23 Dec 2025 15:01:22 +0000 Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=) 2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=) 3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: Q0kZoDPKB1ol98xytOq1ZVWJOJwE4peoPCQKMljrVhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:4d:c8:bf:32:a6:26:f8:b8:a3:db:65:e7:5e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Dec 22 15:01:22 2025 GMT Not After : Dec 23 15:01:22 2025 GMT Subject: CN=dab9b0502b21d2de9fcfc3c2757285e04e65cf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:64:cf:9e:d0:f5:96:60:8e:35:18:8c:e6: ac:1a:ce:c0:55:3d:be:c6:85:9e:cb:ff:be:70:24: 40:5a:37:1f:04:64:2a:3b:c7:dc:10:f6:ba:e4:24: b6:5b:fe:6a:68:f0:af:86:fb:ca:fc:af:29:fc:b5: 11:20:6c:6b:e5:4a:b8:c2:82:c4:d4:d4:3e:72:2a: d8:7a:c8:7f:d3:84:06:3f:c4:6a:cd:0c:68:01:fc: d2:1e:1a:04:0a:8d:6a:56:97:32:b6:2c:54:2a:6d: 43:bd:19:76:04:7d:97:33:99:7e:1f:b2:18:23:1b: ee:d4:33:e9:42:de:47:ed:ec:06:de:b1:b4:f9:9e: 72:48:31:46:70:2a:3c:20:f6:2b:ee:7a:37:96:ec: 0f:0b:e3:b2:49:83:77:85:dd:60:b6:e5:f5:73:f2: 27:66:f2:af:5d:45:63:86:fa:2d:cd:2a:49:68:91: 83:32:49:03:d9:7d:0a:62:10:6a:c0:34:f4:6d:b8: 5c:92:97:14:75:fb:fe:97:e8:b1:f1:15:db:88:0d: a3:74:a2:5a:77:59:d0:a0:82:45:f2:e7:96:42:0d: 48:06:50:4f:f9:53:59:27:fa:3e:39:af:9a:9f:fd: 46:df:da:0e:ec:b9:4f:55:1b:f0:6f:93:a6:23:44: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:B0:50:2B:21:D2:DE:9F:CF:C3:C2:75:72:85:E0:4E:65:CF:04 X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:31:e6:1b:1a:93:ff:6c:ce:b8:6f:eb:eb:21:99:7e:8c:94: ef:d7:8a:5a:ab:05:d1:53:d4:49:82:d6:35:a0:53:43:52:d3: 3f:0d:02:ff:f5:58:f0:4b:f5:5f:22:fb:d2:72:01:67:89:b9: dc:be:85:12:9e:00:6b:00:20:c6:05:12:3e:67:f2:fe:a9:33: 4e:48:a5:ef:b4:a2:8d:55:a1:b2:11:42:8d:b3:fc:f0:5c:fb: 2a:ff:74:0b:64:be:b8:36:71:2f:ed:d2:7c:cb:c6:95:10:09: 1d:72:4e:26:84:09:f0:c3:d7:33:0c:50:2a:64:77:cc:c9:1d: 06:39:24:cb:02:00:87:87:70:95:34:ef:d3:6d:95:8b:48:42: 03:15:2d:45:a5:36:f8:b0:4f:c8:16:62:b4:b5:5a:9b:e3:80: 49:f1:a4:e7:07:63:3b:df:12:02:0e:c8:e8:61:f9:a1:88:9f: ba:e6:b1:56:ff:68:80:66:33:7d:8b:9c:ad:25:a4:30:6e:dc: 59:2e:18:d7:5d:8a:d3:f9:ab:60:d5:76:6c:fc:37:98:b0:3e: 95:db:cd:4c:21:35:1f:41:22:21:c1:30:83:11:9e:56:fa:0a: 0e:41:89:43:0a:ee:89:98:3f:ce:82:a4:77:96:56:59:b1:2f: 26:6c:d0:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlE3IvzKmJvi4o9tl515WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjUxMjIyMTUwMTIyWhcNMjUxMjIzMTUwMTIyWjAzMTEwLwYDVQQD EyhkYWI5YjA1MDJiMjFkMmRlOWZjZmMzYzI3NTcyODVlMDRlNjVjZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTNkz57Q9ZZgjjUYjOasGs7AVT2+ xoWey/++cCRAWjcfBGQqO8fcEPa65CS2W/5qaPCvhvvK/K8p/LURIGxr5Uq4woLE 1NQ+cirYesh/04QGP8RqzQxoAfzSHhoECo1qVpcytixUKm1DvRl2BH2XM5l+H7IY Ixvu1DPpQt5H7ewG3rG0+Z5ySDFGcCo8IPYr7no3luwPC+OySYN3hd1gtuX1c/In ZvKvXUVjhvotzSpJaJGDMkkD2X0KYhBqwDT0bbhckpcUdfv+l+ix8RXbiA2jdKJa d1nQoIJF8ueWQg1IBlBP+VNZJ/o+Oa+an/1G39oO7LlPVRvwb5OmI0TheQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq5sFArIdLen8/DwnVyheBOZc8EMB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjHmGxqT /2zOuG/r6yGZfoyU79eKWqsF0VPUSYLWNaBTQ1LTPw0C//VY8Ev1XyL70nIBZ4m5 3L6FEp4AawAgxgUSPmfy/qkzTkil77SijVWhshFCjbP88Fz7Kv90C2S+uDZxL+3S fMvGlRAJHXJOJoQJ8MPXMwxQKmR3zMkdBjkkywIAh4dwlTTv022Vi0hCAxUtRaU2 +LBPyBZitLVam+OASfGk5wdjO98SAg7I6GH5oYifuuaxVv9ogGYzfYucrSWkMG7c WS4Y112K0/mrYNV2bPw3mLA+ldvNTCE1H0EiIcEwgxGeVvoKDkGJQwruiZg/zoKk d5ZWWbEvJmzQCQ== -----END CERTIFICATE-----Generated at Tue Dec 23 00:46:16 2025 by rpki-client