This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json) Hash identifier: F4BWwLqB+NClFErRioOO1C8w22vS+LUKUkVPd5FUUMo= Subject key identifier: 93:8A:2B:26:11:D2:71:FB:CD:D2:47:FA:78:A7:10:CB:41:31:7D:A1 Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b Certificate serial: 019B26648CC60C191C532E003584C69A8DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft Manifest number: 17 Signing time: Tue 16 Dec 2025 09:01:22 +0000 Manifest this update: Tue 16 Dec 2025 09:01:22 +0000 Manifest next update: Wed 17 Dec 2025 09:01:22 +0000 Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=) 2: 6wdz3UOZ9WAT3BEVKu977wzSb_Y.roa (hash: j0wO5SPrwe9SF358RdnDGX3XEdT1IQMBpaTX8mDR3sE=) 3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: /lP4mpLUn2AAhlsd5gwhH9oh9WbeAaoFhguj3mbfphI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:8c:c6:0c:19:1c:53:2e:00:35:84:c6:9a:8d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b Validity Not Before: Dec 16 09:01:22 2025 GMT Not After : Dec 17 09:01:22 2025 GMT Subject: CN=938a2b2611d271fbcdd247fa78a710cb41317da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:0d:d9:e7:50:41:37:3e:1f:79:1a:35:a8: 96:89:9a:dd:37:ad:fc:ba:8e:ad:7d:36:ab:e3:48: 23:3b:64:05:27:4d:b7:05:60:ed:12:d7:ef:e6:d0: 9b:78:9a:c0:ab:33:a3:56:41:74:44:b3:fc:ed:52: 67:64:a2:64:78:7f:14:cc:c9:25:26:f1:77:08:44: bf:9f:4f:0e:40:4a:b0:93:36:4b:dd:db:0e:f7:62: 45:0b:0b:2c:3e:bd:85:31:2e:f6:b3:76:45:23:12: 73:a4:04:46:4d:9b:4c:eb:6f:43:0c:3d:fd:78:2e: 6a:9d:71:e8:e3:7d:80:55:2e:d2:c5:70:fa:a0:a0: 79:11:89:bc:98:d1:37:59:2a:56:b7:a5:f5:01:48: 36:b8:67:7a:d3:81:65:4c:01:1f:48:1b:b4:b4:c5: 6e:4a:95:13:68:2d:d5:43:57:e6:22:11:cc:3c:6c: 28:87:c6:06:d5:ec:f2:1e:28:07:56:66:77:9a:b8: 4b:75:c1:7e:70:4d:b5:b1:59:30:72:2f:4a:af:97: dd:5f:8d:85:7c:26:80:e8:0c:22:3c:b2:9f:39:3d: 03:3d:64:d4:0f:ea:69:8f:00:3c:9b:2f:08:99:fe: 3b:04:24:c0:e7:4a:89:b8:d2:1c:01:e7:9b:c3:c4: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8A:2B:26:11:D2:71:FB:CD:D2:47:FA:78:A7:10:CB:41:31:7D:A1 X509v3 Authority Key Identifier: keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:c1:cf:94:1c:b6:4a:80:72:c5:e7:18:fe:81:24:07:6b: 71:5f:be:79:a9:87:9d:8a:d9:20:a4:50:77:b3:0c:78:65:51: 7c:84:d2:94:9c:d3:1d:5e:f0:6c:37:94:7b:fc:1e:73:3d:7b: 51:4a:26:56:55:a4:66:02:e1:1d:d8:ea:0b:37:9d:01:c8:e1: 8a:6f:ae:9d:20:0c:f4:1f:bc:36:ce:18:38:ac:c2:51:b0:6f: d4:5f:4f:d3:76:cd:6f:ac:d8:46:5e:ba:0b:93:33:01:55:3c: a8:f3:8f:54:71:59:e4:ea:e5:aa:f9:ed:20:17:d4:c7:d8:00: ff:88:f7:c9:51:8a:22:83:b0:89:07:75:34:04:27:6a:4e:2f: ac:ae:ba:9b:07:55:14:1c:a4:97:dd:79:f8:45:be:36:15:5e: 49:e5:60:61:d2:07:4d:97:ad:45:8a:e8:f9:86:24:57:1d:65: 4e:7b:01:d4:48:c1:09:1f:f3:56:80:fc:0f:7d:a4:2e:44:cd: 04:fd:6e:02:56:99:b9:dd:4a:0a:a4:13:29:b7:32:3a:28:57: dc:d3:66:d7:09:3f:56:84:11:b3:41:c8:35:ae:b3:22:69:1f: 0e:90:40:f3:4d:d3:71:f5:07:a8:b6:85:cc:5b:33:02:6b:9b: 8e:f3:c3:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZIzGDBkcUy4ANYTGmo34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYzRhMDg5ZjhlNjhhODMwZWI5OGE1YzFmZTI1NjA2NTFl NWIzOWIwHhcNMjUxMjE2MDkwMTIyWhcNMjUxMjE3MDkwMTIyWjAzMTEwLwYDVQQD Eyg5MzhhMmIyNjExZDI3MWZiY2RkMjQ3ZmE3OGE3MTBjYjQxMzE3ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9QN2edQQTc+H3kaNaiWiZrdN638 uo6tfTar40gjO2QFJ023BWDtEtfv5tCbeJrAqzOjVkF0RLP87VJnZKJkeH8UzMkl JvF3CES/n08OQEqwkzZL3dsO92JFCwssPr2FMS72s3ZFIxJzpARGTZtM629DDD39 eC5qnXHo432AVS7SxXD6oKB5EYm8mNE3WSpWt6X1AUg2uGd604FlTAEfSBu0tMVu SpUTaC3VQ1fmIhHMPGwoh8YG1ezyHigHVmZ3mrhLdcF+cE21sVkwci9Kr5fdX42F fCaA6AwiPLKfOT0DPWTUD+ppjwA8my8Imf47BCTA50qJuNIcAeebw8Te9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOKKyYR0nH7zdJH+ninEMtBMX2hMB8GA1UdIwQY MBaAFLrEoIn45oqDDrmKXB/iVgZR5bObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQt MDk2MGMxNmY3NGJmLzEvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQtMDk2MGMxNmY3NGJm LzEvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlH3Bz5Qc tkqAcsXnGP6BJAdrcV++eamHnYrZIKRQd7MMeGVRfITSlJzTHV7wbDeUe/wecz17 UUomVlWkZgLhHdjqCzedAcjhim+unSAM9B+8Ns4YOKzCUbBv1F9P03bNb6zYRl66 C5MzAVU8qPOPVHFZ5OrlqvntIBfUx9gA/4j3yVGKIoOwiQd1NAQnak4vrK66mwdV FBykl915+EW+NhVeSeVgYdIHTZetRYro+YYkVx1lTnsB1EjBCR/zVoD8D32kLkTN BP1uAlaZud1KCqQTKbcyOihX3NNm1wk/VoQRs0HINa6zImkfDpBA803TcfUHqLaF zFszAmubjvPD7Q== -----END CERTIFICATE-----Generated at Tue Dec 16 12:38:17 2025 by rpki-client