This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json) Hash identifier: 4unjHNL/diOGRgE/xNi8b4/jgJ6k8hgn0+wV16v7mXk= Subject key identifier: A5:DC:BE:75:56:50:33:34:0F:D1:FF:56:08:8D:BB:79:72:81:78:4D Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Certificate serial: 019B3B6BCEC0F073ADE2B71C5660178CD320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft Manifest number: 03AA Signing time: Sat 20 Dec 2025 11:01:19 +0000 Manifest this update: Sat 20 Dec 2025 11:01:19 +0000 Manifest next update: Sun 21 Dec 2025 11:01:19 +0000 Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=) 2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: ctZCpjAwPQueG7gz02y7x0s8POKxPfCoMqkqII63Z2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ce:c0:f0:73:ad:e2:b7:1c:56:60:17:8c:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Validity Not Before: Dec 20 11:01:19 2025 GMT Not After : Dec 21 11:01:19 2025 GMT Subject: CN=a5dcbe75565033340fd1ff56088dbb797281784d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:83:f1:59:e5:59:97:a8:1f:b5:a6:8c:d7: fd:c3:e8:1d:d4:e6:91:cf:68:db:d6:bf:7d:cf:da: ee:16:0f:24:2a:fa:6c:17:fe:d8:29:53:25:42:d1: 80:40:fa:bb:3d:47:69:dd:3f:38:62:e4:8f:1c:ac: 6d:69:7a:8d:a3:65:c6:da:a0:70:57:95:75:19:9a: 92:e2:41:59:4d:94:07:09:22:97:1c:45:09:0b:a6: e7:17:01:18:90:8e:c3:18:08:55:e2:a1:08:cf:0c: e4:94:83:d5:80:d8:99:3d:e0:bb:88:01:69:0a:23: cc:d0:e6:26:f5:a5:70:b3:16:cc:3f:6e:cf:90:32: 67:b9:a0:34:7a:9e:ce:5e:c8:42:16:d5:2d:f7:0d: 90:d3:a8:89:39:09:11:5a:29:51:c7:7f:d2:df:4a: 2a:bf:63:b6:af:c3:2e:b8:da:9e:40:e5:42:ce:b0: b6:5f:f7:fd:49:25:67:be:7f:1e:e1:b0:db:d4:dd: 56:3f:a0:e5:26:63:2d:19:ba:53:31:54:89:8b:ec: c1:70:3c:e2:70:d5:34:95:1c:7e:9f:7c:4f:2d:91: a3:4e:84:af:7b:35:f5:f7:1b:ca:19:93:b8:52:52: b5:68:71:58:24:84:5a:8f:06:c2:81:5b:70:97:be: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DC:BE:75:56:50:33:34:0F:D1:FF:56:08:8D:BB:79:72:81:78:4D X509v3 Authority Key Identifier: keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f0:22:30:28:47:ad:bc:22:f7:08:36:66:8d:0b:89:c2:0a: 82:91:49:b5:af:cb:05:27:c8:d4:a9:82:dd:77:90:88:4f:d4: b4:e6:cd:0d:49:6a:a8:39:55:c2:7c:f6:75:d3:3e:81:68:51: 3f:ca:f5:69:97:55:0c:32:c9:ad:84:b2:9b:e5:fd:f9:fb:af: e8:59:5e:a8:2d:a5:21:2d:77:b2:0e:ad:78:00:3a:2b:f7:e3: 11:24:19:65:b5:bb:1d:94:c3:2b:b8:03:14:32:8d:11:89:8c: 0f:ea:db:4b:6a:eb:3b:fe:b6:7a:40:32:08:42:82:0c:db:52: 6f:50:3f:8c:7e:ab:69:0c:a7:32:84:a7:82:80:20:bb:66:34: a2:5a:dd:8d:e6:ef:7c:30:df:b2:bc:3d:eb:20:64:a6:12:40: 45:8d:f7:fb:23:c9:70:44:8b:22:de:b5:ae:e2:58:36:de:4c: e6:60:de:f1:28:e7:23:36:ed:03:8d:e9:11:51:7f:b8:17:18: 33:24:07:9d:a7:4c:9e:5c:0b:64:0c:68:c4:7c:9d:05:82:8b: a5:8a:3d:de:47:ae:a7:d7:98:83:4d:8f:2a:19:7b:53:83:71: e1:77:6d:a7:53:dd:bc:a2:70:9c:82:5a:95:d0:04:8f:b0:38: 3e:a8:f3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a87A8HOt4rccVmAXjNMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmMzZGJkMWE0ZjIyNGFiODRhZDYwOWMyNjgwNzlmYjYy NGI1YmQwHhcNMjUxMjIwMTEwMTE5WhcNMjUxMjIxMTEwMTE5WjAzMTEwLwYDVQQD EyhhNWRjYmU3NTU2NTAzMzM0MGZkMWZmNTYwODhkYmI3OTcyODE3ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnyD8VnlWZeoH7WmjNf9w+gd1OaR z2jb1r99z9ruFg8kKvpsF/7YKVMlQtGAQPq7PUdp3T84YuSPHKxtaXqNo2XG2qBw V5V1GZqS4kFZTZQHCSKXHEUJC6bnFwEYkI7DGAhV4qEIzwzklIPVgNiZPeC7iAFp CiPM0OYm9aVwsxbMP27PkDJnuaA0ep7OXshCFtUt9w2Q06iJOQkRWilRx3/S30oq v2O2r8MuuNqeQOVCzrC2X/f9SSVnvn8e4bDb1N1WP6DlJmMtGbpTMVSJi+zBcDzi cNU0lRx+n3xPLZGjToSvezX19xvKGZO4UlK1aHFYJIRajwbCgVtwl76powIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXcvnVWUDM0D9H/VgiNu3lygXhNMB8GA1UdIwQY MBaAFLu8Pb0aTyJKuErWCcJoB5+2JLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDct YTI0Y2I1NzIyOThlLzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDctYTI0Y2I1NzIyOThl LzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvAiMChH rbwi9wg2Zo0LicIKgpFJta/LBSfI1KmC3XeQiE/UtObNDUlqqDlVwnz2ddM+gWhR P8r1aZdVDDLJrYSym+X9+fuv6FleqC2lIS13sg6teAA6K/fjESQZZbW7HZTDK7gD FDKNEYmMD+rbS2rrO/62ekAyCEKCDNtSb1A/jH6raQynMoSngoAgu2Y0olrdjebv fDDfsrw96yBkphJARY33+yPJcESLIt61ruJYNt5M5mDe8SjnIzbtA43pEVF/uBcY MyQHnadMnlwLZAxoxHydBYKLpYo93keup9eYg02PKhl7U4Nx4Xdtp1PdvKJwnIJa ldAEj7A4PqjzZw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:52:26 2025 by rpki-client