This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json) Hash identifier: dzl+7MD5RXsYNGU45x3VrwDD02uUO9s2gIjrWzuo4Xc= Subject key identifier: 7A:7C:82:F0:76:D8:97:DD:6E:21:0B:CA:63:67:29:94:0A:85:30:6E Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Certificate serial: 019B44A61D03776B7B6F65EC72687792637F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft Manifest number: 0F1B Signing time: Mon 22 Dec 2025 06:01:35 +0000 Manifest this update: Mon 22 Dec 2025 06:01:35 +0000 Manifest next update: Tue 23 Dec 2025 06:01:35 +0000 Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=) 2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=) 3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: zk7a9Pc3QDnnBZLrfYmby8AovMzuim1nonf7VMRx/6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:1d:03:77:6b:7b:6f:65:ec:72:68:77:92:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Validity Not Before: Dec 22 06:01:35 2025 GMT Not After : Dec 23 06:01:35 2025 GMT Subject: CN=7a7c82f076d897dd6e210bca636729940a85306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:4a:4e:d9:48:e0:8e:c1:18:0a:39:bf:04: 24:ca:97:c0:08:53:a2:dd:3f:ac:ad:75:5f:57:89: b5:bf:3b:02:fc:4f:e1:0d:14:86:36:f0:22:99:30: 1d:03:a3:40:60:d4:82:54:53:4c:76:e6:77:a4:46: e6:d1:a6:7c:4e:a3:40:d8:97:75:ae:d9:50:40:9d: 56:40:5e:1a:05:3f:d3:2d:f0:5a:72:bb:5a:aa:a9: a9:cc:ac:26:97:19:f6:52:18:ed:35:92:08:5a:de: 16:a5:ad:aa:e0:6f:f0:a2:9a:4f:c5:08:4c:c0:0c: 54:2b:8c:43:d8:97:01:1e:94:83:8b:c2:b9:d2:bd: e0:9b:fd:72:b4:45:8b:f1:4e:64:28:44:8e:e7:db: a5:d3:af:34:09:08:ec:fe:d4:7e:4a:aa:ed:19:7d: 5e:79:7a:f5:f0:00:32:53:88:82:63:ba:49:4f:ac: b9:4e:f4:f9:75:e6:3d:6d:ca:ed:55:82:21:eb:14: cf:42:4d:28:eb:0e:78:3a:52:38:a9:6a:48:ad:e9: c5:38:bc:c9:d0:17:8f:53:b2:32:47:14:d2:f3:52: 61:8d:03:fd:8f:20:12:2b:cb:0e:3f:1c:a5:8b:92: fe:2e:eb:fe:11:33:61:9a:1c:88:03:32:01:ab:1c: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:82:F0:76:D8:97:DD:6E:21:0B:CA:63:67:29:94:0A:85:30:6E X509v3 Authority Key Identifier: keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:4a:74:7e:93:c8:1a:78:f4:44:54:02:d4:f0:fe:8e:ac: ff:75:bf:87:bd:99:f1:b8:31:dd:b5:4c:85:03:65:7c:6e:3e: cf:75:88:13:3a:2b:9b:90:82:5b:a0:31:76:f0:6b:af:30:39: 38:a9:d7:68:0a:b4:ec:2b:bc:54:f8:b9:6c:92:73:33:e6:f8: 02:99:1d:c0:94:bb:87:ec:bd:5b:36:2e:3d:73:d6:75:02:17: be:70:26:57:f5:5c:36:a3:bd:91:f7:07:c7:74:d0:c4:f4:35: 89:f7:68:65:de:83:10:cd:ba:56:e9:d2:2b:f7:3c:12:fb:b4: 0a:24:d5:10:ea:ae:93:b2:8d:1b:74:7a:fb:46:32:98:a5:1f: 58:d6:68:20:ab:de:36:75:6f:00:aa:b9:f9:cd:a4:b4:ad:ee: 63:60:e5:95:fa:6f:bd:60:c6:4e:d6:bd:fa:40:64:bb:4a:a9: f1:2c:b6:69:dd:cb:3c:5a:70:af:30:c4:46:4a:c3:ce:19:64: 78:70:e8:27:6c:20:f0:14:e4:2c:36:90:65:16:4a:eb:88:7a: c4:b2:bc:4c:67:b8:f2:32:97:e0:e2:88:6c:a6:19:23:dc:f8: 3c:4a:4e:f6:76:94:ac:7e:bf:52:a7:e6:35:07:25:c3:5e:ee: d2:5a:5f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEph0Dd2t7b2Xscmh3kmN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5 NjVhZjMwHhcNMjUxMjIyMDYwMTM1WhcNMjUxMjIzMDYwMTM1WjAzMTEwLwYDVQQD Eyg3YTdjODJmMDc2ZDg5N2RkNmUyMTBiY2E2MzY3Mjk5NDBhODUzMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb1KTtlI4I7BGAo5vwQkypfACFOi 3T+srXVfV4m1vzsC/E/hDRSGNvAimTAdA6NAYNSCVFNMduZ3pEbm0aZ8TqNA2Jd1 rtlQQJ1WQF4aBT/TLfBacrtaqqmpzKwmlxn2UhjtNZIIWt4Wpa2q4G/woppPxQhM wAxUK4xD2JcBHpSDi8K50r3gm/1ytEWL8U5kKESO59ul0680CQjs/tR+SqrtGX1e eXr18AAyU4iCY7pJT6y5TvT5deY9bcrtVYIh6xTPQk0o6w54OlI4qWpIrenFOLzJ 0BePU7IyRxTS81JhjQP9jyASK8sOPxyli5L+Luv+ETNhmhyIAzIBqxwLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp8gvB22JfdbiELymNnKZQKhTBuMB8GA1UdIwQY MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/RKdH6T yBp49ERUAtTw/o6s/3W/h72Z8bgx3bVMhQNlfG4+z3WIEzorm5CCW6AxdvBrrzA5 OKnXaAq07Cu8VPi5bJJzM+b4ApkdwJS7h+y9WzYuPXPWdQIXvnAmV/VcNqO9kfcH x3TQxPQ1ifdoZd6DEM26VunSK/c8Evu0CiTVEOquk7KNG3R6+0YymKUfWNZoIKve NnVvAKq5+c2ktK3uY2DllfpvvWDGTta9+kBku0qp8Sy2ad3LPFpwrzDERkrDzhlk eHDoJ2wg8BTkLDaQZRZK64h6xLK8TGe48jKX4OKIbKYZI9z4PEpO9naUrH6/Uqfm NQclw17u0lpf6g== -----END CERTIFICATE-----Generated at Mon Dec 22 09:38:31 2025 by rpki-client