This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json) Hash identifier: 91pR0dxXg7QUcLQwFi6GKOhngtNn7e7Qzx8KP91+gUo= Subject key identifier: 58:48:9D:62:14:A1:CE:2D:2A:67:AB:68:AD:96:71:CB:FD:99:7B:75 Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c Certificate serial: 019B44007FA16BDA34E89379FB3E458A6F61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft Manifest number: 15DF Signing time: Mon 22 Dec 2025 03:00:41 +0000 Manifest this update: Mon 22 Dec 2025 03:00:41 +0000 Manifest next update: Tue 23 Dec 2025 03:00:41 +0000 Files and hashes: 1: oMfkJdM1AJ50uhjGB1W1nnJScB0.roa (hash: H4m9gh/HUrFKIN3OBkRa6uvBDmvc6JbZ7SJg5G/lfuQ=) 2: qHylQxqYspJSNTebtGztToCsU0M.roa (hash: xZhZoeaMSwBgtia5fndUlGK6FEl5SeLWX/IHfA27vUo=) 3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: JiEhdwhjAWayiMunFHExJgJH2rvLAXy0k/k+t/KuP7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:7f:a1:6b:da:34:e8:93:79:fb:3e:45:8a:6f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c Validity Not Before: Dec 22 03:00:41 2025 GMT Not After : Dec 23 03:00:41 2025 GMT Subject: CN=58489d6214a1ce2d2a67ab68ad9671cbfd997b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:22:6c:37:f0:29:62:0c:2a:99:a4:5c:42: ae:b0:f1:ef:59:03:f1:80:7f:d9:6c:1b:6f:c8:37: a8:9b:ed:a4:da:3f:74:47:47:86:86:cb:34:96:4f: 79:81:47:6b:71:a4:3d:92:10:2d:6b:ed:2b:e8:e1: 9d:1f:ed:1a:ab:c5:aa:dd:eb:b4:6e:47:30:7f:10: 8a:77:36:46:87:a2:db:ae:a3:4c:38:37:42:cb:b1: 08:8e:9f:64:53:5a:c2:fe:45:95:64:8d:73:e8:1b: 08:b9:d8:7c:ee:0d:11:c7:7c:c6:24:6a:aa:da:1c: fa:3e:06:50:ef:46:26:a8:4c:f6:74:5c:f1:0f:94: 05:bc:43:da:89:01:01:ce:41:75:68:b3:12:05:cf: 83:58:93:4d:08:ea:23:05:a0:4f:0e:09:ba:c9:da: a6:25:26:3e:e6:9f:96:cc:a0:23:c7:b0:0d:02:2d: 92:85:df:56:98:ef:cc:35:44:b6:04:5b:f8:0c:b5: d7:83:e8:ad:9f:48:fa:67:db:9c:55:75:7a:cb:03: 32:ad:5a:f0:23:53:62:83:62:6d:4b:93:27:ef:4a: b9:17:c7:93:30:ec:84:db:bb:a7:26:82:3d:42:6b: 6f:04:87:c7:15:be:cf:b6:06:d1:ee:53:c7:a9:ca: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:48:9D:62:14:A1:CE:2D:2A:67:AB:68:AD:96:71:CB:FD:99:7B:75 X509v3 Authority Key Identifier: keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:76:e7:7f:1a:fc:d5:13:25:e3:24:69:da:b9:3e:8b:d3:f3: 1e:47:cd:a5:d3:e2:f9:06:9d:5a:a1:c8:ba:7f:1c:f0:05:f9: 71:c3:91:0a:cc:a5:91:e0:ff:84:39:ac:a7:d4:7e:ae:12:39: f2:e0:ef:50:34:07:f5:f9:0d:e5:20:40:ed:fb:6b:f6:d8:76: 27:8d:1b:97:82:36:70:51:14:da:09:4a:3b:ad:0d:57:74:f3: 87:b6:74:40:25:2d:ed:af:c1:54:20:13:52:04:f9:be:26:f0: 36:28:77:76:1d:ba:47:c2:82:ae:21:4a:bd:4d:61:31:01:dd: 3f:10:51:79:d7:6b:6f:be:dc:af:0d:e0:bd:22:f6:20:51:80: 52:19:66:89:ba:ed:6d:54:d7:31:5e:1f:eb:80:2a:c2:f4:f1: fc:ed:65:28:37:46:52:98:8f:27:67:c2:b1:a0:10:0a:c4:f7: e0:54:0f:0a:2a:44:a3:66:1e:5b:f9:fd:04:e4:c3:bf:10:9b: f1:d6:2c:7e:fc:35:9d:5a:9f:54:21:82:7d:07:67:0a:32:75: 65:22:ab:a3:27:9a:8f:27:ef:d1:59:f1:1c:29:f6:53:d2:57: 63:fa:aa:a1:10:b4:37:a5:3c:dd:81:75:47:f5:f5:95:be:0d: 30:75:12:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAH+ha9o06JN5+z5Fim9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4 ZDRhNGMwHhcNMjUxMjIyMDMwMDQxWhcNMjUxMjIzMDMwMDQxWjAzMTEwLwYDVQQD Eyg1ODQ4OWQ2MjE0YTFjZTJkMmE2N2FiNjhhZDk2NzFjYmZkOTk3Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpYibDfwKWIMKpmkXEKusPHvWQPx gH/ZbBtvyDeom+2k2j90R0eGhss0lk95gUdrcaQ9khAta+0r6OGdH+0aq8Wq3eu0 bkcwfxCKdzZGh6LbrqNMODdCy7EIjp9kU1rC/kWVZI1z6BsIudh87g0Rx3zGJGqq 2hz6PgZQ70YmqEz2dFzxD5QFvEPaiQEBzkF1aLMSBc+DWJNNCOojBaBPDgm6ydqm JSY+5p+WzKAjx7ANAi2Shd9WmO/MNUS2BFv4DLXXg+itn0j6Z9ucVXV6ywMyrVrw I1Nig2JtS5Mn70q5F8eTMOyE27unJoI9QmtvBIfHFb7PtgbR7lPHqcqoCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhInWIUoc4tKmeraK2Wccv9mXt1MB8GA1UdIwQY MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3bnfxr8 1RMl4yRp2rk+i9PzHkfNpdPi+QadWqHIun8c8AX5ccORCsylkeD/hDmsp9R+rhI5 8uDvUDQH9fkN5SBA7ftr9th2J40bl4I2cFEU2glKO60NV3Tzh7Z0QCUt7a/BVCAT UgT5vibwNih3dh26R8KCriFKvU1hMQHdPxBReddrb77crw3gvSL2IFGAUhlmibrt bVTXMV4f64AqwvTx/O1lKDdGUpiPJ2fCsaAQCsT34FQPCipEo2YeW/n9BOTDvxCb 8dYsfvw1nVqfVCGCfQdnCjJ1ZSKroyeajyfv0VnxHCn2U9JXY/qqoRC0N6U83YF1 R/X1lb4NMHUSpw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:32 2025 by rpki-client