This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json) Hash identifier: NQHAP26bfTV/ZZ0/c105PdbJLSlxwx/89rwNr7izSk0= Subject key identifier: DE:C6:83:85:17:54:73:40:4F:81:73:A6:99:F3:C8:5F:45:56:5B:C0 Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Certificate serial: 019B3FB691EE73A1FCBD3C4F6FAD1D42A0E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft Manifest number: 16DC Signing time: Sun 21 Dec 2025 07:01:27 +0000 Manifest this update: Sun 21 Dec 2025 07:01:27 +0000 Manifest next update: Mon 22 Dec 2025 07:01:27 +0000 Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=) 2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: vgM8WDetzVm1d9OMcw4CDlbjNTq/G912Ihy3d7bTETg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:91:ee:73:a1:fc:bd:3c:4f:6f:ad:1d:42:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Validity Not Before: Dec 21 07:01:27 2025 GMT Not After : Dec 22 07:01:27 2025 GMT Subject: CN=dec68385175473404f8173a699f3c85f45565bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:cf:2f:af:5e:d1:da:04:66:71:97:85:0b: 6e:e4:e2:5f:6d:af:d9:3f:84:76:31:ff:a3:2f:45: af:e0:63:4f:a0:72:b5:69:b0:78:19:78:ab:bf:43: a9:d5:29:91:1d:de:cd:db:8f:b2:ee:9b:f0:1b:58: 61:d3:35:f0:9c:9c:f9:db:93:eb:db:35:96:eb:b5: 6f:4e:4e:80:26:60:2f:64:28:45:7f:ce:f3:86:eb: 37:51:4f:51:95:78:d7:b3:77:0d:f7:ec:a3:83:b2: 75:42:6d:80:5e:3b:ae:84:4d:cd:48:fb:16:32:71: f6:4e:2d:8a:48:1e:46:77:22:17:3d:14:43:e7:ec: c2:c3:0f:ca:d4:de:29:d5:3c:4a:58:8e:fa:b2:22: a2:42:cb:a5:65:42:54:d9:67:b8:0d:97:a6:e4:98: d2:5c:47:70:25:f4:9d:07:1a:9c:7f:09:a4:62:c9: 15:1f:4b:99:12:c2:e2:eb:2b:75:b2:eb:9a:f9:eb: 18:75:7e:1e:cd:12:e4:21:07:64:b0:d5:8a:ba:0b: 2b:72:40:b8:bb:c4:af:5e:5b:bb:83:24:11:81:62: 2b:66:5d:53:8b:77:b6:62:ac:82:3b:82:34:d2:1b: d4:09:9f:45:0c:c9:29:c3:c4:b7:e6:ec:6e:f2:3d: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C6:83:85:17:54:73:40:4F:81:73:A6:99:F3:C8:5F:45:56:5B:C0 X509v3 Authority Key Identifier: keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:09:f6:31:83:b4:26:40:c2:df:c4:28:b4:2f:3c:a6:44:09: 72:c9:40:b2:77:fb:9a:3b:8c:ed:cd:71:99:16:fd:94:09:75: b7:75:9f:66:1b:f9:0b:52:be:aa:80:b0:f4:9a:78:ed:4c:49: f8:5a:9b:2d:9a:9d:ed:b6:ca:bb:59:fc:b3:6f:d7:ad:b8:bb: 01:0c:53:08:00:f9:1d:fc:a5:ed:48:fd:b6:2b:6b:8b:99:13: 7e:a8:4f:e0:da:43:65:ff:33:2b:af:2a:4f:1c:6a:d3:cb:26: 40:d3:f0:96:b7:8f:05:ef:22:fd:3b:63:f1:e2:d8:2d:ee:e9: 03:0f:de:a7:23:79:37:92:df:5f:ae:c1:25:8f:0f:22:f2:ce: fe:2f:a3:cf:63:a5:7a:b8:87:a5:6f:7a:00:e2:bf:11:dc:03: 49:d1:db:ac:36:1e:28:79:58:39:91:34:62:79:5a:3f:99:9a: 15:11:4c:b6:c1:2a:a0:f9:2a:fd:5c:8e:9b:20:5a:c2:7d:ff: 4b:ec:51:63:c9:3d:d6:24:39:ac:5f:31:9e:57:e3:f2:3a:b2: 71:a1:60:99:d4:45:dc:44:8c:32:6f:dd:5d:3f:24:e4:19:d5: b3:b0:3d:04:e9:59:04:13:e4:63:dc:3b:03:f4:c7:54:95:a3: 09:b1:cd:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tpHuc6H8vTxPb60dQqDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk YTIyNzQwHhcNMjUxMjIxMDcwMTI3WhcNMjUxMjIyMDcwMTI3WjAzMTEwLwYDVQQD EyhkZWM2ODM4NTE3NTQ3MzQwNGY4MTczYTY5OWYzYzg1ZjQ1NTY1YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOTPL69e0doEZnGXhQtu5OJfba/Z P4R2Mf+jL0Wv4GNPoHK1abB4GXirv0Op1SmRHd7N24+y7pvwG1hh0zXwnJz525Pr 2zWW67VvTk6AJmAvZChFf87zhus3UU9RlXjXs3cN9+yjg7J1Qm2AXjuuhE3NSPsW MnH2Ti2KSB5GdyIXPRRD5+zCww/K1N4p1TxKWI76siKiQsulZUJU2We4DZem5JjS XEdwJfSdBxqcfwmkYskVH0uZEsLi6yt1suua+esYdX4ezRLkIQdksNWKugsrckC4 u8SvXlu7gyQRgWIrZl1Ti3e2YqyCO4I00hvUCZ9FDMkpw8S35uxu8j18bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7Gg4UXVHNAT4FzppnzyF9FVlvAMB8GA1UdIwQY MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct ZWRmN2JiNjUzZjEzLzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwn2MYO0 JkDC38QotC88pkQJcslAsnf7mjuM7c1xmRb9lAl1t3WfZhv5C1K+qoCw9Jp47UxJ +FqbLZqd7bbKu1n8s2/Xrbi7AQxTCAD5Hfyl7Uj9titri5kTfqhP4NpDZf8zK68q Txxq08smQNPwlrePBe8i/Ttj8eLYLe7pAw/epyN5N5LfX67BJY8PIvLO/i+jz2Ol eriHpW96AOK/EdwDSdHbrDYeKHlYOZE0YnlaP5maFRFMtsEqoPkq/VyOmyBawn3/ S+xRY8k91iQ5rF8xnlfj8jqycaFgmdRF3ESMMm/dXT8k5BnVs7A9BOlZBBPkY9w7 A/THVJWjCbHNDA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:30:23 2025 by rpki-client