This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json) Hash identifier: BtQhTNk4C5Y9vUIMl+Nht1dj35griM7oUoOJgqc3xDA= Subject key identifier: 1A:4D:0E:E6:D4:30:2D:51:A3:42:1D:B9:F4:8E:B6:A3:3D:0E:34:17 Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019B47029FCCC40008DBBE7402CBD25D5C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft Manifest number: 0DA9 Signing time: Mon 22 Dec 2025 17:01:52 +0000 Manifest this update: Mon 22 Dec 2025 17:01:52 +0000 Manifest next update: Tue 23 Dec 2025 17:01:52 +0000 Files and hashes: 1: REPOw149mODWNiaUKef3JQas7O0.roa (hash: iyQwZYLXGMmlpdToH0d9XmPw4cuKdZskqJ2oxIivdzA=) 2: rndMlM-Kmotx4ZTMDFABZDqeWXo.roa (hash: FbnOY8Bh8pIyTC0Uqy9f/1TBfdxIcNvVYwe7iz7GTqs=) 3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: cd8SmMFT5Ff5BiSPKMDsM6TXoUGc4idBGenERvbRWxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:9f:cc:c4:00:08:db:be:74:02:cb:d2:5d:5c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Dec 22 17:01:52 2025 GMT Not After : Dec 23 17:01:52 2025 GMT Subject: CN=1a4d0ee6d4302d51a3421db9f48eb6a33d0e3417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:70:ae:fc:8e:bf:88:1a:5c:66:18:0b:4b: 1b:06:d4:6e:a2:ad:5d:d8:68:d3:af:a7:df:9a:3c: 8b:01:31:f8:09:d0:43:ec:82:12:be:8e:7c:d7:09: 23:a4:6b:3a:f1:0e:b0:f0:c7:fe:f8:5e:02:fa:00: 02:8f:ca:70:07:00:aa:ea:4c:6d:c6:b7:38:cb:e1: 12:a5:d0:cd:a4:7c:af:ff:b9:46:cc:f1:9b:ee:7b: 38:48:2e:91:98:5e:f8:c7:3e:3a:bb:41:93:0b:7e: dc:86:43:b7:95:2f:18:e2:3b:64:1e:e4:62:69:32: c9:39:f8:7b:f2:0c:23:11:f9:1f:b6:a9:97:69:a2: 08:b6:ca:5a:27:07:a0:68:21:e1:e3:b5:a1:67:6c: fa:d0:85:3c:68:86:40:66:bd:08:bb:f1:87:22:b2: e4:62:92:5a:c4:b4:34:9b:07:5f:b0:84:f6:73:2a: e9:e9:ff:fd:c5:85:a2:f4:e0:d6:09:67:99:fe:b6: 57:17:53:f6:c0:c5:27:cb:9a:b9:0c:90:3c:85:d8: e8:3f:f6:44:ec:4a:c0:e3:3f:27:0c:83:f3:cf:69: e9:44:54:2d:1e:a3:40:9e:ca:71:e4:47:1f:59:3c: a0:36:1e:d2:98:3f:65:7a:d5:78:90:2a:39:a3:5d: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:0E:E6:D4:30:2D:51:A3:42:1D:B9:F4:8E:B6:A3:3D:0E:34:17 X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:02:00:fe:de:c8:af:51:a8:6a:ae:eb:d7:9d:b5:49:31:dc: 4f:d9:ab:b0:50:95:dc:a4:3c:1f:8a:3c:f4:f0:20:85:5b:a5: dc:15:2e:13:9c:94:d1:83:a7:c1:0a:45:c6:8f:43:22:96:1f: 15:17:36:a6:9b:b4:ac:69:5b:83:61:e9:b1:ee:af:0d:b1:69: a5:8e:a5:21:f0:c8:7f:ff:38:ba:6c:5c:bb:6d:2f:9e:5d:a4: d2:5e:ea:2d:d3:4e:12:12:10:95:b8:70:b1:66:08:49:dc:13: 84:78:d6:64:2d:ab:6c:d8:6e:e0:b2:9f:a4:ab:7d:36:20:49: 55:8c:33:1c:de:7d:65:a5:e5:48:13:1e:63:39:d4:12:7e:4a: 60:bc:ae:db:25:d1:22:98:bb:62:c7:3f:00:d5:24:e3:ef:89: d0:a6:9f:58:66:0a:65:83:59:de:63:11:10:a1:0c:54:c0:ba: 50:ff:ad:a4:a3:24:31:e8:46:92:e2:73:a7:bf:f7:67:3f:04: c2:4f:a2:8f:d0:eb:dd:1c:f5:3d:c0:0f:f8:da:ea:6b:a8:62: 20:d6:66:c9:9d:39:05:13:89:5c:dc:7d:75:fb:3d:73:ce:d9: 1a:b8:88:8e:68:17:ea:ec:ed:b7:e2:37:4e:4f:ec:68:78:fd: 5f:36:60:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAp/MxAAI2750AsvSXVwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjUxMjIyMTcwMTUyWhcNMjUxMjIzMTcwMTUyWjAzMTEwLwYDVQQD EygxYTRkMGVlNmQ0MzAyZDUxYTM0MjFkYjlmNDhlYjZhMzNkMGUzNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz9wrvyOv4gaXGYYC0sbBtRuoq1d 2GjTr6ffmjyLATH4CdBD7IISvo581wkjpGs68Q6w8Mf++F4C+gACj8pwBwCq6kxt xrc4y+ESpdDNpHyv/7lGzPGb7ns4SC6RmF74xz46u0GTC37chkO3lS8Y4jtkHuRi aTLJOfh78gwjEfkftqmXaaIItspaJwegaCHh47WhZ2z60IU8aIZAZr0Iu/GHIrLk YpJaxLQ0mwdfsIT2cyrp6f/9xYWi9ODWCWeZ/rZXF1P2wMUny5q5DJA8hdjoP/ZE 7ErA4z8nDIPzz2npRFQtHqNAnspx5EcfWTygNh7SmD9letV4kCo5o11GbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpNDubUMC1Ro0IdufSOtqM9DjQXMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwIA/t7I r1Goaq7r1521STHcT9mrsFCV3KQ8H4o89PAghVul3BUuE5yU0YOnwQpFxo9DIpYf FRc2ppu0rGlbg2Hpse6vDbFppY6lIfDIf/84umxcu20vnl2k0l7qLdNOEhIQlbhw sWYISdwThHjWZC2rbNhu4LKfpKt9NiBJVYwzHN59ZaXlSBMeYznUEn5KYLyu2yXR Ipi7Ysc/ANUk4++J0KafWGYKZYNZ3mMREKEMVMC6UP+tpKMkMehGkuJzp7/3Zz8E wk+ij9Dr3Rz1PcAP+Nrqa6hiINZmyZ05BROJXNx9dfs9c87ZGriIjmgX6uztt+I3 Tk/saHj9XzZgJA== -----END CERTIFICATE-----Generated at Mon Dec 22 23:01:49 2025 by rpki-client