This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json) Hash identifier: qvvQu4jVd/HSM6halwLiruZeeOOEC8tMrD2IK4DYzOo= Subject key identifier: 9C:EA:8F:A2:CD:64:A6:C1:63:A3:4A:9E:36:F1:CA:A5:74:23:FF:A4 Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5 Certificate serial: 019B5FAEA92C3CF596D184C70DAEB646EF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft Manifest number: 0ACC Signing time: Sat 27 Dec 2025 12:00:40 +0000 Manifest this update: Sat 27 Dec 2025 12:00:40 +0000 Manifest next update: Sun 28 Dec 2025 12:00:40 +0000 Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=) 2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: HhX5J38t7MNKJ2zpI1B0F/5XWc+yJYVXdGG2O/3KUAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:a9:2c:3c:f5:96:d1:84:c7:0d:ae:b6:46:ef:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5 Validity Not Before: Dec 27 12:00:40 2025 GMT Not After : Dec 28 12:00:40 2025 GMT Subject: CN=9cea8fa2cd64a6c163a34a9e36f1caa57423ffa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:89:07:e6:d7:48:a1:70:11:25:c5:1e:94: fb:d5:a1:41:08:98:01:35:da:0d:d5:7f:cf:57:74: be:c5:a5:b3:f5:dd:31:16:d3:2a:63:44:bc:6f:e8: b6:2a:1d:4e:36:36:9e:99:f3:ec:0a:41:b1:80:98: bd:2c:01:c0:85:74:6f:4c:18:b2:c1:73:72:2e:7b: 6b:38:15:c3:78:c0:66:f4:07:9d:6a:a5:a9:e7:a7: 78:b4:1c:2d:03:14:f3:17:72:c0:7f:e6:2c:a1:b7: 49:16:78:8d:78:9c:b1:c4:ab:0e:5d:28:37:02:40: be:a1:92:6f:58:f3:62:93:7e:6e:1e:3f:7a:d4:25: 2f:b5:43:a1:b2:39:20:44:17:49:03:3f:24:46:d3: 3b:5e:6e:91:20:9f:10:7d:36:53:1a:42:39:17:47: b7:8f:9d:5a:46:1a:07:e7:de:ee:ac:cc:51:d2:c2: f8:2f:d4:c1:6d:fa:e0:c0:83:f0:fa:7f:3a:f3:b8: 5d:a4:09:74:33:91:2c:77:d0:3e:6a:90:60:d9:cc: bb:de:3f:93:c3:8e:86:47:9d:bb:dc:1a:4b:85:da: 42:f3:44:ba:1e:6a:70:35:fd:cb:3f:4e:a8:2f:51: ff:36:17:16:ae:98:12:9f:4c:24:7d:4d:23:73:76: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:8F:A2:CD:64:A6:C1:63:A3:4A:9E:36:F1:CA:A5:74:23:FF:A4 X509v3 Authority Key Identifier: keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:05:55:77:1e:4e:bf:4b:f2:f8:57:8b:12:da:b4:7b:d7:5e: f4:df:04:69:70:4d:f0:3e:27:f6:cf:a0:3a:08:b4:b5:fc:50: ee:58:7e:c4:78:0f:85:b5:f7:0c:dc:12:80:73:14:7e:bf:a6: 9c:0f:ed:51:86:c0:b9:e1:1e:c0:3d:f6:db:2d:89:cc:ce:a3: b1:74:d8:02:01:bd:9d:90:2b:57:8e:9c:91:93:a5:15:0a:09: fd:44:ba:90:65:6f:cd:bf:f6:ed:5c:42:02:8e:07:80:87:f2: 7a:f6:ae:75:56:bd:b6:41:2d:99:46:34:92:0c:46:71:81:6e: 5b:3b:78:42:b5:90:9e:d5:94:ce:c2:ed:06:a5:f3:e4:e7:15: 18:1a:2c:cd:11:c4:b1:06:94:b8:64:6c:28:a4:17:f1:46:18: c6:d7:39:9b:bd:10:1f:2b:70:9b:02:c6:3d:1c:77:05:99:65: 8e:00:60:83:ac:e4:f6:2d:a0:78:be:29:a4:ec:43:f9:a6:c8: c6:48:fc:29:d6:25:62:8e:88:90:5d:01:d1:e5:e7:65:6d:f9: 1c:6b:f2:3e:92:9f:8e:cf:e5:87:89:5f:b7:e5:3c:5f:31:64: 68:1e:b0:b2:da:5b:41:65:26:c6:ea:c0:0c:15:8e:18:aa:0d: cd:9c:56:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrqksPPWW0YTHDa62Ru8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdiYzZjN2M5M2EzY2ZiMWUyNWJiYmVmYzRmMjA3YWUy NWJkYTUwHhcNMjUxMjI3MTIwMDQwWhcNMjUxMjI4MTIwMDQwWjAzMTEwLwYDVQQD Eyg5Y2VhOGZhMmNkNjRhNmMxNjNhMzRhOWUzNmYxY2FhNTc0MjNmZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9KJB+bXSKFwESXFHpT71aFBCJgB NdoN1X/PV3S+xaWz9d0xFtMqY0S8b+i2Kh1ONjaemfPsCkGxgJi9LAHAhXRvTBiy wXNyLntrOBXDeMBm9AedaqWp56d4tBwtAxTzF3LAf+YsobdJFniNeJyxxKsOXSg3 AkC+oZJvWPNik35uHj961CUvtUOhsjkgRBdJAz8kRtM7Xm6RIJ8QfTZTGkI5F0e3 j51aRhoH597urMxR0sL4L9TBbfrgwIPw+n8687hdpAl0M5Esd9A+apBg2cy73j+T w46GR5273BpLhdpC80S6HmpwNf3LP06oL1H/NhcWrpgSn0wkfU0jc3bfuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzqj6LNZKbBY6NKnjbxyqV0I/+kMB8GA1UdIwQY MBaAFLv3vGx8k6PPseJbu+/E8geuJb2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjct NTkwZjU0MGM0NTZkLzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjctNTkwZjU0MGM0NTZk LzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgVVdx5O v0vy+FeLEtq0e9de9N8EaXBN8D4n9s+gOgi0tfxQ7lh+xHgPhbX3DNwSgHMUfr+m nA/tUYbAueEewD322y2JzM6jsXTYAgG9nZArV46ckZOlFQoJ/US6kGVvzb/27VxC Ao4HgIfyevaudVa9tkEtmUY0kgxGcYFuWzt4QrWQntWUzsLtBqXz5OcVGBoszRHE sQaUuGRsKKQX8UYYxtc5m70QHytwmwLGPRx3BZlljgBgg6zk9i2geL4ppOxD+abI xkj8KdYlYo6IkF0B0eXnZW35HGvyPpKfjs/lh4lft+U8XzFkaB6wstpbQWUmxurA DBWOGKoNzZxWpg== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:27 2025 by rpki-client