This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json) Hash identifier: Si2XE3q4F4JIOt0rFDp45XxDTb/5XQujA99PnmJBUGQ= Subject key identifier: B2:99:C8:F0:31:97:80:71:6E:4C:CC:09:F8:0D:39:29:76:FF:AB:01 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019B38335185326FC3A6717B7719D98CD56E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft Manifest number: 015B Signing time: Fri 19 Dec 2025 20:00:45 +0000 Manifest this update: Fri 19 Dec 2025 20:00:45 +0000 Manifest next update: Sat 20 Dec 2025 20:00:45 +0000 Files and hashes: 1: 1-pr3Ei1SAi03zriZ2YxxK2My5xc.roa (hash: zQiqPG2qSn25xqgBTrMUyr+bMNmg0bry5+ur5lPK/ps=) 2: 87Xl48cBUq5jam9l_wPBnTmXlGI.roa (hash: boX79z65S+x/Pf7MD9UZvJ6gdGMUevgNlx+jhV9Efz4=) 3: KMWQvkvZexGmjDkok2xFAK-VG28.roa (hash: k7JhCKGfs3xftRzHduHTKDM6EpxC14ywrQN15pLBPWI=) 4: ORUKVv-_YEE36efG4PfU64aXADU.roa (hash: P7K9L7N2y9KzP1ISJt3hhdr+c/QQc0uQ0hv2NGWf2tY=) 5: owAhL1NHTs3a_KA4LBgI9S2g7Cs.roa (hash: JEBK6rkYLONJ+2U7DSIWRzvXuZ8BeffH/0aQKugUgXU=) 6: t2lK80Ovc4cUKro9z3LuGitzfPs.roa (hash: TffTYN5YIYdBEFYI6Iw2h3no/jNeYny+5NiYBLuTLjk=) 7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: sGTuS3vvg7BN6Ik7AOpRm+83+XV0ZPI6Sr+uXLpEfs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:51:85:32:6f:c3:a6:71:7b:77:19:d9:8c:d5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Dec 19 20:00:45 2025 GMT Not After : Dec 20 20:00:45 2025 GMT Subject: CN=b299c8f0319780716e4ccc09f80d392976ffab01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:e4:11:83:e9:01:3a:4d:19:f0:06:17:bc: 5c:51:fa:a7:ef:53:6e:93:59:f4:7e:3c:11:34:72: 8f:99:de:25:91:9e:99:0d:9c:03:9a:bb:7d:0a:30: 59:f4:d2:b1:29:e3:5a:c4:8b:06:36:47:13:27:e7: 1e:4e:f3:14:ea:aa:27:b5:a0:08:42:6c:41:89:f2: ce:0b:6e:b2:ff:ab:06:2a:be:79:f4:ca:ff:09:4d: da:d2:c4:aa:18:b5:11:dc:b5:83:ee:25:34:2e:6e: 41:f3:5e:d6:37:cd:e5:cf:2f:c4:25:2f:4f:ba:55: 2d:5c:9e:c5:cd:ac:f4:fa:b6:45:a9:d9:9a:72:9d: 08:32:66:73:76:7b:ab:7d:14:ed:3a:42:72:ab:3b: af:3e:0a:e2:44:b0:ba:71:a3:a7:7b:9c:9f:c6:9a: 2a:89:62:1b:af:2b:24:84:c0:04:54:d4:b1:83:c5: 74:8c:ca:3f:5d:bc:e3:a4:42:08:64:87:2d:92:26: f1:f8:71:df:95:2d:ec:75:14:5b:0f:14:14:6a:9f: 22:a9:de:de:04:15:f1:c5:41:21:d8:9a:c1:41:65: 86:f4:e5:c1:84:72:e4:67:4b:df:0b:30:62:c4:0f: 87:0c:1d:88:0d:91:2a:c0:f4:8b:43:77:5f:aa:b6: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:C8:F0:31:97:80:71:6E:4C:CC:09:F8:0D:39:29:76:FF:AB:01 X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cc:16:24:8a:c7:57:c3:3d:7e:f0:84:09:0a:2f:11:1a:88: 37:46:53:4c:fa:8f:82:0a:4c:fe:ef:22:e2:96:69:cc:d1:86: 31:02:2a:e3:1c:3c:6e:26:26:04:56:1f:86:f2:4e:5c:3f:34: e9:2f:85:5c:97:f7:ef:ed:fe:cc:0c:3e:c8:b3:7e:02:cf:60: 62:91:66:4a:2d:58:94:c7:2c:cc:e1:55:b4:95:5b:ed:49:4b: 60:e6:89:43:c6:38:a9:5c:af:8d:54:af:56:48:d8:15:6f:82: 50:d0:75:25:55:62:e7:6c:25:b2:89:01:e5:cd:ce:83:3d:4c: 7b:ad:f2:8e:61:f2:f3:47:79:4a:dc:95:a8:ac:d2:5a:04:2b: d9:29:b8:59:74:df:be:b1:57:47:28:f1:c4:ef:ad:2a:1a:90: 87:ba:f3:97:4b:1b:0d:b4:06:83:43:62:54:5e:6e:b2:f1:cf: 8b:c4:7d:25:01:82:d7:35:3d:33:55:5b:a1:ff:a2:91:88:bd: 94:a4:56:74:24:b2:a4:3e:5d:f5:75:f1:73:58:35:85:97:f0: ff:7e:da:d2:6d:f9:58:f5:f6:c9:1c:ff:f8:00:61:fe:2e:61: 6e:e3:a5:95:d0:25:e3:d7:e3:75:de:b8:27:7a:9f:5c:f5:0a: cf:23:52:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M1GFMm/DpnF7dxnZjNVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjUxMjE5MjAwMDQ1WhcNMjUxMjIwMjAwMDQ1WjAzMTEwLwYDVQQD EyhiMjk5YzhmMDMxOTc4MDcxNmU0Y2NjMDlmODBkMzkyOTc2ZmZhYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVfkEYPpATpNGfAGF7xcUfqn71Nu k1n0fjwRNHKPmd4lkZ6ZDZwDmrt9CjBZ9NKxKeNaxIsGNkcTJ+ceTvMU6qontaAI QmxBifLOC26y/6sGKr559Mr/CU3a0sSqGLUR3LWD7iU0Lm5B817WN83lzy/EJS9P ulUtXJ7Fzaz0+rZFqdmacp0IMmZzdnurfRTtOkJyqzuvPgriRLC6caOne5yfxpoq iWIbryskhMAEVNSxg8V0jMo/XbzjpEIIZIctkibx+HHflS3sdRRbDxQUap8iqd7e BBXxxUEh2JrBQWWG9OXBhHLkZ0vfCzBixA+HDB2IDZEqwPSLQ3dfqrZ2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKZyPAxl4BxbkzMCfgNOSl2/6sBMB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeswWJIrH V8M9fvCECQovERqIN0ZTTPqPggpM/u8i4pZpzNGGMQIq4xw8biYmBFYfhvJOXD80 6S+FXJf37+3+zAw+yLN+As9gYpFmSi1YlMcszOFVtJVb7UlLYOaJQ8Y4qVyvjVSv VkjYFW+CUNB1JVVi52wlsokB5c3Ogz1Me63yjmHy80d5StyVqKzSWgQr2Sm4WXTf vrFXRyjxxO+tKhqQh7rzl0sbDbQGg0NiVF5usvHPi8R9JQGC1zU9M1Vbof+ikYi9 lKRWdCSypD5d9XXxc1g1hZfw/37a0m35WPX2yRz/+ABh/i5hbuOlldAl49fjdd64 J3qfXPUKzyNSwA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:08:14 2025 by rpki-client