This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft File: u-BbYYon9sEO-Zm8ltmqDL0UraU.mft (raw, json) Hash identifier: jPVZIyxlX9BaBwcur/VzB/rP7d2aw80mvKfELwQWvKQ= Subject key identifier: 9A:04:B3:58:D0:11:A2:35:7B:EC:FC:AC:DA:44:39:F6:62:E2:E8:3A Authority key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 Certificate issuer: /CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5 Certificate serial: 019B7748F5C3D0297CCA712758F4539FF570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft Manifest number: 0328 Signing time: Thu 01 Jan 2026 02:00:28 +0000 Manifest this update: Thu 01 Jan 2026 02:00:28 +0000 Manifest next update: Fri 02 Jan 2026 02:00:28 +0000 Files and hashes: 1: u-BbYYon9sEO-Zm8ltmqDL0UraU.crl (hash: fWRcX8LZ1/XV03eEDswXzLB/PkWBdNfdDIJ6FstPHTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:48:f5:c3:d0:29:7c:ca:71:27:58:f4:53:9f:f5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5 Validity Not Before: Jan 1 02:00:28 2026 GMT Not After : Jan 2 02:00:28 2026 GMT Subject: CN=9a04b358d011a2357becfcacda4439f662e2e83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:dd:1c:92:9c:37:ad:5d:00:af:f0:33:a4: 34:f1:2e:f4:43:35:43:ce:20:c7:9e:a1:fd:ee:92: af:16:09:86:50:6a:60:a5:21:43:13:f8:e2:f2:53: 3d:80:5b:c3:a3:48:6a:be:42:d0:62:87:51:d5:e7: 36:8c:75:62:28:b3:58:02:af:bb:50:57:23:da:2c: ab:95:84:2b:ab:88:6b:e1:51:66:d2:7c:fb:5c:b1: d6:a5:78:fa:e1:91:47:c1:78:3e:05:b9:5d:14:c1: 0d:26:75:fe:eb:65:bb:e3:e2:16:e7:65:6c:a3:37: 3d:77:8d:59:da:b2:8d:9a:62:12:b0:c6:36:1c:6a: 52:ee:16:68:c1:6f:8d:9f:46:26:2d:93:8e:50:23: 2f:bc:fe:93:ec:fc:1e:ad:98:84:8c:38:43:27:23: 2e:35:b3:6b:15:ba:b9:e9:ed:8b:0f:7a:c3:44:73: 46:2f:27:38:df:fe:76:9a:e4:0c:d0:15:4f:51:b8: 7e:7e:6a:a7:84:69:38:9f:bf:94:78:e2:5f:5b:b3: 2f:a5:b9:64:40:8c:3f:1d:68:44:95:37:f6:f2:f2: 59:e8:4c:4d:a1:a8:c8:00:2a:f4:15:f8:95:9d:0c: d2:1d:d2:84:9f:50:02:4c:5f:8d:6e:f4:86:66:4a: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:B3:58:D0:11:A2:35:7B:EC:FC:AC:DA:44:39:F6:62:E2:E8:3A X509v3 Authority Key Identifier: keyid:BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:24:c5:a1:24:57:c3:cb:de:59:cc:ac:b7:6a:2a:dc:94:7a: f2:ef:f9:e5:70:36:99:99:62:ba:16:7a:14:10:e3:d1:de:ee: 8a:c1:69:e8:4b:80:e0:5b:40:0a:ae:81:dd:f6:66:ac:95:48: bf:d9:5f:97:60:ca:a4:92:26:cf:0e:11:ae:26:85:2a:9e:5d: 82:fc:b6:77:4c:80:28:5d:bf:1b:08:30:d4:32:c5:5f:eb:f2: 73:11:39:e9:ce:b3:ed:6d:04:5b:1c:35:a1:6a:a9:06:ec:1a: c3:d6:89:96:37:48:12:5d:94:b4:01:36:41:03:b4:c8:91:ca: f7:26:9d:23:cc:10:01:1d:14:9d:9f:f1:49:2a:56:5a:4e:ed: 1c:ce:95:ae:92:54:11:04:d4:be:dd:6b:2e:8b:f8:91:48:5e: eb:1a:bc:bb:93:1e:a2:7b:32:b0:1d:99:83:f4:4c:b4:a2:a3: c5:ba:45:75:95:90:70:ca:6d:23:47:12:4c:54:5a:cf:fe:a7: 08:8a:b0:18:30:dd:f0:3e:3a:e3:ea:93:09:7c:11:c0:1c:c0: 54:0c:d6:a0:c3:37:68:18:35:c6:0a:d2:df:e3:69:23:36:17: b0:89:df:a8:82:43:88:d2:2e:b7:80:21:5a:5c:20:eb:a9:2f: 5d:de:be:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SPXD0Cl8ynEnWPRTn/VwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTA1YjYxOGEyN2Y2YzEwZWY5OTliYzk2ZDlhYTBjYmQx NGFkYTUwHhcNMjYwMTAxMDIwMDI4WhcNMjYwMTAyMDIwMDI4WjAzMTEwLwYDVQQD Eyg5YTA0YjM1OGQwMTFhMjM1N2JlY2ZjYWNkYTQ0MzlmNjYyZTJlODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxfdHJKcN61dAK/wM6Q08S70QzVD ziDHnqH97pKvFgmGUGpgpSFDE/ji8lM9gFvDo0hqvkLQYodR1ec2jHViKLNYAq+7 UFcj2iyrlYQrq4hr4VFm0nz7XLHWpXj64ZFHwXg+BbldFMENJnX+62W74+IW52Vs ozc9d41Z2rKNmmISsMY2HGpS7hZowW+Nn0YmLZOOUCMvvP6T7PwerZiEjDhDJyMu NbNrFbq56e2LD3rDRHNGLyc43/52muQM0BVPUbh+fmqnhGk4n7+UeOJfW7Mvpblk QIw/HWhElTf28vJZ6ExNoajIACr0FfiVnQzSHdKEn1ACTF+NbvSGZkoBTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoEs1jQEaI1e+z8rNpEOfZi4ug6MB8GA1UdIwQY MBaAFLvgW2GKJ/bBDvmZvJbZqgy9FK2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1Mzgt ZjMwMjljMzliNjZlLzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1MzgtZjMwMjljMzliNjZl LzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSTFoSRX w8veWcyst2oq3JR68u/55XA2mZliuhZ6FBDj0d7uisFp6EuA4FtACq6B3fZmrJVI v9lfl2DKpJImzw4RriaFKp5dgvy2d0yAKF2/Gwgw1DLFX+vycxE56c6z7W0EWxw1 oWqpBuwaw9aJljdIEl2UtAE2QQO0yJHK9yadI8wQAR0UnZ/xSSpWWk7tHM6VrpJU EQTUvt1rLov4kUhe6xq8u5MeonsysB2Zg/RMtKKjxbpFdZWQcMptI0cSTFRaz/6n CIqwGDDd8D464+qTCXwRwBzAVAzWoMM3aBg1xgrS3+NpIzYXsInfqIJDiNIut4Ah Wlwg66kvXd6+Qg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:54 2026 by rpki-client