This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json) Hash identifier: ZJQRSW036DS3JAqh3pQGl9mt83+TAwHROAAw41GQ22w= Subject key identifier: 60:66:3C:5A:5E:04:B7:99:E2:A3:36:19:A9:BD:84:7A:95:2F:53:CC Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Certificate serial: 019B3A586FDDDE670982A0E8FE1067AD6FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft Manifest number: 0177 Signing time: Sat 20 Dec 2025 06:00:32 +0000 Manifest this update: Sat 20 Dec 2025 06:00:32 +0000 Manifest next update: Sun 21 Dec 2025 06:00:32 +0000 Files and hashes: 1: j8bQQ_2ixu-vog4cLNKhBgofx1M.roa (hash: v4k62I4wJVyjDK80IFPhBu/XJr/LGdFEyW7xkPuyAOU=) 2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: nUxgQ/ZlzTWxec/WTiVjsV+mtOURwITjbI01ZNfAN0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:6f:dd:de:67:09:82:a0:e8:fe:10:67:ad:6f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Validity Not Before: Dec 20 06:00:32 2025 GMT Not After : Dec 21 06:00:32 2025 GMT Subject: CN=60663c5a5e04b799e2a33619a9bd847a952f53cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:96:f3:98:7e:4e:9a:70:b1:70:f9:ff:77: 1e:44:5e:e5:e9:50:e4:71:40:6d:a9:70:09:e4:4b: 4e:86:9a:51:1d:5b:0f:be:bc:12:35:f8:fe:e2:6b: 03:a4:42:12:61:29:77:eb:df:42:9e:5d:bb:81:ec: 14:e8:e6:cf:7b:1a:ec:77:fe:d0:f2:9c:48:21:9d: 00:d0:b2:94:39:e4:13:86:42:02:84:fd:02:85:eb: 9c:f0:4f:91:6a:9f:79:8f:cd:be:c3:78:0c:e7:67: 73:68:e4:d1:e1:d9:57:88:13:eb:99:d0:d7:56:1e: 76:b0:6e:54:36:75:65:31:19:0f:a6:38:6d:ef:66: 8d:e0:49:d4:c0:30:28:f4:08:56:f8:fd:d0:d0:44: 30:5b:d4:76:f7:ed:e3:0a:8a:c2:60:0b:da:4b:0d: 03:9b:55:30:0b:a1:50:be:c0:47:c0:b9:28:ac:68: 16:1c:19:8f:96:2b:09:7a:3a:fb:9d:b4:34:18:d8: 71:21:80:2c:d2:11:b2:37:07:39:3c:3a:fa:39:8e: 0e:50:1a:ad:f3:1f:b8:03:3e:9d:76:60:52:c2:e8: 42:e4:f9:8f:24:a4:ae:12:9e:86:9a:9e:26:72:24: 91:d0:15:47:0e:ed:f9:ac:ec:2d:02:43:b5:a9:ea: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:3C:5A:5E:04:B7:99:E2:A3:36:19:A9:BD:84:7A:95:2F:53:CC X509v3 Authority Key Identifier: keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:fa:41:7e:b6:c7:12:2c:1f:26:91:d2:32:4f:fd:d0:3a: 6c:18:8f:11:ec:54:d0:5e:b2:8b:b1:80:8d:78:df:4c:16:77: 38:c5:e8:b8:37:91:54:b9:1d:35:df:23:b3:64:48:69:1e:c6: 8d:43:ef:68:84:1b:02:de:22:5b:89:aa:af:76:b7:25:07:02: 6d:40:e2:ca:9c:eb:05:5d:96:e3:24:53:90:1f:a1:2c:c4:72: b4:fd:fa:d6:87:0a:d7:b1:8b:52:e2:77:1f:2d:34:1f:54:74: 34:c6:ae:47:55:84:a2:3f:80:0a:d0:ab:02:b3:90:47:02:23: cf:99:38:f1:6b:88:66:b3:cc:40:6e:33:8d:d4:c8:6a:b8:0e: 92:52:ca:5c:ab:f3:a2:d2:0d:ad:3d:a8:8c:19:d2:30:f8:69: 01:62:c3:4d:b0:4d:29:70:63:5b:28:c0:a2:ea:39:a1:18:6a: f7:66:18:d8:82:18:17:61:fe:e8:e4:b6:76:7f:47:c2:0c:a3: aa:89:e0:7d:43:f6:5e:e6:f3:28:3b:af:b7:6d:48:ce:2e:ac: a2:e4:81:ed:9e:25:ec:e1:c2:55:00:06:ef:13:c3:ca:46:50: b3:fe:10:59:59:a7:d8:7e:4b:9b:a9:98:29:f0:66:76:d1:01: f7:b0:3c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WG/d3mcJgqDo/hBnrW/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2 MGE4MjAwHhcNMjUxMjIwMDYwMDMyWhcNMjUxMjIxMDYwMDMyWjAzMTEwLwYDVQQD Eyg2MDY2M2M1YTVlMDRiNzk5ZTJhMzM2MTlhOWJkODQ3YTk1MmY1M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjSW85h+TppwsXD5/3ceRF7l6VDk cUBtqXAJ5EtOhppRHVsPvrwSNfj+4msDpEISYSl3699Cnl27gewU6ObPexrsd/7Q 8pxIIZ0A0LKUOeQThkIChP0Cheuc8E+Rap95j82+w3gM52dzaOTR4dlXiBPrmdDX Vh52sG5UNnVlMRkPpjht72aN4EnUwDAo9AhW+P3Q0EQwW9R29+3jCorCYAvaSw0D m1UwC6FQvsBHwLkorGgWHBmPlisJejr7nbQ0GNhxIYAs0hGyNwc5PDr6OY4OUBqt 8x+4Az6ddmBSwuhC5PmPJKSuEp6Gmp4mciSR0BVHDu35rOwtAkO1qepMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBmPFpeBLeZ4qM2Gam9hHqVL1PMMB8GA1UdIwQY MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGH6QX62 xxIsHyaR0jJP/dA6bBiPEexU0F6yi7GAjXjfTBZ3OMXouDeRVLkdNd8js2RIaR7G jUPvaIQbAt4iW4mqr3a3JQcCbUDiypzrBV2W4yRTkB+hLMRytP361ocK17GLUuJ3 Hy00H1R0NMauR1WEoj+ACtCrArOQRwIjz5k48WuIZrPMQG4zjdTIargOklLKXKvz otINrT2ojBnSMPhpAWLDTbBNKXBjWyjAouo5oRhq92YY2IIYF2H+6OS2dn9Hwgyj qongfUP2XubzKDuvt21Izi6souSB7Z4l7OHCVQAG7xPDykZQs/4QWVmn2H5Lm6mY KfBmdtEB97A8MA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:34 2025 by rpki-client