This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json) Hash identifier: HBGay8isxc25nygYKmQiVPpOJJbcPaQ801G4dWCg4dI= Subject key identifier: 4D:42:1E:D1:0D:B9:50:DD:68:B5:C3:5D:97:F3:C1:9D:E3:C6:EF:FB Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc Certificate serial: 019B6CC5386BB36DB1BFC2EE13AB06424274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft Manifest number: 0C42 Signing time: Tue 30 Dec 2025 01:00:22 +0000 Manifest this update: Tue 30 Dec 2025 01:00:22 +0000 Manifest next update: Wed 31 Dec 2025 01:00:22 +0000 Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=) 2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: zoQyG86jbdZUrYAYPyMYJwPIiIiYprC9U0a+3CPLhC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:38:6b:b3:6d:b1:bf:c2:ee:13:ab:06:42:42:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc Validity Not Before: Dec 30 01:00:22 2025 GMT Not After : Dec 31 01:00:22 2025 GMT Subject: CN=4d421ed10db950dd68b5c35d97f3c19de3c6effb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:41:1d:ae:c2:c1:97:04:25:83:f3:d8:27: 8f:ae:c6:a3:0a:cf:58:4e:df:84:31:36:e8:ce:41: 6f:3a:6a:9a:70:49:df:74:f9:fa:5c:5f:e5:03:72: 61:20:eb:af:e2:34:9c:61:10:c7:e9:7f:66:9e:e8: 1f:ad:84:c2:7b:b9:54:b5:e7:4d:a4:29:41:ec:90: a1:92:14:1a:ce:ae:4a:83:36:72:25:cb:ea:4a:ba: ad:87:d7:f8:93:e3:b0:ad:2b:4a:55:1d:65:38:2c: 36:76:fd:69:a3:5e:b5:51:f3:d6:d4:bd:22:74:6a: 59:5e:2a:ab:c8:c0:87:eb:16:2b:bd:7e:9e:76:a4: 6d:6b:cb:42:6f:1a:22:64:4d:aa:3d:37:24:fb:c4: 52:70:a9:9c:e0:12:6f:fb:cf:c7:42:b5:61:08:44: fb:1e:b4:99:e2:41:52:09:3a:48:e9:66:ee:34:fe: 9d:ff:35:be:ae:4c:69:ce:3f:b2:99:b7:c4:68:16: ff:44:29:e5:c1:11:ba:b3:d2:8e:b4:ce:5a:c5:7d: 07:cb:8e:3e:b4:5d:7a:96:af:93:07:22:16:44:b6: 9d:1b:22:5d:4a:20:c9:3c:01:2a:d2:91:97:d8:e4: 4f:74:ee:42:8c:f3:7e:e4:8e:ac:24:f2:e3:2a:1a: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:42:1E:D1:0D:B9:50:DD:68:B5:C3:5D:97:F3:C1:9D:E3:C6:EF:FB X509v3 Authority Key Identifier: keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fb:2f:e6:77:40:e7:55:4a:a0:e3:11:00:3c:86:95:d0:a8: 48:cd:d6:72:97:35:c9:29:61:d3:22:e9:cc:a3:4d:9b:76:f0: 3a:91:e3:4f:58:74:7c:e7:fc:da:53:46:59:60:2a:bc:2a:18: a9:2f:cb:81:c0:d1:f4:77:76:83:11:d5:32:90:ef:11:b8:67: e0:25:55:12:96:ee:4e:1c:cb:02:1c:7c:79:a0:c5:4a:f5:8b: e4:55:b6:29:34:d2:7e:51:5d:a0:8e:a5:18:00:9c:32:33:1e: 3a:74:d5:73:fe:b8:34:d7:2b:70:4c:d5:55:57:d9:9a:78:a6: 79:f8:bc:b4:9c:08:47:55:f1:b9:12:0d:35:59:de:c0:5d:b7: 34:71:8b:d2:8d:66:f6:20:63:6a:1e:72:e9:9b:d8:a1:30:23: 25:8f:78:f9:23:a6:67:40:13:20:ad:37:45:88:71:c3:8a:ca: 8b:e4:2d:b4:37:2d:fe:1e:14:5b:18:6c:60:a1:a6:7d:1a:5e: d9:8a:8e:e6:31:13:68:ce:e7:5e:e0:0a:bf:9a:d2:b9:6f:b2: cf:41:70:90:0b:d2:bb:9a:bd:15:6a:fd:af:fe:84:32:53:eb: fa:3a:3e:4c:ec:62:54:3f:ca:d5:23:63:60:7a:98:77:9c:7b: 43:82:97:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxThrs22xv8LuE6sGQkJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGFlNjNiNzU3ZGExYWY3OTBmMjBmNTljNjM0ODExZWVl YjFiY2MwHhcNMjUxMjMwMDEwMDIyWhcNMjUxMjMxMDEwMDIyWjAzMTEwLwYDVQQD Eyg0ZDQyMWVkMTBkYjk1MGRkNjhiNWMzNWQ5N2YzYzE5ZGUzYzZlZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQBBHa7CwZcEJYPz2CePrsajCs9Y Tt+EMTbozkFvOmqacEnfdPn6XF/lA3JhIOuv4jScYRDH6X9mnugfrYTCe7lUtedN pClB7JChkhQazq5KgzZyJcvqSrqth9f4k+OwrStKVR1lOCw2dv1po161UfPW1L0i dGpZXiqryMCH6xYrvX6edqRta8tCbxoiZE2qPTck+8RScKmc4BJv+8/HQrVhCET7 HrSZ4kFSCTpI6WbuNP6d/zW+rkxpzj+ymbfEaBb/RCnlwRG6s9KOtM5axX0Hy44+ tF16lq+TByIWRLadGyJdSiDJPAEq0pGX2ORPdO5CjPN+5I6sJPLjKhql5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1CHtENuVDdaLXDXZfzwZ3jxu/7MB8GA1UdIwQY MBaAFLuK5jt1faGveQ8g9ZxjSBHu6xvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQt YWIwODdmNDNiNTk1LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQtYWIwODdmNDNiNTk1 LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/sv5ndA 51VKoOMRADyGldCoSM3Wcpc1ySlh0yLpzKNNm3bwOpHjT1h0fOf82lNGWWAqvCoY qS/LgcDR9Hd2gxHVMpDvEbhn4CVVEpbuThzLAhx8eaDFSvWL5FW2KTTSflFdoI6l GACcMjMeOnTVc/64NNcrcEzVVVfZmnimefi8tJwIR1XxuRINNVnewF23NHGL0o1m 9iBjah5y6ZvYoTAjJY94+SOmZ0ATIK03RYhxw4rKi+QttDct/h4UWxhsYKGmfRpe 2YqO5jETaM7nXuAKv5rSuW+yz0FwkAvSu5q9FWr9r/6EMlPr+jo+TOxiVD/K1SNj YHqYd5x7Q4KX4w== -----END CERTIFICATE-----Generated at Tue Dec 30 04:56:26 2025 by rpki-client