This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json) Hash identifier: uSGGgowMRpHCqCm6d8SRL/BtYUpsHer0jKENI7INXLc= Subject key identifier: D2:B3:BA:A7:1B:BB:AD:D5:16:5E:39:36:FA:12:C6:E2:5D:E9:7A:19 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019B281B6A13E1F50F6F44AFEE7541650F9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft Manifest number: 1254 Signing time: Tue 16 Dec 2025 17:00:43 +0000 Manifest this update: Tue 16 Dec 2025 17:00:43 +0000 Manifest next update: Wed 17 Dec 2025 17:00:43 +0000 Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=) 2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: xdSwJlNs4Tl9ECeNcFVZfu+/rOu+sNz3OdmYv/smrc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:6a:13:e1:f5:0f:6f:44:af:ee:75:41:65:0f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Dec 16 17:00:43 2025 GMT Not After : Dec 17 17:00:43 2025 GMT Subject: CN=d2b3baa71bbbadd5165e3936fa12c6e25de97a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:89:e5:f3:75:a3:39:91:0b:18:c5:7b:a3: 6f:e1:08:ee:75:e6:50:85:ee:5f:0b:12:14:46:d8: a0:1f:0c:b9:b5:0c:f8:6b:4b:02:f7:33:a3:8b:46: a2:8b:28:a4:1c:10:99:21:cb:9a:86:ae:f8:78:dc: 36:2e:38:39:5e:14:03:a1:dd:46:27:22:8b:3c:55: 4a:12:9e:80:c9:9c:16:e7:1a:b0:87:47:86:da:0c: 23:5f:28:e2:bd:68:51:23:ca:0b:60:0c:ec:8b:f7: fa:cc:f5:7c:0b:48:58:e5:88:4a:1c:42:d7:bc:f6: 63:81:94:5b:64:c4:0a:7d:70:e5:78:01:4e:4b:3f: 60:32:d1:e4:e8:88:3b:c3:fd:42:41:b4:59:7d:b1: f8:b4:5c:64:31:8b:8b:c4:4e:28:51:83:2a:00:22: ab:11:4c:51:94:ff:a3:11:bf:82:48:84:83:43:fe: 84:b7:d9:23:f0:e8:61:3b:af:e5:4d:6f:b5:94:2f: f5:77:8f:a1:4d:66:ab:66:be:d9:ac:4a:ab:8d:c7: 52:8a:31:f3:24:8b:6c:35:34:01:2a:e6:b6:0e:19: 10:cd:6d:8d:45:6b:e1:8e:b2:6c:f5:47:50:e0:45: 81:32:55:8b:e7:f8:bb:c9:dc:cf:23:d8:22:43:c5: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B3:BA:A7:1B:BB:AD:D5:16:5E:39:36:FA:12:C6:E2:5D:E9:7A:19 X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:25:90:6c:68:45:cc:48:8d:d8:29:32:13:ac:5b:3b:18:53: 78:4f:ac:35:39:89:3e:ca:4e:a3:bb:2b:68:b6:6a:b7:0c:43: 34:64:f2:32:4c:b5:39:12:08:7e:73:11:07:2e:03:22:b9:85: 5c:a9:7c:b9:59:04:e6:48:2a:64:e5:6b:9f:f4:1e:5c:36:8c: 74:b9:62:af:bd:76:70:8e:65:0f:b9:d1:0d:2b:da:87:bd:f1: 07:d8:65:6e:e3:01:d4:89:3e:f0:b8:fd:fa:67:e4:3d:97:e1: 60:08:99:52:c2:15:e1:97:5c:81:59:8c:bd:31:4b:ad:9c:f9: 6c:34:9f:17:33:a7:40:6a:14:1c:30:b7:a2:60:7e:54:2d:83: 1f:b7:fa:62:5b:98:48:a3:29:2d:58:5c:fc:8c:67:6a:b4:16: c3:90:47:bc:89:fd:b8:87:bb:5f:01:76:6a:52:1f:ad:5d:e2: dc:93:e6:11:eb:24:b0:7a:3c:40:be:7f:0f:54:69:df:25:35: 51:8d:e5:1d:3a:e1:54:50:de:a3:53:ff:b9:d6:be:f8:3f:94: 4a:ee:22:ce:c5:10:1f:bf:f0:82:f9:87:23:64:44:f3:eb:60: 86:57:49:8a:fe:9d:2c:1e:34:bd:f4:62:4d:bb:65:f7:3c:8b: e8:62:5c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG2oT4fUPb0Sv7nVBZQ+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjUxMjE2MTcwMDQzWhcNMjUxMjE3MTcwMDQzWjAzMTEwLwYDVQQD EyhkMmIzYmFhNzFiYmJhZGQ1MTY1ZTM5MzZmYTEyYzZlMjVkZTk3YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9aJ5fN1ozmRCxjFe6Nv4QjudeZQ he5fCxIURtigHwy5tQz4a0sC9zOji0aiiyikHBCZIcuahq74eNw2Ljg5XhQDod1G JyKLPFVKEp6AyZwW5xqwh0eG2gwjXyjivWhRI8oLYAzsi/f6zPV8C0hY5YhKHELX vPZjgZRbZMQKfXDleAFOSz9gMtHk6Ig7w/1CQbRZfbH4tFxkMYuLxE4oUYMqACKr EUxRlP+jEb+CSISDQ/6Et9kj8OhhO6/lTW+1lC/1d4+hTWarZr7ZrEqrjcdSijHz JItsNTQBKua2DhkQzW2NRWvhjrJs9UdQ4EWBMlWL5/i7ydzPI9giQ8XxqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKzuqcbu63VFl45NvoSxuJd6XoZMB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyWQbGhF zEiN2CkyE6xbOxhTeE+sNTmJPspOo7sraLZqtwxDNGTyMky1ORIIfnMRBy4DIrmF XKl8uVkE5kgqZOVrn/QeXDaMdLlir712cI5lD7nRDSvah73xB9hlbuMB1Ik+8Lj9 +mfkPZfhYAiZUsIV4ZdcgVmMvTFLrZz5bDSfFzOnQGoUHDC3omB+VC2DH7f6YluY SKMpLVhc/IxnarQWw5BHvIn9uIe7XwF2alIfrV3i3JPmEesksHo8QL5/D1Rp3yU1 UY3lHTrhVFDeo1P/uda++D+USu4izsUQH7/wgvmHI2RE8+tghldJiv6dLB40vfRi Tbtl9zyL6GJcRw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:02 2025 by rpki-client