This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json) Hash identifier: YypH0YU2BlEV56okpdrQMsnSKyKVf04MBhGyRctmYY4= Subject key identifier: 69:9B:2B:F7:28:EB:BE:BB:E0:80:B0:07:49:1C:1C:E2:41:B6:D8:62 Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Certificate serial: 019B3A21AD182EBC4168025A66BFBA458D87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft Manifest number: 1308 Signing time: Sat 20 Dec 2025 05:00:44 +0000 Manifest this update: Sat 20 Dec 2025 05:00:44 +0000 Manifest next update: Sun 21 Dec 2025 05:00:44 +0000 Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=) 2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: UJu7b1flYxWmjoKM/Ap5Fk5A5HiX8msDzTTXFns+y/A=) 3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:ad:18:2e:bc:41:68:02:5a:66:bf:ba:45:8d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Validity Not Before: Dec 20 05:00:44 2025 GMT Not After : Dec 21 05:00:44 2025 GMT Subject: CN=699b2bf728ebbebbe080b007491c1ce241b6d862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:86:d5:14:26:fd:0b:bb:06:0e:72:3b:18: 69:67:55:e2:c2:7e:ee:e3:15:c4:ec:1b:2c:ae:a3: 7e:69:a6:ea:13:fa:99:00:95:90:1c:d7:c3:33:ce: 04:14:c8:2c:db:b1:93:25:41:04:80:82:27:88:5a: c0:33:95:54:68:dd:70:30:f3:94:8a:b4:70:f2:10: 08:5a:cb:6d:d5:3d:88:31:89:75:96:58:a0:cd:eb: ce:f1:11:15:ae:b0:d6:d3:39:18:a9:4b:5a:d1:49: b1:67:19:c9:ea:e5:4d:e9:0f:1f:b5:e3:1f:4e:ac: 6b:7c:5c:c8:cf:29:30:1b:98:33:3b:5f:13:3f:f1: 89:e7:85:c3:45:9a:7b:43:9e:c9:48:ac:d4:b5:f2: ec:c9:7b:25:53:d5:bf:84:28:5f:0b:0e:5f:54:8d: f0:fd:e0:58:a8:5c:47:4f:d1:05:c7:5a:ec:81:fd: 06:4c:67:35:4c:d9:99:cd:14:0c:9c:5f:a9:01:b1: ad:4a:ce:87:73:a8:3d:76:ee:23:bb:d0:7c:84:0f: 32:2c:5c:97:96:04:30:b5:9a:6c:65:e5:94:58:75: 8c:62:09:21:d8:b3:a0:95:1e:5f:51:b1:d1:8b:fe: fa:34:d2:db:31:d2:3c:74:1a:1c:23:5c:3e:29:c7: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9B:2B:F7:28:EB:BE:BB:E0:80:B0:07:49:1C:1C:E2:41:B6:D8:62 X509v3 Authority Key Identifier: keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:be:fb:f1:b0:f5:7b:63:47:aa:9b:2d:7a:10:18:7b:f0: 00:1e:bb:0a:38:ee:72:57:c9:8d:ca:3d:4b:54:78:e1:e2:4a: 4f:e4:f1:7f:35:07:e7:a7:7b:aa:6b:60:bd:9f:d8:61:f3:aa: b5:2f:e2:f4:b0:02:9d:d4:d8:d7:34:cf:05:dd:c0:06:de:db: 6c:68:68:00:1f:75:f7:81:d5:f6:ea:0b:7a:01:96:1b:16:03: 0c:53:3a:ba:a4:85:4a:7f:a7:fb:0b:26:5e:c6:eb:a2:25:31: 75:90:d5:ce:0b:72:c6:16:87:af:b6:c7:84:b9:5b:37:18:07: 61:c1:48:e6:56:08:7a:55:1f:6c:5e:f9:e4:ce:bd:ff:4c:86: 8d:a1:b5:bf:22:8a:34:76:51:4c:6d:e9:ec:7b:5f:48:ed:09: fc:2a:db:f2:e9:59:8c:32:61:81:e2:a5:1a:2f:4b:96:01:56: 0b:d5:f2:fb:76:30:96:2d:49:45:c6:be:b1:a5:e6:40:0d:0e: 86:8e:d5:54:b2:b0:91:4f:82:d1:28:74:75:3e:9e:ed:0a:89: d8:28:ed:3c:66:50:12:4b:c9:f9:28:24:ce:d8:51:71:bd:01: 56:ad:52:47:9b:04:ea:58:b5:2c:50:51:7c:a6:fa:f1:ab:a2: f7:9d:09:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ia0YLrxBaAJaZr+6RY2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3 NzQ1OWMwHhcNMjUxMjIwMDUwMDQ0WhcNMjUxMjIxMDUwMDQ0WjAzMTEwLwYDVQQD Eyg2OTliMmJmNzI4ZWJiZWJiZTA4MGIwMDc0OTFjMWNlMjQxYjZkODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm86G1RQm/Qu7Bg5yOxhpZ1Xiwn7u 4xXE7BssrqN+aabqE/qZAJWQHNfDM84EFMgs27GTJUEEgIIniFrAM5VUaN1wMPOU irRw8hAIWstt1T2IMYl1lligzevO8REVrrDW0zkYqUta0UmxZxnJ6uVN6Q8fteMf TqxrfFzIzykwG5gzO18TP/GJ54XDRZp7Q57JSKzUtfLsyXslU9W/hChfCw5fVI3w /eBYqFxHT9EFx1rsgf0GTGc1TNmZzRQMnF+pAbGtSs6Hc6g9du4ju9B8hA8yLFyX lgQwtZpsZeWUWHWMYgkh2LOglR5fUbHRi/76NNLbMdI8dBocI1w+KccGzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmbK/co67674ICwB0kcHOJBtthiMB8GA1UdIwQY MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7m++/Gw 9XtjR6qbLXoQGHvwAB67CjjuclfJjco9S1R44eJKT+TxfzUH56d7qmtgvZ/YYfOq tS/i9LACndTY1zTPBd3ABt7bbGhoAB9194HV9uoLegGWGxYDDFM6uqSFSn+n+wsm XsbroiUxdZDVzgtyxhaHr7bHhLlbNxgHYcFI5lYIelUfbF755M69/0yGjaG1vyKK NHZRTG3p7HtfSO0J/Crb8ulZjDJhgeKlGi9LlgFWC9Xy+3Ywli1JRca+saXmQA0O ho7VVLKwkU+C0Sh0dT6e7QqJ2CjtPGZQEkvJ+SgkzthRcb0BVq1SR5sE6li1LFBR fKb68aui950JmA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:45 2025 by rpki-client