This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json) Hash identifier: savfj0j8p7hHVLeMKMAIUNIFqR/UiCuAYQVHQGfiSq4= Subject key identifier: 82:BA:3B:58:B3:AA:68:6C:93:31:1C:12:C2:94:7F:B9:06:F3:54:85 Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f Certificate serial: 019B2FD5A91BCAF867DC5079D7A22D3FDB70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft Manifest number: 1272 Signing time: Thu 18 Dec 2025 05:01:30 +0000 Manifest this update: Thu 18 Dec 2025 05:01:30 +0000 Manifest next update: Fri 19 Dec 2025 05:01:30 +0000 Files and hashes: 1: pDFtrRqSytqofU52Bi4GLIxTxPM.roa (hash: FhQVFWsHZFXcD5DtHy8k60bsokhKGFTiQLeglKl8pII=) 2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: VLWlqrXrHNMMoAeXJJKBjtdMGuUNa0tebn3Nlenz4nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:a9:1b:ca:f8:67:dc:50:79:d7:a2:2d:3f:db:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f Validity Not Before: Dec 18 05:01:30 2025 GMT Not After : Dec 19 05:01:30 2025 GMT Subject: CN=82ba3b58b3aa686c93311c12c2947fb906f35485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:82:1c:a8:eb:c8:66:af:e3:27:b6:61:51:d9: 93:8a:2b:83:43:fe:c2:b6:e8:dc:4c:4c:27:7b:e1: 02:5d:76:f9:d2:5d:66:09:b4:4d:0f:f8:e3:0a:7c: 6e:09:75:52:7f:eb:d1:76:70:c3:30:2c:bb:0d:1f: 8b:46:0d:e9:c8:ad:dc:d1:c8:c6:b0:0f:a5:06:7b: 29:11:ed:3b:ca:32:48:4a:8f:a9:eb:fc:12:0a:b3: 3a:49:17:63:a0:e5:e9:1f:a5:fb:aa:a2:44:ca:28: d5:2f:18:46:20:f6:65:ef:79:13:cb:0e:66:96:7b: 45:b2:37:ce:0e:b2:81:a9:b3:6f:ac:f2:3a:79:10: 24:a8:3e:d5:e2:47:f4:cb:81:d1:7b:12:b3:2f:ac: 8f:cd:c0:08:90:e8:32:fe:39:b9:0f:fa:ea:85:fd: 9a:c5:de:3a:21:82:e3:98:f8:e0:1f:9f:d3:01:d3: 4d:01:71:26:18:f1:7e:64:d6:8d:ea:3e:8a:bb:b3: 8a:54:0d:e6:b1:73:79:8b:df:c3:6d:d5:ab:6c:cb: 44:98:69:15:73:0f:46:22:73:b8:f1:a3:07:a2:fd: d6:df:8d:af:f4:15:f8:6b:b8:56:4f:3a:5f:f8:7d: 0a:bb:e4:8e:24:f0:32:4c:9f:41:83:f4:64:fa:00: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BA:3B:58:B3:AA:68:6C:93:31:1C:12:C2:94:7F:B9:06:F3:54:85 X509v3 Authority Key Identifier: keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5f:24:71:94:a1:7a:51:80:21:84:15:8e:39:26:ca:ff:1e: 00:82:1d:a5:6f:b9:39:39:51:57:b6:1d:c7:a2:4c:7f:5d:74: 15:bb:c5:3d:1b:8e:78:c3:e9:52:4c:2e:0b:05:e1:64:4d:fd: 87:7d:a0:8e:d3:3e:cb:ee:4b:68:de:a5:80:23:dd:f9:69:52: 02:36:9c:8d:ca:67:4b:47:64:9e:d9:74:28:7f:ce:69:75:73: 66:cf:25:7c:9c:63:db:bd:ce:fa:b9:2c:82:6c:49:64:0e:91: a3:95:4c:cd:10:a8:8e:61:e5:67:3f:ef:9a:e7:44:50:8f:10: e6:80:32:b6:b9:86:a0:7d:4d:06:94:75:34:8b:91:b4:d9:b7: ca:83:c5:d8:f7:63:53:29:52:33:a5:58:0d:dd:c7:0f:10:3a: 89:09:fe:4f:d4:a3:7d:75:b8:74:8f:8d:b8:8b:0e:a4:56:6b: b3:4c:a0:92:86:10:49:b7:c5:87:67:7d:01:10:00:1b:47:fd: c1:ce:ac:71:b1:1c:c5:29:17:1a:98:76:59:71:f7:6c:cd:5c: 6e:e7:6a:c4:88:79:d4:d1:15:b2:63:bc:9a:f9:52:77:18:ce: 4e:1d:fc:1c:26:ed:4e:0f:6f:c9:79:ca:1d:20:06:95:a5:e2: b6:0c:fa:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1akbyvhn3FB516ItP9twMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDA5OGUwZmRlZGI2MTJmMjM5ZGE1MjRhMDRiNWUwZGVh NGM1M2YwHhcNMjUxMjE4MDUwMTMwWhcNMjUxMjE5MDUwMTMwWjAzMTEwLwYDVQQD Eyg4MmJhM2I1OGIzYWE2ODZjOTMzMTFjMTJjMjk0N2ZiOTA2ZjM1NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIIcqOvIZq/jJ7ZhUdmTiiuDQ/7C tujcTEwne+ECXXb50l1mCbRND/jjCnxuCXVSf+vRdnDDMCy7DR+LRg3pyK3c0cjG sA+lBnspEe07yjJISo+p6/wSCrM6SRdjoOXpH6X7qqJEyijVLxhGIPZl73kTyw5m lntFsjfODrKBqbNvrPI6eRAkqD7V4kf0y4HRexKzL6yPzcAIkOgy/jm5D/rqhf2a xd46IYLjmPjgH5/TAdNNAXEmGPF+ZNaN6j6Ku7OKVA3msXN5i9/DbdWrbMtEmGkV cw9GInO48aMHov3W342v9BX4a7hWTzpf+H0Ku+SOJPAyTJ9Bg/Rk+gA/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK6O1izqmhskzEcEsKUf7kG81SFMB8GA1UdIwQY MBaAFLtAmOD97bYS8jnaUkoEteDepMU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YjczM2UtOTgzOS00ZjZmLWI0YjYt ZmY1YWE5ZWVmNGUyLzEvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85YjczM2UtOTgzOS00ZjZmLWI0YjYtZmY1YWE5ZWVmNGUy LzEvdTBDWTRQM3R0aEx5T2RwU1NnUzE0TjZreFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS18kcZSh elGAIYQVjjkmyv8eAIIdpW+5OTlRV7Ydx6JMf110FbvFPRuOeMPpUkwuCwXhZE39 h32gjtM+y+5LaN6lgCPd+WlSAjacjcpnS0dkntl0KH/OaXVzZs8lfJxj273O+rks gmxJZA6Ro5VMzRCojmHlZz/vmudEUI8Q5oAytrmGoH1NBpR1NIuRtNm3yoPF2Pdj UylSM6VYDd3HDxA6iQn+T9SjfXW4dI+NuIsOpFZrs0ygkoYQSbfFh2d9ARAAG0f9 wc6scbEcxSkXGph2WXH3bM1cbudqxIh51NEVsmO8mvlSdxjOTh38HCbtTg9vyXnK HSAGlaXitgz6SA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:59:15 2025 by rpki-client