This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft File: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json) Hash identifier: ntXax3GDx/0Q5dWdTRPDzBktchfm4nk1dwXZJL//Mf8= Subject key identifier: 54:03:A2:01:07:77:49:AC:6A:AB:7E:59:F1:C8:15:81:EA:C6:EF:68 Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277 Certificate serial: 019B2B540DB375B780E72696E97B7AE125B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 08:01:27 +0000 Manifest this update: Wed 17 Dec 2025 08:01:27 +0000 Manifest next update: Thu 18 Dec 2025 08:01:27 +0000 Files and hashes: 1: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (hash: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=) 2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: zVpoa/SomzYFATCD3fvMZtuz5eReZzjqIoOBpSIIxoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:0d:b3:75:b7:80:e7:26:96:e9:7b:7a:e1:25:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277 Validity Not Before: Dec 17 08:01:27 2025 GMT Not After : Dec 18 08:01:27 2025 GMT Subject: CN=5403a201077749ac6aab7e59f1c81581eac6ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:02:cb:aa:e1:28:00:da:da:81:25:a7:56: 2c:f7:ee:c4:6a:6d:c2:bb:7e:23:86:83:2b:46:8e: dd:94:3e:38:fa:ea:1d:92:b7:13:bd:36:0c:cd:3c: 99:21:fc:2c:12:7d:0a:7b:df:64:30:2f:96:84:60: fa:a7:19:15:d0:93:9a:50:2a:00:61:a7:33:c8:af: a2:bd:13:c4:67:7d:cf:6a:ce:d5:73:2e:25:43:ed: 76:b4:af:6e:41:cc:50:9f:81:e5:98:7c:db:9e:57: dc:c8:1f:9a:91:c0:6f:be:17:de:1c:c3:61:9b:07: 1c:9e:ca:f3:95:97:4f:77:32:59:f3:67:86:ba:b5: 75:8e:4c:63:62:f4:ab:1f:81:d8:31:4f:60:98:76: 85:58:fe:6c:3c:d3:a2:17:b3:7d:e8:3a:02:ca:4d: db:d5:d9:8b:4a:4c:79:99:47:7e:79:47:f2:7e:bd: db:a5:ef:56:a2:01:18:01:65:eb:2d:81:f3:b6:c0: 5f:05:ed:3c:dc:8f:f0:95:45:75:e6:76:ad:96:b4: e0:bc:ed:ce:16:43:08:82:76:8f:23:b6:d5:bb:90: 0e:13:c9:15:a6:54:f1:7c:e4:37:0d:c1:00:d1:5b: 2b:7e:ab:1f:3c:0d:09:7f:85:b2:11:0a:64:9c:00: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:03:A2:01:07:77:49:AC:6A:AB:7E:59:F1:C8:15:81:EA:C6:EF:68 X509v3 Authority Key Identifier: keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6b:04:ce:43:c1:15:e2:29:e9:72:fc:30:4c:c0:13:c8:c3: 93:09:fe:4c:35:79:bf:3e:11:35:0e:e4:7e:87:18:a6:50:b8: 27:7a:45:74:9c:34:b9:22:6c:29:70:8e:e5:a8:63:53:44:3b: f1:15:fb:a7:54:a4:0c:d7:80:ca:2d:ad:5f:20:25:41:9d:68: 7f:5e:88:52:d8:b3:9a:ba:de:b1:d0:d7:56:f0:5f:d1:3b:1f: f3:6a:b1:b1:8c:d4:a9:67:74:e4:c5:eb:34:20:57:05:c8:56: b7:95:7f:44:3a:e0:a3:7f:13:a0:42:ae:9a:46:ee:d4:bc:d2: d3:da:43:fd:29:ea:ac:e7:90:9b:30:0c:34:97:55:46:0b:14: df:05:cd:ff:24:19:73:ed:f1:02:e8:0e:9e:29:a3:a3:b9:b4: 54:93:f5:87:1a:2f:3f:e4:e3:2c:67:93:98:b2:40:31:9e:85: 0f:98:05:72:2e:6e:d0:f4:48:78:ed:2b:50:d0:e6:66:da:8b: fd:8a:35:82:56:12:af:07:2e:d8:cf:46:53:6e:69:2a:0b:15: e4:3e:a3:bf:68:0d:ed:c8:e1:42:14:c0:5d:b2:4d:49:13:d2: 2b:f8:f6:95:2a:16:21:8b:16:fd:94:6f:d1:ed:46:38:90:14: 9c:4d:a3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVA2zdbeA5yaW6Xt64SWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmJlZTRhOTY4ZGYwZmFjNDc1MWI0ZjQ5MDI3ZmEwOTVj NjUyNzcwHhcNMjUxMjE3MDgwMTI3WhcNMjUxMjE4MDgwMTI3WjAzMTEwLwYDVQQD Eyg1NDAzYTIwMTA3Nzc0OWFjNmFhYjdlNTlmMWM4MTU4MWVhYzZlZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD4Cy6rhKADa2oElp1Ys9+7Eam3C u34jhoMrRo7dlD44+uodkrcTvTYMzTyZIfwsEn0Ke99kMC+WhGD6pxkV0JOaUCoA YaczyK+ivRPEZ33Pas7Vcy4lQ+12tK9uQcxQn4HlmHzbnlfcyB+akcBvvhfeHMNh mwccnsrzlZdPdzJZ82eGurV1jkxjYvSrH4HYMU9gmHaFWP5sPNOiF7N96DoCyk3b 1dmLSkx5mUd+eUfyfr3bpe9WogEYAWXrLYHztsBfBe083I/wlUV15natlrTgvO3O FkMIgnaPI7bVu5AOE8kVplTxfOQ3DcEA0VsrfqsfPA0Jf4WyEQpknACO1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQDogEHd0msaqt+WfHIFYHqxu9oMB8GA1UdIwQY MBaAFLv77kqWjfD6xHUbT0kCf6CVxlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAt MGE4OWM2OTk2ZmVmLzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAtMGE4OWM2OTk2ZmVm LzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWsEzkPB FeIp6XL8MEzAE8jDkwn+TDV5vz4RNQ7kfocYplC4J3pFdJw0uSJsKXCO5ahjU0Q7 8RX7p1SkDNeAyi2tXyAlQZ1of16IUtizmrresdDXVvBf0Tsf82qxsYzUqWd05MXr NCBXBchWt5V/RDrgo38ToEKumkbu1LzS09pD/SnqrOeQmzAMNJdVRgsU3wXN/yQZ c+3xAugOnimjo7m0VJP1hxovP+TjLGeTmLJAMZ6FD5gFci5u0PRIeO0rUNDmZtqL /Yo1glYSrwcu2M9GU25pKgsV5D6jv2gN7cjhQhTAXbJNSRPSK/j2lSoWIYsW/ZRv 0e1GOJAUnE2jFw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:35 2025 by rpki-client