This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json) Hash identifier: jqCq09bPyTWyquApxcbDrYBD0EIGWv87TNfg28HVN4w= Subject key identifier: F2:DB:AD:24:06:42:4A:E0:D8:58:08:E7:7D:BE:58:E8:86:77:67:17 Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019B53064DAA5927F2D67FFC2E582BDDD1A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft Manifest number: 179D Signing time: Thu 25 Dec 2025 01:01:20 +0000 Manifest this update: Thu 25 Dec 2025 01:01:20 +0000 Manifest next update: Fri 26 Dec 2025 01:01:20 +0000 Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=) 2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=) 3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: OuTM3TUbA2GwrlFkMBKGe4gFZOr/NxaLIxIltrB8B0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:4d:aa:59:27:f2:d6:7f:fc:2e:58:2b:dd:d1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Dec 25 01:01:20 2025 GMT Not After : Dec 26 01:01:20 2025 GMT Subject: CN=f2dbad2406424ae0d85808e77dbe58e886776717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:a2:23:87:fb:ec:15:bd:24:34:89:71:18: b3:6b:4e:60:6c:45:00:f4:0e:25:5a:db:57:82:26: 8d:07:9a:06:85:62:e4:b1:63:29:8c:bb:cc:d5:fc: c6:6b:48:48:e6:95:56:25:6a:7b:d3:6c:df:0e:98: 12:d1:4e:af:b2:17:98:42:19:4a:cb:46:e1:44:1e: 6a:0f:ff:4e:64:d9:e3:9d:89:68:bd:e0:2c:41:d1: 42:27:4b:a5:e3:cf:fd:7f:c6:97:6f:39:b0:a9:a4: 58:a1:05:b6:93:db:b0:5a:ab:65:24:b7:f4:ad:86: 19:0f:c2:09:ac:4f:34:61:1d:d7:66:df:57:17:ca: 8c:d0:a8:1f:8b:79:7a:aa:3a:fb:67:24:e8:b3:d9: 4a:f0:d1:5b:cc:50:d5:e3:36:be:50:b2:4b:61:a3: 50:21:09:0b:70:36:ce:6a:60:a3:3d:47:eb:1f:30: d2:29:b4:b0:92:36:99:d4:21:23:d5:8c:39:2f:41: 2e:98:2f:d0:60:89:96:57:09:09:83:29:97:25:bb: c1:ac:5c:e6:3e:b8:c2:ae:c3:ab:19:c7:8a:e0:e9: 6e:49:cb:e8:11:3f:07:1f:5c:36:95:ee:28:9b:07: fe:a7:33:6e:e4:6f:0e:c2:b4:6a:70:d3:32:ee:29: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DB:AD:24:06:42:4A:E0:D8:58:08:E7:7D:BE:58:E8:86:77:67:17 X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b2:3b:0d:e3:db:b2:ee:77:45:db:30:03:17:33:90:6e:29: 25:49:12:e4:73:df:0d:f5:72:68:03:32:fd:c8:b5:ae:ad:e9: 49:88:98:67:12:e6:ac:d6:5b:7f:79:62:d8:75:ca:1c:7a:b3: c4:9a:53:ca:b3:75:5a:ff:a9:62:a3:41:27:c5:f7:bd:a1:35: 2e:62:a6:85:70:09:0d:b1:22:5d:25:3c:4c:0c:c4:c5:99:4e: a0:eb:8d:36:07:a5:be:f1:f9:0f:56:da:74:ba:b6:89:83:af: 00:94:b1:f1:e0:5c:4b:9a:8a:e7:c0:4e:82:f3:35:67:37:46: b6:bd:e1:9d:e9:14:04:b1:5b:5e:c4:3e:d1:3f:8f:40:8e:2a: a7:57:ce:33:c8:cd:ae:2a:3a:14:ef:28:81:1e:8a:6e:4a:da: 0a:43:73:00:4e:13:9f:3d:5e:ff:9a:9e:ba:a2:b8:bc:17:d2: da:8f:5b:83:43:5a:72:eb:6c:0f:91:47:73:36:ef:30:ad:0c: e6:49:26:24:ef:f9:b6:3c:da:34:77:5e:99:68:77:04:62:50: 4d:9f:a9:f2:51:9d:6c:70:6a:8f:bc:69:94:fc:71:a8:bb:70: d8:82:36:eb:c2:3f:05:61:9c:6b:36:83:b0:69:88:2c:8b:0a: e6:41:ec:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBk2qWSfy1n/8Llgr3dGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjUxMjI1MDEwMTIwWhcNMjUxMjI2MDEwMTIwWjAzMTEwLwYDVQQD EyhmMmRiYWQyNDA2NDI0YWUwZDg1ODA4ZTc3ZGJlNThlODg2Nzc2NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48aiI4f77BW9JDSJcRiza05gbEUA 9A4lWttXgiaNB5oGhWLksWMpjLvM1fzGa0hI5pVWJWp702zfDpgS0U6vsheYQhlK y0bhRB5qD/9OZNnjnYloveAsQdFCJ0ul48/9f8aXbzmwqaRYoQW2k9uwWqtlJLf0 rYYZD8IJrE80YR3XZt9XF8qM0Kgfi3l6qjr7ZyTos9lK8NFbzFDV4za+ULJLYaNQ IQkLcDbOamCjPUfrHzDSKbSwkjaZ1CEj1Yw5L0EumC/QYImWVwkJgymXJbvBrFzm PrjCrsOrGceK4OluScvoET8HH1w2le4omwf+pzNu5G8OwrRqcNMy7ikNRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLbrSQGQkrg2FgI532+WOiGd2cXMB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7I7DePb su53RdswAxczkG4pJUkS5HPfDfVyaAMy/ci1rq3pSYiYZxLmrNZbf3li2HXKHHqz xJpTyrN1Wv+pYqNBJ8X3vaE1LmKmhXAJDbEiXSU8TAzExZlOoOuNNgelvvH5D1ba dLq2iYOvAJSx8eBcS5qK58BOgvM1ZzdGtr3hnekUBLFbXsQ+0T+PQI4qp1fOM8jN rio6FO8ogR6KbkraCkNzAE4Tnz1e/5qeuqK4vBfS2o9bg0NacutsD5FHczbvMK0M 5kkmJO/5tjzaNHdemWh3BGJQTZ+p8lGdbHBqj7xplPxxqLtw2II268I/BWGcazaD sGmILIsK5kHsOA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:18 2025 by rpki-client