This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json) Hash identifier: lLcff4ShMJvdmCXch6BZYrBXZCwKbcloYNEkoOr+ek4= Subject key identifier: 70:C6:98:EB:5D:1F:2E:32:14:7A:15:38:80:84:51:92:60:0D:8A:B8 Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Certificate serial: 019B4F9712984F9E0E320CAA934C50DF4F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft Manifest number: 0522 Signing time: Wed 24 Dec 2025 09:00:59 +0000 Manifest this update: Wed 24 Dec 2025 09:00:59 +0000 Manifest next update: Thu 25 Dec 2025 09:00:59 +0000 Files and hashes: 1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=) 2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=) 3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=) 4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: f7Zku7MaoqcDjMp5Oj700kaJXCyCbSINi3Pjafjp0t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:12:98:4f:9e:0e:32:0c:aa:93:4c:50:df:4f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249 Validity Not Before: Dec 24 09:00:59 2025 GMT Not After : Dec 25 09:00:59 2025 GMT Subject: CN=70c698eb5d1f2e32147a153880845192600d8ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:f6:a2:1c:29:96:11:10:19:a1:4a:55:e4: 20:1c:ed:0a:89:a0:5f:78:2a:cd:3a:68:f5:53:6f: 4b:82:17:6d:3d:01:61:62:67:10:be:bf:ea:d5:e8: c5:91:f7:80:69:c1:11:c8:24:4e:54:6b:25:9c:e5: b4:fc:9f:1b:ec:c2:17:06:8d:ae:43:75:2f:0a:cd: 25:55:2d:dc:83:8a:fa:63:24:8f:30:58:ed:e6:f4: f5:6c:f5:2d:82:0f:fd:32:0b:df:32:98:9c:2a:8b: 03:87:f5:bc:a7:34:bf:8b:43:a2:25:c5:55:d5:36: 34:27:7c:67:44:77:71:e6:df:df:f1:2a:2f:d1:fb: c7:e2:9c:e5:c0:2b:c8:3a:a6:30:46:04:5f:3f:8e: a1:f2:63:dd:bb:d5:4f:aa:d6:e3:d7:9b:81:45:e1: 8d:17:4c:7a:0f:4f:4a:3f:63:b4:c6:41:5f:df:41: 2c:33:96:ec:3c:a6:a7:dd:82:5e:95:b6:d7:ff:11: da:72:9e:be:dd:78:74:f1:b2:f0:db:5a:9a:bb:17: 19:f3:0f:c1:80:54:11:c3:2e:b9:c1:da:80:b8:7e: 28:9b:1a:37:9e:28:ad:5a:fb:f5:54:1c:da:c5:a2: 91:02:5c:dc:8e:a7:b0:20:5f:73:1b:80:7d:d8:c8: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:98:EB:5D:1F:2E:32:14:7A:15:38:80:84:51:92:60:0D:8A:B8 X509v3 Authority Key Identifier: keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:78:05:d5:ad:41:61:62:54:e8:56:63:8f:28:82:f6:de:c2: 08:65:80:7b:4b:a2:55:63:bf:13:27:72:ee:d8:b9:ba:30:8a: 33:6d:80:9c:ea:34:35:f0:f3:42:70:16:d8:62:f7:84:27:57: 1a:eb:09:21:48:e0:e1:8d:84:a3:2a:1f:cc:3b:db:b7:d7:62: 10:ad:9e:dc:35:c0:79:6c:2b:a9:60:ca:45:1a:cd:c1:7b:da: cd:c3:02:b6:a5:e3:31:34:d8:3e:6a:28:93:f3:5b:50:34:9b: a9:90:43:38:a0:d5:ef:53:bc:4c:e3:09:bf:f6:a8:8b:9f:8d: 52:ee:88:91:df:e9:4e:f4:70:8c:73:88:d4:96:bd:6f:4e:0a: cb:cb:97:a9:be:84:04:ab:22:27:f5:81:ec:dc:98:ef:ce:ea: 89:98:82:9c:b6:06:bd:dc:b8:19:bd:82:d8:83:ad:49:50:5b: 9b:18:70:12:ba:bf:17:c7:44:e2:2d:55:16:7c:8e:4b:8a:c4: 75:00:50:c6:5a:3d:7e:ba:c3:55:ac:69:32:9a:7e:23:8a:3a: 2c:77:d4:16:a7:f8:70:39:f5:11:ab:3a:3f:22:a1:6f:13:ea: 82:57:4a:c0:40:82:ca:76:04:fd:c0:f1:d3:4b:7e:ec:24:b1: cc:0d:5b:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlxKYT54OMgyqk0xQ308SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx ODMyNDkwHhcNMjUxMjI0MDkwMDU5WhcNMjUxMjI1MDkwMDU5WjAzMTEwLwYDVQQD Eyg3MGM2OThlYjVkMWYyZTMyMTQ3YTE1Mzg4MDg0NTE5MjYwMGQ4YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0L2ohwplhEQGaFKVeQgHO0KiaBf eCrNOmj1U29LghdtPQFhYmcQvr/q1ejFkfeAacERyCROVGslnOW0/J8b7MIXBo2u Q3UvCs0lVS3cg4r6YySPMFjt5vT1bPUtgg/9MgvfMpicKosDh/W8pzS/i0OiJcVV 1TY0J3xnRHdx5t/f8Sov0fvH4pzlwCvIOqYwRgRfP46h8mPdu9VPqtbj15uBReGN F0x6D09KP2O0xkFf30EsM5bsPKan3YJelbbX/xHacp6+3Xh08bLw21qauxcZ8w/B gFQRwy65wdqAuH4omxo3niitWvv1VBzaxaKRAlzcjqewIF9zG4B92MjgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDGmOtdHy4yFHoVOICEUZJgDYq4MB8GA1UdIwQY MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt ODdhNjMzM2Q2ZTY0LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0 LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHgF1a1B YWJU6FZjjyiC9t7CCGWAe0uiVWO/Eydy7ti5ujCKM22AnOo0NfDzQnAW2GL3hCdX GusJIUjg4Y2EoyofzDvbt9diEK2e3DXAeWwrqWDKRRrNwXvazcMCtqXjMTTYPmoo k/NbUDSbqZBDOKDV71O8TOMJv/aoi5+NUu6Ikd/pTvRwjHOI1Ja9b04Ky8uXqb6E BKsiJ/WB7NyY787qiZiCnLYGvdy4Gb2C2IOtSVBbmxhwErq/F8dE4i1VFnyOS4rE dQBQxlo9frrDVaxpMpp+I4o6LHfUFqf4cDn1Eas6PyKhbxPqgldKwECCynYE/cDx 00t+7CSxzA1blQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:46 2025 by rpki-client