This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json) Hash identifier: MCLHFZoQI19ldd62UWElA8hSIScH8BglonACQklWL+s= Subject key identifier: 98:4F:63:2B:6C:AE:00:8E:13:5A:E7:45:B4:11:45:15:A1:64:6B:31 Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Certificate serial: 019B3720791A557AFF86ACCE5C38F7AEFCF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft Manifest number: 094D Signing time: Fri 19 Dec 2025 15:00:33 +0000 Manifest this update: Fri 19 Dec 2025 15:00:33 +0000 Manifest next update: Sat 20 Dec 2025 15:00:33 +0000 Files and hashes: 1: 762tDH7yyhvirdbTfkRz468_FVk.roa (hash: 5/pRGsunkNhj6ROqIRNNJ/NWZj0o5kv5UhFJhw82eOw=) 2: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=) 3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: h4nHfG7l7q5vHFmDepH8EXmWhIBOLmSXN18lvr4y6RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:79:1a:55:7a:ff:86:ac:ce:5c:38:f7:ae:fc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Validity Not Before: Dec 19 15:00:33 2025 GMT Not After : Dec 20 15:00:33 2025 GMT Subject: CN=984f632b6cae008e135ae745b4114515a1646b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:3d:a2:2a:13:12:5b:e8:6f:fe:af:df:0c: 11:e2:72:c6:0a:79:5e:39:07:92:aa:d4:30:c1:5e: 6d:de:f0:3d:a9:7a:63:e7:29:eb:e7:c9:8a:a3:f8: bd:b0:02:a2:cf:c6:77:89:32:10:43:85:31:14:68: e1:cf:cd:75:3a:d4:20:92:35:1c:45:18:59:19:c8: 45:12:76:aa:ef:60:11:fc:4c:fe:94:0b:81:6c:b4: 16:ed:5a:8f:98:ae:2e:24:e3:f1:5b:44:26:58:6f: 41:df:6b:46:c7:c0:47:89:49:21:d7:e9:4e:5c:36: 89:c2:9a:da:81:49:20:5b:bb:51:df:a7:6b:ff:06: b8:6b:1a:ad:90:17:38:29:d9:3a:7a:58:94:0d:38: 33:ae:7e:ac:4b:9b:a4:12:c2:53:39:a0:cc:b1:8b: 02:15:5b:29:35:33:d8:4c:55:d8:3d:47:eb:3b:e9: d8:a2:54:06:3c:2d:8e:98:35:be:86:7f:a3:5a:87: ed:03:0d:fd:99:b0:d5:db:af:08:05:5d:74:0a:5a: 7f:38:87:48:69:c5:ef:f4:c7:f9:28:84:2e:8e:21: 8e:6e:b8:bd:65:a1:cb:24:3b:65:af:26:25:42:11: 05:64:d3:cb:ea:c4:02:f9:a1:5e:68:2e:43:88:29: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:63:2B:6C:AE:00:8E:13:5A:E7:45:B4:11:45:15:A1:64:6B:31 X509v3 Authority Key Identifier: keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:79:43:fe:fb:d0:71:6b:86:01:51:d1:52:d9:f5:a1:7a:77: ec:25:16:8f:32:bb:98:51:a2:3d:07:39:d4:79:ff:b1:5e:cd: 60:a4:c1:c3:6a:1e:dd:0c:7a:44:fb:39:c0:19:d7:7f:57:5c: 5d:46:84:e8:50:07:4b:af:14:94:c5:33:00:ee:18:29:16:b7: c7:e4:9e:ae:f1:fa:41:0c:1b:78:6a:9d:c2:7a:39:6a:2a:f7: 63:cd:ba:b7:a4:c3:4c:e4:37:6c:07:af:43:75:d6:55:78:bf: 5d:53:d7:08:78:ec:82:5c:a9:00:68:de:3e:6a:19:bd:85:2d: f9:71:7a:5d:99:cd:5c:6e:c9:1a:a1:83:61:17:cf:88:72:88: 20:2d:26:e9:7d:44:c2:08:e5:c5:f9:7d:22:30:2a:90:72:da: bf:9a:94:61:78:f3:c1:49:94:8a:51:b5:0b:3d:cf:23:6b:ed: b9:ce:07:d4:be:29:67:9f:e5:79:09:96:71:03:ed:8e:92:31: d9:30:9e:6a:34:1d:26:10:d7:3c:4e:95:2e:22:fc:fa:2f:9c: 79:22:c4:33:37:89:53:98:7d:5b:00:f3:82:6e:03:eb:b1:48: a3:47:91:b5:ca:e9:76:82:a6:27:7f:4e:ac:66:9a:94:25:51: 20:f8:62:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IHkaVXr/hqzOXDj3rvzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw MDI4NjMwHhcNMjUxMjE5MTUwMDMzWhcNMjUxMjIwMTUwMDMzWjAzMTEwLwYDVQQD Eyg5ODRmNjMyYjZjYWUwMDhlMTM1YWU3NDViNDExNDUxNWExNjQ2YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEY9oioTElvob/6v3wwR4nLGCnle OQeSqtQwwV5t3vA9qXpj5ynr58mKo/i9sAKiz8Z3iTIQQ4UxFGjhz811OtQgkjUc RRhZGchFEnaq72AR/Ez+lAuBbLQW7VqPmK4uJOPxW0QmWG9B32tGx8BHiUkh1+lO XDaJwpragUkgW7tR36dr/wa4axqtkBc4Kdk6eliUDTgzrn6sS5ukEsJTOaDMsYsC FVspNTPYTFXYPUfrO+nYolQGPC2OmDW+hn+jWoftAw39mbDV268IBV10Clp/OIdI acXv9Mf5KIQujiGObri9ZaHLJDtlryYlQhEFZNPL6sQC+aFeaC5DiCl0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhPYytsrgCOE1rnRbQRRRWhZGsxMB8GA1UdIwQY MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4 LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3lD/vvQ cWuGAVHRUtn1oXp37CUWjzK7mFGiPQc51Hn/sV7NYKTBw2oe3Qx6RPs5wBnXf1dc XUaE6FAHS68UlMUzAO4YKRa3x+ServH6QQwbeGqdwno5air3Y826t6TDTOQ3bAev Q3XWVXi/XVPXCHjsglypAGjePmoZvYUt+XF6XZnNXG7JGqGDYRfPiHKIIC0m6X1E wgjlxfl9IjAqkHLav5qUYXjzwUmUilG1Cz3PI2vtuc4H1L4pZ5/leQmWcQPtjpIx 2TCeajQdJhDXPE6VLiL8+i+ceSLEMzeJU5h9WwDzgm4D67FIo0eRtcrpdoKmJ39O rGaalCVRIPhivA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:51:47 2025 by rpki-client