This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json) Hash identifier: lMrvtz+SeJvIBH+kRCwiQSdoqGIOLP/7pdJi4TyTkfc= Subject key identifier: A0:A6:F5:47:D5:7D:3F:14:18:B6:19:1C:BC:A1:44:8D:D4:8A:EF:82 Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B38D88633A47859F97350A052AABCC2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:01:12 +0000 Manifest this update: Fri 19 Dec 2025 23:01:12 +0000 Manifest next update: Sat 20 Dec 2025 23:01:12 +0000 Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=) 2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=) 3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=) 4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=) 5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=) 6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 5OgNrhkEiY+MzWODKXV9BmKlEZvSVShnMY1JwhzrAt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:86:33:a4:78:59:f9:73:50:a0:52:aa:bc:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Dec 19 23:01:12 2025 GMT Not After : Dec 20 23:01:12 2025 GMT Subject: CN=a0a6f547d57d3f1418b6191cbca1448dd48aef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:76:08:8a:18:ad:95:b1:08:cd:90:4b:17: 0f:92:c5:8f:50:50:8f:53:b2:bd:be:98:cb:e7:f4: 1c:5e:0c:31:e0:c5:21:ee:0f:4d:7a:7a:fd:bd:a9: 91:70:a2:2c:31:48:b4:e2:2b:5b:4e:74:3f:42:dc: 26:72:4a:93:81:af:01:41:f3:0b:93:ff:4f:b2:ae: ea:5e:40:3d:6d:68:92:cb:35:14:32:73:80:19:fb: 74:14:50:6d:45:5b:7d:10:96:d7:b1:ca:5e:ae:65: 7a:7e:38:ba:b8:c2:2d:97:ab:1b:6c:a3:af:98:7e: 9c:bc:18:1e:ae:eb:94:70:00:f3:74:ce:e7:2b:39: 52:e4:42:6a:13:ff:60:d5:21:82:3d:18:48:d0:90: 41:34:d6:e0:db:c4:31:11:0a:00:e3:58:45:75:f6: cd:02:63:db:a1:3f:3c:84:7c:d4:24:e9:63:83:53: 06:0e:8d:d7:a2:56:00:08:96:ed:73:f1:cc:cb:6e: 6c:dc:51:48:d8:ba:fb:30:a5:89:a0:fa:18:5b:7b: b8:fa:14:15:3d:7d:49:12:3d:b8:2e:85:d6:92:81: ea:b9:4b:1c:d0:98:75:35:a0:bb:2b:a1:2c:a9:12: d7:98:bb:ba:3d:31:3f:d7:cd:cf:ef:44:e6:bf:c1: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:F5:47:D5:7D:3F:14:18:B6:19:1C:BC:A1:44:8D:D4:8A:EF:82 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:10:a5:73:3a:c4:50:76:e7:85:77:8d:ce:69:3c:61:df:07: 12:45:f2:80:b7:67:f1:cc:8b:70:c5:17:0f:fa:2e:ca:7f:e6: 64:9b:11:2a:88:ed:4c:d2:7b:7c:b7:fd:d0:4f:cd:b9:9c:4a: 56:67:5f:84:d4:d1:1a:b2:49:f2:4c:ad:d9:45:41:ab:bc:5d: f0:11:fe:b4:f6:48:49:6e:f1:3d:2c:fc:14:d6:7a:b3:c1:87: 3b:fd:73:ba:a8:eb:7b:d0:71:9c:0d:7a:72:55:c9:39:b7:65: 8d:6c:a4:32:c5:57:65:a8:4e:37:fb:0b:78:7b:fe:4f:7b:a3: fb:da:9b:5b:e9:94:99:f9:f8:10:b3:94:58:2a:d3:a1:35:a9: 38:1d:ec:1e:b9:11:90:d6:93:49:14:62:3f:97:ea:80:f4:4a: 88:d5:33:4e:8a:24:49:ca:86:d1:99:66:77:a1:d4:62:ee:bd: b7:e7:c5:ea:c9:cf:e7:79:98:31:8a:92:42:64:84:b4:c1:a6: b0:a6:ba:c7:ea:d7:f2:62:af:b5:c5:5b:03:9a:29:ef:cc:b2: f3:14:6a:59:81:43:0b:ec:8e:a1:38:78:2b:de:32:ae:b5:5f: 89:de:8e:8e:59:66:f2:e7:e1:42:b9:67:96:f3:ef:0e:7c:03: e2:ae:88:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42IYzpHhZ+XNQoFKqvMK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjUxMjE5MjMwMTEyWhcNMjUxMjIwMjMwMTEyWjAzMTEwLwYDVQQD EyhhMGE2ZjU0N2Q1N2QzZjE0MThiNjE5MWNiY2ExNDQ4ZGQ0OGFlZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd52CIoYrZWxCM2QSxcPksWPUFCP U7K9vpjL5/QcXgwx4MUh7g9Nenr9vamRcKIsMUi04itbTnQ/QtwmckqTga8BQfML k/9Psq7qXkA9bWiSyzUUMnOAGft0FFBtRVt9EJbXscpermV6fji6uMItl6sbbKOv mH6cvBgeruuUcADzdM7nKzlS5EJqE/9g1SGCPRhI0JBBNNbg28QxEQoA41hFdfbN AmPboT88hHzUJOljg1MGDo3XolYACJbtc/HMy25s3FFI2Lr7MKWJoPoYW3u4+hQV PX1JEj24LoXWkoHquUsc0Jh1NaC7K6EsqRLXmLu6PTE/183P70Tmv8H3IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCm9UfVfT8UGLYZHLyhRI3Uiu+CMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRClczrE UHbnhXeNzmk8Yd8HEkXygLdn8cyLcMUXD/ouyn/mZJsRKojtTNJ7fLf90E/NuZxK VmdfhNTRGrJJ8kyt2UVBq7xd8BH+tPZISW7xPSz8FNZ6s8GHO/1zuqjre9BxnA16 clXJObdljWykMsVXZahON/sLeHv+T3uj+9qbW+mUmfn4ELOUWCrToTWpOB3sHrkR kNaTSRRiP5fqgPRKiNUzTookScqG0Zlmd6HUYu69t+fF6snP53mYMYqSQmSEtMGm sKa6x+rX8mKvtcVbA5op78yy8xRqWYFDC+yOoTh4K94yrrVfid6Ojllm8ufhQrln lvPvDnwD4q6I8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:03 2025 by rpki-client