This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json) Hash identifier: dWODgKuomFWQq9tL+EQNqi78Lq8Ve4cz4kdv+7+blCo= Subject key identifier: 0B:BC:16:41:AB:DF:A2:48:60:4F:B4:56:88:B7:9C:F1:45:21:56:71 Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b Certificate serial: 019B2BC20C6D36E46C844905BB8075F5533B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft Manifest number: 0235 Signing time: Wed 17 Dec 2025 10:01:35 +0000 Manifest this update: Wed 17 Dec 2025 10:01:35 +0000 Manifest next update: Thu 18 Dec 2025 10:01:35 +0000 Files and hashes: 1: qthh4gNq1SL8vSN5_lWJGt2pcwI.roa (hash: B+0i/tQ7fiCSFHOJ8ekqNZr6VbEaL85Z1TQ1N6rfs1I=) 2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: FEwjazpwk+unDAjM6k40UNMTgwbcJxCgf8p6Ikf3IoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:0c:6d:36:e4:6c:84:49:05:bb:80:75:f5:53:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b Validity Not Before: Dec 17 10:01:35 2025 GMT Not After : Dec 18 10:01:35 2025 GMT Subject: CN=0bbc1641abdfa248604fb45688b79cf145215671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:9c:be:fc:0a:e7:87:a1:a9:14:5c:2b:b2: b7:1c:c5:61:63:4a:2f:10:58:b2:c3:aa:1e:a3:0d: 3a:27:66:62:fe:20:ba:77:bf:e9:d2:88:9c:09:ef: 5e:64:59:35:16:a1:5b:1c:07:ca:fe:f6:f1:f5:9f: 39:32:84:cb:43:86:e1:4f:9a:1e:a6:ae:cb:4a:99: 1d:f0:18:f7:57:c1:7f:c1:c1:49:52:c9:54:7c:3f: 3a:36:65:0f:42:46:13:35:ed:2a:32:e6:be:45:c8: 1e:8f:09:99:2a:71:d9:e5:a3:1e:d1:19:62:07:2c: db:fb:87:fc:2b:0a:16:30:8f:a3:93:9b:c6:47:f7: fb:b2:83:e3:86:17:70:c0:34:de:30:86:e0:41:c0: 02:4c:f3:8f:f8:8f:34:10:26:d6:b2:be:54:d2:ba: 4c:ca:ec:88:08:cb:ca:7b:88:04:c0:90:b4:b4:39: 8b:2c:45:47:1a:67:4c:f5:6c:02:7e:f0:49:be:e6: 1f:45:f6:5a:6c:02:2b:a2:c7:83:07:1f:62:c8:c3: ca:56:3a:2b:52:51:0b:83:fe:53:1f:e0:60:ab:80: 71:9c:87:15:25:ef:f8:0f:28:1e:e5:31:dd:64:fb: fe:5f:01:49:5f:02:5c:e0:b7:90:52:fa:71:76:01: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BC:16:41:AB:DF:A2:48:60:4F:B4:56:88:B7:9C:F1:45:21:56:71 X509v3 Authority Key Identifier: keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:51:17:a5:23:1e:b1:45:5f:38:f4:3b:65:31:f2:ca:2d:f6: 5d:39:82:88:60:29:66:ab:19:af:3b:e4:87:21:98:91:84:05: fd:16:a4:58:86:f3:37:f6:d3:54:1d:7b:09:a9:91:90:8a:e6: fe:5f:74:d5:bf:09:1b:36:7e:6d:65:99:23:13:4e:8a:3e:80: 66:34:6e:5b:49:d6:c5:b7:ee:de:45:96:52:d5:cd:8b:35:24: fb:c3:c4:1f:a2:2b:a8:ce:f7:0e:2f:c1:51:01:79:83:5a:0b: 88:53:8b:4b:dc:b0:e3:b5:81:f8:20:ba:fa:f3:1d:44:ec:cf: 19:0b:34:4f:d6:66:31:3e:fb:16:e2:30:86:75:de:db:c1:a0: 8b:a5:d7:64:7f:e6:57:7c:af:62:a0:3e:32:ba:ed:76:2c:cb: df:b2:3d:3f:7a:f2:ed:d5:ca:cf:9c:40:d1:c6:b6:56:fb:7c: c9:76:ac:d4:30:ed:da:03:20:bf:e7:b9:a2:c3:ed:44:24:ff: 3b:1a:c2:85:71:7d:42:e4:7a:7e:ee:d0:b6:3e:c9:43:df:f9: b6:95:28:15:7a:9e:45:9e:0b:94:f6:67:a4:df:14:74:31:2a: 9d:48:77:65:72:8e:fc:34:76:db:52:d2:22:ce:b1:e2:1c:31: e4:a4:fe:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwgxtNuRshEkFu4B19VM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzc1MmE3MTliNzQwYTBlMDI0NGRkMjljNjUzMmY3OTE1 MTY0NmIwHhcNMjUxMjE3MTAwMTM1WhcNMjUxMjE4MTAwMTM1WjAzMTEwLwYDVQQD EygwYmJjMTY0MWFiZGZhMjQ4NjA0ZmI0NTY4OGI3OWNmMTQ1MjE1NjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGecvvwK54ehqRRcK7K3HMVhY0ov EFiyw6oeow06J2Zi/iC6d7/p0oicCe9eZFk1FqFbHAfK/vbx9Z85MoTLQ4bhT5oe pq7LSpkd8Bj3V8F/wcFJUslUfD86NmUPQkYTNe0qMua+RcgejwmZKnHZ5aMe0Rli Byzb+4f8KwoWMI+jk5vGR/f7soPjhhdwwDTeMIbgQcACTPOP+I80ECbWsr5U0rpM yuyICMvKe4gEwJC0tDmLLEVHGmdM9WwCfvBJvuYfRfZabAIroseDBx9iyMPKVjor UlELg/5TH+Bgq4BxnIcVJe/4Dyge5THdZPv+XwFJXwJc4LeQUvpxdgGsuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu8FkGr36JIYE+0Voi3nPFFIVZxMB8GA1UdIwQY MBaAFLt3UqcZt0Cg4CRN0pxlMveRUWRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYt MzM1NGFkYmExMWIxLzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYtMzM1NGFkYmExMWIx LzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1EXpSMe sUVfOPQ7ZTHyyi32XTmCiGApZqsZrzvkhyGYkYQF/RakWIbzN/bTVB17CamRkIrm /l901b8JGzZ+bWWZIxNOij6AZjRuW0nWxbfu3kWWUtXNizUk+8PEH6IrqM73Di/B UQF5g1oLiFOLS9yw47WB+CC6+vMdROzPGQs0T9ZmMT77FuIwhnXe28Ggi6XXZH/m V3yvYqA+MrrtdizL37I9P3ry7dXKz5xA0ca2Vvt8yXas1DDt2gMgv+e5osPtRCT/ OxrChXF9QuR6fu7Qtj7JQ9/5tpUoFXqeRZ4LlPZnpN8UdDEqnUh3ZXKO/DR221LS Is6x4hwx5KT+BA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:43 2025 by rpki-client