This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json) Hash identifier: ABpwSlC7Cj1iB2UnS+bfWx55I03S523GUBmidoVbQeU= Subject key identifier: 39:CE:AD:88:27:19:4B:48:75:76:19:80:D8:C8:3C:22:B5:95:2B:BC Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Certificate serial: 019B39B3BFEB8E02D23CCDC2D00F7EEE3328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft Manifest number: 140D Signing time: Sat 20 Dec 2025 03:00:39 +0000 Manifest this update: Sat 20 Dec 2025 03:00:39 +0000 Manifest next update: Sun 21 Dec 2025 03:00:39 +0000 Files and hashes: 1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=) 2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=) 3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=) 4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: sqB3Dq3xExn4W6/niDUziA8uZuSFp7tnGIZoi1O4pFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:bf:eb:8e:02:d2:3c:cd:c2:d0:0f:7e:ee:33:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Validity Not Before: Dec 20 03:00:39 2025 GMT Not After : Dec 21 03:00:39 2025 GMT Subject: CN=39cead8827194b4875761980d8c83c22b5952bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:db:38:e6:75:1a:31:38:bd:d9:b2:b1:fe: 22:94:81:ca:ca:00:d6:b8:06:25:83:0d:7b:70:c3: ac:65:4e:ca:d6:23:bc:97:00:a1:2a:af:c3:32:63: f8:cc:d3:12:b0:05:31:f9:4b:e7:bd:b9:c2:fa:e3: 3f:3b:ea:01:3f:f4:ba:eb:43:62:c4:d6:6f:21:75: 31:9a:be:39:06:67:83:4d:c5:dc:9f:ea:0a:62:b1: 6c:f0:a8:95:c8:ac:8f:91:a9:35:8a:10:b2:6c:1e: 88:3f:8b:78:55:99:20:1b:ef:98:32:fe:29:d9:06: 1e:ff:a8:8c:ee:de:f7:9e:47:1d:a5:31:49:32:39: 01:d9:ff:15:cb:33:20:ec:c0:15:e3:c4:43:dd:58: c6:7c:57:55:64:fc:80:d6:9b:0e:e7:b3:87:fa:b2: 39:a8:f2:db:11:dc:23:e8:ce:60:e3:14:77:46:97: aa:f4:1a:18:83:f6:9d:2c:c8:5e:c1:6f:ac:1b:a3: 11:26:25:41:17:bd:b8:b1:fd:fb:73:03:ae:f0:d1: 23:a3:e8:dc:2d:48:77:b9:33:df:e3:62:08:91:71: fb:ee:87:66:14:2f:94:02:b0:c9:b8:70:70:18:57: 8f:e9:de:47:f7:7c:ac:06:7b:ef:39:0f:4a:a8:5f: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:AD:88:27:19:4B:48:75:76:19:80:D8:C8:3C:22:B5:95:2B:BC X509v3 Authority Key Identifier: keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:44:de:38:8e:b8:44:eb:65:16:da:5f:39:6b:48:9b:97:ad: 29:80:f6:9f:31:42:9f:80:c3:60:80:99:44:33:dd:ac:bf:70: d4:8c:82:31:8a:69:16:2a:e4:62:5a:95:4a:0f:c0:6f:78:ee: 7b:06:47:1c:89:1d:d3:1f:f9:cf:c7:89:e0:b4:86:bb:21:a6: c9:af:bd:e8:f8:eb:28:0c:1b:ee:f2:2c:fc:d5:43:7c:c4:a5: d4:ee:51:e9:74:8e:22:d9:4f:fe:c1:a5:dd:84:5c:5b:db:30: 1f:7b:b5:80:ff:3e:2f:af:db:53:47:a9:5d:e2:0c:39:a5:2a: ab:8f:7e:1c:23:6b:bd:6d:d7:33:89:96:50:62:7e:be:34:c6: 34:bf:ff:7e:14:8c:4b:c2:0d:d6:fe:3a:c2:82:3e:a5:3c:00: f0:04:71:eb:db:51:b4:1a:7d:3e:3f:cf:e5:80:fc:05:8a:7f: db:18:bf:cf:44:f8:22:28:f8:d6:5f:03:ac:59:0e:85:64:bd: 01:ef:be:02:ee:0e:08:7e:85:50:b2:26:a9:69:a8:22:5a:a8: 71:97:59:90:48:1c:10:a2:55:9e:75:be:96:d3:b4:f1:a2:82: 76:68:3e:81:21:16:ab:4c:9c:48:3c:b9:bb:ba:85:a2:e0:6d: 9c:10:e2:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7/rjgLSPM3C0A9+7jMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi NTU2MTgwHhcNMjUxMjIwMDMwMDM5WhcNMjUxMjIxMDMwMDM5WjAzMTEwLwYDVQQD EygzOWNlYWQ4ODI3MTk0YjQ4NzU3NjE5ODBkOGM4M2MyMmI1OTUyYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTHbOOZ1GjE4vdmysf4ilIHKygDW uAYlgw17cMOsZU7K1iO8lwChKq/DMmP4zNMSsAUx+UvnvbnC+uM/O+oBP/S660Ni xNZvIXUxmr45BmeDTcXcn+oKYrFs8KiVyKyPkak1ihCybB6IP4t4VZkgG++YMv4p 2QYe/6iM7t73nkcdpTFJMjkB2f8VyzMg7MAV48RD3VjGfFdVZPyA1psO57OH+rI5 qPLbEdwj6M5g4xR3Rpeq9BoYg/adLMhewW+sG6MRJiVBF724sf37cwOu8NEjo+jc LUh3uTPf42IIkXH77odmFC+UArDJuHBwGFeP6d5H93ysBnvvOQ9KqF9G7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnOrYgnGUtIdXYZgNjIPCK1lSu8MB8GA1UdIwQY MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt NzQ5N2U1YThmMTFiLzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFETeOI64 ROtlFtpfOWtIm5etKYD2nzFCn4DDYICZRDPdrL9w1IyCMYppFirkYlqVSg/Ab3ju ewZHHIkd0x/5z8eJ4LSGuyGmya+96PjrKAwb7vIs/NVDfMSl1O5R6XSOItlP/sGl 3YRcW9swH3u1gP8+L6/bU0epXeIMOaUqq49+HCNrvW3XM4mWUGJ+vjTGNL//fhSM S8IN1v46woI+pTwA8ARx69tRtBp9Pj/P5YD8BYp/2xi/z0T4Iij41l8DrFkOhWS9 Ae++Au4OCH6FULImqWmoIlqocZdZkEgcEKJVnnW+ltO08aKCdmg+gSEWq0ycSDy5 u7qFouBtnBDimQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:11:06 2025 by rpki-client