This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json) Hash identifier: Mkzu/Fu5FjP9heAJvafQB7cCwh5yrwgCR9+SNrnOP8I= Subject key identifier: 8F:F4:91:89:10:CD:F5:AD:7B:A4:09:A2:96:47:58:7D:25:6D:EC:02 Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05 Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05 Certificate serial: 019B3C108919E02C4F4AB6408D07C103F233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft Manifest number: 09DA Signing time: Sat 20 Dec 2025 14:01:15 +0000 Manifest this update: Sat 20 Dec 2025 14:01:15 +0000 Manifest next update: Sun 21 Dec 2025 14:01:15 +0000 Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=) 2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: 3SKMAXogPKRPQn0tYY3oVV8xnx0RBR0AVQMuKoi4kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:89:19:e0:2c:4f:4a:b6:40:8d:07:c1:03:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05 Validity Not Before: Dec 20 14:01:15 2025 GMT Not After : Dec 21 14:01:15 2025 GMT Subject: CN=8ff4918910cdf5ad7ba409a29647587d256dec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:43:17:f8:73:36:1e:ac:a4:42:03:58:39: ca:4a:bf:ab:47:52:e5:53:ee:0a:6d:dc:28:83:c0: d7:ef:03:a8:c6:e4:fe:b4:8d:02:6f:15:42:30:f9: 07:70:64:92:2b:1b:a7:90:ac:27:9b:d3:e8:d2:1d: c3:5b:c5:7b:5f:fc:8e:cc:22:85:91:67:8d:05:3e: e7:ce:12:11:46:83:e6:e5:2c:6b:b4:53:5f:7f:39: 42:c9:56:8c:02:2d:c4:d2:46:81:b3:7b:88:a3:c0: 1a:aa:0a:e2:8c:bb:8f:18:0d:ac:59:c2:74:2a:77: d2:b7:02:68:6e:24:d0:19:6b:ff:03:0f:bf:ca:46: e2:e3:f9:b9:59:dd:7c:ff:55:2c:e0:98:0d:bb:47: 43:57:64:48:ee:5a:e0:37:67:4c:1b:a3:06:c0:71: 7b:93:03:cd:47:b6:29:5d:e9:b2:f5:c8:ef:fe:4b: db:27:53:48:be:d5:ac:da:b0:2d:eb:dc:31:02:26: 27:cf:19:a4:f8:c5:fa:fb:93:6f:5a:43:f8:ca:4f: 73:ea:7a:d2:56:0c:5e:b8:da:ca:5e:e8:f2:00:d7: ea:20:2d:7c:9b:f1:95:96:74:d6:79:51:34:f7:1d: aa:76:45:7a:86:0b:5f:25:39:4d:00:e9:d3:d2:3c: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:91:89:10:CD:F5:AD:7B:A4:09:A2:96:47:58:7D:25:6D:EC:02 X509v3 Authority Key Identifier: keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:02:32:9f:0d:b1:e4:40:64:fe:d3:53:e1:9e:68:ec:ff:c7: 33:52:ff:62:11:7e:c8:a6:5b:00:a2:81:cc:5b:fd:ef:9c:2d: ad:1e:32:ec:dc:b6:4d:ea:ec:26:b2:aa:99:d8:32:2b:28:a0: 37:a6:8e:6c:d5:39:9f:c6:79:19:a7:ff:ab:61:23:38:c7:cd: f6:3b:40:bf:6e:ad:40:3c:85:9d:7a:e8:d7:35:19:fe:fd:16: fe:20:b6:fc:a2:5a:29:61:81:68:58:77:8b:e1:d7:36:4f:9f: c8:8e:6f:90:44:b6:65:ab:69:44:98:67:b0:02:46:b8:f9:af: c0:99:fa:f2:08:95:61:a2:eb:ad:24:ac:30:cb:32:db:16:aa: 00:be:8f:40:82:1a:4d:5a:7e:3e:ee:af:d7:1f:d4:9b:57:14: b8:66:84:a5:5e:fb:5e:3f:ef:1a:07:f7:c2:31:7d:5c:20:3f: eb:8c:a6:32:1b:1b:7f:e2:8f:65:80:9a:6c:73:c6:ce:53:59: fd:6a:12:6e:aa:d3:95:2b:b4:9b:51:0a:06:da:08:22:65:31: 57:9b:3f:5d:47:6f:55:22:92:cb:c2:94:fc:3a:b2:49:92:46: 7d:72:e7:b2:71:9c:a0:2e:fe:fb:18:11:f5:10:b1:23:a1:42: 63:d7:25:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIkZ4CxPSrZAjQfBA/IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk ZjFiMDUwHhcNMjUxMjIwMTQwMTE1WhcNMjUxMjIxMTQwMTE1WjAzMTEwLwYDVQQD Eyg4ZmY0OTE4OTEwY2RmNWFkN2JhNDA5YTI5NjQ3NTg3ZDI1NmRlYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYtDF/hzNh6spEIDWDnKSr+rR1Ll U+4Kbdwog8DX7wOoxuT+tI0CbxVCMPkHcGSSKxunkKwnm9Po0h3DW8V7X/yOzCKF kWeNBT7nzhIRRoPm5SxrtFNffzlCyVaMAi3E0kaBs3uIo8AaqgrijLuPGA2sWcJ0 KnfStwJobiTQGWv/Aw+/ykbi4/m5Wd18/1Us4JgNu0dDV2RI7lrgN2dMG6MGwHF7 kwPNR7YpXemy9cjv/kvbJ1NIvtWs2rAt69wxAiYnzxmk+MX6+5NvWkP4yk9z6nrS VgxeuNrKXujyANfqIC18m/GVlnTWeVE09x2qdkV6hgtfJTlNAOnT0jzOlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/0kYkQzfWte6QJopZHWH0lbewCMB8GA1UdIwQY MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0 LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwIynw2x 5EBk/tNT4Z5o7P/HM1L/YhF+yKZbAKKBzFv975wtrR4y7Ny2TersJrKqmdgyKyig N6aObNU5n8Z5Gaf/q2EjOMfN9jtAv26tQDyFnXro1zUZ/v0W/iC2/KJaKWGBaFh3 i+HXNk+fyI5vkES2ZatpRJhnsAJGuPmvwJn68giVYaLrrSSsMMsy2xaqAL6PQIIa TVp+Pu6v1x/Um1cUuGaEpV77Xj/vGgf3wjF9XCA/64ymMhsbf+KPZYCabHPGzlNZ /WoSbqrTlSu0m1EKBtoIImUxV5s/XUdvVSKSy8KU/DqySZJGfXLnsnGcoC7++xgR 9RCxI6FCY9cl2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 17:46:58 2025 by rpki-client