This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json) Hash identifier: +tpLYiY99XHDribAPf1OBxxXZNI0ExfHLkppnRs9RMI= Subject key identifier: 65:E1:87:06:F6:2E:82:A6:DF:41:C7:14:73:38:20:A9:AF:9A:0C:5E Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019AF2098E726D50259213ED72E46C8E8567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft Manifest number: 0A93 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=) 2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: t9JzLE+gayZeZPCIfTcZGxSSTS10js97exmjyG6yPrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8e:72:6d:50:25:92:13:ed:72:e4:6c:8e:85:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=65e18706f62e82a6df41c714733820a9af9a0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:74:e5:39:55:fd:4b:91:fc:f3:79:ba:c5:83: 52:15:93:1a:b0:7f:1d:0e:27:e7:15:14:80:4b:b1: 45:92:3c:bb:32:d5:f4:58:10:53:80:ab:25:99:5d: ce:0b:b0:73:de:17:f6:85:5a:b1:b9:c1:2f:0a:4b: e6:5b:c9:08:a2:32:ef:f5:ee:3c:fc:34:bc:91:ad: 7c:4a:27:7d:0c:36:c7:60:ee:ca:97:90:0d:16:cc: aa:07:be:c0:dd:f4:68:dc:a8:99:da:cb:df:ea:26: 81:7f:ab:40:b0:c5:7d:0d:2b:c7:22:da:db:44:55: d1:7e:9a:4e:4d:93:d6:0a:06:4f:00:6d:c2:fc:c3: 3a:31:0e:d2:9f:b1:be:5e:3d:ea:5a:fe:b7:fe:1a: 12:bc:a6:b7:dc:e9:20:78:5c:0a:4e:d2:73:96:89: 1d:fb:bd:80:db:2d:9e:28:b0:6a:6f:3e:be:18:03: 31:70:37:d0:69:67:be:da:43:7a:cd:1d:1b:0e:6f: 1b:9a:41:97:f3:45:c9:f9:72:dc:0b:bc:41:db:5f: 17:ac:3d:19:2a:d7:70:a2:b7:ca:95:77:c2:19:27: 50:2a:26:e0:22:87:5f:c5:9a:21:44:5a:7c:38:58: 23:b9:da:28:db:dc:1c:c9:d4:90:ad:c2:f4:c9:7c: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:87:06:F6:2E:82:A6:DF:41:C7:14:73:38:20:A9:AF:9A:0C:5E X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:07:97:73:e4:e8:8e:da:6d:24:62:62:41:75:2e:9a:db:ab: cc:91:0f:9a:57:02:72:4f:c4:d7:16:3a:5a:7e:f9:2c:eb:16: 73:19:e0:d1:c9:41:83:a2:ce:55:f5:fb:6b:49:b2:85:bb:a9: f1:00:65:5c:9c:38:9c:a0:c6:d6:6f:6f:86:59:c5:a0:24:8b: 9a:86:74:55:34:34:00:d8:5b:b9:4f:8e:a5:a8:64:af:0b:20: a2:74:0f:e3:ca:60:5d:74:55:00:cd:70:1d:fc:33:35:33:49: 8b:a8:31:7b:d2:06:a1:4c:48:3e:a6:1f:7d:ca:74:47:5c:99: f1:e7:a4:02:7b:3b:a4:f4:43:2d:91:30:81:11:23:1d:e4:e0: f1:3b:f3:50:10:f4:9b:8a:e2:bd:63:48:33:db:35:5f:d5:77: 68:50:dd:ba:c7:40:03:5c:a4:7f:ee:04:a2:1c:69:af:bc:8a: ec:60:c3:f8:3f:8f:b8:c5:b3:36:56:4e:5d:d9:be:a0:2d:7f: 32:6b:04:5a:fe:7f:55:cb:fa:e8:a4:34:33:5d:a7:c7:05:cd: e3:2c:5d:4f:9f:b2:67:d4:56:6a:59:71:9e:32:38:a1:8c:01: 02:ed:3f:6c:00:83:56:dd:b7:f6:25:4d:f0:3b:7c:d5:90:74: 42:f7:44:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY5ybVAlkhPtcuRsjoVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg2NWUxODcwNmY2MmU4MmE2ZGY0MWM3MTQ3MzM4MjBhOWFmOWEwYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13TlOVX9S5H883m6xYNSFZMasH8d DifnFRSAS7FFkjy7MtX0WBBTgKslmV3OC7Bz3hf2hVqxucEvCkvmW8kIojLv9e48 /DS8ka18Sid9DDbHYO7Kl5ANFsyqB77A3fRo3KiZ2svf6iaBf6tAsMV9DSvHItrb RFXRfppOTZPWCgZPAG3C/MM6MQ7Sn7G+Xj3qWv63/hoSvKa33OkgeFwKTtJzlokd +72A2y2eKLBqbz6+GAMxcDfQaWe+2kN6zR0bDm8bmkGX80XJ+XLcC7xB218XrD0Z KtdworfKlXfCGSdQKibgIodfxZohRFp8OFgjudoo29wcydSQrcL0yXxmzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXhhwb2LoKm30HHFHM4IKmvmgxeMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAeXc+To jtptJGJiQXUumturzJEPmlcCck/E1xY6Wn75LOsWcxng0clBg6LOVfX7a0myhbup 8QBlXJw4nKDG1m9vhlnFoCSLmoZ0VTQ0ANhbuU+OpahkrwsgonQP48pgXXRVAM1w HfwzNTNJi6gxe9IGoUxIPqYffcp0R1yZ8eekAns7pPRDLZEwgREjHeTg8TvzUBD0 m4rivWNIM9s1X9V3aFDdusdAA1ykf+4Eohxpr7yK7GDD+D+PuMWzNlZOXdm+oC1/ MmsEWv5/Vcv66KQ0M12nxwXN4yxdT5+yZ9RWallxnjI4oYwBAu0/bACDVt239iVN 8Dt81ZB0QvdE5A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:38 2025 by rpki-client