This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json) Hash identifier: DgyWBnD1TUtHdNmu3b8G6WtwyutjH0IpqOgazbeswT8= Subject key identifier: 50:F6:C7:09:50:6E:D7:95:A4:A1:90:2F:E8:29:43:7C:5B:A4:25:F1 Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Certificate serial: 019AF3C0B043DF8B4BB29D8B8F0C5112CFEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:01:22 +0000 Manifest this update: Sat 06 Dec 2025 13:01:22 +0000 Manifest next update: Sun 07 Dec 2025 13:01:22 +0000 Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=) 2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: vJ7yxy/hdduuD6rdtIThOmeNKOowlcwKdp3Kx+GzMj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b0:43:df:8b:4b:b2:9d:8b:8f:0c:51:12:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Validity Not Before: Dec 6 13:01:22 2025 GMT Not After : Dec 7 13:01:22 2025 GMT Subject: CN=50f6c709506ed795a4a1902fe829437c5ba425f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:df:fd:db:fc:b3:bc:51:f0:bc:d5:fc:91: 08:e1:6b:ff:11:47:fa:13:d2:b5:6a:30:d9:08:65: 11:c9:89:05:4b:a2:6e:8b:a0:c2:0e:02:e3:95:db: de:b0:32:06:64:d3:26:53:54:4c:45:09:3b:ea:64: 6e:f8:0b:12:8b:2d:29:a0:8f:71:15:e1:59:ea:e7: c6:08:db:d3:2a:5f:b2:cd:41:de:65:40:b7:f3:c9: c1:da:fe:68:a5:e7:44:cb:e6:1b:b6:95:f3:c8:de: ff:ad:7d:49:30:cf:91:57:a4:a9:74:fc:71:cd:f4: fa:34:e5:c7:42:c8:64:31:f0:f4:4f:22:d6:dd:c0: 61:bf:c4:52:6f:64:a5:24:c7:e0:df:1a:4a:d8:2f: 03:76:eb:21:9d:37:f0:3f:bb:43:96:e7:17:59:09: e8:63:f8:62:5e:a8:f9:00:90:d0:27:69:43:0f:39: c2:2e:e8:f3:4e:f6:b6:3d:b0:76:48:02:3f:6d:01: f3:f0:6c:23:65:b6:d6:9e:fa:d8:fb:ba:02:4f:06: 1a:b7:b9:8f:cb:94:c9:f5:85:ae:1d:54:d9:73:81: b0:d7:3f:06:5d:3c:56:c6:e4:7e:69:d7:6c:57:66: 1b:cf:9a:09:37:a5:a1:1f:56:49:64:a7:fb:64:f7: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:C7:09:50:6E:D7:95:A4:A1:90:2F:E8:29:43:7C:5B:A4:25:F1 X509v3 Authority Key Identifier: keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:e6:d7:48:c4:42:69:e2:c4:23:29:b7:0f:68:65:9f:bc: 15:e5:21:b3:1d:95:80:70:60:16:76:a3:28:63:f6:a2:55:da: 09:1f:27:5d:71:dd:ff:91:28:d6:fe:19:b2:28:6d:db:4b:b9: 37:d1:8c:c4:90:66:ad:41:7e:89:25:d9:22:20:eb:05:5d:f2: 86:92:32:e5:a0:1a:f8:ad:db:5f:38:35:51:6f:2b:05:da:19: d6:63:59:74:27:55:df:03:04:7a:6f:69:ce:bf:51:cf:bf:3d: 52:b8:93:1d:13:29:8d:33:48:55:ee:c2:fb:a6:6a:d2:94:92: 40:17:19:7f:de:e3:91:f4:7d:71:7a:43:aa:06:45:1d:fa:cc: 4f:b3:15:d0:4d:30:96:c4:5e:25:79:d9:d2:80:2b:ed:98:db: de:4c:7a:93:b2:83:6d:c0:55:07:da:55:e6:87:9b:69:35:be: 09:5d:68:44:30:f3:87:76:43:83:33:6c:11:e1:76:69:f5:51: 07:bb:a6:18:2f:88:19:90:b3:a7:a1:2e:9a:6a:d7:09:20:1b: 10:cc:16:9b:77:38:cb:bc:2a:22:2f:67:ad:58:27:3f:77:44: d4:f9:f7:8d:d9:bb:1e:54:61:81:dd:b9:c3:c8:47:10:85:a3: 6b:87:63:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLBD34tLsp2LjwxREs/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4 NDNjNTYwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD Eyg1MGY2YzcwOTUwNmVkNzk1YTRhMTkwMmZlODI5NDM3YzViYTQyNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo73f/dv8s7xR8LzV/JEI4Wv/EUf6 E9K1ajDZCGURyYkFS6Jui6DCDgLjldvesDIGZNMmU1RMRQk76mRu+AsSiy0poI9x FeFZ6ufGCNvTKl+yzUHeZUC388nB2v5opedEy+YbtpXzyN7/rX1JMM+RV6SpdPxx zfT6NOXHQshkMfD0TyLW3cBhv8RSb2SlJMfg3xpK2C8DdushnTfwP7tDlucXWQno Y/hiXqj5AJDQJ2lDDznCLujzTva2PbB2SAI/bQHz8GwjZbbWnvrY+7oCTwYat7mP y5TJ9YWuHVTZc4Gw1z8GXTxWxuR+addsV2Ybz5oJN6WhH1ZJZKf7ZPcxQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD2xwlQbteVpKGQL+gpQ3xbpCXxMB8GA1UdIwQY MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0 LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0rm10jE QmnixCMptw9oZZ+8FeUhsx2VgHBgFnajKGP2olXaCR8nXXHd/5Eo1v4Zsiht20u5 N9GMxJBmrUF+iSXZIiDrBV3yhpIy5aAa+K3bXzg1UW8rBdoZ1mNZdCdV3wMEem9p zr9Rz789UriTHRMpjTNIVe7C+6Zq0pSSQBcZf97jkfR9cXpDqgZFHfrMT7MV0E0w lsReJXnZ0oAr7Zjb3kx6k7KDbcBVB9pV5oebaTW+CV1oRDDzh3ZDgzNsEeF2afVR B7umGC+IGZCzp6EummrXCSAbEMwWm3c4y7wqIi9nrVgnP3dE1Pn3jdm7HlRhgd25 w8hHEIWja4djng== -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:37 2025 by rpki-client