This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json) Hash identifier: 0z/3YdciE3jXbWHITcVALaAO5jBKqSZ5Y3+sb1DAgzA= Subject key identifier: 9A:76:20:9F:99:59:A7:D8:72:47:A7:3A:7A:71:70:D7:BB:1E:D5:7A Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Certificate serial: 019AF5AEA1456C29F2B7869530C6FDF84C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:00:53 +0000 Manifest this update: Sat 06 Dec 2025 22:00:53 +0000 Manifest next update: Sun 07 Dec 2025 22:00:53 +0000 Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=) 2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: UY0D5HkUMfHdwaCPTjhkN3mtfdyyU1K4T+m3P3oV/A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:a1:45:6c:29:f2:b7:86:95:30:c6:fd:f8:4c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Validity Not Before: Dec 6 22:00:53 2025 GMT Not After : Dec 7 22:00:53 2025 GMT Subject: CN=9a76209f9959a7d87247a73a7a7170d7bb1ed57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:6e:4c:c0:30:f9:04:fc:c0:55:40:7c:f1: 51:62:f8:01:e3:8c:13:5b:02:5a:1a:35:55:73:ea: 22:95:66:3b:68:76:dd:c3:d4:ae:8f:2d:dc:aa:43: ef:28:ad:c3:bb:45:5f:1d:99:fa:ec:09:73:77:76: fa:c8:49:7b:76:ff:b2:a8:53:85:32:cc:97:b8:5c: a2:a7:92:48:64:f1:1d:79:f7:2c:39:86:c9:19:89: 3d:f3:f4:59:81:2d:e0:16:60:f1:23:e5:07:d8:07: 7d:c2:25:77:3c:4d:60:0a:70:95:c8:ff:fb:b4:c3: 04:a2:1e:d7:51:73:f4:9c:b4:46:c1:f6:3f:b8:66: 7d:40:96:cc:8d:3f:e1:97:26:30:03:19:4f:68:c4: f7:92:b2:e4:44:ce:cf:c9:d9:e2:0b:40:fc:ba:fd: ca:0e:2a:73:d1:85:ee:50:01:22:16:03:6b:2f:d8: 88:95:b6:e3:2b:9e:3e:d7:c9:78:2a:c5:56:1f:b6: 10:bf:65:ea:e8:5b:75:73:78:82:ce:1f:03:61:0c: cc:ea:4e:e7:f5:08:c2:1a:99:89:d2:22:0e:02:c0: fe:26:8f:9f:67:8a:4b:47:9e:7f:b9:0a:3b:12:3e: 54:55:a8:03:0b:aa:07:79:ce:51:69:bd:a3:7a:a3: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:20:9F:99:59:A7:D8:72:47:A7:3A:7A:71:70:D7:BB:1E:D5:7A X509v3 Authority Key Identifier: keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:22:6b:b2:f4:63:f6:a1:2f:41:3d:5f:1f:c5:d9:09:46: 53:b4:70:97:c6:01:23:65:0c:1d:35:27:cb:37:ec:da:3c:73: 1b:8a:89:62:ed:9d:78:ca:7e:50:55:a1:8a:8d:da:a2:07:88: 7d:7c:87:c9:81:d1:99:24:21:cb:8b:70:53:c8:6b:23:f3:e7: db:1e:cc:99:04:bf:30:df:f5:01:6d:60:1b:1e:2f:d4:79:ef: 9a:f0:6a:ad:95:e3:f1:06:39:4f:ae:86:bd:12:79:cb:9d:57: 3a:b8:bd:97:4a:86:7d:75:5d:c9:c1:c6:db:87:82:cd:38:cc: 5b:6f:77:bb:2c:42:aa:75:34:09:4b:99:b0:bf:ef:0e:74:7f: 17:62:24:96:e8:2b:eb:a1:7f:e6:63:d2:c8:24:09:17:52:38: 68:f0:75:3b:e7:a0:bf:25:7f:2f:19:7e:fc:3a:1f:ef:06:7d: 7d:90:a4:44:3c:1c:a2:22:be:e2:92:9e:1d:2f:ae:0a:2c:50: c6:33:e1:86:f6:3a:dd:de:3e:e6:33:88:3f:c9:9b:77:94:8c: 8c:ed:1e:9a:69:34:8e:e5:ae:80:59:7f:07:ee:0f:a9:b7:fa: dc:54:81:13:8a:b0:8e:34:f5:99:06:42:3c:98:71:5c:8f:97: a2:9f:a6:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqFFbCnyt4aVMMb9+Ew/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4 NDNjNTYwHhcNMjUxMjA2MjIwMDUzWhcNMjUxMjA3MjIwMDUzWjAzMTEwLwYDVQQD Eyg5YTc2MjA5Zjk5NTlhN2Q4NzI0N2E3M2E3YTcxNzBkN2JiMWVkNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkVuTMAw+QT8wFVAfPFRYvgB44wT WwJaGjVVc+oilWY7aHbdw9Sujy3cqkPvKK3Du0VfHZn67Alzd3b6yEl7dv+yqFOF MsyXuFyip5JIZPEdefcsOYbJGYk98/RZgS3gFmDxI+UH2Ad9wiV3PE1gCnCVyP/7 tMMEoh7XUXP0nLRGwfY/uGZ9QJbMjT/hlyYwAxlPaMT3krLkRM7PydniC0D8uv3K Dipz0YXuUAEiFgNrL9iIlbbjK54+18l4KsVWH7YQv2Xq6Ft1c3iCzh8DYQzM6k7n 9QjCGpmJ0iIOAsD+Jo+fZ4pLR55/uQo7Ej5UVagDC6oHec5Rab2jeqP9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp2IJ+ZWafYckenOnpxcNe7HtV6MB8GA1UdIwQY MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0 LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjgia7L0 Y/ahL0E9Xx/F2QlGU7Rwl8YBI2UMHTUnyzfs2jxzG4qJYu2deMp+UFWhio3aogeI fXyHyYHRmSQhy4twU8hrI/Pn2x7MmQS/MN/1AW1gGx4v1HnvmvBqrZXj8QY5T66G vRJ5y51XOri9l0qGfXVdycHG24eCzTjMW293uyxCqnU0CUuZsL/vDnR/F2Iklugr 66F/5mPSyCQJF1I4aPB1O+egvyV/Lxl+/Dof7wZ9fZCkRDwcoiK+4pKeHS+uCixQ xjPhhvY63d4+5jOIP8mbd5SMjO0emmk0juWugFl/B+4Pqbf63FSBE4qwjjT1mQZC PJhxXI+Xop+mkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:23 2025 by rpki-client