This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json) Hash identifier: f+UF4SyHJfd4nwavSEiYMnvNRMYBNNltUEyGoJ4Trgo= Subject key identifier: 3D:9A:B6:27:95:7B:06:B1:A2:62:74:81:BD:42:2D:A1:69:FE:6A:53 Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Certificate serial: 019AF1D1EBD8145852617AEF64E8F0E716D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft Manifest number: 1077 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=) 2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: zIqsZwXl938IROcyiMp9WHUChY34wUcpQPxDdvlexdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:eb:d8:14:58:52:61:7a:ef:64:e8:f0:e7:16:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=3d9ab627957b06b1a2627481bd422da169fe6a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:d4:a7:42:07:ef:4a:e7:86:cf:35:9e:93: 7d:01:f3:0b:ac:55:de:20:1a:c6:03:8c:fa:71:68: 07:75:55:80:e8:b1:2f:a8:20:4b:69:f8:14:57:54: 86:bd:ff:40:f1:4f:ac:de:75:10:a7:fe:d6:c4:cd: 30:6d:2c:c7:d9:cf:d1:95:05:aa:2d:0c:7f:1c:2e: 2c:dd:11:9a:32:f1:d5:bb:c8:4a:07:68:f2:85:05: 1c:f6:8a:41:14:3f:22:56:7c:50:0f:52:7f:db:c5: ef:e6:fb:05:2a:e6:cd:c5:20:f1:a5:69:d1:ed:ec: d4:bc:a2:e7:b0:46:75:28:a1:8c:99:74:d3:dd:5b: bd:ca:02:ab:e0:c0:ad:8a:44:77:c9:e7:80:ad:aa: 77:5d:03:ad:aa:1f:d4:cb:84:73:a4:b5:ea:84:dd: df:a1:62:65:9d:6f:87:24:cc:68:d3:3a:12:b1:31: ab:09:04:aa:85:f0:cb:a8:bb:ed:21:3a:1d:7b:a1: 9a:f9:58:07:9f:83:e1:4b:07:df:e7:42:cd:4a:e8: 3d:a2:ef:6d:54:26:49:1a:a1:73:6f:cf:c5:9e:08: fc:48:a3:77:3d:00:30:7e:b7:a0:10:fb:e9:42:33: a6:1c:f3:8a:79:0d:bb:5e:dc:53:08:e6:26:52:39: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:B6:27:95:7B:06:B1:A2:62:74:81:BD:42:2D:A1:69:FE:6A:53 X509v3 Authority Key Identifier: keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:68:94:7f:2c:d8:89:82:40:04:3a:89:51:64:5f:ee:ef: 26:e2:03:05:0c:ca:ae:9b:85:26:b6:e6:a9:c9:27:aa:d2:b9: 1c:94:a6:7e:09:df:26:0d:ad:ff:5f:1d:b8:72:6f:da:75:59: db:90:d7:6a:a6:0c:c9:09:58:98:b0:35:96:b3:ad:20:f0:97: 08:19:35:b1:b3:c2:28:3b:5e:d8:f0:fb:3c:10:6f:b3:04:cb: 09:8d:0d:e6:33:05:d0:14:5a:c5:82:11:34:8b:ec:65:8a:b8: c1:00:6d:fd:39:c3:11:cd:42:ac:80:13:4d:ff:60:28:b4:ca: 63:5f:b8:c9:3d:13:c4:73:90:e4:94:ba:27:e6:d4:8d:6a:08: d3:49:55:c0:60:6c:5b:b1:6e:61:6c:fe:ed:85:af:55:ce:b4: 74:89:1f:af:d8:e2:a2:d0:59:93:16:63:9f:8d:f7:23:5b:c6: 16:47:2c:d0:c7:76:af:d4:f5:5e:c5:a1:35:31:37:4f:93:c6: a7:f1:36:3c:2b:5c:a2:05:b8:d4:7f:15:cc:2e:91:47:b4:43: 84:97:54:b1:1c:ba:c7:97:07:db:dc:f5:c8:1f:d8:76:b8:5f: 56:ab:2e:3f:fc:e7:77:ee:62:6e:2c:a7:57:89:19:aa:76:33: 3b:fa:41:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0evYFFhSYXrvZOjw5xbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4 NTZhMTUwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EygzZDlhYjYyNzk1N2IwNmIxYTI2Mjc0ODFiZDQyMmRhMTY5ZmU2YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihTUp0IH70rnhs81npN9AfMLrFXe IBrGA4z6cWgHdVWA6LEvqCBLafgUV1SGvf9A8U+s3nUQp/7WxM0wbSzH2c/RlQWq LQx/HC4s3RGaMvHVu8hKB2jyhQUc9opBFD8iVnxQD1J/28Xv5vsFKubNxSDxpWnR 7ezUvKLnsEZ1KKGMmXTT3Vu9ygKr4MCtikR3yeeArap3XQOtqh/Uy4RzpLXqhN3f oWJlnW+HJMxo0zoSsTGrCQSqhfDLqLvtITode6Ga+VgHn4PhSwff50LNSug9ou9t VCZJGqFzb8/Fngj8SKN3PQAwfregEPvpQjOmHPOKeQ27XtxTCOYmUjn0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2atieVewaxomJ0gb1CLaFp/mpTMB8GA1UdIwQY MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3 LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe9olH8s 2ImCQAQ6iVFkX+7vJuIDBQzKrpuFJrbmqcknqtK5HJSmfgnfJg2t/18duHJv2nVZ 25DXaqYMyQlYmLA1lrOtIPCXCBk1sbPCKDte2PD7PBBvswTLCY0N5jMF0BRaxYIR NIvsZYq4wQBt/TnDEc1CrIATTf9gKLTKY1+4yT0TxHOQ5JS6J+bUjWoI00lVwGBs W7FuYWz+7YWvVc60dIkfr9jiotBZkxZjn433I1vGFkcs0Md2r9T1XsWhNTE3T5PG p/E2PCtcogW41H8VzC6RR7RDhJdUsRy6x5cH29z1yB/YdrhfVqsuP/znd+5ibiyn V4kZqnYzO/pBRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:04 2025 by rpki-client