This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json) Hash identifier: XL3VfIGpchXxUglE3miXN38Q09WSr266aDuc9Zhffio= Subject key identifier: 0F:5D:8E:6B:7B:98:37:25:79:E1:6F:2D:04:A7:4F:22:75:10:1C:3F Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019AF12D9C425A70D9CF7E91944A9173D6C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=) 2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=) 3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=) 4: o9ILjFHyqHFBLmfa8iktUbEEHgc.roa (hash: AnlJF340Arx0CyHCuh9//rcp5JhktymE+WZs85nUSA4=) 5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: lIA96ou3l3apu6aDtZlYWCLGUAShbw+Tuim0saRBEmw=) 6: ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa (hash: PUzNIv/ioXbZZoJUJezcZ8P2QSpd1W55TTBz10BXkDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9c:42:5a:70:d9:cf:7e:91:94:4a:91:73:d6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=0f5d8e6b7b98372579e16f2d04a74f2275101c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:7e:c8:9d:4b:97:ed:c8:49:00:db:20:ae: 7b:19:0b:a8:aa:04:09:6e:3b:da:59:48:5d:d2:f0: fd:2d:48:54:93:e6:e7:c6:01:30:77:dc:6c:f2:5c: d1:0b:15:29:9e:33:36:cb:de:56:dc:d5:8e:3f:a5: 01:88:0c:dc:50:5d:54:35:3a:5b:e0:d8:70:23:41: 8f:2b:9e:1d:75:1b:2c:d9:5c:6d:2d:63:8e:29:e0: 1c:24:ad:87:3f:ff:6b:1d:2b:7a:9c:47:10:5e:4a: bc:66:fe:fd:bd:25:99:37:b1:5f:1a:c8:7a:43:00: 8f:e5:56:38:98:a9:0c:e4:e7:aa:29:c2:ba:4d:77: e9:67:90:0a:24:fd:58:97:ee:fd:17:8e:67:96:0e: 52:1f:b5:5b:cb:a9:88:77:a2:e2:87:e4:e1:4c:13: 95:e8:17:72:dd:19:ff:52:83:08:0b:95:fd:15:5f: 5c:c6:fe:49:84:5a:c3:18:39:7f:55:02:dd:e1:a9: 76:77:e8:5f:c9:ba:66:e4:aa:90:39:8d:c1:1f:7f: 06:3c:b5:ba:cc:79:5b:63:28:9b:cc:b1:1e:d0:23: f7:e8:35:3e:aa:7f:c0:54:b4:41:cf:b6:94:75:74: 78:86:8c:9f:a7:af:a1:11:74:03:89:41:f9:65:de: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:8E:6B:7B:98:37:25:79:E1:6F:2D:04:A7:4F:22:75:10:1C:3F X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:02:43:0f:02:fc:98:8c:2f:0f:f8:b1:74:77:56:57:5f:ff: d2:32:43:81:47:87:25:a9:09:4f:d7:8a:cd:71:aa:33:40:c7: a8:e6:ab:d0:86:21:69:fc:e0:93:5f:18:a2:af:f2:aa:83:83: 5e:bc:3f:3e:f0:8f:85:6b:37:fa:53:80:69:64:bb:12:ca:2a: 6a:83:ff:64:5d:31:41:ec:b9:64:e5:22:6d:e5:6c:3b:6d:2c: fc:da:38:04:be:16:4c:d5:ed:82:74:61:f0:72:19:23:a4:6a: 6b:58:de:14:73:9b:b3:6b:29:55:29:6a:fa:25:e6:1f:4d:37: 71:4b:34:44:c3:96:5b:c2:3f:58:66:20:47:48:72:2c:ff:36: 2b:a6:e0:d9:2f:e1:9b:3d:cb:79:2a:b8:e4:76:6c:85:f1:92: a7:7e:93:c1:f9:1c:96:ab:15:ab:a4:fe:85:ea:5b:c4:39:b4: 44:d4:0c:70:ae:4c:61:d0:22:88:f3:3c:4f:98:6f:fc:8e:a0: 7f:fb:f4:e7:62:0f:4c:53:de:e1:50:8b:ff:77:34:57:ec:fa: 47:59:f8:17:e6:b8:7f:fd:00:7a:51:33:49:6e:d7:de:c5:65: 94:46:c4:3f:b1:21:ca:14:85:7c:63:23:05:bb:5b:15:18:5f: 22:01:e0:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZxCWnDZz36RlEqRc9bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EygwZjVkOGU2YjdiOTgzNzI1NzllMTZmMmQwNGE3NGYyMjc1MTAxYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSl+yJ1Ll+3ISQDbIK57GQuoqgQJ bjvaWUhd0vD9LUhUk+bnxgEwd9xs8lzRCxUpnjM2y95W3NWOP6UBiAzcUF1UNTpb 4NhwI0GPK54ddRss2VxtLWOOKeAcJK2HP/9rHSt6nEcQXkq8Zv79vSWZN7FfGsh6 QwCP5VY4mKkM5OeqKcK6TXfpZ5AKJP1Yl+79F45nlg5SH7Vby6mId6Lih+ThTBOV 6Bdy3Rn/UoMIC5X9FV9cxv5JhFrDGDl/VQLd4al2d+hfybpm5KqQOY3BH38GPLW6 zHlbYyibzLEe0CP36DU+qn/AVLRBz7aUdXR4hoyfp6+hEXQDiUH5Zd6lxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9djmt7mDcleeFvLQSnTyJ1EBw/MB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQJDDwL8 mIwvD/ixdHdWV1//0jJDgUeHJakJT9eKzXGqM0DHqOar0IYhafzgk18Yoq/yqoOD Xrw/PvCPhWs3+lOAaWS7EsoqaoP/ZF0xQey5ZOUibeVsO20s/No4BL4WTNXtgnRh 8HIZI6Rqa1jeFHObs2spVSlq+iXmH003cUs0RMOWW8I/WGYgR0hyLP82K6bg2S/h mz3LeSq45HZshfGSp36TwfkclqsVq6T+hepbxDm0RNQMcK5MYdAiiPM8T5hv/I6g f/v052IPTFPe4VCL/3c0V+z6R1n4F+a4f/0AelEzSW7X3sVllEbEP7EhyhSFfGMj BbtbFRhfIgHgPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:52 2025 by rpki-client