This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json) Hash identifier: V9DtcUFKLHmqO2QsbehHBMtKu8QIoJPDOZ+MaIjqkpw= Subject key identifier: 01:94:98:D8:79:D1:B8:D7:C0:24:60:57:1D:3B:07:B9:1D:BC:9F:D4 Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019AF19ADF1A0F04018A58744AE8EFE7960C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=) 2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=) 3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: 6O1S7wPj7oHc5DM1rzLGGG0qcByvEfpV1K+IaO0nq48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:df:1a:0f:04:01:8a:58:74:4a:e8:ef:e7:96:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=019498d879d1b8d7c02460571d3b07b91dbc9fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:83:3d:c6:bd:22:b3:21:f1:e3:91:99:01: 21:26:fe:aa:4c:07:0f:34:ca:c3:24:3c:b4:1d:0d: f5:66:9f:e2:3a:2d:c1:e6:58:4f:b5:7e:64:fa:6a: b4:8a:2e:2b:19:a5:4e:0a:62:04:e4:c7:e7:e6:9f: b2:bc:8d:7a:9f:a3:a8:52:5f:2a:d0:4d:0c:07:31: ae:29:cc:ed:43:73:07:12:a8:75:c5:62:0e:5e:66: bf:95:4f:0c:1d:77:ec:a0:f6:a3:81:c1:8b:dd:b5: 01:88:c1:9f:73:ad:d4:e0:94:81:52:14:d0:93:58: 5f:64:00:fa:48:f2:fb:c2:b5:92:3e:9f:02:e7:e2: 72:6b:5c:85:c0:45:16:c2:32:d1:c8:d0:f3:1f:76: 4b:d3:fc:69:04:39:42:e3:a8:e0:a7:64:90:64:70: e2:43:a2:14:57:17:c0:41:3b:ae:da:53:97:b5:a1: cc:da:6d:95:10:8e:bc:d5:4d:bf:9d:a7:09:b2:34: 86:26:15:ef:cb:69:c5:a8:75:24:29:0d:bb:17:73: d6:23:b9:80:c9:46:c5:bf:52:52:a5:04:cc:3c:f3: 59:bc:bf:58:9a:7a:ef:05:8d:7f:d0:bb:fc:3e:1a: ab:13:2c:e1:a3:4c:d9:19:82:b3:4d:bb:0b:65:02: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:98:D8:79:D1:B8:D7:C0:24:60:57:1D:3B:07:B9:1D:BC:9F:D4 X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:af:fd:2e:ff:56:66:a9:fd:53:d2:c2:9d:f9:fc:2c:2e:2a: b7:04:da:30:49:a9:59:c4:bf:9e:65:5e:a4:8d:03:92:6b:a2: 74:ed:23:e0:65:df:e6:cf:cf:2c:9d:bf:8b:33:2e:b1:ed:15: dd:6b:19:1d:36:6f:86:52:5b:e0:20:79:e3:46:3a:aa:32:4b: 90:f1:00:83:06:1c:32:ab:c1:d1:e6:6b:22:c5:56:3e:bf:b5: 43:61:60:4a:d7:4f:aa:a0:dc:34:27:85:cd:37:ad:70:c3:df: c0:9d:ed:9a:df:bb:3e:06:36:a1:cb:65:0c:6f:3a:b5:8d:88: 2a:14:df:cc:09:92:fb:20:26:a4:c4:d4:8f:33:96:6e:1a:6b: 33:68:68:bf:8f:b5:9c:a1:18:c8:f0:ca:34:b8:ee:20:14:51: ad:1a:08:eb:64:f7:f2:de:01:36:97:c3:af:11:24:49:33:92: 4d:b6:b6:ce:6e:e8:8a:54:f7:d1:1f:d8:5e:ef:a5:a3:30:16: 32:55:4e:b3:bc:f8:85:f6:3c:93:5c:28:82:80:c0:88:85:4e: 00:32:ad:89:78:7d:83:97:21:60:9e:f4:9b:bb:b6:db:dd:07: c2:13:de:ef:0d:e9:22:c7:d6:1c:63:27:6b:aa:ab:41:8c:e5: 78:55:0e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt8aDwQBilh0Sujv55YMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygwMTk0OThkODc5ZDFiOGQ3YzAyNDYwNTcxZDNiMDdiOTFkYmM5ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVSDPca9IrMh8eORmQEhJv6qTAcP NMrDJDy0HQ31Zp/iOi3B5lhPtX5k+mq0ii4rGaVOCmIE5Mfn5p+yvI16n6OoUl8q 0E0MBzGuKcztQ3MHEqh1xWIOXma/lU8MHXfsoPajgcGL3bUBiMGfc63U4JSBUhTQ k1hfZAD6SPL7wrWSPp8C5+Jya1yFwEUWwjLRyNDzH3ZL0/xpBDlC46jgp2SQZHDi Q6IUVxfAQTuu2lOXtaHM2m2VEI681U2/nacJsjSGJhXvy2nFqHUkKQ27F3PWI7mA yUbFv1JSpQTMPPNZvL9YmnrvBY1/0Lv8PhqrEyzho0zZGYKzTbsLZQLPZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGUmNh50bjXwCRgVx07B7kdvJ/UMB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq/9Lv9W Zqn9U9LCnfn8LC4qtwTaMEmpWcS/nmVepI0DkmuidO0j4GXf5s/PLJ2/izMuse0V 3WsZHTZvhlJb4CB540Y6qjJLkPEAgwYcMqvB0eZrIsVWPr+1Q2FgStdPqqDcNCeF zTetcMPfwJ3tmt+7PgY2octlDG86tY2IKhTfzAmS+yAmpMTUjzOWbhprM2hov4+1 nKEYyPDKNLjuIBRRrRoI62T38t4BNpfDrxEkSTOSTba2zm7oilT30R/YXu+lozAW MlVOs7z4hfY8k1wogoDAiIVOADKtiXh9g5chYJ70m7u2290HwhPe7w3pIsfWHGMn a6qrQYzleFUOKw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:39 2025 by rpki-client