This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json) Hash identifier: qpfUSjqKiQ74lHaGcTxmyTQmbGYr/J4NioLIZGgOXmo= Subject key identifier: 40:5C:CF:99:6E:82:FA:7B:6B:83:B4:24:73:AC:C6:A6:50:6F:DE:85 Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Certificate serial: 019AF208EDDE02DF458C78089BE59E30ADA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=) 2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: 48Ot93PIQBa6CCwQ4IIqQkGeJL320W/Vez37Gzmsn64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:de:02:df:45:8c:78:08:9b:e5:9e:30:ad:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=405ccf996e82fa7b6b83b42473acc6a6506fde85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:5e:3c:dc:61:f2:b0:6b:1e:9a:b1:cb:77: c9:f1:d7:06:95:84:d3:34:a7:b0:36:5c:40:24:93: 67:7a:a3:6b:cb:06:ae:2a:d6:80:03:2a:67:87:69: c8:92:22:bd:e8:0f:e1:e8:ba:1b:31:06:d8:79:2b: 30:39:28:50:36:0c:d8:3c:12:f8:2e:49:b2:79:b5: 3c:6f:98:cc:b5:b6:ad:20:58:1e:99:0a:e3:1c:a6: 60:02:c0:44:e8:6e:ba:b1:e9:56:f1:a9:ff:b1:5f: 3c:f5:23:9e:ad:f5:59:73:3e:af:21:a0:6c:ee:f9: 6b:d3:ce:2e:0f:af:b1:60:90:9a:9c:90:cc:45:49: 1f:c3:4b:47:73:3b:72:34:49:c4:15:5e:10:2d:c4: c7:af:4a:f0:de:7e:95:87:1a:6e:03:67:09:9b:69: df:3e:18:82:8a:8d:8e:80:84:7b:f2:42:39:1e:49: 0e:38:39:eb:3a:af:81:fd:b4:a6:f6:4e:d1:2c:88: da:08:ed:35:14:3b:1c:bb:a4:c4:18:38:2a:ee:23: 1d:0e:fd:ff:44:2a:c6:61:e1:a8:ad:0b:97:8d:0c: ef:4a:59:ef:d3:5d:cd:5a:1f:c0:62:62:8a:d4:73: 86:36:8f:dc:3b:f4:f7:92:30:08:43:86:d4:97:f4: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:CF:99:6E:82:FA:7B:6B:83:B4:24:73:AC:C6:A6:50:6F:DE:85 X509v3 Authority Key Identifier: keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:4d:a0:72:2a:c6:b7:53:99:77:ac:f1:6f:31:71:e4:e6:48: ee:24:93:99:25:0f:f1:ad:e6:d8:f0:18:01:c3:47:a5:34:d3: 45:fd:0b:75:26:03:3d:21:d9:b8:1f:10:30:62:97:c0:3a:ff: 93:e7:c5:0a:cf:b3:ca:a9:46:55:02:0c:41:d2:7d:71:f9:65: 88:03:f5:11:e5:09:20:b2:d8:a7:51:99:a6:0c:cb:d7:43:3a: fe:62:5d:7d:7e:19:ad:98:fa:b8:12:c2:ca:38:d5:4f:59:83: 56:10:26:a9:88:50:ed:d7:4c:26:c7:31:80:1f:6b:88:8d:05: 7c:cf:70:51:4b:0a:32:96:47:a6:f4:8c:61:03:34:fb:9a:97: 8e:63:5a:d2:17:1f:41:30:b7:36:0e:ff:4f:1f:90:64:9f:3c: fc:f2:9c:58:7c:c0:19:eb:e8:92:8f:8e:af:bd:fa:cc:61:fd: 4a:56:c1:3e:14:89:32:c5:46:44:6a:6a:fa:b5:2c:86:e0:7b: d8:85:57:98:ca:7d:03:36:33:e8:68:7e:e3:e9:40:81:d8:c4: 7c:2f:7a:24:ca:ff:df:e1:21:1c:e3:33:bc:48:4c:c5:9d:2d: b7:76:b9:e4:03:8a:b8:59:10:e9:bc:64:74:3b:8d:ac:1d:97: e4:a4:42:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO3eAt9FjHgIm+WeMK2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmMzZGJkMWE0ZjIyNGFiODRhZDYwOWMyNjgwNzlmYjYy NGI1YmQwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg0MDVjY2Y5OTZlODJmYTdiNmI4M2I0MjQ3M2FjYzZhNjUwNmZkZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFePNxh8rBrHpqxy3fJ8dcGlYTT NKewNlxAJJNneqNrywauKtaAAypnh2nIkiK96A/h6LobMQbYeSswOShQNgzYPBL4 LkmyebU8b5jMtbatIFgemQrjHKZgAsBE6G66selW8an/sV889SOerfVZcz6vIaBs 7vlr084uD6+xYJCanJDMRUkfw0tHcztyNEnEFV4QLcTHr0rw3n6VhxpuA2cJm2nf PhiCio2OgIR78kI5HkkOODnrOq+B/bSm9k7RLIjaCO01FDscu6TEGDgq7iMdDv3/ RCrGYeGorQuXjQzvSlnv013NWh/AYmKK1HOGNo/cO/T3kjAIQ4bUl/QyMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBcz5lugvp7a4O0JHOsxqZQb96FMB8GA1UdIwQY MBaAFLu8Pb0aTyJKuErWCcJoB5+2JLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDct YTI0Y2I1NzIyOThlLzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81NGIwMDYtNjgwOS00NDFiLTg0ZDctYTI0Y2I1NzIyOThl LzEvdTd3OXZScFBJa3E0U3RZSndtZ0huN1lrdGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp02gcirG t1OZd6zxbzFx5OZI7iSTmSUP8a3m2PAYAcNHpTTTRf0LdSYDPSHZuB8QMGKXwDr/ k+fFCs+zyqlGVQIMQdJ9cflliAP1EeUJILLYp1GZpgzL10M6/mJdfX4ZrZj6uBLC yjjVT1mDVhAmqYhQ7ddMJscxgB9riI0FfM9wUUsKMpZHpvSMYQM0+5qXjmNa0hcf QTC3Ng7/Tx+QZJ88/PKcWHzAGevoko+Or736zGH9SlbBPhSJMsVGRGpq+rUshuB7 2IVXmMp9AzYz6Gh+4+lAgdjEfC96JMr/3+EhHOMzvEhMxZ0tt3a55AOKuFkQ6bxk dDuNrB2X5KRCtA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:55 2025 by rpki-client