This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json) Hash identifier: HkcL3pcfg1/+WSqh629/rDmIzDxF2vZk2en1mzTn4rc= Subject key identifier: 87:4A:D0:45:23:87:95:52:46:FB:E6:25:F0:A3:58:34:CF:80:C0:83 Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Certificate serial: 019AF088C2030D8003C4D1BC50AEC2CE1905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft Manifest number: 16B3 Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=) 2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: WzSuU+KYp3SeBk8S9xmtO/5Xvi2HIGmoS2SiM4zqEFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c2:03:0d:80:03:c4:d1:bc:50:ae:c2:ce:19:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=874ad0452387955246fbe625f0a35834cf80c083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:27:3c:62:be:7b:89:a3:a1:07:fd:ab:f8: 2b:e2:64:ef:8c:37:7c:52:b3:ba:60:fb:35:64:da: a6:f5:96:df:dd:c5:a2:d3:72:6f:89:b2:ba:90:81: 7d:dc:57:ab:f3:b2:63:1a:4c:ff:81:f7:0f:a3:14: 80:c5:a6:a9:54:b9:b5:74:6c:e9:83:5b:7f:07:da: 45:11:1e:61:a6:af:7a:55:1c:16:1a:aa:50:c2:ac: 3b:2d:45:4d:be:fd:4b:cf:8d:c4:7a:a3:9b:fe:fe: 5f:1b:53:f7:27:d5:71:ec:2a:e3:87:90:a2:e5:6a: 6e:50:fe:8e:95:d3:b1:c4:9b:ee:70:e0:37:1f:76: 15:c0:d7:47:a6:eb:63:b7:4c:18:8b:91:a6:bf:67: 6b:b4:99:a7:26:d8:88:ed:84:ec:9e:ff:9b:a9:3c: fb:26:cf:f3:54:3b:9e:03:b4:4e:07:b0:e7:96:c4: 93:2a:62:65:cf:bf:00:bf:ce:b1:41:30:d3:7b:e1: b6:df:78:86:ee:68:da:d2:73:6c:6e:c3:ed:84:23: ce:d4:81:ac:a7:47:06:1b:a1:8d:9b:0e:ff:58:06: bf:6a:85:9d:19:ee:24:dd:72:05:33:e1:77:e9:8d: 5c:43:1f:fc:af:39:8a:a9:df:d1:1f:46:aa:8a:19: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4A:D0:45:23:87:95:52:46:FB:E6:25:F0:A3:58:34:CF:80:C0:83 X509v3 Authority Key Identifier: keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9a:18:83:c6:43:91:a8:a9:59:57:da:44:b8:e8:58:5a:15: b8:57:f9:f0:b6:5b:d1:51:c7:1f:de:fc:71:61:6b:95:c9:b7: b0:4a:75:e7:7a:5d:fe:24:89:67:84:94:92:ea:c3:82:47:84: d7:d3:89:ed:eb:95:e6:00:84:eb:6b:6e:b1:3d:64:80:f7:ae: cb:ca:67:1b:fa:2a:c6:0f:2c:4c:61:f3:c5:fb:5a:97:d4:a3: eb:34:88:cc:8c:8c:ee:f2:60:e9:c8:4c:5b:8d:fb:7d:b9:d1: 40:ff:e7:0b:2a:3a:ee:48:a4:83:74:7d:e3:e3:b3:18:9d:93: 5c:20:90:40:45:b1:88:b8:97:c4:8a:07:7a:88:e6:8c:d9:f6: 7c:74:f0:d4:38:4a:0f:73:90:1b:c0:3f:1e:7b:b6:66:16:e9: 79:48:25:88:b1:df:43:9f:e6:3a:82:5d:cc:5e:d2:49:54:40: db:c9:c6:68:16:80:86:39:1b:ee:c1:99:76:87:f8:c3:85:8a: d4:ca:91:f7:47:72:85:0e:01:07:da:25:90:f2:3f:61:aa:7e: dc:3b:86:84:e3:d7:1a:91:40:14:5e:b2:40:68:30:d2:a7:d6: 35:18:70:2b:cb:83:47:07:45:aa:92:9f:ff:d8:c4:f5:c5:95: 89:22:74:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMIDDYADxNG8UK7CzhkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk YTIyNzQwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD Eyg4NzRhZDA0NTIzODc5NTUyNDZmYmU2MjVmMGEzNTgzNGNmODBjMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c4nPGK+e4mjoQf9q/gr4mTvjDd8 UrO6YPs1ZNqm9Zbf3cWi03JvibK6kIF93Fer87JjGkz/gfcPoxSAxaapVLm1dGzp g1t/B9pFER5hpq96VRwWGqpQwqw7LUVNvv1Lz43EeqOb/v5fG1P3J9Vx7Crjh5Ci 5WpuUP6OldOxxJvucOA3H3YVwNdHputjt0wYi5Gmv2drtJmnJtiI7YTsnv+bqTz7 Js/zVDueA7ROB7DnlsSTKmJlz78Av86xQTDTe+G233iG7mja0nNsbsPthCPO1IGs p0cGG6GNmw7/WAa/aoWdGe4k3XIFM+F36Y1cQx/8rzmKqd/RH0aqihn5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdK0EUjh5VSRvvmJfCjWDTPgMCDMB8GA1UdIwQY MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct ZWRmN2JiNjUzZjEzLzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5oYg8ZD kaipWVfaRLjoWFoVuFf58LZb0VHHH978cWFrlcm3sEp153pd/iSJZ4SUkurDgkeE 19OJ7euV5gCE62tusT1kgPeuy8pnG/oqxg8sTGHzxftal9Sj6zSIzIyM7vJg6chM W437fbnRQP/nCyo67kikg3R94+OzGJ2TXCCQQEWxiLiXxIoHeojmjNn2fHTw1DhK D3OQG8A/Hnu2ZhbpeUgliLHfQ5/mOoJdzF7SSVRA28nGaBaAhjkb7sGZdof4w4WK 1MqR90dyhQ4BB9olkPI/Yap+3DuGhOPXGpFAFF6yQGgw0qfWNRhwK8uDRwdFqpKf /9jE9cWViSJ06Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:52 2025 by rpki-client