This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json) Hash identifier: gw0C7WkZMbiNHxwErEvlfoHOPYt744OBVe0rloEQRi0= Subject key identifier: D3:31:04:17:A5:5B:0D:1D:E1:34:C2:C4:22:0B:19:76:23:85:F6:BD Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97 Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97 Certificate serial: 019AF2096AD5678D1C824FF3519DC7A5C8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft Manifest number: 12AC Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=) 2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: MIU2hfp0Q+ccrEON6HaWFDA1ix73HrZbozrD29ikIto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6a:d5:67:8d:1c:82:4f:f3:51:9d:c7:a5:c8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=d3310417a55b0d1de134c2c4220b19762385f6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:4c:c2:f5:be:aa:4b:02:22:7f:1c:4c:d2: 53:b8:72:dd:fc:9d:e1:39:c3:05:0b:53:1c:74:5d: a8:0c:37:f0:ee:4c:46:f5:b0:b3:0b:59:c3:a0:a2: 73:02:17:cd:fb:f9:e2:35:6c:d5:a7:b0:f4:1a:08: 74:09:99:54:e9:7e:63:bd:5c:64:60:e4:8f:69:3d: 98:04:23:01:0c:d7:64:c8:fe:96:50:f6:fb:6c:b0: 9c:22:2d:34:c8:75:a3:79:08:04:a5:c5:a0:07:72: e1:45:8f:b6:f5:30:72:b0:51:de:99:8e:99:73:08: 83:47:1f:18:ad:8b:79:5f:e7:3a:c8:a5:7b:10:d1: f5:72:e9:29:0b:16:52:27:0f:50:2d:53:28:00:6f: d3:66:de:df:f0:eb:6b:13:d2:dc:94:a9:cf:ad:1b: f7:37:35:2f:5d:e9:dd:5d:bf:16:26:48:da:f8:ac: e1:a8:d7:3c:2b:ef:d4:54:d2:a3:1e:4e:d9:dd:85: 66:6b:7a:db:7a:1c:f1:0e:ae:3d:0c:d8:4f:d0:4a: b3:d6:de:a6:02:63:35:70:ac:26:c3:18:b4:5f:54: 5f:cd:c4:a4:8d:90:4a:ac:91:ae:73:22:7d:85:61: 9b:7f:b2:73:ef:8e:88:b6:76:38:2a:c3:2d:4f:65: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:04:17:A5:5B:0D:1D:E1:34:C2:C4:22:0B:19:76:23:85:F6:BD X509v3 Authority Key Identifier: keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:38:13:39:47:a5:69:cf:e3:e9:b7:d6:17:0d:59:30:cb: 6f:fc:0d:c2:19:22:c6:02:87:67:67:b6:87:d8:5b:ee:d2:9a: a8:16:8c:d8:14:be:12:a4:7d:a9:b1:fc:f8:fd:43:22:db:49: 78:95:ce:1c:c6:df:8a:09:0a:d4:3c:f8:19:9f:03:be:b6:a6: 9b:e8:78:48:fc:37:6a:a0:66:05:82:1b:96:a6:cc:6f:8c:2f: 92:66:2f:04:8c:75:50:59:1c:63:dc:c4:3a:25:3b:bc:e7:1f: ee:00:06:91:fb:36:24:d1:07:a9:ff:47:87:68:0d:17:14:3c: 8d:24:d5:63:3c:e6:98:7d:86:5e:8f:f3:2e:e8:9d:62:5d:82: 3f:14:a7:dd:c4:79:b1:38:4d:04:84:ad:66:a4:be:c9:1b:62: c5:31:9f:84:bf:22:4a:8a:75:d7:ed:fa:a5:ef:24:ac:eb:cb: 82:60:07:db:a9:30:e1:73:6b:25:d0:a8:18:5b:8e:73:df:75: 05:19:b9:21:5c:14:e7:7d:b0:08:1d:9f:02:6a:f1:1a:bb:e4: 2d:36:6d:32:24:ca:f8:47:e1:59:25:65:52:45:bc:e3:da:fa: f7:36:73:59:53:8e:ab:a0:92:78:82:ce:ab:1c:83:7d:07:b7: b3:12:bc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWrVZ40cgk/zUZ3HpcjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYjg2NWZkNmRmYWFiYTc3MTI0OWI3ZWJhZThlYmQ1Mjgw YTBjOTcwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhkMzMxMDQxN2E1NWIwZDFkZTEzNGMyYzQyMjBiMTk3NjIzODVmNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhFMwvW+qksCIn8cTNJTuHLd/J3h OcMFC1McdF2oDDfw7kxG9bCzC1nDoKJzAhfN+/niNWzVp7D0Ggh0CZlU6X5jvVxk YOSPaT2YBCMBDNdkyP6WUPb7bLCcIi00yHWjeQgEpcWgB3LhRY+29TBysFHemY6Z cwiDRx8YrYt5X+c6yKV7ENH1cukpCxZSJw9QLVMoAG/TZt7f8OtrE9LclKnPrRv3 NzUvXendXb8WJkja+KzhqNc8K+/UVNKjHk7Z3YVma3rbehzxDq49DNhP0Eqz1t6m AmM1cKwmwxi0X1RfzcSkjZBKrJGucyJ9hWGbf7Jz746ItnY4KsMtT2UQ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMxBBelWw0d4TTCxCILGXYjhfa9MB8GA1UdIwQY MBaAFLu4Zf1t+quncSSbfrro69UoCgyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdobF9XMzZxNmR4Skp0LXV1anIxU2dLREpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80M2JiOTQtOTRjNi00ZGFkLWEzNzIt NWZjZmE0MjE5NzVjLzEvdTdobF9XMzZxNmR4Skp0LXV1anIxU2dLREpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80M2JiOTQtOTRjNi00ZGFkLWEzNzItNWZjZmE0MjE5NzVj LzEvdTdobF9XMzZxNmR4Skp0LXV1anIxU2dLREpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpI4EzlH pWnP4+m31hcNWTDLb/wNwhkixgKHZ2e2h9hb7tKaqBaM2BS+EqR9qbH8+P1DIttJ eJXOHMbfigkK1Dz4GZ8Dvramm+h4SPw3aqBmBYIblqbMb4wvkmYvBIx1UFkcY9zE OiU7vOcf7gAGkfs2JNEHqf9Hh2gNFxQ8jSTVYzzmmH2GXo/zLuidYl2CPxSn3cR5 sThNBIStZqS+yRtixTGfhL8iSop11+36pe8krOvLgmAH26kw4XNrJdCoGFuOc991 BRm5IVwU532wCB2fAmrxGrvkLTZtMiTK+EfhWSVlUkW849r69zZzWVOOq6CSeILO qxyDfQe3sxK8mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:26 2025 by rpki-client