This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json) Hash identifier: vyGK8Z711aoZgZI4h7CbhBkqcz+JZ89PD0m+l0OSO44= Subject key identifier: C4:2C:6C:43:C8:5E:12:66:81:B3:3B:09:25:14:DE:4D:E1:95:60:48 Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Certificate serial: 019AF12E78BAF16742446C41A1D1820B63AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft Manifest number: 080B Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: GydiblbyAXz2tERJqx2cRIz2PdMIT4S5ZHvLj0+bVcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:ba:f1:67:42:44:6c:41:a1:d1:82:0b:63:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=c42c6c43c85e126681b33b092514de4de1956048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:23:a9:cb:fc:bd:76:2d:be:33:60:b5:c6: a7:27:77:83:80:76:a6:2a:6c:95:94:ca:10:57:b6: 33:d7:71:e1:25:53:21:55:ad:31:e4:a8:50:3a:fa: 17:af:04:a4:bd:a6:32:27:8b:a6:f5:82:57:2e:e2: c0:a0:ab:2d:5c:3f:95:9c:4e:6e:d6:ae:56:d7:f6: 28:bf:31:83:6a:96:82:cd:8d:19:0b:22:70:4b:9d: 37:49:55:c3:1e:cf:40:90:0a:9e:7f:32:32:32:37: 2e:e7:76:af:9d:d6:d0:0d:45:e6:4e:ee:43:a7:26: b4:ae:41:6a:98:d9:4b:42:22:12:b7:f4:cb:df:b3: c5:07:18:76:4e:73:94:90:a5:45:16:fb:cb:6c:e5: 7c:a7:18:aa:06:b5:16:df:3a:86:9d:c8:d6:ce:bb: 78:1c:4c:2b:ae:74:28:13:39:04:23:73:f3:27:e1: be:26:9c:c9:75:a7:7a:a0:33:29:41:64:44:a8:84: 93:3a:15:5a:ce:ef:9f:c1:40:a1:3c:6a:36:03:35: fa:e7:0a:af:8a:57:35:69:3f:0c:18:aa:47:84:5a: 4e:9c:a8:cf:dc:31:24:4a:df:69:b1:23:a5:39:b1: e5:a8:4a:bb:af:e5:c3:13:99:29:d8:f5:4d:2d:66: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:6C:43:C8:5E:12:66:81:B3:3B:09:25:14:DE:4D:E1:95:60:48 X509v3 Authority Key Identifier: keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b2:f6:cc:01:09:2a:57:b5:12:3e:c6:95:4c:8d:0d:cd:0d: d9:1d:a7:0c:56:be:99:05:11:00:a3:ea:1a:73:15:da:97:b7: 6e:3c:88:bf:75:c1:13:df:fc:62:d4:d5:ab:9e:98:2b:2a:a5: 39:81:5c:22:be:ff:a4:1a:0b:c6:20:bc:9f:63:a7:3e:70:c7: 87:86:aa:02:0d:53:11:63:24:82:b1:ad:0e:7f:a8:1c:4c:47: 4e:ab:b1:6f:e4:b6:1d:d3:1c:f2:4a:35:8a:d0:9d:07:22:48: de:39:c9:b7:3b:db:03:e1:06:db:3f:dd:f2:f4:4d:7d:61:30: b6:d4:99:4b:05:99:d5:7e:07:80:74:f7:22:9d:c6:cb:97:34: 2e:01:e3:ac:40:d6:a1:9d:bd:f2:04:1b:56:fc:97:a1:3f:8b: 03:01:60:e2:5b:01:0e:8b:44:0d:8e:85:04:8e:3e:7b:63:85: 04:0a:1c:f4:01:47:6d:a1:15:de:1b:fd:d1:1f:56:23:6c:1d: f7:8b:38:ba:1c:54:2d:d0:37:88:90:07:f2:90:29:92:3a:f0: 9f:53:99:a0:53:b0:ad:cb:29:02:4f:fe:43:8f:c1:44:53:5e: 3f:b5:69:df:fc:00:a6:47:53:f6:9b:ae:b4:75:e0:b8:4b:34: 65:43:66:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLni68WdCRGxBodGCC2OrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYjkxNDAxN2RiNDVlOWY3NWUzOGRkZTNmMDM1N2NlMmI3 MWQ4MjcwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhjNDJjNmM0M2M4NWUxMjY2ODFiMzNiMDkyNTE0ZGU0ZGUxOTU2MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXojqcv8vXYtvjNgtcanJ3eDgHam KmyVlMoQV7Yz13HhJVMhVa0x5KhQOvoXrwSkvaYyJ4um9YJXLuLAoKstXD+VnE5u 1q5W1/YovzGDapaCzY0ZCyJwS503SVXDHs9AkAqefzIyMjcu53avndbQDUXmTu5D pya0rkFqmNlLQiISt/TL37PFBxh2TnOUkKVFFvvLbOV8pxiqBrUW3zqGncjWzrt4 HEwrrnQoEzkEI3PzJ+G+JpzJdad6oDMpQWREqISTOhVazu+fwUChPGo2AzX65wqv ilc1aT8MGKpHhFpOnKjP3DEkSt9psSOlObHlqEq7r+XDE5kp2PVNLWad5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQsbEPIXhJmgbM7CSUU3k3hlWBIMB8GA1UdIwQY MBaAFLu5FAF9tF6fdeON3j8DV84rcdgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMt NmJlOTdlMzcyNDFmLzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMtNmJlOTdlMzcyNDFm LzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbL2zAEJ Kle1Ej7GlUyNDc0N2R2nDFa+mQURAKPqGnMV2pe3bjyIv3XBE9/8YtTVq56YKyql OYFcIr7/pBoLxiC8n2OnPnDHh4aqAg1TEWMkgrGtDn+oHExHTquxb+S2HdMc8ko1 itCdByJI3jnJtzvbA+EG2z/d8vRNfWEwttSZSwWZ1X4HgHT3Ip3Gy5c0LgHjrEDW oZ298gQbVvyXoT+LAwFg4lsBDotEDY6FBI4+e2OFBAoc9AFHbaEV3hv90R9WI2wd 94s4uhxULdA3iJAH8pApkjrwn1OZoFOwrcspAk/+Q4/BRFNeP7Vp3/wApkdT9puu tHXguEs0ZUNm6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:34 2025 by rpki-client