This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json) Hash identifier: 2016rXUIDCj9msCM6q2rQFCRW7R9wXm2RHep+2Zbsxk= Subject key identifier: 1E:A5:87:E7:BC:02:F5:A4:E4:F3:34:61:43:D8:A3:30:77:D4:0A:9D Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5 Certificate serial: 019AF19B40FA04B0392D407FF259D9D3E614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft Manifest number: 0A93 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=) 2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: YfVB/r0lYKys2IEHXyxYvnlj5nqMC9YIPclD9rFl2QQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:40:fa:04:b0:39:2d:40:7f:f2:59:d9:d3:e6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=1ea587e7bc02f5a4e4f3346143d8a33077d40a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:8f:6f:2a:e2:34:5d:c6:32:94:2b:ac:38: 57:a1:54:71:da:66:67:f1:a7:2b:74:97:5e:fa:24: d9:25:8e:e5:15:63:8c:bd:ba:9b:a0:c2:3d:e3:20: 68:3f:29:58:fe:fc:48:ee:8e:69:fa:83:a8:61:37: 20:a6:df:5b:c4:af:90:fe:89:9f:e5:26:e2:d7:da: 6e:5d:e8:f6:4f:20:a2:62:a9:9e:66:57:f9:b7:d5: 1e:75:a4:e8:73:35:9a:c9:e5:c4:54:b7:eb:bc:9e: a8:e9:91:ce:da:b0:f7:64:13:3d:96:62:3b:7b:ed: b1:ef:21:2f:17:15:20:fd:be:c1:17:3b:d6:f9:f3: 0f:33:b7:7c:73:8b:77:f0:a5:9d:4d:46:f7:46:37: d9:34:b9:63:a4:1f:74:49:c7:81:6a:1c:8e:fa:a7: 78:25:b4:49:10:f9:89:3e:90:d5:a6:e4:7e:29:a8: fa:9e:18:cf:c5:71:68:36:54:af:2a:81:a9:22:25: 81:36:a4:06:fb:ea:ba:a2:7c:f3:ec:72:12:6d:e9: 5a:df:27:c3:c6:b3:cc:b6:f2:b7:ca:f9:8b:e6:b1: 1b:8f:45:02:34:2f:9b:ba:20:56:b2:6c:69:d5:e4: 07:9b:46:91:f5:65:1c:15:4e:48:20:c4:e3:03:04: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A5:87:E7:BC:02:F5:A4:E4:F3:34:61:43:D8:A3:30:77:D4:0A:9D X509v3 Authority Key Identifier: keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:fc:c3:b8:48:8e:9b:96:79:55:26:0b:a3:31:8b:9a:50: 77:77:83:37:ab:92:c7:42:d9:ef:95:32:c2:79:f7:17:8b:8b: 40:9a:6b:f2:90:8a:76:82:7b:e1:53:0f:e4:ad:08:3a:b7:2f: dc:79:65:a9:c8:62:91:f1:ae:76:0c:44:25:9a:97:1b:85:ca: 55:74:4d:48:f6:2a:c3:62:a9:4a:9e:6a:82:64:ac:a1:4d:78: 25:0a:d2:fb:ab:65:52:8a:54:bc:f1:c0:38:5f:13:a9:b7:7b: 0f:57:c7:56:40:d6:f3:67:0b:b5:74:ac:16:0c:44:cb:ae:86: 0a:e2:a9:60:e7:78:88:93:f1:8b:e4:0e:bc:06:a6:f4:f8:b7: e2:49:05:07:4c:5f:a3:49:41:58:62:ee:e3:e4:35:b0:72:b3: 5d:6b:3d:b2:ff:92:b0:f2:55:42:9a:9e:9a:31:9f:0e:c6:7c: 01:17:00:42:c8:75:fe:d8:f5:62:83:fb:8e:70:45:cf:d0:e8: 74:39:9a:6e:66:c6:92:bc:b0:5a:67:66:31:cd:cd:05:bd:a8: 85:fa:81:f8:ce:5e:e7:b3:43:68:bd:1c:b4:f3:90:5d:d0:71: 4d:30:13:1e:b8:7f:81:65:d0:47:85:a7:ca:c3:47:51:67:f8: aa:23:1c:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0D6BLA5LUB/8lnZ0+YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdiYzZjN2M5M2EzY2ZiMWUyNWJiYmVmYzRmMjA3YWUy NWJkYTUwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EygxZWE1ODdlN2JjMDJmNWE0ZTRmMzM0NjE0M2Q4YTMzMDc3ZDQwYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdKPbyriNF3GMpQrrDhXoVRx2mZn 8acrdJde+iTZJY7lFWOMvbqboMI94yBoPylY/vxI7o5p+oOoYTcgpt9bxK+Q/omf 5Sbi19puXej2TyCiYqmeZlf5t9UedaToczWayeXEVLfrvJ6o6ZHO2rD3ZBM9lmI7 e+2x7yEvFxUg/b7BFzvW+fMPM7d8c4t38KWdTUb3RjfZNLljpB90SceBahyO+qd4 JbRJEPmJPpDVpuR+Kaj6nhjPxXFoNlSvKoGpIiWBNqQG++q6onzz7HISbela3yfD xrPMtvK3yvmL5rEbj0UCNC+buiBWsmxp1eQHm0aR9WUcFU5IIMTjAwSAyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6lh+e8AvWk5PM0YUPYozB31AqdMB8GA1UdIwQY MBaAFLv3vGx8k6PPseJbu+/E8geuJb2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjct NTkwZjU0MGM0NTZkLzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjctNTkwZjU0MGM0NTZk LzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqT8w7hI jpuWeVUmC6Mxi5pQd3eDN6uSx0LZ75Uywnn3F4uLQJpr8pCKdoJ74VMP5K0IOrcv 3HllqchikfGudgxEJZqXG4XKVXRNSPYqw2KpSp5qgmSsoU14JQrS+6tlUopUvPHA OF8Tqbd7D1fHVkDW82cLtXSsFgxEy66GCuKpYOd4iJPxi+QOvAam9Pi34kkFB0xf o0lBWGLu4+Q1sHKzXWs9sv+SsPJVQpqemjGfDsZ8ARcAQsh1/tj1YoP7jnBFz9Do dDmabmbGkrywWmdmMc3NBb2ohfqB+M5e57NDaL0ctPOQXdBxTTATHrh/gWXQR4Wn ysNHUWf4qiMcSA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:13 2025 by rpki-client