This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json) Hash identifier: 2aapF/gwW5rrhd32eZdqVnrM4RRW5hVJM5BSimP4LbA= Subject key identifier: 28:54:D1:0A:BF:2B:65:53:BB:B8:6E:B1:14:A9:BB:53:82:00:7B:0C Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2 Certificate serial: 019AF19BAEA31D750B58207B52B59F4F7F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft Manifest number: 11BB Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=) 2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: hYv7OhX72h/9EF8mko6xsqDhTFK5eP7AjeIVXIeDfnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ae:a3:1d:75:0b:58:20:7b:52:b5:9f:4f:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2 Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=2854d10abf2b6553bbb86eb114a9bb5382007b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:4d:e2:9b:ed:17:77:9b:88:8a:c0:1e:8b: 7b:b8:e4:c4:a3:b4:85:a5:60:87:cc:fc:26:d3:8d: d5:8e:f0:cd:cc:30:b9:da:e9:69:3e:5a:fe:81:49: aa:79:23:f4:dd:35:05:bc:71:2b:f2:a3:f4:33:1e: 68:7b:81:19:ea:ad:af:0f:d8:17:e2:a5:6e:97:32: 6f:67:ce:62:b0:4b:c2:67:89:52:74:53:ab:43:30: 03:2e:a3:cd:92:7e:75:ac:ee:31:49:8a:d5:82:45: 8e:ae:2b:f7:0d:ef:3f:c3:88:45:71:b7:57:fb:7b: 8c:4a:3f:79:75:c0:63:e8:c9:75:b6:cb:a4:32:84: f0:8b:18:17:84:42:a0:02:ab:4c:13:7e:a9:06:2a: fd:a5:fb:bf:35:53:32:f0:ef:c1:eb:37:4f:2c:6d: a1:a1:05:9f:fe:f8:38:df:36:cf:9a:f8:90:06:0c: 5a:8a:9d:66:b3:17:4f:9e:63:f0:06:d0:40:10:c8: f5:9e:24:06:e9:c6:04:db:b4:29:bd:00:8f:17:4a: 1f:47:b5:d0:38:c5:0a:46:9d:4c:d3:0d:79:7a:32: 49:5e:52:e6:ae:c5:2d:7c:ff:f7:1b:10:67:37:ba: bf:e6:9d:2a:f3:a8:2c:31:09:a8:c4:c3:fc:04:e6: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:54:D1:0A:BF:2B:65:53:BB:B8:6E:B1:14:A9:BB:53:82:00:7B:0C X509v3 Authority Key Identifier: keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:a7:ac:64:b7:33:03:7a:ca:47:9c:f8:b0:cf:b5:7d:5f: 1c:38:64:ab:9b:0f:6e:d5:6d:1d:0d:ad:47:17:e9:11:6e:23: a1:b5:bd:41:09:85:91:bf:e0:b8:7d:d2:c7:7a:22:e5:8f:3e: 77:50:f9:ab:00:d9:90:02:b6:af:c6:45:23:e3:62:16:28:68: 8b:ad:57:bd:c6:6b:30:b8:34:3a:ac:04:6a:1f:c0:eb:53:0b: f1:d2:32:22:7b:f6:bc:d2:0f:34:f2:1b:83:49:34:75:fe:fb: dd:d3:d8:ae:df:60:9b:1e:2a:02:85:8f:02:2a:16:67:6b:b6: 4d:d7:96:0b:d0:2e:8f:4f:c1:48:d8:cc:04:6e:ad:36:4b:71: dd:1d:0b:27:32:33:40:1b:1e:2d:3f:a8:f2:b9:47:33:2f:02: c7:f8:16:dd:13:67:8c:37:f7:2a:ba:d5:b2:a1:d7:e0:bd:8a: b3:38:7d:d4:05:3a:87:d1:62:64:16:e2:13:b6:e0:b0:5c:3f: a5:b0:f5:53:33:ba:ad:d9:ec:45:66:00:6b:e0:a8:0e:5f:24: 57:a2:3b:bc:26:21:d5:de:bd:8b:d6:77:5e:b4:c0:54:c7:9b: 2c:63:6b:c3:98:61:14:b0:15:7d:49:29:ff:f5:fd:4b:3a:35: c2:dd:e5:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm66jHXULWCB7UrWfT3+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNjJmZTZiN2YzZDM2NDMzMmJjZDZlMGRhZjc5MjI2Y2Nm ODA5ZTIwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygyODU0ZDEwYWJmMmI2NTUzYmJiODZlYjExNGE5YmI1MzgyMDA3YjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dtN4pvtF3ebiIrAHot7uOTEo7SF pWCHzPwm043VjvDNzDC52ulpPlr+gUmqeSP03TUFvHEr8qP0Mx5oe4EZ6q2vD9gX 4qVulzJvZ85isEvCZ4lSdFOrQzADLqPNkn51rO4xSYrVgkWOriv3De8/w4hFcbdX +3uMSj95dcBj6Ml1tsukMoTwixgXhEKgAqtME36pBir9pfu/NVMy8O/B6zdPLG2h oQWf/vg43zbPmviQBgxaip1msxdPnmPwBtBAEMj1niQG6cYE27QpvQCPF0ofR7XQ OMUKRp1M0w15ejJJXlLmrsUtfP/3GxBnN7q/5p0q86gsMQmoxMP8BOaZ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChU0Qq/K2VTu7husRSpu1OCAHsMMB8GA1UdIwQY MBaAFLti/mt/PTZDMrzW4Nr3kibM+AniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQt MTQxNDUwZjEwYTg1LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQtMTQxNDUwZjEwYTg1 LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsmnrGS3 MwN6ykec+LDPtX1fHDhkq5sPbtVtHQ2tRxfpEW4jobW9QQmFkb/guH3Sx3oi5Y8+ d1D5qwDZkAK2r8ZFI+NiFihoi61XvcZrMLg0OqwEah/A61ML8dIyInv2vNIPNPIb g0k0df773dPYrt9gmx4qAoWPAioWZ2u2TdeWC9Auj0/BSNjMBG6tNktx3R0LJzIz QBseLT+o8rlHMy8Cx/gW3RNnjDf3KrrVsqHX4L2Kszh91AU6h9FiZBbiE7bgsFw/ pbD1UzO6rdnsRWYAa+CoDl8kV6I7vCYh1d69i9Z3XrTAVMebLGNrw5hhFLAVfUkp //X9Szo1wt3llA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:24 2025 by rpki-client