This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json) Hash identifier: Fh4aA5pc0QhKAZzaDmccJYwmJH48zHSIXDHQZeIPZjo= Subject key identifier: 8F:34:8C:69:99:CE:DA:83:87:A6:35:FF:44:93:B1:DD:C0:1D:D6:1B Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Certificate serial: 019AF2401DD2A74E70D4D323F44F625F9C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft Manifest number: FF Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 3OCyfd9-b0yR0abVJP1F9gKnVqM.roa (hash: /G4JQWC4tt8/O3EYdqfvI2PzBBGKVWMhd1Rq8kOs3ds=) 2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: NTiRGty4uRPCb7bc45Rb4bkVoTZfWk/kpzVwsjBXIXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1d:d2:a7:4e:70:d4:d3:23:f4:4f:62:5f:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=8f348c6999ceda8387a635ff4493b1ddc01dd61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:0b:22:55:2d:10:97:0e:8c:3d:6a:7f:37: 86:cc:0d:89:2c:74:07:09:af:ee:2f:e9:a6:cd:cc: c4:ab:9a:91:b2:37:10:2c:18:d1:87:fa:98:ff:f3: d7:fa:ac:f4:6d:23:a7:32:9d:3d:ca:ff:21:9f:d6: 73:a1:c2:60:e8:0f:15:6b:cb:e9:76:fc:3c:da:9d: d0:fe:2a:80:ed:5a:88:f0:cd:2a:5e:1a:47:8c:bd: a7:82:61:57:a0:81:32:57:83:3b:82:95:78:67:b4: 53:29:8e:22:f5:9c:60:8b:c0:cb:ce:6e:42:db:74: 2a:97:6d:a7:05:20:71:03:1a:ef:b0:da:ad:3e:14: b5:5e:b7:ec:0c:28:f6:a1:52:1c:fc:10:5e:8f:e1: 4d:f0:ff:84:57:35:f2:07:b2:87:62:12:49:f8:30: d7:8d:20:8c:b8:71:77:22:48:af:0d:6f:32:4d:27: 5b:aa:3b:47:04:aa:a4:2f:8b:28:3b:4e:55:59:f7: 06:7f:47:2e:fc:0c:c0:88:ff:4c:36:69:bf:3f:79: 67:00:d9:71:c6:2f:66:89:83:0f:4a:56:80:13:23: 1b:c3:2c:ec:be:4c:05:1e:d7:c2:4c:87:27:7f:db: 71:d0:be:fd:4b:8c:14:00:e3:29:75:c4:1c:c3:7c: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:34:8C:69:99:CE:DA:83:87:A6:35:FF:44:93:B1:DD:C0:1D:D6:1B X509v3 Authority Key Identifier: keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e2:94:89:ba:2c:2f:49:bc:5a:db:a0:e7:6a:ca:6a:9a:ae: 66:5e:ad:8d:76:b6:99:cc:a6:eb:79:d5:bf:ff:bf:58:6b:d3: 10:ac:bb:c3:41:ad:23:35:a4:10:ad:18:82:d1:0d:64:d8:8d: c0:15:62:e7:5b:51:68:f1:d1:9e:15:06:23:46:55:3c:33:de: a5:99:ce:e9:88:bd:4f:19:44:b8:e2:ab:e6:d7:a0:31:a0:8b: ac:d5:fb:7e:80:78:ae:b2:bc:59:e5:41:1e:c5:bc:f7:f2:b5: fa:62:dc:9f:55:fd:34:d7:22:25:8f:9d:d0:bf:f8:dd:e2:2a: 8c:f4:92:33:2e:30:24:b4:af:92:ce:ea:7f:ef:08:e5:0f:45: d7:cd:10:26:68:cb:21:5a:c3:80:a1:4b:0c:07:1e:fa:a6:aa: cd:5d:19:2a:b6:d9:cb:9e:fd:6e:65:ad:eb:28:20:bf:2c:11: ca:53:1e:e7:55:63:12:f8:45:56:f6:9c:de:48:5d:78:9e:a4: d7:02:05:41:49:71:58:e0:df:4e:89:e1:40:d6:13:e0:b5:bf: 19:de:9b:d5:f6:5b:38:17:6a:96:91:86:39:8c:9c:d1:29:93: ed:67:30:02:7e:73:bc:48:02:df:0b:92:6f:1e:cc:63:3d:36: c9:e5:81:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB3Sp05w1NMj9E9iX5yQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTNiZGIyYzc4NDZmYmY3ZDAwODdkYjQ1NTJlZWIzNjNk ZjllYTUwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg4ZjM0OGM2OTk5Y2VkYTgzODdhNjM1ZmY0NDkzYjFkZGMwMWRkNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYALIlUtEJcOjD1qfzeGzA2JLHQH Ca/uL+mmzczEq5qRsjcQLBjRh/qY//PX+qz0bSOnMp09yv8hn9ZzocJg6A8Va8vp dvw82p3Q/iqA7VqI8M0qXhpHjL2ngmFXoIEyV4M7gpV4Z7RTKY4i9Zxgi8DLzm5C 23Qql22nBSBxAxrvsNqtPhS1XrfsDCj2oVIc/BBej+FN8P+EVzXyB7KHYhJJ+DDX jSCMuHF3IkivDW8yTSdbqjtHBKqkL4soO05VWfcGf0cu/AzAiP9MNmm/P3lnANlx xi9miYMPSlaAEyMbwyzsvkwFHtfCTIcnf9tx0L79S4wUAOMpdcQcw3yVCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI80jGmZztqDh6Y1/0STsd3AHdYbMB8GA1UdIwQY MBaAFLujvbLHhG+/fQCH20VS7rNj356lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMt YWEzNGQxZmZmMzg3LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMtYWEzNGQxZmZmMzg3 LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+KUibos L0m8Wtug52rKapquZl6tjXa2mcym63nVv/+/WGvTEKy7w0GtIzWkEK0YgtENZNiN wBVi51tRaPHRnhUGI0ZVPDPepZnO6Yi9TxlEuOKr5tegMaCLrNX7foB4rrK8WeVB HsW89/K1+mLcn1X9NNciJY+d0L/43eIqjPSSMy4wJLSvks7qf+8I5Q9F180QJmjL IVrDgKFLDAce+qaqzV0ZKrbZy579bmWt6yggvywRylMe51VjEvhFVvac3khdeJ6k 1wIFQUlxWODfTonhQNYT4LW/Gd6b1fZbOBdqlpGGOYyc0SmT7WcwAn5zvEgC3wuS bx7MYz02yeWBVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:26 2025 by rpki-client