This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json) Hash identifier: czCKA6WNIljnZqyhwsfoh0WcYaoqdDmz02T+peihw/s= Subject key identifier: 10:A6:7D:2E:DD:0D:2E:E8:E7:F8:63:87:44:45:E5:56:75:DB:96:C3 Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Certificate serial: 019AF2E4579DA83739D8B2FD5C4FD781220F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft Manifest number: 1639 Signing time: Sat 06 Dec 2025 09:00:42 +0000 Manifest this update: Sat 06 Dec 2025 09:00:42 +0000 Manifest next update: Sun 07 Dec 2025 09:00:42 +0000 Files and hashes: 1: 1-HV_se_LfFqz35hXIE-8tE-z0RM.roa (hash: stwCsy3sx44tIixznBeQeE2qFxr/d55zZce3o/IjoOI=) 2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=) 3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=) 4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: qYzZjfL/eMPxabCsZSCNBKwD2DPjppj7iC/Zk8iCYbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:57:9d:a8:37:39:d8:b2:fd:5c:4f:d7:81:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Validity Not Before: Dec 6 09:00:42 2025 GMT Not After : Dec 7 09:00:42 2025 GMT Subject: CN=10a67d2edd0d2ee8e7f863874445e55675db96c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:8b:69:2b:57:a6:df:57:10:87:fd:d2:bc: 07:ef:a3:f6:d9:64:04:71:00:91:1a:12:69:ea:8f: 46:9a:f0:e2:b6:dd:ea:1b:40:53:1d:3f:a5:cc:e5: 5e:90:61:85:6c:3c:68:da:9f:8e:ca:9a:d0:4c:45: 9a:d6:4b:37:d1:1b:22:de:09:f8:11:fb:0b:05:92: bd:a9:88:51:74:a8:4c:fb:0b:2e:20:62:8f:27:a0: f7:90:d3:38:3b:5f:77:fc:a0:67:63:3b:9f:5d:89: 03:e8:0b:29:c6:7c:14:80:d9:9d:bf:67:30:07:4b: b5:71:95:0e:d0:74:17:cc:d2:79:04:c4:c0:0a:47: 4f:dc:8b:8d:33:ff:d0:88:f9:56:27:b0:7d:ab:87: 6b:de:43:8e:dc:db:26:5f:6e:7a:70:29:81:8d:e3: ee:cb:91:71:ad:f1:8d:3e:d1:ba:12:f5:83:6b:ae: 86:c8:21:e8:b3:37:9b:31:bf:5e:8e:61:ad:c8:01: 4d:10:57:fd:51:76:7a:d1:1b:65:43:2b:e2:11:99: 4c:98:83:ea:82:53:06:09:41:c2:bb:d3:e4:64:46: 82:83:1b:31:30:8a:e8:5d:fe:23:f5:55:be:32:34: bd:76:2d:ac:5a:3a:17:27:03:ac:b1:71:43:8e:cc: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:7D:2E:DD:0D:2E:E8:E7:F8:63:87:44:45:E5:56:75:DB:96:C3 X509v3 Authority Key Identifier: keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:e6:3f:63:b2:5a:05:27:76:51:33:8d:f0:93:24:4c:ad: f0:ce:3e:f7:96:8e:40:13:a7:f3:d1:b8:8e:9b:0d:64:ff:c2: 3f:9b:2a:80:36:65:be:b6:e0:69:ca:0f:9f:be:9f:a7:42:d9: f4:88:4f:ba:db:53:aa:9f:2b:a6:e6:08:87:e6:a3:30:a6:1a: 0e:e7:67:1a:fc:cd:de:d6:82:f6:50:28:07:71:eb:98:83:68: 1d:44:d7:07:47:61:23:b6:75:2f:71:04:bf:78:97:8e:c0:3b: 1e:42:52:59:53:eb:6a:f0:ef:1a:dc:67:fb:bb:ff:3a:5c:49: ff:f3:b8:ec:53:9f:ce:ef:35:2e:d1:df:7c:2a:b1:45:54:7d: 63:51:cc:09:79:da:46:49:ee:82:14:f6:00:e8:94:68:85:c7: 78:af:21:67:9f:43:67:61:ea:51:32:9c:11:ac:c1:0c:70:9c: 95:67:6b:48:f3:a1:67:c9:72:98:06:82:11:4a:ee:c2:ea:59: 14:ab:1d:6d:d5:66:03:5c:9b:62:11:d2:c1:fe:fe:ee:5c:77: 84:01:37:a4:44:cc:83:34:c6:0c:23:d9:ee:c6:0c:4f:78:21: 26:24:ff:ef:a1:68:1d:79:10:6f:5d:bf:67:c7:62:d5:47:d3: 3d:57:2c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FedqDc52LL9XE/XgSIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm NjIyNGEwHhcNMjUxMjA2MDkwMDQyWhcNMjUxMjA3MDkwMDQyWjAzMTEwLwYDVQQD EygxMGE2N2QyZWRkMGQyZWU4ZTdmODYzODc0NDQ1ZTU1Njc1ZGI5NmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtriLaStXpt9XEIf90rwH76P22WQE cQCRGhJp6o9GmvDitt3qG0BTHT+lzOVekGGFbDxo2p+OyprQTEWa1ks30Rsi3gn4 EfsLBZK9qYhRdKhM+wsuIGKPJ6D3kNM4O193/KBnYzufXYkD6AspxnwUgNmdv2cw B0u1cZUO0HQXzNJ5BMTACkdP3IuNM//QiPlWJ7B9q4dr3kOO3NsmX256cCmBjePu y5FxrfGNPtG6EvWDa66GyCHoszebMb9ejmGtyAFNEFf9UXZ60RtlQyviEZlMmIPq glMGCUHCu9PkZEaCgxsxMIroXf4j9VW+MjS9di2sWjoXJwOssXFDjszkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCmfS7dDS7o5/hjh0RF5VZ125bDMB8GA1UdIwQY MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1 LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6XmP2Oy WgUndlEzjfCTJEyt8M4+95aOQBOn89G4jpsNZP/CP5sqgDZlvrbgacoPn76fp0LZ 9IhPuttTqp8rpuYIh+ajMKYaDudnGvzN3taC9lAoB3HrmINoHUTXB0dhI7Z1L3EE v3iXjsA7HkJSWVPravDvGtxn+7v/OlxJ//O47FOfzu81LtHffCqxRVR9Y1HMCXna RknughT2AOiUaIXHeK8hZ59DZ2HqUTKcEazBDHCclWdrSPOhZ8lymAaCEUruwupZ FKsdbdVmA1ybYhHSwf7+7lx3hAE3pETMgzTGDCPZ7sYMT3ghJiT/76FoHXkQb12/ Z8di1UfTPVcsVw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:17 2025 by rpki-client