This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json) Hash identifier: 5HO10bT5/pRdYx+ZwhRQCTrCO9u6LBbMubQr9Sf00uo= Subject key identifier: B0:CF:6C:F5:CF:82:5A:1F:84:B5:33:48:F3:1E:56:C8:25:5E:F2:DD Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Certificate serial: 019AF12F198895A9270428C066F5D83B68EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft Manifest number: 07F8 Signing time: Sat 06 Dec 2025 01:03:06 +0000 Manifest this update: Sat 06 Dec 2025 01:03:06 +0000 Manifest next update: Sun 07 Dec 2025 01:03:06 +0000 Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=) 2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: 9vr4WwWMhqfM4ZL2c/YNocg6ImWt5vXy/Jyf0zTmyyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:19:88:95:a9:27:04:28:c0:66:f5:d8:3b:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Validity Not Before: Dec 6 01:03:06 2025 GMT Not After : Dec 7 01:03:06 2025 GMT Subject: CN=b0cf6cf5cf825a1f84b53348f31e56c8255ef2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:fc:5b:79:50:d2:9b:4f:c6:77:fb:14:24: b9:a9:2f:f7:41:bd:a9:16:14:85:96:06:a4:21:9e: 0f:a8:80:de:ec:b4:4d:cd:6d:f9:c6:d9:31:00:c6: b7:da:25:38:bf:76:e4:74:4b:9a:7b:54:10:a1:98: 0f:a9:31:4e:97:21:43:6e:08:b9:5e:a4:0a:f5:4b: 34:e3:a9:1b:1c:73:50:a9:d0:21:ec:fd:22:04:d4: ff:b0:f7:f8:f2:32:67:17:ac:27:e9:5a:83:4d:30: 67:1c:9d:ee:e6:63:b1:94:a7:1d:5c:b6:b6:27:e1: e8:39:df:3f:eb:38:7c:aa:74:5d:56:f0:09:79:f6: 61:62:07:79:05:ad:2c:b6:b0:b3:ce:cb:ab:9d:da: 98:af:7b:3b:21:3d:aa:61:10:06:94:55:ee:f1:cb: cb:33:1c:39:86:5f:4e:2b:57:60:36:80:9b:dd:d9: a3:4e:91:48:ac:5f:a7:fc:04:c9:c5:f0:0b:9e:c8: 6b:47:a3:cf:06:63:39:6b:4d:b2:de:26:d4:7a:a1: 06:bf:75:bb:a7:69:b1:9f:dc:27:4e:40:61:e7:69: 8e:44:e8:e6:f2:4c:e8:e4:5c:42:8e:d0:f5:cc:a1: 3e:9a:49:b6:f9:26:58:4b:57:2a:a4:69:08:3b:82: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:6C:F5:CF:82:5A:1F:84:B5:33:48:F3:1E:56:C8:25:5E:F2:DD X509v3 Authority Key Identifier: keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d5:5f:80:c0:5a:d7:e1:7f:16:82:c7:7e:e8:ca:fa:97:c5: b2:03:98:3e:fb:4b:22:ce:e4:69:d1:45:81:4a:8d:35:3c:1f: ca:78:28:76:60:fb:a5:ff:1f:b3:d0:65:29:b4:05:65:af:4f: f6:9e:7a:63:f3:b8:d3:7a:d2:47:18:ab:54:e3:06:bf:ff:09: d3:59:e6:4e:da:cb:64:de:f3:2c:7e:b3:2a:d0:6b:3d:7a:9a: 1b:74:08:b2:8a:36:42:77:71:25:b0:41:ee:df:fc:b5:17:52: 7c:9a:00:09:36:06:cd:58:39:d0:ba:ec:9f:b0:eb:a7:ac:4b: 82:f3:ea:58:c4:21:15:ee:a7:ca:bb:54:81:e1:ab:a0:ec:06: 16:7f:e7:d6:23:05:3d:6b:cf:09:f1:0d:81:c8:d8:aa:82:50: 96:b2:d0:05:f6:9b:61:cf:6d:1c:cd:16:2d:97:e7:86:69:d8: ca:73:5b:93:ee:92:55:8b:0b:ad:5b:80:4b:55:63:56:d7:b5: 08:68:a8:c6:e2:f0:4b:7a:ef:cd:a1:4b:6d:7f:3e:5d:cb:27: bd:7b:52:0e:38:e6:46:74:0c:fc:76:85:ea:6d:d4:bb:bb:0b: 75:9d:ec:59:17:fd:d9:e9:a4:d8:38:78:fc:80:eb:f0:ec:70: 86:5f:3b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxmIlaknBCjAZvXYO2juMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmU0MmNiMzBjM2Q0OTZmOTZmMTFlZDkzY2Y3NDM2MTcw OGM3ZTEwHhcNMjUxMjA2MDEwMzA2WhcNMjUxMjA3MDEwMzA2WjAzMTEwLwYDVQQD EyhiMGNmNmNmNWNmODI1YTFmODRiNTMzNDhmMzFlNTZjODI1NWVmMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS/8W3lQ0ptPxnf7FCS5qS/3Qb2p FhSFlgakIZ4PqIDe7LRNzW35xtkxAMa32iU4v3bkdEuae1QQoZgPqTFOlyFDbgi5 XqQK9Us046kbHHNQqdAh7P0iBNT/sPf48jJnF6wn6VqDTTBnHJ3u5mOxlKcdXLa2 J+HoOd8/6zh8qnRdVvAJefZhYgd5Ba0strCzzsurndqYr3s7IT2qYRAGlFXu8cvL Mxw5hl9OK1dgNoCb3dmjTpFIrF+n/ATJxfALnshrR6PPBmM5a02y3ibUeqEGv3W7 p2mxn9wnTkBh52mOROjm8kzo5FxCjtD1zKE+mkm2+SZYS1cqpGkIO4JE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDPbPXPglofhLUzSPMeVsglXvLdMB8GA1UdIwQY MBaAFLv+Qssww9SW+W8R7ZPPdDYXCMfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUt ZjFkMTE0MTNlMThhLzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUtZjFkMTE0MTNlMThh LzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdVfgMBa 1+F/FoLHfujK+pfFsgOYPvtLIs7kadFFgUqNNTwfyngodmD7pf8fs9BlKbQFZa9P 9p56Y/O403rSRxirVOMGv/8J01nmTtrLZN7zLH6zKtBrPXqaG3QIsoo2QndxJbBB 7t/8tRdSfJoACTYGzVg50Lrsn7Drp6xLgvPqWMQhFe6nyrtUgeGroOwGFn/n1iMF PWvPCfENgcjYqoJQlrLQBfabYc9tHM0WLZfnhmnYynNbk+6SVYsLrVuAS1VjVte1 CGioxuLwS3rvzaFLbX8+XcsnvXtSDjjmRnQM/HaF6m3Uu7sLdZ3sWRf92emk2Dh4 /IDr8Oxwhl87Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:53 2025 by rpki-client