This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json) Hash identifier: 2iyoxNMZxAPCV8Ph2wJCOwNOU2y5ULYJkHjgkH2vHMc= Subject key identifier: B7:BD:05:99:F4:F7:98:96:36:AD:A5:1C:2E:2B:3A:8E:73:13:52:0A Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Certificate serial: 019B2EF9E1DC8DC7E740838FBB22F641429F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft Manifest number: 0818 Signing time: Thu 18 Dec 2025 01:01:26 +0000 Manifest this update: Thu 18 Dec 2025 01:01:26 +0000 Manifest next update: Fri 19 Dec 2025 01:01:26 +0000 Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=) 2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: f39ck6TbCI5/c6OnC+v4qr9Lst7k+8sdxJIyjAzZRGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:e1:dc:8d:c7:e7:40:83:8f:bb:22:f6:41:42:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1 Validity Not Before: Dec 18 01:01:26 2025 GMT Not After : Dec 19 01:01:26 2025 GMT Subject: CN=b7bd0599f4f7989636ada51c2e2b3a8e7313520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:f4:7b:72:19:fd:d0:ec:64:56:fb:56:42: 9b:c4:42:e9:d1:d9:25:ae:c7:04:c7:24:f1:df:12: 55:13:0e:c7:50:ba:5c:0f:1c:4f:a9:bc:52:6a:fc: 1a:52:37:ca:cf:1f:1b:45:d8:ea:e5:37:97:37:ed: e0:8f:bc:05:54:91:69:c8:f8:f0:cb:33:cc:10:aa: 9a:b4:06:50:66:fe:cd:f5:19:62:2e:14:04:46:8c: 1c:d5:6a:14:7f:cd:b7:1c:81:05:f1:d9:e9:d6:a3: 86:0e:97:1f:e0:23:0b:20:d6:f7:42:f2:4f:53:a0: 73:d9:d8:4f:3d:f5:38:9e:6d:40:89:f5:50:a3:12: 6c:74:75:d0:d6:34:0e:3f:37:af:d9:94:1c:bb:14: 1b:f5:35:09:1b:9d:e6:a4:5e:86:b0:07:5f:3f:9d: 06:c8:3c:0c:23:dc:e7:7e:f0:30:0a:9b:4e:5a:a3: 85:9c:c0:98:f9:68:dc:04:bb:71:99:ce:8d:73:63: 14:ed:a9:cf:40:49:8a:e9:d0:82:33:a1:89:4c:36: 66:ee:c1:fc:93:45:c6:61:c1:49:df:41:10:36:39: 55:53:56:36:91:8a:69:8f:3d:8e:eb:39:40:be:7b: 8b:b1:d0:d9:f1:d1:3b:b5:a5:73:bb:c7:8d:59:f3: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BD:05:99:F4:F7:98:96:36:AD:A5:1C:2E:2B:3A:8E:73:13:52:0A X509v3 Authority Key Identifier: keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:93:ad:33:be:89:17:f0:71:89:a0:56:be:a5:3c:2f:01:50: 56:f8:62:2d:a6:0c:2d:45:32:ce:4f:f3:ab:f4:8a:ea:3b:34: 1b:7b:28:37:ca:ca:f0:8f:b6:4a:93:dd:40:3b:73:5c:08:65: 80:f6:e9:7f:08:f6:be:42:a5:e2:e2:6c:ce:c9:26:a7:f0:84: d2:f3:4b:d3:90:c2:8b:fa:4e:7a:ab:19:95:bf:59:61:ea:dc: 10:17:3d:5e:90:33:77:0b:1e:bb:1d:b7:93:66:0a:3d:0c:fd: 06:88:00:78:23:ff:9b:7e:89:6c:81:45:48:68:34:5f:05:89: b0:a4:77:91:49:4c:0d:f7:fd:c1:7d:4d:2d:85:43:fa:c1:d7: aa:01:6b:a8:8b:8f:e0:9c:b1:73:59:dd:a5:32:ff:5d:9b:7e: 96:28:6d:f7:6b:d9:c6:1a:96:06:91:3b:5c:db:0d:7f:21:a4: 75:a2:3a:3d:ed:54:cd:3b:8d:75:eb:40:62:52:14:3c:e7:6b: 2a:16:55:42:79:ca:7f:45:ca:29:58:c3:d3:8d:72:08:25:9b: 59:7c:5d:d6:81:5e:7d:0c:b7:4e:40:e1:6c:68:db:4d:0c:7b: 7a:86:03:90:0f:07:71:eb:cd:1b:dd:b6:73:05:86:9b:34:c6: 0c:fe:c4:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+eHcjcfnQIOPuyL2QUKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmU0MmNiMzBjM2Q0OTZmOTZmMTFlZDkzY2Y3NDM2MTcw OGM3ZTEwHhcNMjUxMjE4MDEwMTI2WhcNMjUxMjE5MDEwMTI2WjAzMTEwLwYDVQQD EyhiN2JkMDU5OWY0Zjc5ODk2MzZhZGE1MWMyZTJiM2E4ZTczMTM1MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89z0e3IZ/dDsZFb7VkKbxELp0dkl rscExyTx3xJVEw7HULpcDxxPqbxSavwaUjfKzx8bRdjq5TeXN+3gj7wFVJFpyPjw yzPMEKqatAZQZv7N9RliLhQERowc1WoUf823HIEF8dnp1qOGDpcf4CMLINb3QvJP U6Bz2dhPPfU4nm1AifVQoxJsdHXQ1jQOPzev2ZQcuxQb9TUJG53mpF6GsAdfP50G yDwMI9znfvAwCptOWqOFnMCY+WjcBLtxmc6Nc2MU7anPQEmK6dCCM6GJTDZm7sH8 k0XGYcFJ30EQNjlVU1Y2kYppjz2O6zlAvnuLsdDZ8dE7taVzu8eNWfOBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe9BZn095iWNq2lHC4rOo5zE1IKMB8GA1UdIwQY MBaAFLv+Qssww9SW+W8R7ZPPdDYXCMfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUt ZjFkMTE0MTNlMThhLzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUtZjFkMTE0MTNlMThh LzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJOtM76J F/BxiaBWvqU8LwFQVvhiLaYMLUUyzk/zq/SK6js0G3soN8rK8I+2SpPdQDtzXAhl gPbpfwj2vkKl4uJszskmp/CE0vNL05DCi/pOeqsZlb9ZYercEBc9XpAzdwseux23 k2YKPQz9BogAeCP/m36JbIFFSGg0XwWJsKR3kUlMDff9wX1NLYVD+sHXqgFrqIuP 4Jyxc1ndpTL/XZt+liht92vZxhqWBpE7XNsNfyGkdaI6Pe1UzTuNdetAYlIUPOdr KhZVQnnKf0XKKVjD041yCCWbWXxd1oFefQy3TkDhbGjbTQx7eoYDkA8HcevNG922 cwWGmzTGDP7E8w== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:09 2025 by rpki-client