This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json) Hash identifier: 9qN+rdhwpKBtQP5KBWohsWjBvtCHeJsEViWlYkF1uFM= Subject key identifier: B6:B4:6E:FB:AE:D1:FA:20:8A:57:6A:CF:0C:CD:65:BD:0D:D9:E3:87 Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Certificate serial: 019AF2E43EDEA9679BB6832E32567E8862CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft Manifest number: 0152 Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: j8bQQ_2ixu-vog4cLNKhBgofx1M.roa (hash: v4k62I4wJVyjDK80IFPhBu/XJr/LGdFEyW7xkPuyAOU=) 2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: gkQ4nBMrBnbRriUCVlihuLiHPgXm0PVRN4q0hULecrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3e:de:a9:67:9b:b6:83:2e:32:56:7e:88:62:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=b6b46efbaed1fa208a576acf0ccd65bd0dd9e387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:18:aa:5b:5c:b8:d0:52:cf:7d:6c:46:aa: b7:8e:93:58:ad:06:32:cb:3d:06:fe:11:c5:f8:a7: a7:6a:ff:2d:ed:5f:fd:45:f3:df:0a:2f:af:d7:9d: dd:2a:51:ad:d3:4b:4c:c6:5e:76:12:d5:e3:df:1c: 2d:15:84:87:2b:16:c0:34:2b:0e:0c:47:f9:cf:cc: db:56:15:0d:ba:16:d9:42:94:6f:34:c6:fb:2f:5a: d3:c5:1c:f9:d7:4e:4e:fe:62:e4:7e:a6:1e:86:dd: ce:59:34:c6:d7:b4:b2:ff:0b:49:dd:f4:22:aa:91: cb:4c:5e:ef:98:2d:e3:de:d5:f5:c6:4c:68:41:5b: c2:12:97:5c:1d:f8:fb:3f:f2:de:1e:0b:e0:c7:29: 56:5e:cb:35:9c:f3:01:00:6a:03:0a:5f:f1:d1:65: d4:cf:f1:6b:58:c1:ea:5d:84:7b:51:bd:ae:d0:98: 9d:44:2a:b6:1d:36:11:e6:51:51:43:21:6e:7f:a9: 1f:f6:e7:63:bd:3c:e4:d0:78:6b:67:27:b4:4b:12: 47:fd:c9:a0:2e:1c:39:31:69:8e:94:33:86:39:94: 74:92:c6:c9:b2:da:9c:ac:a0:23:b2:8b:2d:1f:a8: 1b:2b:0e:06:57:7c:e4:65:d5:99:00:b1:ef:be:6d: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:6E:FB:AE:D1:FA:20:8A:57:6A:CF:0C:CD:65:BD:0D:D9:E3:87 X509v3 Authority Key Identifier: keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:9f:2b:58:61:c4:17:a5:0c:96:ff:97:70:46:a0:f7:85: 76:f4:9d:fc:4f:6b:0b:91:99:78:1d:4c:d1:70:ee:55:39:fa: ac:a4:1e:3d:bd:32:bb:da:9b:d2:8d:14:d2:46:26:32:e5:66: e2:e3:4e:52:f2:c0:5a:24:62:ab:e7:ba:26:2d:a0:58:2e:e5: 24:40:a9:e0:e6:d5:18:e1:04:c9:8f:c5:77:03:ca:9c:e4:e5: 79:09:d8:80:c5:2e:43:d3:75:0d:6b:07:76:ff:e8:a4:e6:b4: a4:a9:43:40:96:c6:3d:1b:92:99:9f:55:c5:13:8b:39:5b:b0: ba:68:64:e0:c4:dd:48:bc:f7:9c:52:ef:90:65:15:94:e5:d8: 68:d4:9c:cb:3f:ef:84:de:6e:b1:19:8e:a6:29:2a:4e:86:bd: c6:b7:15:65:03:a0:d2:4e:ce:52:d7:31:26:cf:04:9a:45:de: 4e:51:71:cf:79:4e:3d:59:3e:d0:bd:61:4b:96:27:b6:d8:93: 13:15:cb:ed:a3:5b:1b:b3:2f:c7:f7:e0:f8:38:62:f0:77:91: c0:9b:f4:4d:b6:23:b8:e4:52:6e:06:6c:5f:f8:ca:6a:6b:3d: e0:d0:0d:c3:80:84:3e:0d:eb:49:4d:07:b1:51:18:a9:f9:a2: a2:76:58:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D7eqWebtoMuMlZ+iGLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2 MGE4MjAwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD EyhiNmI0NmVmYmFlZDFmYTIwOGE1NzZhY2YwY2NkNjViZDBkZDllMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjcYqltcuNBSz31sRqq3jpNYrQYy yz0G/hHF+Kenav8t7V/9RfPfCi+v153dKlGt00tMxl52EtXj3xwtFYSHKxbANCsO DEf5z8zbVhUNuhbZQpRvNMb7L1rTxRz5105O/mLkfqYeht3OWTTG17Sy/wtJ3fQi qpHLTF7vmC3j3tX1xkxoQVvCEpdcHfj7P/LeHgvgxylWXss1nPMBAGoDCl/x0WXU z/FrWMHqXYR7Ub2u0JidRCq2HTYR5lFRQyFuf6kf9udjvTzk0HhrZye0SxJH/cmg Lhw5MWmOlDOGOZR0ksbJstqcrKAjsostH6gbKw4GV3zkZdWZALHvvm2SiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa0bvuu0fogildqzwzNZb0N2eOHMB8GA1UdIwQY MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWifK1hh xBelDJb/l3BGoPeFdvSd/E9rC5GZeB1M0XDuVTn6rKQePb0yu9qb0o0U0kYmMuVm 4uNOUvLAWiRiq+e6Ji2gWC7lJECp4ObVGOEEyY/FdwPKnOTleQnYgMUuQ9N1DWsH dv/opOa0pKlDQJbGPRuSmZ9VxROLOVuwumhk4MTdSLz3nFLvkGUVlOXYaNScyz/v hN5usRmOpikqToa9xrcVZQOg0k7OUtcxJs8EmkXeTlFxz3lOPVk+0L1hS5YnttiT ExXL7aNbG7Mvx/fg+Dhi8HeRwJv0TbYjuORSbgZsX/jKams94NANw4CEPg3rSU0H sVEYqfmionZYXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:08 2025 by rpki-client