This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json) Hash identifier: Hc7YbWbNB+P/Bw43EEKsm/yIlGu6CB4+vbySBJb3VLc= Subject key identifier: 9D:11:CB:DA:47:09:1E:9B:3A:F4:50:08:83:89:EF:FF:50:8A:F8:90 Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d Certificate serial: 019AF0BF2FC2A9088CDFA93B58BF8630C9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft Manifest number: 03C7 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=) 2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=) 3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=) 4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: kgV0S0HQVgTSS1iyMyLyEobdgEruotyp3g139ZGgkK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2f:c2:a9:08:8c:df:a9:3b:58:bf:86:30:c9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=9d11cbda47091e9b3af450088389efff508af890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:ab:70:a8:75:cd:5b:e8:01:ad:65:78:c2: 0d:d1:ae:ec:3e:13:f2:aa:e2:f3:38:0c:4a:c9:02: d2:64:0d:04:dd:8f:4b:ff:11:7d:1b:2a:b8:1d:75: 10:8b:71:9a:78:ac:7e:7b:5d:69:ff:11:fa:68:a0: 5d:af:fa:8f:84:53:89:ff:5c:bd:5f:93:36:47:a1: e8:84:fd:01:fc:4e:4f:a3:50:4e:95:d4:29:f0:4a: e8:50:09:64:fc:fd:8f:09:40:ae:87:50:b0:94:09: ca:cc:9c:73:cb:a7:51:3c:a8:20:a6:e7:f7:0f:1e: 03:0b:ac:27:f0:68:b0:c3:be:80:9f:2d:13:50:59: 77:25:8f:14:35:be:8f:ac:e6:fa:07:5b:33:8c:81: 66:1f:f6:2a:ff:44:27:6d:3a:26:ed:5e:51:6f:2f: 48:93:1b:2c:3a:40:ef:cf:5e:42:bf:7b:65:d0:69: 97:df:52:b8:2e:90:d4:55:30:35:34:2b:3e:b8:09: d5:7a:26:b9:f6:07:13:fa:4f:cf:7a:2e:c5:88:0d: 13:16:f4:ec:35:c7:3b:4a:76:dc:57:2b:c6:26:ed: eb:69:6d:07:05:f2:7d:1e:0b:3e:d9:54:59:fe:e6: 2f:89:21:44:70:b2:0e:3c:39:ff:02:d7:c1:63:f5: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:11:CB:DA:47:09:1E:9B:3A:F4:50:08:83:89:EF:FF:50:8A:F8:90 X509v3 Authority Key Identifier: keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:c3:b8:83:a7:ca:c7:c5:af:24:dd:0f:eb:66:f1:f5:05: ab:35:a7:2c:1e:8d:ce:82:2b:3f:57:77:38:d7:ac:3d:4e:2f: 24:3c:76:f0:61:43:e6:69:c5:3c:8f:28:ce:4f:34:19:75:8c: 04:c7:c0:fd:35:04:b6:35:44:6f:67:36:60:36:f3:34:b9:44: 2e:ba:cb:11:45:c5:2d:34:92:aa:f1:9f:aa:51:a2:65:1f:ff: fc:9a:e9:ea:20:82:c1:19:c8:47:f6:cb:73:13:c6:36:4f:e1: b4:0d:aa:e2:e6:f4:7d:3d:3a:2b:06:cd:7e:ec:a2:0b:14:da: 3b:53:c9:28:83:93:ae:a2:58:42:14:35:b2:26:d2:e1:4b:42: 2e:1d:7a:01:47:3a:89:ba:df:8a:aa:c9:34:fc:2f:9d:cd:c3: 5b:59:08:a3:13:ec:02:d3:23:5e:67:5a:db:e3:88:97:d6:56: 55:e9:44:80:ca:98:96:6e:b3:36:ee:51:19:39:a4:f8:ef:0c: e7:4a:4c:df:dd:2b:a7:8d:7c:b6:23:87:d4:94:56:2c:b0:03: 33:09:c6:4b:f5:74:27:3e:53:af:bd:8b:9f:c0:7d:a4:25:79: 77:6e:82:06:89:c1:e4:00:cb:01:5e:f9:52:7c:c1:98:0a:36: 3c:7b:b4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvy/CqQiM36k7WL+GMMnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj MjAwNmQwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD Eyg5ZDExY2JkYTQ3MDkxZTliM2FmNDUwMDg4Mzg5ZWZmZjUwOGFmODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8yrcKh1zVvoAa1leMIN0a7sPhPy quLzOAxKyQLSZA0E3Y9L/xF9Gyq4HXUQi3GaeKx+e11p/xH6aKBdr/qPhFOJ/1y9 X5M2R6HohP0B/E5Po1BOldQp8EroUAlk/P2PCUCuh1CwlAnKzJxzy6dRPKggpuf3 Dx4DC6wn8Giww76Any0TUFl3JY8UNb6PrOb6B1szjIFmH/Yq/0QnbTom7V5Rby9I kxssOkDvz15Cv3tl0GmX31K4LpDUVTA1NCs+uAnVeia59gcT+k/Pei7FiA0TFvTs Ncc7SnbcVyvGJu3raW0HBfJ9Hgs+2VRZ/uYviSFEcLIOPDn/AtfBY/UPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0Ry9pHCR6bOvRQCIOJ7/9QiviQMB8GA1UdIwQY MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt NDVmNzdkZmEyNjM2LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2 LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk7DuIOn ysfFryTdD+tm8fUFqzWnLB6NzoIrP1d3ONesPU4vJDx28GFD5mnFPI8ozk80GXWM BMfA/TUEtjVEb2c2YDbzNLlELrrLEUXFLTSSqvGfqlGiZR///Jrp6iCCwRnIR/bL cxPGNk/htA2q4ub0fT06KwbNfuyiCxTaO1PJKIOTrqJYQhQ1sibS4UtCLh16AUc6 ibrfiqrJNPwvnc3DW1kIoxPsAtMjXmda2+OIl9ZWVelEgMqYlm6zNu5RGTmk+O8M 50pM390rp418tiOH1JRWLLADMwnGS/V0Jz5Tr72Ln8B9pCV5d26CBonB5ADLAV75 UnzBmAo2PHu04Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client