This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json) Hash identifier: bKZPFFG2+axiJKp2MhKAqicA9QMMUWTUa4cGKtcngBw= Subject key identifier: 44:52:F4:0C:A7:4F:9D:0F:43:16:4E:E3:E6:1B:6E:9C:46:3F:23:F2 Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6 Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6 Certificate serial: 019AF61C687A36A48ED83D0050434143CFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:00:48 +0000 Manifest this update: Sun 07 Dec 2025 00:00:48 +0000 Manifest next update: Mon 08 Dec 2025 00:00:48 +0000 Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=) 2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: ESpkZp9qi25yzLSCW/yYP3xLi/bCxrd4cFfKbcN1ShA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:68:7a:36:a4:8e:d8:3d:00:50:43:41:43:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6 Validity Not Before: Dec 7 00:00:48 2025 GMT Not After : Dec 8 00:00:48 2025 GMT Subject: CN=4452f40ca74f9d0f43164ee3e61b6e9c463f23f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ed:d2:38:40:3b:52:66:6d:c2:1c:5c:03:19: 59:bb:95:6c:b5:81:1e:35:7a:62:2a:25:1a:94:3c: a4:a7:31:a2:97:b2:00:8b:6a:60:76:f7:f6:fb:64: df:bc:22:9d:0a:85:b9:b7:95:83:eb:f9:75:ee:57: 9c:bb:0e:8b:4a:59:8d:27:e0:57:c4:67:69:48:9c: 98:1b:8d:03:23:66:db:cc:ba:62:08:bd:82:90:0d: ed:23:cd:ec:ae:fe:ec:2b:fc:f6:51:c2:fe:e9:bb: a7:41:8c:27:da:02:b6:6b:29:15:d4:d2:5e:2c:19: 0a:a9:93:5f:1a:6a:44:31:cd:0e:44:c6:67:e3:44: b6:f9:a5:50:40:39:8e:2c:4c:a0:05:d3:5a:88:b7: 9f:a1:97:e1:34:30:ae:9e:96:b8:45:48:2c:b1:94: 8e:ef:b2:60:a6:4a:01:b6:c4:38:f2:93:5f:7a:7e: 82:ba:10:f4:97:0b:6a:a4:37:1c:88:70:27:49:ef: 5e:5b:f4:5d:b0:91:65:aa:0f:a9:e9:e2:49:02:e3: 2d:5f:58:c3:2b:04:c8:8e:0e:16:99:21:a5:10:6f: 89:6c:8a:0e:a2:18:ee:4b:59:92:1a:0e:3d:f0:60: 9b:8e:c4:d8:b5:ac:c0:96:80:22:8a:01:72:de:e7: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:F4:0C:A7:4F:9D:0F:43:16:4E:E3:E6:1B:6E:9C:46:3F:23:F2 X509v3 Authority Key Identifier: keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:4a:85:10:c9:05:34:91:80:0d:5b:ef:f3:04:a3:a9:0f: 18:98:01:c5:a4:ad:ef:31:c1:b2:b1:82:24:6a:b5:ea:44:73: cb:b3:4d:c5:34:43:ec:2f:88:9f:3f:7d:e9:c5:5d:15:ec:49: ad:08:ef:bd:46:d1:e8:5a:b9:aa:84:48:75:be:99:42:9f:8e: 7d:9b:2a:08:f1:83:5c:ed:10:f6:fc:84:d1:74:1a:c3:03:ae: 4b:d8:55:3b:fb:a2:ce:e9:2d:fd:5c:a6:e6:75:9b:20:e5:28: 4e:dc:c4:ff:98:ea:24:23:2e:98:1b:20:ed:00:eb:f8:e0:7a: d7:69:3f:a0:26:e3:4c:f9:97:d0:5b:5e:f7:98:af:57:69:a7: 67:68:a0:cb:85:78:51:38:5d:b4:9e:da:63:71:13:d7:55:fb: 2a:17:41:e9:07:7d:cb:7b:2b:fb:78:62:64:c6:af:de:e0:2d: 72:2b:bb:e1:f0:ed:c4:2f:0c:e6:b8:15:e5:96:db:c8:88:71: 37:c3:7e:2f:f1:b0:89:18:1d:d6:c4:b3:b4:8c:97:1c:2e:75: 0d:c5:bc:c4:65:48:60:43:19:99:38:5a:c7:d7:b2:b6:5b:52: 6b:4a:ce:80:82:30:69:62:a7:6c:97:d0:76:47:ef:fd:c5:af: bc:34:2b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGh6NqSO2D0AUENBQ8/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmU5NjEyZDE0NDBiYzZjNzA0ZTA0NjVmMGVmNWQ2Y2E3 Mzk3YTYwHhcNMjUxMjA3MDAwMDQ4WhcNMjUxMjA4MDAwMDQ4WjAzMTEwLwYDVQQD Eyg0NDUyZjQwY2E3NGY5ZDBmNDMxNjRlZTNlNjFiNmU5YzQ2M2YyM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8O3SOEA7UmZtwhxcAxlZu5VstYEe NXpiKiUalDykpzGil7IAi2pgdvf2+2TfvCKdCoW5t5WD6/l17lecuw6LSlmNJ+BX xGdpSJyYG40DI2bbzLpiCL2CkA3tI83srv7sK/z2UcL+6bunQYwn2gK2aykV1NJe LBkKqZNfGmpEMc0ORMZn40S2+aVQQDmOLEygBdNaiLefoZfhNDCunpa4RUgssZSO 77JgpkoBtsQ48pNfen6CuhD0lwtqpDcciHAnSe9eW/RdsJFlqg+p6eJJAuMtX1jD KwTIjg4WmSGlEG+JbIoOohjuS1mSGg498GCbjsTYtazAloAiigFy3uffxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERS9AynT50PQxZO4+YbbpxGPyPyMB8GA1UdIwQY MBaAFLu+lhLRRAvGxwTgRl8O9dbKc5emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUt Y2M1NWI4MTMwMmNmLzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUtY2M1NWI4MTMwMmNm LzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFBKhRDJ BTSRgA1b7/MEo6kPGJgBxaSt7zHBsrGCJGq16kRzy7NNxTRD7C+Inz996cVdFexJ rQjvvUbR6Fq5qoRIdb6ZQp+OfZsqCPGDXO0Q9vyE0XQawwOuS9hVO/uizukt/Vym 5nWbIOUoTtzE/5jqJCMumBsg7QDr+OB612k/oCbjTPmX0Fte95ivV2mnZ2igy4V4 UThdtJ7aY3ET11X7KhdB6Qd9y3sr+3hiZMav3uAtciu74fDtxC8M5rgV5ZbbyIhx N8N+L/GwiRgd1sSztIyXHC51DcW8xGVIYEMZmThax9eytltSa0rOgIIwaWKnbJfQ dkfv/cWvvDQrRg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:26:23 2025 by rpki-client