This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json) Hash identifier: ahzKCPlGwxAgpsuafiCL2v2hgYlAaH8ltlXzddKkGeE= Subject key identifier: 50:0F:20:2A:C6:7E:33:52:D3:7E:13:58:C4:0E:2E:89:8F:C8:29:A0 Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96 Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096 Certificate serial: 019AF35290BC97B0E7BBBA3682A848158118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft Manifest number: 1481 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=) 2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=) 3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: v22WWOIX2SdbLNt3bNlAVExKFg/Dhn/kQnzeLTNbuDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:90:bc:97:b0:e7:bb:ba:36:82:a8:48:15:81:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096 Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=500f202ac67e3352d37e1358c40e2e898fc829a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:d3:e1:c3:83:be:b5:f9:dd:41:95:0a:13: bc:d9:e5:0c:79:84:6e:d5:43:b1:7e:47:6f:69:e8: eb:2e:b1:8d:48:ed:16:d3:f4:76:9d:95:84:0f:b0: 4f:bb:52:a8:3d:b6:05:15:8e:e7:b5:ca:e8:36:50: 81:d8:17:10:50:ae:56:fc:d9:70:71:12:77:0d:e6: d9:05:24:f4:20:b6:5b:44:e7:16:0c:db:ae:b1:96: f2:f0:a0:c2:25:60:ff:df:f1:23:32:c1:4e:db:cf: 2b:86:03:4b:b1:9f:11:c4:06:2b:50:70:c6:b0:ac: ce:7d:13:1f:d6:00:c3:f9:5c:f7:68:75:f9:b7:42: 2c:78:9d:c4:bd:9e:a9:b6:b3:14:32:fb:e0:e2:4b: 73:a3:cf:3b:da:28:9a:14:50:31:43:20:2f:54:2e: ec:a8:98:4a:b4:46:64:2e:fa:2c:cb:22:44:67:55: f5:72:e1:45:42:55:28:04:42:4d:15:bd:ef:dc:38: 02:d8:b8:4c:12:dd:ad:f0:a8:93:79:03:e4:6a:b2: cd:d4:53:5a:a2:00:29:66:e6:65:b3:9e:52:be:35: 2c:e4:89:05:71:49:e8:a7:44:b9:11:f9:ee:4d:b7: df:ff:3f:1e:da:1b:9c:7e:44:bf:69:dd:59:9f:2d: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0F:20:2A:C6:7E:33:52:D3:7E:13:58:C4:0E:2E:89:8F:C8:29:A0 X509v3 Authority Key Identifier: keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0d:2f:a8:67:de:f9:01:a3:9a:58:d0:68:c6:f5:2a:38:44: 5e:55:35:17:21:3e:ba:9a:6a:ba:be:3e:ee:18:3b:cb:7f:9b: 8c:ce:8f:da:0f:f0:31:33:e6:3a:53:8c:d6:f8:11:cc:58:fa: ce:e4:17:dd:b5:66:60:cc:db:df:45:4b:ed:8b:59:bd:ff:bf: 71:6f:dd:95:b0:9d:3d:18:af:79:05:ea:fc:59:dd:bb:ad:a3: d1:6f:9c:01:63:09:c9:b7:a1:93:cb:fa:6d:45:34:48:62:30: 97:21:62:d9:cd:b6:5d:9c:12:cf:cb:e0:44:d1:6a:66:eb:18: b6:19:c6:10:85:70:26:94:a5:00:7c:b0:05:5d:55:3b:df:28: ec:05:46:f5:d8:5a:d2:02:e2:67:16:2c:fc:78:7c:0b:ec:7e: 29:fa:e8:38:85:8a:b3:3a:17:8e:71:7a:c3:35:67:fd:1c:ac: db:a9:75:3d:86:01:a4:6a:96:a2:92:df:03:02:95:f2:98:2a: 14:41:fd:6c:e3:0f:49:79:b0:5a:74:d2:63:8c:fb:43:fc:96: af:43:70:10:d9:7a:45:4d:56:fe:d0:e2:78:f8:57:a7:20:fb: 64:6b:5a:1d:53:c1:0c:40:34:06:c9:1e:0c:04:47:98:a6:34: 80:40:22:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpC8l7Dnu7o2gqhIFYEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm MmEwOTYwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD Eyg1MDBmMjAyYWM2N2UzMzUyZDM3ZTEzNThjNDBlMmU4OThmYzgyOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXDT4cODvrX53UGVChO82eUMeYRu 1UOxfkdvaejrLrGNSO0W0/R2nZWED7BPu1KoPbYFFY7ntcroNlCB2BcQUK5W/Nlw cRJ3DebZBST0ILZbROcWDNuusZby8KDCJWD/3/EjMsFO288rhgNLsZ8RxAYrUHDG sKzOfRMf1gDD+Vz3aHX5t0IseJ3EvZ6ptrMUMvvg4ktzo8872iiaFFAxQyAvVC7s qJhKtEZkLvosyyJEZ1X1cuFFQlUoBEJNFb3v3DgC2LhMEt2t8KiTeQPkarLN1FNa ogApZuZls55SvjUs5IkFcUnop0S5EfnuTbff/z8e2hucfkS/ad1Zny0YrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAPICrGfjNS034TWMQOLomPyCmgMB8GA1UdIwQY MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0 LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA0vqGfe +QGjmljQaMb1KjhEXlU1FyE+uppqur4+7hg7y3+bjM6P2g/wMTPmOlOM1vgRzFj6 zuQX3bVmYMzb30VL7YtZvf+/cW/dlbCdPRiveQXq/Fndu62j0W+cAWMJybehk8v6 bUU0SGIwlyFi2c22XZwSz8vgRNFqZusYthnGEIVwJpSlAHywBV1VO98o7AVG9dha 0gLiZxYs/Hh8C+x+KfroOIWKszoXjnF6wzVn/Rys26l1PYYBpGqWopLfAwKV8pgq FEH9bOMPSXmwWnTSY4z7Q/yWr0NwENl6RU1W/tDiePhXpyD7ZGtaHVPBDEA0Bske DARHmKY0gEAiXg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:45 2025 by rpki-client