This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json) Hash identifier: BhRa2IUoy9ACvfD7r8ROCheXhWy1fusQn1FvCrmztPo= Subject key identifier: A5:B3:B7:0F:D3:96:B8:41:70:44:15:CD:E4:7F:F8:9A:C6:E9:83:8F Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96 Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096 Certificate serial: 019AF540F9A34CEE307327EC6116D0CDC2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft Manifest number: 1482 Signing time: Sat 06 Dec 2025 20:01:07 +0000 Manifest this update: Sat 06 Dec 2025 20:01:07 +0000 Manifest next update: Sun 07 Dec 2025 20:01:07 +0000 Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=) 2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=) 3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: nnec667xKoMk3KidKqZr7Ob0fCSwkeNBFq5W3X55idI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f9:a3:4c:ee:30:73:27:ec:61:16:d0:cd:c2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096 Validity Not Before: Dec 6 20:01:07 2025 GMT Not After : Dec 7 20:01:07 2025 GMT Subject: CN=a5b3b70fd396b841704415cde47ff89ac6e9838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:eb:17:c4:96:b4:9a:56:ad:7d:d6:b7:e6: 1e:d6:61:fd:9e:fa:80:41:91:9f:c7:14:42:a2:c5: dd:b7:18:46:90:20:18:22:4f:12:8a:f2:bb:b9:d2: 22:e3:ff:48:3a:21:9b:81:cd:4a:56:0d:86:b7:c6: 37:cc:26:03:07:3d:8b:c6:02:c2:67:4a:b7:01:f3: 60:ca:80:dd:fb:43:82:69:b7:76:b3:a0:96:73:d1: 66:93:ff:5a:f0:c3:61:fe:82:c9:75:a6:d5:2c:ec: 1d:7c:53:56:5e:2f:d0:b0:7e:d3:6c:2a:8a:41:2b: 63:7b:fe:2a:31:52:a0:b9:5e:bb:b1:d8:00:9c:93: 3c:3d:68:5c:3f:61:0d:23:77:22:27:ff:68:c0:36: 4f:92:c1:b7:27:4d:5c:02:a1:dc:4e:a4:6b:6e:79: 4c:e3:a3:bd:8e:ea:8c:d7:d3:89:b4:32:80:e0:07: 34:79:2a:8a:6a:7a:02:75:08:50:1d:6f:54:3d:0c: fa:fd:f8:4e:ee:30:23:9b:6c:20:ad:bd:be:4c:0a: a9:6b:c3:cb:d1:f6:9d:f0:2a:b6:37:e0:bd:1a:a0: 70:2e:5b:36:ae:8b:5a:67:9c:cc:2b:4e:86:5b:18: 4d:7b:89:43:17:a5:90:6c:41:92:e4:f7:09:30:43: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B3:B7:0F:D3:96:B8:41:70:44:15:CD:E4:7F:F8:9A:C6:E9:83:8F X509v3 Authority Key Identifier: keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:db:db:18:8d:63:4a:05:ef:ec:21:15:c5:30:70:87:4d:a7: b1:4f:e8:1c:58:73:f0:dd:71:a1:bb:5f:72:b0:e4:2c:a0:3f: 15:6e:c6:9c:19:e4:f1:62:05:84:73:79:1c:7e:a1:1d:5f:6e: e7:f3:b9:ae:d9:56:39:37:d3:8e:6f:b3:9f:f1:11:fe:70:54: 9e:cf:84:1a:87:88:fe:63:33:1e:ab:ef:fe:95:18:2f:34:9a: 79:0c:f2:60:fe:35:cd:eb:8c:3d:41:b3:28:3d:72:f3:09:90: 6f:aa:58:9a:3f:1b:4c:8b:fe:3a:eb:8a:5c:ac:9c:dd:9a:45: 89:eb:c4:bc:eb:30:48:86:5c:13:0e:c9:7b:e8:51:05:0a:7f: 5c:37:3b:1a:8f:3a:14:ea:9b:75:d8:c6:fa:99:1f:6a:23:52: 85:04:42:80:f5:97:28:cf:c9:61:f6:60:1d:04:a8:3b:b2:98: 7a:31:b1:c7:a9:2b:15:ee:ff:51:a7:d1:46:58:ef:a9:4b:2c: ef:fc:d0:81:70:b5:24:9c:23:80:58:6c:64:0a:96:9c:20:94: c7:8f:54:cf:05:d9:25:23:66:72:17:6a:ff:ea:dd:ef:07:68: 35:a2:5e:6b:6c:46:f9:14:2b:6f:24:6d:ed:4a:c3:58:86:d9: a0:4f:40:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPmjTO4wcyfsYRbQzcLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm MmEwOTYwHhcNMjUxMjA2MjAwMTA3WhcNMjUxMjA3MjAwMTA3WjAzMTEwLwYDVQQD EyhhNWIzYjcwZmQzOTZiODQxNzA0NDE1Y2RlNDdmZjg5YWM2ZTk4MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKPrF8SWtJpWrX3Wt+Ye1mH9nvqA QZGfxxRCosXdtxhGkCAYIk8SivK7udIi4/9IOiGbgc1KVg2Gt8Y3zCYDBz2LxgLC Z0q3AfNgyoDd+0OCabd2s6CWc9Fmk/9a8MNh/oLJdabVLOwdfFNWXi/QsH7TbCqK QStje/4qMVKguV67sdgAnJM8PWhcP2ENI3ciJ/9owDZPksG3J01cAqHcTqRrbnlM 46O9juqM19OJtDKA4Ac0eSqKanoCdQhQHW9UPQz6/fhO7jAjm2wgrb2+TAqpa8PL 0fad8Cq2N+C9GqBwLls2rotaZ5zMK06GWxhNe4lDF6WQbEGS5PcJMENAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWztw/TlrhBcEQVzeR/+JrG6YOPMB8GA1UdIwQY MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0 LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtvbGI1j SgXv7CEVxTBwh02nsU/oHFhz8N1xobtfcrDkLKA/FW7GnBnk8WIFhHN5HH6hHV9u 5/O5rtlWOTfTjm+zn/ER/nBUns+EGoeI/mMzHqvv/pUYLzSaeQzyYP41zeuMPUGz KD1y8wmQb6pYmj8bTIv+OuuKXKyc3ZpFievEvOswSIZcEw7Je+hRBQp/XDc7Go86 FOqbddjG+pkfaiNShQRCgPWXKM/JYfZgHQSoO7KYejGxx6krFe7/UafRRljvqUss 7/zQgXC1JJwjgFhsZAqWnCCUx49UzwXZJSNmchdq/+rd7wdoNaJea2xG+RQrbyRt 7UrDWIbZoE9AmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:46 2025 by rpki-client