This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json) Hash identifier: VwTEs7SsKP9zOYFFnKF73XckptqLKr9oxlG9rMPInlQ= Subject key identifier: 3F:16:30:D1:39:02:9B:ED:6D:F4:99:35:69:06:EE:7F:D2:1F:66:34 Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c Certificate serial: 019AF61C74E40AC1A499BC39BF85F61234F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft Manifest number: 0664 Signing time: Sun 07 Dec 2025 00:00:51 +0000 Manifest this update: Sun 07 Dec 2025 00:00:51 +0000 Manifest next update: Mon 08 Dec 2025 00:00:51 +0000 Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: i6tLy/CrFFW2MxJNubfjkgx5vDuz6XssR73qM2U4oiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:74:e4:0a:c1:a4:99:bc:39:bf:85:f6:12:34:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c Validity Not Before: Dec 7 00:00:51 2025 GMT Not After : Dec 8 00:00:51 2025 GMT Subject: CN=3f1630d139029bed6df499356906ee7fd21f6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:6f:65:62:a1:6e:b0:40:a9:2d:63:e2:ae: 2e:47:50:74:34:4a:1a:60:c8:86:f8:e7:2e:5c:3c: cc:d1:93:00:d7:3d:b4:0d:d3:05:18:21:f1:5e:1f: b6:95:cf:1a:cc:cc:d2:8b:79:4d:f0:bc:ef:22:63: 28:f0:71:d0:0b:f9:8a:4e:53:b0:52:92:c4:2c:93: 48:c7:c0:3c:f3:ac:4b:20:f8:6b:78:e7:7c:6f:7c: fe:e3:ca:43:88:39:ce:81:94:ee:a2:8a:b3:91:29: 72:ba:e7:43:0f:9b:da:5b:1e:b3:7d:26:1d:0b:7e: 43:57:f0:70:06:5f:25:37:ca:96:9f:92:fa:28:99: 9a:b5:33:44:10:c6:c3:52:91:a9:ad:fd:33:7b:27: 2b:30:7e:83:fe:fb:12:23:14:62:cf:12:9b:0b:20: 6f:a1:47:16:b6:e8:8c:63:35:63:ea:5c:ea:09:15: 1b:f0:1d:d1:ab:0f:55:dd:cb:4e:6a:4b:89:7d:1b: 18:21:37:5c:7a:f1:1a:85:c9:c6:a8:e4:6c:18:30: 4e:e4:c4:d7:ab:df:0f:02:14:21:3d:3f:7e:57:c7: d9:a4:9d:15:99:48:6f:29:1d:51:59:2e:e3:17:63: 7d:82:0a:03:60:33:f6:23:f8:a0:97:b0:b6:04:75: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:30:D1:39:02:9B:ED:6D:F4:99:35:69:06:EE:7F:D2:1F:66:34 X509v3 Authority Key Identifier: keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b7:4d:e2:6c:17:43:56:0a:74:89:fd:6e:7f:ae:e8:95:f4: bf:ff:45:1c:b8:fa:2c:8a:66:b5:20:56:51:b8:13:27:c9:9b: aa:84:8c:db:af:55:89:17:50:38:d6:d0:87:c1:d9:35:b2:fb: bc:45:4c:49:b3:4e:be:41:1a:df:c4:96:c0:62:8b:53:51:f5: 6e:80:0d:3d:2c:5e:b7:85:b3:60:1e:39:23:91:20:ba:d9:73: 67:95:db:46:a5:ed:b0:7d:f9:2b:05:47:d4:ea:77:00:cd:bd: 5e:74:80:7d:56:ad:d9:63:16:e7:81:71:f3:a8:72:39:6e:38: 0e:ad:3e:f3:9e:03:ed:18:e3:f8:67:87:37:b9:05:8b:47:dd: e1:7b:2f:82:7d:08:0d:f3:d0:1b:44:a9:4d:4d:6b:6f:8e:71: 75:ab:ce:bd:38:d6:fa:6a:97:f1:9c:00:d5:42:07:1e:88:78: c8:e3:4f:b0:e7:9b:38:17:49:e5:61:c3:11:f2:40:77:67:9e: be:7a:0d:a1:d2:ea:2d:60:a7:8b:66:4a:1f:93:c5:52:9b:64: 1a:fb:3a:73:30:63:99:d6:bf:8b:dc:e6:bd:12:c0:e9:f4:da: 77:99:c6:80:3c:5e:06:96:11:32:89:2a:a4:57:3f:7c:e0:92: b3:db:4d:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHTkCsGkmbw5v4X2EjT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2 M2VmNWMwHhcNMjUxMjA3MDAwMDUxWhcNMjUxMjA4MDAwMDUxWjAzMTEwLwYDVQQD EygzZjE2MzBkMTM5MDI5YmVkNmRmNDk5MzU2OTA2ZWU3ZmQyMWY2NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9vZWKhbrBAqS1j4q4uR1B0NEoa YMiG+OcuXDzM0ZMA1z20DdMFGCHxXh+2lc8azMzSi3lN8LzvImMo8HHQC/mKTlOw UpLELJNIx8A886xLIPhreOd8b3z+48pDiDnOgZTuooqzkSlyuudDD5vaWx6zfSYd C35DV/BwBl8lN8qWn5L6KJmatTNEEMbDUpGprf0zeycrMH6D/vsSIxRizxKbCyBv oUcWtuiMYzVj6lzqCRUb8B3Rqw9V3ctOakuJfRsYITdcevEahcnGqORsGDBO5MTX q98PAhQhPT9+V8fZpJ0VmUhvKR1RWS7jF2N9ggoDYDP2I/igl7C2BHUSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8WMNE5ApvtbfSZNWkG7n/SH2Y0MB8GA1UdIwQY MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt MDcyNzM5NjgzMzQ2LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2 LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrdN4mwX Q1YKdIn9bn+u6JX0v/9FHLj6LIpmtSBWUbgTJ8mbqoSM269ViRdQONbQh8HZNbL7 vEVMSbNOvkEa38SWwGKLU1H1boANPSxet4WzYB45I5EgutlzZ5XbRqXtsH35KwVH 1Op3AM29XnSAfVat2WMW54Fx86hyOW44Dq0+854D7Rjj+GeHN7kFi0fd4Xsvgn0I DfPQG0SpTU1rb45xdavOvTjW+mqX8ZwA1UIHHoh4yONPsOebOBdJ5WHDEfJAd2ee vnoNodLqLWCni2ZKH5PFUptkGvs6czBjmda/i9zmvRLA6fTad5nGgDxeBpYRMokq pFc/fOCSs9tNxw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:33:19 2025 by rpki-client