This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json) Hash identifier: kuDpOCJ73HfONCUTy6IvzZp5Q41uB/xPdcM4nSNViQA= Subject key identifier: 77:AA:33:39:F9:37:16:93:26:40:72:F8:45:92:1A:C4:88:93:BA:5B Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Certificate serial: 019AF50990677C20442163A398B26717634E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft Manifest number: 0732 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: XJe2gU23YUGOxXd4dW9WhHKvluw.roa (hash: Q+SQJucGqW6rIja8KJZssTGYrJnKb9Ykl1UhxgaGr0g=) 2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: ZQjSeVRCOwZ2hCZJmOtgh09LWFxWf3VzoppKTpIX+7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:90:67:7c:20:44:21:63:a3:98:b2:67:17:63:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=77aa3339f9371693264072f845921ac48893ba5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:a7:06:73:62:2e:a7:b1:91:74:23:1c:21: 72:43:69:b8:eb:a1:8d:1e:1c:e3:be:9f:3c:63:69: 17:c2:be:52:95:5a:43:a5:d3:04:c6:5c:4a:18:9c: 48:0f:88:4f:3c:dc:45:f7:49:71:a7:7a:04:33:e3: f6:72:a6:23:e1:9c:13:8c:77:8f:a2:5b:18:a8:71: 69:ef:14:1b:f7:db:a8:ea:ff:99:e8:87:55:98:e9: a3:d6:f9:02:74:04:32:6f:7c:bc:f0:d5:30:32:e5: ee:52:f4:ae:38:a5:15:05:33:f1:c4:0b:17:f0:b7: b8:35:44:8e:36:2c:92:24:e5:01:43:3e:f2:75:54: 69:c2:0d:42:61:22:45:60:b6:0a:b6:37:18:8c:a7: cf:0e:d4:c2:d7:dc:e1:11:ee:9f:cb:a1:e2:1b:9b: b7:b1:f1:70:79:30:c2:da:4d:e2:71:59:3e:c3:62: f9:e8:cf:b2:aa:2c:9e:be:53:33:44:3b:f0:d1:6a: 27:e9:59:f9:ce:35:3c:f6:3d:29:e2:14:94:fa:db: 24:68:c6:6c:99:6a:c8:1d:82:01:39:25:ee:8b:e7: 5f:29:03:11:8d:66:b3:e3:85:19:47:98:2a:8a:63: c8:77:1a:ca:18:93:b4:c0:47:ce:18:4b:f4:6b:84: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:33:39:F9:37:16:93:26:40:72:F8:45:92:1A:C4:88:93:BA:5B X509v3 Authority Key Identifier: keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:64:be:59:01:d6:ed:3d:b9:03:19:96:9d:8e:c6:89:eb:b9: 76:4b:c4:dd:6e:29:23:79:2c:61:2a:fe:d7:0d:c0:51:c1:33: 57:92:ed:00:ca:7a:7a:5d:95:7c:02:af:22:af:5d:b7:04:4b: 68:2c:02:c3:47:21:cc:15:fe:5a:c3:d2:b5:e8:ba:a7:55:77: a0:7b:61:70:47:37:44:ab:9d:12:84:59:f1:c3:74:60:0b:b9: 13:f6:5a:c5:6c:d3:d5:d4:e2:76:e9:9c:bb:90:e5:66:f3:91: e2:2b:a3:2b:14:1b:6b:00:45:cc:41:7a:42:c6:9e:5e:86:c5: 59:03:d9:8d:b9:b4:20:70:d8:b4:c8:74:4b:6f:8d:af:bd:cb: 35:63:6f:63:b1:c5:ff:85:8f:fa:1e:3f:3c:36:0d:f1:31:ca: c7:31:75:fa:37:f4:54:94:41:ff:d7:45:84:80:47:67:08:ab: 49:4d:92:ea:53:f0:3a:25:75:6a:5c:ba:c9:58:0e:96:4a:d6: f2:c7:7b:42:6a:03:cf:ba:2c:c2:96:1f:2b:e6:80:00:ee:8c: e2:e0:5d:3e:20:66:c0:72:a7:12:93:19:7a:f7:03:e0:c6:14: 07:4d:07:d8:78:b0:ae:db:52:c1:c8:a5:47:1b:0b:18:ef:94: 36:69:af:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZBnfCBEIWOjmLJnF2NOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm NDE0NzMwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg3N2FhMzMzOWY5MzcxNjkzMjY0MDcyZjg0NTkyMWFjNDg4OTNiYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT+nBnNiLqexkXQjHCFyQ2m466GN Hhzjvp88Y2kXwr5SlVpDpdMExlxKGJxID4hPPNxF90lxp3oEM+P2cqYj4ZwTjHeP olsYqHFp7xQb99uo6v+Z6IdVmOmj1vkCdAQyb3y88NUwMuXuUvSuOKUVBTPxxAsX 8Le4NUSONiySJOUBQz7ydVRpwg1CYSJFYLYKtjcYjKfPDtTC19zhEe6fy6HiG5u3 sfFweTDC2k3icVk+w2L56M+yqiyevlMzRDvw0Won6Vn5zjU89j0p4hSU+tskaMZs mWrIHYIBOSXui+dfKQMRjWaz44UZR5gqimPIdxrKGJO0wEfOGEv0a4QyOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeqMzn5NxaTJkBy+EWSGsSIk7pbMB8GA1UdIwQY MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt NjRiMGU2MTRkMDA0LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0 LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGS+WQHW 7T25AxmWnY7Gieu5dkvE3W4pI3ksYSr+1w3AUcEzV5LtAMp6el2VfAKvIq9dtwRL aCwCw0chzBX+WsPStei6p1V3oHthcEc3RKudEoRZ8cN0YAu5E/ZaxWzT1dTidumc u5DlZvOR4iujKxQbawBFzEF6QsaeXobFWQPZjbm0IHDYtMh0S2+Nr73LNWNvY7HF /4WP+h4/PDYN8THKxzF1+jf0VJRB/9dFhIBHZwirSU2S6lPwOiV1aly6yVgOlkrW 8sd7QmoDz7oswpYfK+aAAO6M4uBdPiBmwHKnEpMZevcD4MYUB00H2HiwrttSwcil RxsLGO+UNmmvPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:16 2025 by rpki-client