This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: KRpT3WskH47GMqJ1y6j8z9RQBS54eAznO/hAZRK5NYU= Subject key identifier: FD:D0:6C:BA:A2:E8:40:9D:38:53:62:B0:E0:F4:4A:96:8E:ED:95:BD Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019AF2E4351EA66DC107D48492EE6D70C325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1811 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 2: 4b9izW4q-rZz0OWQO5fC5XUHYeY.roa (hash: 9wYly/cGREYrx63PXNBvuVlfGIfSHaXqrrjuZtYRkA0=) 3: 59LH6Adk14fzU8O8cL1tS0tjZrg.roa (hash: U0MyjNG++pvqNJQab0gsWnbWL6x0Di05kdY9Z+I6oU4=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: Or69i08je9IL_3FfPQ5ndTzvaFs.roa (hash: EOOy075Oq0onvPdfIA9R8xzQhr3n3IW53fTBxa2LQcc=) 6: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 7: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 8: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 9: jKuBkTFSm7vVQcDV5UXLoMekbuA.roa (hash: QUSYZlnKsNYFfl6hvjZ1kYMi2eWV2gS09jUdYYvdxtM=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: pFUg2ZZ9orAVZLv5mA55WqGVSqCLRrj7tV9foNOV860=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:35:1e:a6:6d:c1:07:d4:84:92:ee:6d:70:c3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=fdd06cbaa2e8409d385362b0e0f44a968eed95bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:45:bb:53:f8:4d:cd:2a:fa:f8:3c:ca:59: ee:24:92:d2:64:13:2c:bb:7a:97:7e:e9:fd:3c:34: 20:9d:4a:88:ab:d6:84:4e:c5:9d:17:8c:b0:ab:e8: c2:c5:54:b2:4e:f7:9a:ea:2a:02:8c:2d:ac:f2:ad: ab:8d:0f:a0:d2:a8:9a:36:fb:45:8b:8b:fa:7f:42: ee:a2:86:f2:8d:f5:e9:37:ec:32:c5:5d:05:4d:db: 28:64:dc:ad:58:50:4c:55:79:a5:7b:f1:a1:b2:6a: 6f:6b:93:cb:c9:65:cf:26:ad:cc:46:ff:d5:bb:4d: 92:8c:fc:e1:5f:92:d9:00:37:f7:a2:c9:96:54:0a: 3b:82:c5:79:74:36:ce:30:ce:72:18:4d:3c:f0:6e: 30:32:59:b9:a8:57:eb:12:4c:12:86:4b:d4:70:14: 93:78:3d:65:9b:bd:01:6c:78:01:ee:d0:02:87:e6: af:3b:f8:ed:b6:fc:dc:fd:5b:98:4a:6c:2b:aa:c9: 52:51:c6:94:54:5d:24:34:a3:fd:c2:f5:fb:b9:8c: e6:11:85:b3:db:6b:a9:3a:3c:2c:55:88:cb:14:fa: 70:3e:52:f9:11:61:33:50:cf:50:13:f1:8d:71:04: 62:e3:7b:d8:36:0c:ee:86:ac:b4:26:aa:d7:ba:a9: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D0:6C:BA:A2:E8:40:9D:38:53:62:B0:E0:F4:4A:96:8E:ED:95:BD X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5e:40:bd:80:c7:c7:f9:c6:41:55:04:98:6c:4f:95:c3:c8: af:ac:ed:cb:c5:87:a4:93:4e:ce:78:78:2f:d7:e3:ab:56:ca: ec:8c:9d:58:cd:1c:b1:64:fd:17:4e:02:fd:dc:b7:6a:46:50: cd:08:aa:38:39:a6:2f:26:7b:cf:f8:c5:b5:dc:1f:ce:0b:f8: e0:22:af:ab:9a:84:7c:fb:5d:8d:1f:58:6a:de:81:30:72:3f: 3b:01:68:22:e3:69:43:87:db:55:65:00:31:88:a2:06:b5:3e: fc:68:2f:5f:00:d7:c4:3b:48:82:ad:f3:be:d6:2b:fc:d5:e3: fe:18:96:18:83:53:92:74:88:dd:7a:fd:a6:fc:1e:a4:03:8e: da:4b:7a:9f:fb:ac:df:de:4c:d8:25:12:34:e3:20:c0:83:df: 81:e9:27:38:67:fa:45:d5:39:60:69:a6:1e:f0:e5:83:b0:79: a8:31:01:a8:2a:b4:f2:58:dc:ed:d9:30:e0:09:a7:d9:7b:8e: 5f:f5:e3:1d:20:44:ec:1e:51:39:01:be:a2:b4:d3:3f:00:a5: 69:2f:16:28:b5:70:f2:d8:21:a7:ec:59:8e:30:1a:55:35:66: a1:3c:ab:e5:5b:e8:b3:17:01:24:dd:b6:9f:77:27:76:16:3e: a2:2d:21:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DUepm3BB9SEku5tcMMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EyhmZGQwNmNiYWEyZTg0MDlkMzg1MzYyYjBlMGY0NGE5NjhlZWQ5NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXFFu1P4Tc0q+vg8ylnuJJLSZBMs u3qXfun9PDQgnUqIq9aETsWdF4ywq+jCxVSyTvea6ioCjC2s8q2rjQ+g0qiaNvtF i4v6f0LuoobyjfXpN+wyxV0FTdsoZNytWFBMVXmle/Ghsmpva5PLyWXPJq3MRv/V u02SjPzhX5LZADf3osmWVAo7gsV5dDbOMM5yGE088G4wMlm5qFfrEkwShkvUcBST eD1lm70BbHgB7tACh+avO/jttvzc/VuYSmwrqslSUcaUVF0kNKP9wvX7uYzmEYWz 22upOjwsVYjLFPpwPlL5EWEzUM9QE/GNcQRi43vYNgzuhqy0JqrXuql1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3QbLqi6ECdOFNisOD0SpaO7ZW9MB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF5AvYDH x/nGQVUEmGxPlcPIr6zty8WHpJNOznh4L9fjq1bK7IydWM0csWT9F04C/dy3akZQ zQiqODmmLyZ7z/jFtdwfzgv44CKvq5qEfPtdjR9Yat6BMHI/OwFoIuNpQ4fbVWUA MYiiBrU+/GgvXwDXxDtIgq3zvtYr/NXj/hiWGINTknSI3Xr9pvwepAOO2kt6n/us 395M2CUSNOMgwIPfgeknOGf6RdU5YGmmHvDlg7B5qDEBqCq08ljc7dkw4Amn2XuO X/XjHSBE7B5ROQG+orTTPwClaS8WKLVw8tghp+xZjjAaVTVmoTyr5VvosxcBJN22 n3cndhY+oi0hNA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:20 2025 by rpki-client