This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: kBsRxBixC5twiNHfMfGT4n/D07f2Bv8q64qJTKuIwpo= Subject key identifier: BF:D7:68:D7:39:21:C6:1F:3A:C5:BF:3D:01:D5:64:7D:AF:D0:FF:1C Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019AF4D2A1D8E3C0E6BA35C30F524DE919F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1812 Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 2: 4b9izW4q-rZz0OWQO5fC5XUHYeY.roa (hash: 9wYly/cGREYrx63PXNBvuVlfGIfSHaXqrrjuZtYRkA0=) 3: 59LH6Adk14fzU8O8cL1tS0tjZrg.roa (hash: U0MyjNG++pvqNJQab0gsWnbWL6x0Di05kdY9Z+I6oU4=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: Or69i08je9IL_3FfPQ5ndTzvaFs.roa (hash: EOOy075Oq0onvPdfIA9R8xzQhr3n3IW53fTBxa2LQcc=) 6: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 7: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 8: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 9: jKuBkTFSm7vVQcDV5UXLoMekbuA.roa (hash: QUSYZlnKsNYFfl6hvjZ1kYMi2eWV2gS09jUdYYvdxtM=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: y3xb1z1ZCGoLeiLvnDSOJKnLWVVhUDdbu9/oVvpIFVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a1:d8:e3:c0:e6:ba:35:c3:0f:52:4d:e9:19:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=bfd768d73921c61f3ac5bf3d01d5647dafd0ff1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:d2:9c:3f:5c:56:7a:69:03:a4:78:7b:c2: 7c:49:5b:f9:bf:06:3d:c3:32:70:11:2e:fa:f8:77: dd:f8:c7:aa:1e:f1:5f:06:ea:a9:e4:e3:84:f2:ff: 14:e5:6f:54:29:5b:44:89:90:8c:8f:39:0c:91:51: 1f:32:67:74:e9:ac:84:d0:36:a5:a4:23:4a:0c:38: ce:64:cf:27:32:07:cf:87:48:d9:50:99:0e:49:6f: c1:79:f0:3f:4e:c8:6d:a7:02:c1:d8:f6:8b:88:23: 04:e7:51:ae:1b:5a:2a:64:19:a5:50:5e:bc:2e:da: 0e:b1:19:13:b8:31:63:71:8f:74:8a:ec:12:8c:13: 3f:b1:f7:f8:72:50:dc:05:a3:f7:32:dd:31:d7:47: a1:2b:8b:51:62:b7:63:e0:0c:a3:da:89:13:51:aa: fb:0a:a9:4b:03:f2:1f:0d:4d:48:44:1d:48:ab:93: cb:e5:93:0c:02:d3:3e:9c:4f:0e:ca:44:05:be:95: c7:95:21:88:fe:35:b8:c7:79:61:83:5a:f1:58:c0: 3f:0b:ae:ec:ce:1e:ef:0b:c5:79:9e:32:07:18:fd: 10:21:2a:4d:3e:61:d6:bd:7b:c8:6b:49:95:91:49: 4f:46:67:06:f9:08:a9:5e:84:df:81:7c:44:60:c7: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D7:68:D7:39:21:C6:1F:3A:C5:BF:3D:01:D5:64:7D:AF:D0:FF:1C X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f9:27:1e:99:6e:e5:76:a7:f1:0a:e4:a9:2a:ad:f0:83:32: 02:cd:a5:45:15:2b:76:3b:20:60:45:58:88:ac:a7:aa:8e:88: 12:be:1f:e8:33:72:4e:c4:ea:20:ae:36:25:da:c1:bc:53:5e: 51:58:25:dd:1e:e4:a3:06:15:c1:0d:cb:ba:61:4d:14:0d:87: 56:5a:38:96:7f:2e:98:13:18:de:76:52:fa:1c:11:c6:d2:8f: 69:cb:c8:ce:65:8e:93:5e:1d:5f:f3:56:4f:56:08:63:c0:da: e2:7c:a2:88:82:bd:54:b1:69:dd:69:74:3b:fa:3b:0e:8c:7f: a6:5a:4c:7f:f7:ba:e1:7f:4c:38:94:ab:ff:00:7e:b8:f5:27: a2:86:cc:d3:ca:22:65:78:63:0d:8f:25:83:6f:e4:2d:b0:f8: 31:7c:d4:35:1d:e0:6e:b0:bd:9b:2b:c1:b5:34:7d:9a:db:b2: 5b:39:ec:c7:4a:9d:d8:0f:16:37:15:5b:d0:0c:61:09:87:31: 39:9c:e1:56:b8:81:ff:52:1b:d8:dd:ca:b1:a3:d9:bf:0e:24: f6:8b:62:ab:31:03:7f:65:58:6c:3a:ac:41:bf:f8:52:23:4b: 55:57:51:22:68:07:e6:51:5a:f5:15:62:b6:2c:f5:10:9f:08: 3a:27:f5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qHY48DmujXDD1JN6Rn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD EyhiZmQ3NjhkNzM5MjFjNjFmM2FjNWJmM2QwMWQ1NjQ3ZGFmZDBmZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/SnD9cVnppA6R4e8J8SVv5vwY9 wzJwES76+Hfd+MeqHvFfBuqp5OOE8v8U5W9UKVtEiZCMjzkMkVEfMmd06ayE0Dal pCNKDDjOZM8nMgfPh0jZUJkOSW/BefA/TshtpwLB2PaLiCME51GuG1oqZBmlUF68 LtoOsRkTuDFjcY90iuwSjBM/sff4clDcBaP3Mt0x10ehK4tRYrdj4Ayj2okTUar7 CqlLA/IfDU1IRB1Iq5PL5ZMMAtM+nE8OykQFvpXHlSGI/jW4x3lhg1rxWMA/C67s zh7vC8V5njIHGP0QISpNPmHWvXvIa0mVkUlPRmcG+QipXoTfgXxEYMeA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/XaNc5IcYfOsW/PQHVZH2v0P8cMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/knHplu 5Xan8QrkqSqt8IMyAs2lRRUrdjsgYEVYiKynqo6IEr4f6DNyTsTqIK42JdrBvFNe UVgl3R7kowYVwQ3LumFNFA2HVlo4ln8umBMY3nZS+hwRxtKPacvIzmWOk14dX/NW T1YIY8Da4nyiiIK9VLFp3Wl0O/o7Dox/plpMf/e64X9MOJSr/wB+uPUnoobM08oi ZXhjDY8lg2/kLbD4MXzUNR3gbrC9myvBtTR9mtuyWznsx0qd2A8WNxVb0AxhCYcx OZzhVriB/1Ib2N3KsaPZvw4k9otiqzEDf2VYbDqsQb/4UiNLVVdRImgH5lFa9RVi tiz1EJ8IOif1FA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:23 2025 by rpki-client