This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json) Hash identifier: HbkvGr/zRx3GhVaRUaQoOkiLog7afExuw/oTMBaiT0o= Subject key identifier: 1A:24:57:B8:13:10:9F:2D:3C:26:26:FC:6E:C1:03:E9:B8:D5:D0:03 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019AF3F801BD177BCF4739C1033D37A927F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft Manifest number: 1239 Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=) 2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: qN8rMDzdVuY4gH12PSf/0PWe//MCVy61O8zX+gjIZGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:01:bd:17:7b:cf:47:39:c1:03:3d:37:a9:27:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=1a2457b813109f2d3c2626fc6ec103e9b8d5d003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:64:72:04:0a:02:71:05:d2:c6:28:10:f6: 08:74:06:3f:5e:32:19:a7:aa:e7:4f:d3:4f:44:34: 35:cf:78:27:14:72:e2:91:9b:4c:ab:26:08:eb:53: ed:15:0f:cb:3f:5b:0c:a3:eb:1b:51:6e:28:b9:32: 7d:56:1f:ab:b1:ed:04:c8:b6:c0:68:25:4b:e7:19: 9e:6c:62:c3:80:20:f1:e3:bf:92:9b:15:0c:d2:45: f4:42:6e:e5:e9:3c:07:95:a6:99:14:51:15:03:f1: b7:41:e3:7a:fb:4a:2b:e6:70:cc:e5:2a:c0:1f:dd: ac:d7:7f:aa:41:e9:e7:ee:c7:52:c4:86:4e:19:a1: f2:e1:79:b6:e4:68:cb:84:1e:4f:2a:31:d4:6f:c1: 5e:a6:c5:8f:37:cc:2a:90:80:c1:3e:cd:77:83:b1: b5:30:c6:5a:d3:35:c1:11:71:74:36:92:b8:f9:ab: 4b:98:08:f3:1c:03:b9:cd:73:8b:05:0e:e5:11:29: bb:74:01:00:86:ae:b9:75:97:98:79:69:52:97:43: 45:2e:b4:a8:eb:ca:6e:42:7f:0d:c0:22:59:4b:10: 1c:b4:bd:30:36:81:81:a3:c0:a0:82:d0:ce:ac:0a: c1:88:07:1c:3f:40:85:34:97:b1:4e:70:9a:83:bd: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:57:B8:13:10:9F:2D:3C:26:26:FC:6E:C1:03:E9:B8:D5:D0:03 X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:90:e8:09:2a:34:a6:90:3e:65:97:3d:65:f0:d8:f5:e1: b3:dc:02:5d:df:69:e4:c4:96:2d:43:56:fe:6e:9b:d2:80:68: c4:50:06:57:f3:0c:d1:18:33:0a:94:d8:e4:eb:22:83:b1:b5: be:e9:22:bc:87:dd:6e:5e:34:7b:5f:d8:0a:fe:be:ee:7a:ab: d4:b1:1a:00:e8:09:15:f4:0d:02:37:42:87:67:f9:44:8b:59: e8:29:30:f7:9e:3c:3f:d5:8e:9a:bf:fa:08:c8:1f:03:a9:2a: 43:6b:21:19:67:ce:a2:19:6a:cf:f0:0b:dc:69:7c:c6:fc:0e: 3b:98:2e:4b:ec:54:a1:96:90:c2:78:90:ea:95:b4:4a:b5:2d: bc:9f:1a:dc:66:2d:fd:ef:f8:51:6e:f8:cc:88:46:63:41:02: 45:69:90:02:ba:57:8d:85:89:37:32:46:04:4a:31:5a:28:66: 0b:23:6f:f7:94:05:84:4e:84:10:a9:04:41:09:8f:d5:7c:23: df:64:5e:20:82:03:5e:80:0c:b0:a4:78:7b:6d:39:d6:1c:01: 45:b6:49:9e:1e:f2:ce:8f:31:45:90:79:dc:e3:ca:d7:af:89: cd:fb:38:3f:75:62:7e:37:8d:58:d7:f5:34:f9:19:14:de:d8: 9e:0a:da:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AG9F3vPRznBAz03qSf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD EygxYTI0NTdiODEzMTA5ZjJkM2MyNjI2ZmM2ZWMxMDNlOWI4ZDVkMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6NkcgQKAnEF0sYoEPYIdAY/XjIZ p6rnT9NPRDQ1z3gnFHLikZtMqyYI61PtFQ/LP1sMo+sbUW4ouTJ9Vh+rse0EyLbA aCVL5xmebGLDgCDx47+SmxUM0kX0Qm7l6TwHlaaZFFEVA/G3QeN6+0or5nDM5SrA H92s13+qQenn7sdSxIZOGaHy4Xm25GjLhB5PKjHUb8FepsWPN8wqkIDBPs13g7G1 MMZa0zXBEXF0NpK4+atLmAjzHAO5zXOLBQ7lESm7dAEAhq65dZeYeWlSl0NFLrSo 68puQn8NwCJZSxActL0wNoGBo8CggtDOrArBiAccP0CFNJexTnCag70hiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBokV7gTEJ8tPCYm/G7BA+m41dADMB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR6Q6Akq NKaQPmWXPWXw2PXhs9wCXd9p5MSWLUNW/m6b0oBoxFAGV/MM0RgzCpTY5Osig7G1 vukivIfdbl40e1/YCv6+7nqr1LEaAOgJFfQNAjdCh2f5RItZ6Ckw9548P9WOmr/6 CMgfA6kqQ2shGWfOohlqz/AL3Gl8xvwOO5guS+xUoZaQwniQ6pW0SrUtvJ8a3GYt /e/4UW74zIhGY0ECRWmQArpXjYWJNzJGBEoxWihmCyNv95QFhE6EEKkEQQmP1Xwj 32ReIIIDXoAMsKR4e2051hwBRbZJnh7yzo8xRZB53OPK16+Jzfs4P3VifjeNWNf1 NPkZFN7Yngrajg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:15 2025 by rpki-client