This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json) Hash identifier: wJHNy3KRHz2PDPXlk8UmVHiFwypIPaumCU3PVuBnp/w= Subject key identifier: 0F:52:AF:20:7D:84:A6:55:00:53:95:42:D4:82:AA:47:FA:21:1C:E6 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019B22506DB676AA6AE75D2CA5A6B447FF87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft Manifest number: 1251 Signing time: Mon 15 Dec 2025 14:00:54 +0000 Manifest this update: Mon 15 Dec 2025 14:00:54 +0000 Manifest next update: Tue 16 Dec 2025 14:00:54 +0000 Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=) 2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: nFMIGhnnChTRcTVtos3obVUhKtzt/UMeRuScdwFhkHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:6d:b6:76:aa:6a:e7:5d:2c:a5:a6:b4:47:ff:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Dec 15 14:00:54 2025 GMT Not After : Dec 16 14:00:54 2025 GMT Subject: CN=0f52af207d84a65500539542d482aa47fa211ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:af:d4:87:7e:81:bb:a9:9c:50:98:ab:cc: 52:bc:55:91:df:15:ff:cc:31:80:0f:38:fe:86:d5: a5:fe:15:57:24:4b:db:04:47:21:9f:f3:66:0f:d4: 11:b9:b7:e5:ca:2a:c7:a1:db:a7:5b:19:7d:3b:53: c2:f2:fc:42:0d:15:5c:0c:71:58:11:bd:bb:4d:47: 8b:da:9a:3d:fe:be:75:f6:c3:26:ac:7f:9c:7e:55: b2:be:5b:d1:91:e4:8c:2d:05:44:8b:e4:4a:6b:1c: 72:ab:8a:1e:f8:37:04:57:2d:15:6d:12:12:06:1e: 96:58:a7:76:a4:a9:16:ee:56:28:1f:3e:09:4a:75: 9a:45:cf:0b:9c:10:b5:7f:32:8e:97:af:43:1e:f6: 68:b5:13:54:0d:8d:56:65:4d:75:cb:ea:eb:a2:93: e1:16:67:94:f8:09:d8:d8:04:f2:0d:90:f3:c5:8d: 2b:bf:98:d2:e8:94:01:e3:00:8c:e5:a3:2d:6d:ba: 0b:b8:d9:e0:8b:d2:96:5a:1c:e4:5e:cb:18:30:09: 53:1c:95:e1:83:55:53:c3:0b:3f:15:4a:07:54:85: f4:19:05:c3:f3:a3:61:2c:2f:2a:60:b6:59:66:cb: 70:17:b9:61:46:53:7d:51:8b:89:ae:72:be:4f:c1: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:52:AF:20:7D:84:A6:55:00:53:95:42:D4:82:AA:47:FA:21:1C:E6 X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:36:fb:66:fa:66:43:ed:c0:9f:8a:4e:99:2a:91:40:8d:28: 08:c4:6e:22:9e:ca:1a:12:da:a1:72:99:77:1f:51:0a:2b:64: fb:2a:d8:d7:84:2f:c2:00:79:a2:ce:b8:fd:36:d4:40:54:94: 24:ed:e4:2d:5a:e1:6f:9f:ac:b4:46:5b:ae:fc:8a:18:97:e5: 33:4b:ba:48:11:7d:8a:6f:50:ef:03:b5:4f:51:c0:fd:54:d6: c7:a6:49:ed:f6:a8:82:68:fa:f8:7a:61:ca:bc:88:1a:df:c9: 31:1b:8c:d1:ee:9c:79:94:43:a6:23:0d:fc:88:62:a8:a3:c1: 80:6d:e6:4f:e0:1d:c6:0d:39:35:7e:1f:31:86:b0:ce:18:83: 1c:b5:ae:d8:f5:a1:d4:f6:bb:7f:d3:81:1b:9b:0e:ce:b0:4c: f8:4c:08:28:9e:49:54:8b:f4:b1:fc:29:76:67:ef:03:d1:81: 8a:70:87:be:9d:c9:6a:a4:1f:74:42:58:78:2e:21:a0:be:72: e8:fb:2d:5c:40:63:be:bf:5f:ac:37:4b:4e:99:76:97:dc:e1: 92:ad:b8:c2:fa:6c:cc:e1:36:4e:e4:fa:9d:67:b0:55:9f:40: e9:07:0a:73:db:2b:34:fe:cb:b5:eb:70:16:41:db:52:fd:7b: e0:d7:cc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUG22dqpq510spaa0R/+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjUxMjE1MTQwMDU0WhcNMjUxMjE2MTQwMDU0WjAzMTEwLwYDVQQD EygwZjUyYWYyMDdkODRhNjU1MDA1Mzk1NDJkNDgyYWE0N2ZhMjExY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGv1Id+gbupnFCYq8xSvFWR3xX/ zDGADzj+htWl/hVXJEvbBEchn/NmD9QRubflyirHodunWxl9O1PC8vxCDRVcDHFY Eb27TUeL2po9/r519sMmrH+cflWyvlvRkeSMLQVEi+RKaxxyq4oe+DcEVy0VbRIS Bh6WWKd2pKkW7lYoHz4JSnWaRc8LnBC1fzKOl69DHvZotRNUDY1WZU11y+rropPh FmeU+AnY2ATyDZDzxY0rv5jS6JQB4wCM5aMtbboLuNngi9KWWhzkXssYMAlTHJXh g1VTwws/FUoHVIX0GQXD86NhLC8qYLZZZstwF7lhRlN9UYuJrnK+T8FHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9SryB9hKZVAFOVQtSCqkf6IRzmMB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTb7Zvpm Q+3An4pOmSqRQI0oCMRuIp7KGhLaoXKZdx9RCitk+yrY14QvwgB5os64/TbUQFSU JO3kLVrhb5+stEZbrvyKGJflM0u6SBF9im9Q7wO1T1HA/VTWx6ZJ7faogmj6+Hph yryIGt/JMRuM0e6ceZRDpiMN/IhiqKPBgG3mT+Adxg05NX4fMYawzhiDHLWu2PWh 1Pa7f9OBG5sOzrBM+EwIKJ5JVIv0sfwpdmfvA9GBinCHvp3JaqQfdEJYeC4hoL5y 6PstXEBjvr9frDdLTpl2l9zhkq24wvpszOE2TuT6nWewVZ9A6QcKc9srNP7Ltetw FkHbUv174NfMCg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:33:24 2025 by rpki-client