This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json) Hash identifier: dQrAY08yw0CL6dxHqV1NXoP9eX6QIVEjkFzJ5JQH00Y= Subject key identifier: 90:B1:B0:02:67:3A:5D:29:D0:EB:4B:4A:0A:DF:FD:07:A8:0A:46:7C Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f Certificate serial: 019AF12F25FA24EE8456B6CEE7C0B312099A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:03:10 +0000 Manifest this update: Sat 06 Dec 2025 01:03:10 +0000 Manifest next update: Sun 07 Dec 2025 01:03:10 +0000 Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=) 2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: 6OW9Uqyif12DrpKbdZmqxDF6/XAiVMO/ukhJQg4MMfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:25:fa:24:ee:84:56:b6:ce:e7:c0:b3:12:09:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f Validity Not Before: Dec 6 01:03:10 2025 GMT Not After : Dec 7 01:03:10 2025 GMT Subject: CN=90b1b002673a5d29d0eb4b4a0adffd07a80a467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:5f:b2:de:ea:a7:4d:97:0f:fe:e6:80:5f: 3b:57:c2:56:08:30:1b:69:ca:4e:a8:52:4a:5b:5c: ae:8b:b3:2d:3b:20:50:d0:c3:35:42:53:aa:04:0e: 23:58:4a:a4:e1:55:7c:74:c0:cd:63:15:8b:db:d5: 50:7b:ae:66:17:02:1e:be:aa:cd:e9:e1:af:55:88: 88:1c:2d:6d:50:ca:00:2c:b2:a2:68:35:e9:df:5a: ae:28:d9:1c:1e:91:57:e6:26:e3:86:ed:bd:ee:1d: 7c:cb:6f:eb:26:1a:ed:68:f8:14:96:26:a5:c0:25: b4:87:68:85:9c:68:c0:30:3a:41:3c:0c:8b:2c:e6: 93:60:57:c4:16:5d:63:94:f9:3b:fe:ee:68:9e:1d: 94:c2:ca:90:95:55:6e:d9:2f:cf:64:f4:8d:e5:66: 93:3e:6e:d9:73:b0:8e:c0:8c:dc:1d:68:43:4c:ed: 62:91:0f:0c:24:dc:63:a0:86:72:a4:d1:dd:07:a9: 96:38:f0:b8:14:59:75:48:f6:37:7b:9a:f7:e3:b3: 27:03:43:6d:60:1c:be:4e:17:23:8c:40:c7:95:a2: 8a:af:56:8d:46:fb:4c:11:10:72:64:1d:72:88:15: 0a:4f:f8:8c:43:93:c1:2b:6d:89:a4:5e:05:75:58: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:B0:02:67:3A:5D:29:D0:EB:4B:4A:0A:DF:FD:07:A8:0A:46:7C X509v3 Authority Key Identifier: keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:89:e5:22:1a:bb:1b:67:ba:2c:e7:ec:e7:b8:dc:06:46:93: 31:2d:51:d7:32:31:86:f2:5d:bd:70:34:94:a0:65:d7:b5:2f: 8b:72:01:03:8a:79:44:02:a6:c8:ab:37:7e:00:57:94:b9:54: 8d:37:6d:e0:90:49:de:42:3e:58:15:66:97:1b:41:ff:d4:a3: 5f:16:62:a5:62:fe:ef:22:eb:de:35:27:e0:ab:b2:e1:6c:8f: d8:35:b1:02:b8:af:6c:85:d0:cb:0a:2d:d7:d8:3d:09:31:78: bd:91:cb:a5:f8:5b:43:36:73:a2:37:c2:27:f4:dd:a8:cb:2f: b2:13:11:ee:bb:94:ba:a4:59:25:a2:28:de:e2:29:78:3f:a3: c5:48:60:1e:ac:b2:73:46:a9:48:7a:51:7e:63:5a:71:d7:68: a8:4d:ba:93:4b:9e:a5:83:4c:17:5c:4b:91:7e:2f:ce:dc:45: 57:db:06:ac:8f:a4:e4:ee:25:3b:bf:f0:cd:82:90:e5:6a:61: 65:11:1e:a0:d7:ba:5d:d6:e6:2f:c6:c5:e2:38:5d:6d:d3:05: cc:b4:78:42:19:06:01:5a:c5:c7:e3:a8:1b:5b:f7:e4:93:a8: 5d:ec:71:63:d0:59:c0:b9:e7:ce:b6:36:9f:9e:2b:11:05:47: 22:95:17:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLyX6JO6EVrbO58CzEgmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2QzNzljMDRmODE3NWIzNWVmNjczZDc2YzY4ZTQ0Yzcw ZTgzM2YwHhcNMjUxMjA2MDEwMzEwWhcNMjUxMjA3MDEwMzEwWjAzMTEwLwYDVQQD Eyg5MGIxYjAwMjY3M2E1ZDI5ZDBlYjRiNGEwYWRmZmQwN2E4MGE0NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPlfst7qp02XD/7mgF87V8JWCDAb acpOqFJKW1yui7MtOyBQ0MM1QlOqBA4jWEqk4VV8dMDNYxWL29VQe65mFwIevqrN 6eGvVYiIHC1tUMoALLKiaDXp31quKNkcHpFX5ibjhu297h18y2/rJhrtaPgUlial wCW0h2iFnGjAMDpBPAyLLOaTYFfEFl1jlPk7/u5onh2UwsqQlVVu2S/PZPSN5WaT Pm7Zc7COwIzcHWhDTO1ikQ8MJNxjoIZypNHdB6mWOPC4FFl1SPY3e5r347MnA0Nt YBy+ThcjjEDHlaKKr1aNRvtMERByZB1yiBUKT/iMQ5PBK22JpF4FdViUrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCxsAJnOl0p0OtLSgrf/QeoCkZ8MB8GA1UdIwQY MBaAFLt9N5wE+BdbNe9nPXbGjkTHDoM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQt MzNlYmFiMjRiYmIzLzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQtMzNlYmFiMjRiYmIz LzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4nlIhq7 G2e6LOfs57jcBkaTMS1R1zIxhvJdvXA0lKBl17Uvi3IBA4p5RAKmyKs3fgBXlLlU jTdt4JBJ3kI+WBVmlxtB/9SjXxZipWL+7yLr3jUn4Kuy4WyP2DWxArivbIXQywot 19g9CTF4vZHLpfhbQzZzojfCJ/TdqMsvshMR7ruUuqRZJaIo3uIpeD+jxUhgHqyy c0apSHpRfmNacddoqE26k0uepYNMF1xLkX4vztxFV9sGrI+k5O4lO7/wzYKQ5Wph ZREeoNe6XdbmL8bF4jhdbdMFzLR4QhkGAVrFx+OoG1v35JOoXexxY9BZwLnnzrY2 n54rEQVHIpUXlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:59 2025 by rpki-client