This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json) Hash identifier: UNQI8xjo7wqVXL98E0urEExFHDduUoAq0sIFBjhxdtA= Subject key identifier: FB:F1:0D:B9:AF:43:1D:59:FF:9C:1A:55:16:B6:7B:E6:21:16:DA:83 Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Certificate serial: 019B3F1194CD446C9C8F96BFBAF2145B7AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft Manifest number: 0287 Signing time: Sun 21 Dec 2025 04:01:15 +0000 Manifest this update: Sun 21 Dec 2025 04:01:15 +0000 Manifest next update: Mon 22 Dec 2025 04:01:15 +0000 Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: Cyd9XEdkWQg+qWrPRiWuLzvs3bkdD+LG1VWsD7jRIk4=) 2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:94:cd:44:6c:9c:8f:96:bf:ba:f2:14:5b:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Validity Not Before: Dec 21 04:01:15 2025 GMT Not After : Dec 22 04:01:15 2025 GMT Subject: CN=fbf10db9af431d59ff9c1a5516b67be62116da83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:0c:45:b4:fe:ac:99:9c:74:43:b2:04:be: ab:92:38:4d:29:17:8e:5a:3d:dc:bb:8f:44:1c:8b: 1a:f4:7a:08:7d:e3:cb:48:77:a4:0a:f7:b7:d2:41: 1d:64:49:3f:90:4a:40:83:9c:62:d9:68:de:76:08: 3f:86:c6:bf:8c:40:be:d8:4e:de:9c:9a:87:2d:0a: 90:86:32:22:cb:ce:cf:fd:ad:c7:33:ba:a8:98:74: 50:81:ea:8f:c4:a4:8d:4f:b7:9b:9b:99:67:68:28: d4:be:75:55:09:74:2c:f4:03:e7:ff:22:4f:75:bc: 4e:1a:3c:73:b4:d7:32:1c:ff:84:99:61:d2:5a:13: e7:90:ec:71:f3:ce:c2:00:59:74:3f:08:cf:13:83: 30:01:7a:26:3d:4a:56:42:02:87:0e:bb:c8:d5:18: 31:cd:ae:2e:23:4e:99:4f:e8:05:5d:87:11:c7:20: 0f:a1:4c:56:29:98:9b:a7:cd:55:02:e0:a0:84:da: 66:33:22:e3:ad:0a:60:b0:7f:d8:90:6a:48:98:75: 6e:2b:85:0e:24:dd:a2:b9:fa:1f:9d:ee:e3:19:bf: 32:a4:2b:3e:cd:69:9b:74:59:34:ff:b0:6d:07:a8: bd:5d:c0:7f:41:4a:ea:c5:2d:ac:24:b1:59:f7:81: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F1:0D:B9:AF:43:1D:59:FF:9C:1A:55:16:B6:7B:E6:21:16:DA:83 X509v3 Authority Key Identifier: keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:68:90:54:c8:35:d0:ac:a7:dd:db:5d:ef:0b:92:82:87: ce:73:0a:2d:e1:4d:a5:85:0f:54:f6:27:ad:82:63:60:2d:b4: af:4b:ee:7a:e4:4d:c8:73:f4:ec:28:28:18:2e:6e:f3:b3:c8: c3:74:02:95:86:ee:23:9d:75:fb:a0:2b:27:59:9d:49:d5:cd: f9:f6:e9:79:c3:02:13:78:83:76:63:72:3c:62:13:04:04:92: 28:b3:6d:57:c0:42:e6:c3:00:88:90:c5:a8:da:06:a3:69:d0: f2:57:86:98:61:5a:18:24:cf:00:6e:2e:fe:90:e3:c3:b5:2a: 73:8b:c8:7a:36:bd:4d:25:fb:80:7c:ff:2e:fc:54:33:b3:00: 6c:80:e8:7c:33:3f:c0:ec:e8:d5:cc:b9:15:b3:71:aa:48:2f: dc:77:08:f3:28:88:e6:83:f1:47:32:3e:61:bd:b9:5f:aa:18: 54:c9:d1:a4:17:65:7f:e0:7f:d7:81:f9:20:ac:51:d5:1c:84: 48:af:c8:5b:1e:0f:66:1f:9a:1e:54:b2:8f:d2:5b:e7:62:97: d0:24:ec:8f:84:23:3f:3d:bc:86:b1:b5:51:5c:56:7d:1e:01: 29:a6:d7:8a:cd:0f:c7:96:5d:a8:b2:46:35:ea:9a:76:c1:83: c9:70:b9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZTNRGycj5a/uvIUW3rSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODM3OGQ0NDQyZGY2OWY0N2RjMGVhNTgyYTEyYjJhYjUx NGJlMGYwHhcNMjUxMjIxMDQwMTE1WhcNMjUxMjIyMDQwMTE1WjAzMTEwLwYDVQQD EyhmYmYxMGRiOWFmNDMxZDU5ZmY5YzFhNTUxNmI2N2JlNjIxMTZkYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EIMRbT+rJmcdEOyBL6rkjhNKReO Wj3cu49EHIsa9HoIfePLSHekCve30kEdZEk/kEpAg5xi2Wjedgg/hsa/jEC+2E7e nJqHLQqQhjIiy87P/a3HM7qomHRQgeqPxKSNT7ebm5lnaCjUvnVVCXQs9APn/yJP dbxOGjxztNcyHP+EmWHSWhPnkOxx887CAFl0PwjPE4MwAXomPUpWQgKHDrvI1Rgx za4uI06ZT+gFXYcRxyAPoUxWKZibp81VAuCghNpmMyLjrQpgsH/YkGpImHVuK4UO JN2iufofne7jGb8ypCs+zWmbdFk0/7BtB6i9XcB/QUrqxS2sJLFZ94H70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvxDbmvQx1Z/5waVRa2e+YhFtqDMB8GA1UdIwQY MBaAFLuDeNRELfafR9wOpYKhKyq1FL4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODkt ZDhhNTU1YzY0MjE0LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODktZDhhNTU1YzY0MjE0 LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm5okFTI NdCsp93bXe8LkoKHznMKLeFNpYUPVPYnrYJjYC20r0vueuRNyHP07CgoGC5u87PI w3QClYbuI511+6ArJ1mdSdXN+fbpecMCE3iDdmNyPGITBASSKLNtV8BC5sMAiJDF qNoGo2nQ8leGmGFaGCTPAG4u/pDjw7Uqc4vIeja9TSX7gHz/LvxUM7MAbIDofDM/ wOzo1cy5FbNxqkgv3HcI8yiI5oPxRzI+Yb25X6oYVMnRpBdlf+B/14H5IKxR1RyE SK/IWx4PZh+aHlSyj9Jb52KX0CTsj4QjPz28hrG1UVxWfR4BKabXis0Px5ZdqLJG NeqadsGDyXC5pQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:19 2025 by rpki-client