This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json) Hash identifier: ridnBZ+ok00AOXO083uHAfvYn0VBf/ZOQqQp+NAXlWI= Subject key identifier: 2E:5C:C0:3F:FC:46:41:12:D6:31:D0:40:DB:AC:72:48:24:A4:8C:91 Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b Certificate serial: 019AF1647850FF634E00D2FA38E1116B753F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: 7B2VDSZXJke2F9enbpqA4O8RXSQP+MntCfZQZKzjwws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:78:50:ff:63:4e:00:d2:fa:38:e1:11:6b:75:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=2e5cc03ffc464112d631d040dbac724824a48c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:8f:5a:cc:f5:3d:b6:dd:40:89:7e:ee:9b: 69:a9:ee:83:60:02:77:03:bd:43:5d:2d:8a:66:51: d7:60:93:8d:1a:c4:7a:86:d3:32:83:cd:b1:b9:b6: 00:e2:69:7e:85:4a:90:da:75:9f:a8:02:62:fd:8b: db:d0:d8:50:2a:6e:34:32:83:07:fd:ba:a4:d6:4e: ba:ba:4d:09:66:42:48:86:b2:23:2b:fe:e3:99:93: e5:f8:6e:fd:ca:ea:87:57:05:db:25:33:2e:9e:7e: 3b:c3:d4:29:68:08:f4:13:df:8f:7d:1d:d2:2f:e4: e3:a5:f3:e9:53:49:aa:87:0f:7a:80:0c:76:92:a6: 33:33:32:f5:2f:ac:95:12:08:bc:15:ea:1d:e9:d4: 4d:0a:7c:57:4f:67:43:43:53:14:36:be:3d:59:7b: d5:8e:cf:bf:0d:e3:64:9e:bd:5d:a2:5f:b0:a2:df: 0a:b6:26:a9:bb:8d:13:1c:e9:34:7e:14:79:58:47: ca:e0:63:aa:f3:14:7b:8f:f1:cb:75:d6:61:de:c3: 3e:63:59:75:14:80:18:35:f1:06:47:28:da:5d:a5: c6:dc:c4:52:a2:13:95:a1:88:aa:ad:16:02:da:47: 09:77:d4:05:24:d2:21:8b:c1:6b:2b:3e:16:97:64: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:C0:3F:FC:46:41:12:D6:31:D0:40:DB:AC:72:48:24:A4:8C:91 X509v3 Authority Key Identifier: keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:91:dc:66:90:a2:48:ae:3f:e9:85:5d:ee:cc:8c:c7:76:51: 75:7b:a3:d8:dd:a0:4b:89:94:c5:b9:d6:63:f1:34:08:52:52: 60:1a:79:0c:94:ca:ca:0f:cf:ce:be:15:3e:8e:54:65:9d:17: 37:73:ba:7e:30:11:7e:3e:7d:a7:f0:07:fd:0d:44:29:9a:9f: b1:50:45:29:95:6a:44:91:8b:bf:21:62:7d:2d:a6:f3:8c:0f: 1f:6a:c5:13:b8:ac:5e:60:e1:6d:8c:4d:ee:65:a8:5d:94:7c: ff:40:81:30:f9:04:bb:90:78:1a:cc:38:b2:bd:30:2e:d4:a7: 6f:5c:30:8d:54:95:1d:b3:dc:5a:16:3c:88:f3:8f:8a:a3:18: d0:98:d6:45:03:eb:54:9f:12:7c:57:47:32:98:97:4f:62:df: 29:d5:61:dc:59:91:e5:fa:30:16:07:aa:d5:e3:72:01:ee:b5: fd:71:92:67:28:c4:b0:2b:d8:5b:9c:8d:51:67:44:55:f9:cd: 0b:c8:3c:3b:c9:2f:b8:44:f5:70:52:d6:c2:eb:2d:35:3c:ad: 86:6c:3a:e2:fc:15:53:95:cc:f6:42:bf:b1:75:e7:12:dc:0e: 0c:8e:50:64:22:dd:60:3e:f9:c8:0f:78:15:58:a0:e3:87:1c: 9a:b3:49:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHhQ/2NOANL6OOERa3U/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGIxOTM4NjY4YjI3YjA1MmM2ODNkMWUyNjBjMGNkM2Q1 Njg3NWIwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygyZTVjYzAzZmZjNDY0MTEyZDYzMWQwNDBkYmFjNzI0ODI0YTQ4YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqimPWsz1PbbdQIl+7ptpqe6DYAJ3 A71DXS2KZlHXYJONGsR6htMyg82xubYA4ml+hUqQ2nWfqAJi/Yvb0NhQKm40MoMH /bqk1k66uk0JZkJIhrIjK/7jmZPl+G79yuqHVwXbJTMunn47w9QpaAj0E9+PfR3S L+TjpfPpU0mqhw96gAx2kqYzMzL1L6yVEgi8Feod6dRNCnxXT2dDQ1MUNr49WXvV js+/DeNknr1dol+wot8Ktiapu40THOk0fhR5WEfK4GOq8xR7j/HLddZh3sM+Y1l1 FIAYNfEGRyjaXaXG3MRSohOVoYiqrRYC2kcJd9QFJNIhi8FrKz4Wl2R3jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5cwD/8RkES1jHQQNusckgkpIyRMB8GA1UdIwQY MBaAFLtLGThmiyewUsaD0eJgwM09VodbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUt YjNjNzQyNTQzZGRmLzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUtYjNjNzQyNTQzZGRm LzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5HcZpCi SK4/6YVd7syMx3ZRdXuj2N2gS4mUxbnWY/E0CFJSYBp5DJTKyg/Pzr4VPo5UZZ0X N3O6fjARfj59p/AH/Q1EKZqfsVBFKZVqRJGLvyFifS2m84wPH2rFE7isXmDhbYxN 7mWoXZR8/0CBMPkEu5B4Gsw4sr0wLtSnb1wwjVSVHbPcWhY8iPOPiqMY0JjWRQPr VJ8SfFdHMpiXT2LfKdVh3FmR5fowFgeq1eNyAe61/XGSZyjEsCvYW5yNUWdEVfnN C8g8O8kvuET1cFLWwustNTythmw64vwVU5XM9kK/sXXnEtwODI5QZCLdYD75yA94 FVig44ccmrNJWA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:17 2025 by rpki-client