This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json) Hash identifier: HyHz7JeV/wo8vdelCk/Ryst9VJktb2LtSvDLAwmh4xk= Subject key identifier: 67:4C:D4:76:F5:F8:FF:C2:15:52:43:A1:20:72:89:16:AC:AC:DF:B4 Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b Certificate serial: 019AF164778E608D0E16EAEDC78DA51A1BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft Manifest number: 0685 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: mjaa/kYQ3DkNNDxeHepsQsmdbzt0fjBySYMtCy1PBj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:77:8e:60:8d:0e:16:ea:ed:c7:8d:a5:1a:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=674cd476f5f8ffc2155243a120728916acacdfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:69:0d:54:d6:3c:47:c2:05:62:41:db:b0: e1:07:e8:c4:20:cf:47:bd:1a:eb:9a:80:dd:38:bf: 2d:da:1c:cc:4f:58:1e:f8:2e:33:b5:f9:6b:41:43: 04:89:45:85:54:7a:f7:44:75:64:20:68:cb:6c:ce: d9:e2:56:c1:ae:ee:ac:53:c6:93:e7:19:0b:f5:1f: cc:3f:21:31:b8:06:4a:d1:05:cc:01:ae:7e:10:42: b8:51:b8:43:42:2f:4c:aa:1c:78:da:51:83:f5:dc: f9:6a:56:7a:a7:17:b2:8e:d0:ab:b9:81:c8:6c:8c: ad:22:5a:cb:73:c2:43:32:df:7d:4a:ac:78:fb:e0: 0d:be:54:17:fb:3f:fc:56:99:45:c7:6e:89:3a:3e: 4e:be:05:53:0e:c7:bd:21:a2:95:53:ef:96:39:c5: 5f:39:f1:96:e9:ee:33:44:f4:13:27:c9:42:22:a4: bd:da:e3:8b:c9:f2:85:40:5a:f6:ff:49:68:60:f9: a6:ef:c7:86:ed:a7:d7:ca:88:3d:a1:cb:99:6e:e7: da:4b:e7:fc:44:e6:43:e9:c4:b8:50:7a:28:bd:a8: 6e:05:0f:d1:15:be:fb:ba:ea:72:f0:45:71:fb:fb: ec:b4:8c:34:58:53:3d:b0:20:6d:37:f7:c6:20:31: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4C:D4:76:F5:F8:FF:C2:15:52:43:A1:20:72:89:16:AC:AC:DF:B4 X509v3 Authority Key Identifier: keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f5:db:c2:14:56:48:4e:d9:6a:e9:da:0d:86:1d:31:a5:92: 67:df:86:0c:dc:be:85:3d:eb:a9:02:c8:68:b0:19:79:23:ea: ae:25:75:b3:33:de:e3:14:94:50:b2:d2:1d:0b:49:f8:0e:e2: 4f:bd:98:a5:91:16:3a:37:5d:cb:57:b1:89:d8:7e:23:ed:23: 4d:e8:c1:f7:94:93:7d:16:27:de:36:24:d0:cd:0a:4e:1b:ec: 47:98:eb:ec:a8:eb:79:63:06:a1:b5:00:08:1b:96:98:e5:85: 9e:87:d4:f7:3e:7e:51:28:6e:b4:73:33:8f:71:2f:c1:17:ee: 12:62:74:20:69:dc:a3:10:0c:6a:f8:6f:03:fd:a5:ba:a4:ed: 12:70:23:80:de:20:f3:c0:3d:d0:6c:1d:29:c1:e2:ae:3b:a1: de:c0:bb:5b:f6:2a:4a:f6:77:47:fb:d2:6a:2e:dd:b3:1c:1f: 6b:1e:73:6f:df:e4:70:80:46:e1:f7:b6:5b:5c:0d:d5:e4:81: df:69:5d:08:61:1a:6b:e5:79:43:cf:64:33:92:c0:a4:6f:ca: 6b:e2:9f:7a:3c:73:5c:c9:73:38:d2:7d:45:dc:e6:95:a5:bb: 5b:fe:81:3b:26:22:67:cd:ca:a8:65:8d:d6:22:91:e1:1e:89: 91:e8:7e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHeOYI0OFurtx42lGhv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw ZmEyNGIwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD Eyg2NzRjZDQ3NmY1ZjhmZmMyMTU1MjQzYTEyMDcyODkxNmFjYWNkZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwItpDVTWPEfCBWJB27DhB+jEIM9H vRrrmoDdOL8t2hzMT1ge+C4ztflrQUMEiUWFVHr3RHVkIGjLbM7Z4lbBru6sU8aT 5xkL9R/MPyExuAZK0QXMAa5+EEK4UbhDQi9Mqhx42lGD9dz5alZ6pxeyjtCruYHI bIytIlrLc8JDMt99Sqx4++ANvlQX+z/8VplFx26JOj5OvgVTDse9IaKVU++WOcVf OfGW6e4zRPQTJ8lCIqS92uOLyfKFQFr2/0loYPmm78eG7afXyog9ocuZbufaS+f8 ROZD6cS4UHoovahuBQ/RFb77uupy8EVx+/vstIw0WFM9sCBtN/fGIDEolwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdM1Hb1+P/CFVJDoSByiRasrN+0MB8GA1UdIwQY MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2 LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPXbwhRW SE7ZaunaDYYdMaWSZ9+GDNy+hT3rqQLIaLAZeSPqriV1szPe4xSUULLSHQtJ+A7i T72YpZEWOjddy1exidh+I+0jTejB95STfRYn3jYk0M0KThvsR5jr7KjreWMGobUA CBuWmOWFnofU9z5+UShutHMzj3EvwRfuEmJ0IGncoxAMavhvA/2luqTtEnAjgN4g 88A90GwdKcHirjuh3sC7W/YqSvZ3R/vSai7dsxwfax5zb9/kcIBG4fe2W1wN1eSB 32ldCGEaa+V5Q89kM5LApG/Ka+KfejxzXMlzONJ9RdzmlaW7W/6BOyYiZ83KqGWN 1iKR4R6Jkeh++A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:44 2025 by rpki-client