This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json) Hash identifier: 6SGWUyFlW3XDTanveRTQwttIigv3QQfrWXtM69j5hx4= Subject key identifier: 52:88:C3:B5:15:87:19:15:2F:6D:24:86:A5:E2:EA:88:1B:78:A0:45 Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Certificate serial: 019AF49BD047E7AA642789335EE5335EF107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft Manifest number: 12E4 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=) 2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: dhygDxHH2UVkYk/lrlPZdKJoBUb5E/iN9XFWmm4Yy3Y=) 3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d0:47:e7:aa:64:27:89:33:5e:e5:33:5e:f1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=5288c3b5158719152f6d2486a5e2ea881b78a045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:a7:79:3a:c9:49:c4:bd:37:7a:29:09:08: dc:95:c7:6c:df:ee:75:0f:47:8b:ff:04:43:3a:68: 7a:04:25:b7:d9:43:33:e9:98:e6:07:3a:12:9b:f2: 43:7e:23:35:08:7c:62:d8:3a:86:9c:f0:be:67:81: 77:ae:66:44:71:8c:49:45:d8:73:11:00:58:72:ab: d4:08:6b:f3:72:50:b6:c2:46:58:63:52:10:8e:df: 9b:c4:95:3e:28:b8:13:e5:13:33:ce:97:fa:1f:88: 95:d5:b5:dd:a5:84:9c:bd:dc:35:f7:6d:fa:f6:f4: de:0b:cc:2d:22:9b:27:11:19:d5:66:8a:07:bc:ad: 0e:f9:04:9a:62:07:7d:52:89:86:06:b5:80:0f:b2: 31:59:fa:14:b5:e1:17:4c:de:0a:ca:e5:89:aa:03: 45:18:d7:48:71:a4:4d:29:22:c3:83:81:03:35:81: 68:56:f6:08:e1:9e:7f:ff:09:40:ce:60:f7:01:7c: 19:49:c5:bf:59:7d:46:80:12:a2:45:da:c0:e3:3a: bb:78:b0:cd:dc:31:88:f8:0b:68:b6:5d:4e:4a:bf: dc:89:8c:1e:3c:2e:11:23:26:da:5c:55:1a:52:23: 44:bb:ab:a6:bb:a7:af:8c:7e:16:61:d7:52:2f:61: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:88:C3:B5:15:87:19:15:2F:6D:24:86:A5:E2:EA:88:1B:78:A0:45 X509v3 Authority Key Identifier: keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:77:62:62:da:8b:44:e1:d7:25:c9:2e:fd:2b:db:8c:0e:9e: f1:fc:eb:3c:86:8d:02:1b:82:4b:72:77:c1:b0:49:1d:be:dd: c2:db:95:9f:88:b0:d3:2a:57:b7:cc:e3:f8:ab:ca:5a:2c:3f: 89:50:fd:55:de:26:ca:aa:93:9e:00:74:e0:63:3c:89:ff:ab: 5b:94:49:9c:4a:f5:ff:55:cb:49:58:79:6e:1e:c5:77:a1:60: 9d:1e:b3:3d:f3:07:2b:c0:7e:e6:39:3f:6a:26:95:88:d2:68: 8e:4c:76:6c:41:e2:ab:5e:9c:5d:93:e9:ff:98:4d:2d:47:e4: 60:08:39:5d:58:1d:b7:ab:05:dd:0c:d1:3d:f7:e9:d1:34:eb: 9b:ff:ac:f3:af:d2:28:8b:f3:8e:74:53:0f:ef:cf:a8:0d:5a: 62:67:1b:1c:cf:a1:dc:98:b5:51:3f:22:6a:7a:bf:62:58:cc: b0:62:55:a8:80:64:3a:fc:46:08:16:91:a3:e1:b8:f5:cd:b6: 93:c4:45:7a:c0:c6:1b:a9:6a:06:e0:73:3a:a4:fb:97:7a:0a: 1b:bb:d6:43:03:0d:be:c4:d2:62:ff:25:d9:a0:8a:79:78:db: 22:a7:09:97:d5:6d:b9:a0:d4:ea:ac:73:48:12:19:b3:1f:39: d3:c6:b8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9BH56pkJ4kzXuUzXvEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3 NzQ1OWMwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD Eyg1Mjg4YzNiNTE1ODcxOTE1MmY2ZDI0ODZhNWUyZWE4ODFiNzhhMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz52neTrJScS9N3opCQjclcds3+51 D0eL/wRDOmh6BCW32UMz6ZjmBzoSm/JDfiM1CHxi2DqGnPC+Z4F3rmZEcYxJRdhz EQBYcqvUCGvzclC2wkZYY1IQjt+bxJU+KLgT5RMzzpf6H4iV1bXdpYScvdw19236 9vTeC8wtIpsnERnVZooHvK0O+QSaYgd9UomGBrWAD7IxWfoUteEXTN4KyuWJqgNF GNdIcaRNKSLDg4EDNYFoVvYI4Z5//wlAzmD3AXwZScW/WX1GgBKiRdrA4zq7eLDN 3DGI+Atotl1OSr/ciYwePC4RIybaXFUaUiNEu6umu6evjH4WYddSL2HAjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKIw7UVhxkVL20khqXi6ogbeKBFMB8GA1UdIwQY MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAndiYtqL ROHXJcku/SvbjA6e8fzrPIaNAhuCS3J3wbBJHb7dwtuVn4iw0ypXt8zj+KvKWiw/ iVD9Vd4myqqTngB04GM8if+rW5RJnEr1/1XLSVh5bh7Fd6FgnR6zPfMHK8B+5jk/ aiaViNJojkx2bEHiq16cXZPp/5hNLUfkYAg5XVgdt6sF3QzRPffp0TTrm/+s86/S KIvzjnRTD+/PqA1aYmcbHM+h3Ji1UT8ianq/YljMsGJVqIBkOvxGCBaRo+G49c22 k8RFesDGG6lqBuBzOqT7l3oKG7vWQwMNvsTSYv8l2aCKeXjbIqcJl9VtuaDU6qxz SBIZsx8508a47w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:44 2025 by rpki-client