This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json) Hash identifier: Ao69f11s3aHdz28d5rACTJTpKZ0zMi+FKjtlcYJd1aA= Subject key identifier: 8F:FF:CB:5C:5C:55:E8:07:D1:3D:AD:CC:72:B8:A2:26:04:6D:50:69 Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Certificate serial: 019B2B8A276A8668C8BDDD8C9FD5332B9587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft Manifest number: 0947 Signing time: Wed 17 Dec 2025 09:00:32 +0000 Manifest this update: Wed 17 Dec 2025 09:00:32 +0000 Manifest next update: Thu 18 Dec 2025 09:00:32 +0000 Files and hashes: 1: 762tDH7yyhvirdbTfkRz468_FVk.roa (hash: 5/pRGsunkNhj6ROqIRNNJ/NWZj0o5kv5UhFJhw82eOw=) 2: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=) 3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: HIrzPJ3DBfN50OA47C2llMeLMrHwUvn00c8jPu+ZgG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:27:6a:86:68:c8:bd:dd:8c:9f:d5:33:2b:95:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Validity Not Before: Dec 17 09:00:32 2025 GMT Not After : Dec 18 09:00:32 2025 GMT Subject: CN=8fffcb5c5c55e807d13dadcc72b8a226046d5069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:dc:e7:fe:72:5b:69:3f:48:81:9d:68:50: cd:d7:1d:b8:35:92:04:1c:ba:e1:5e:fc:41:0b:e1: b2:83:7f:6d:cc:28:6a:0b:6a:f6:b6:d6:cf:e2:ab: 2c:9f:16:8f:99:e3:2e:c4:50:49:c1:9e:c3:81:0a: e0:e7:a3:a2:0c:7e:34:14:75:a6:1a:c3:c5:1c:e9: d9:37:14:f1:c8:41:d1:12:48:56:bd:80:e1:ac:ea: d5:9e:48:f3:57:e8:02:2e:bc:c0:69:de:38:1e:64: 37:3e:c7:00:80:c7:9e:82:32:bf:ab:b6:59:1d:7b: ce:96:42:a4:30:0e:e6:6c:92:66:18:a9:65:7e:7d: 55:d0:9f:1f:03:9a:82:06:c3:c7:30:d3:da:70:14: 10:78:76:44:e5:61:13:0d:a1:60:f6:94:39:f3:d8: 37:4d:e2:8a:4a:52:ba:83:21:54:40:ea:1c:b5:41: 79:cd:0c:a8:50:43:39:6e:f6:36:f7:72:36:c1:fb: b2:aa:19:8f:33:dd:1f:64:45:e7:0c:98:df:b9:89: d6:fe:c1:1d:4c:e1:b5:dc:c6:c4:b2:f3:f1:f4:6c: f3:8a:73:6f:a4:57:88:14:f1:76:7e:26:1a:6a:93: 97:40:65:23:f6:e1:5c:f1:cd:57:f9:93:b9:3a:7e: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:CB:5C:5C:55:E8:07:D1:3D:AD:CC:72:B8:A2:26:04:6D:50:69 X509v3 Authority Key Identifier: keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:17:01:f4:05:34:79:18:89:d0:80:aa:33:0d:d4:43:6e:ac: 84:ed:b8:af:f0:0f:95:a8:53:cf:26:68:a8:50:79:4c:f5:2d: 22:46:61:10:af:f2:26:8e:74:d6:14:d1:b4:ee:90:f4:dc:e8: e5:32:bf:f4:8e:11:52:34:39:0e:96:61:32:a6:93:ac:23:dc: b8:a7:b9:7e:8a:09:57:5b:a7:5d:bf:77:e6:7c:19:4a:ed:87: 79:24:82:38:5f:7d:74:35:cb:3c:03:b1:22:df:a3:3a:00:b7: ff:dc:bf:41:18:f3:94:d4:eb:05:b5:70:4d:84:03:9b:94:a5: ca:2b:e5:45:d3:e8:3e:a3:76:37:ac:2c:5b:2d:bd:7b:25:9e: b7:a2:e1:7a:01:03:7f:43:c8:e8:db:6d:3b:91:df:11:f7:4f: ce:b8:1f:94:4b:17:8d:67:51:5e:a7:e2:7f:7c:3f:72:1b:7e: e1:ec:68:c5:b0:54:08:55:9f:79:5c:34:64:4e:2f:6a:fa:0d: bc:7e:6b:45:67:0a:56:25:e7:91:b4:d8:a9:98:cd:b4:b2:ff: 22:c0:83:b3:97:fa:36:cb:3a:d8:1b:69:da:ec:fb:4a:c1:e3: 2d:0a:87:06:7a:f9:b9:4f:dc:0c:12:67:12:35:fc:62:86:2d: e5:ea:d7:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriidqhmjIvd2Mn9UzK5WHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw MDI4NjMwHhcNMjUxMjE3MDkwMDMyWhcNMjUxMjE4MDkwMDMyWjAzMTEwLwYDVQQD Eyg4ZmZmY2I1YzVjNTVlODA3ZDEzZGFkY2M3MmI4YTIyNjA0NmQ1MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjHc5/5yW2k/SIGdaFDN1x24NZIE HLrhXvxBC+Gyg39tzChqC2r2ttbP4qssnxaPmeMuxFBJwZ7DgQrg56OiDH40FHWm GsPFHOnZNxTxyEHREkhWvYDhrOrVnkjzV+gCLrzAad44HmQ3PscAgMeegjK/q7ZZ HXvOlkKkMA7mbJJmGKllfn1V0J8fA5qCBsPHMNPacBQQeHZE5WETDaFg9pQ589g3 TeKKSlK6gyFUQOoctUF5zQyoUEM5bvY293I2wfuyqhmPM90fZEXnDJjfuYnW/sEd TOG13MbEsvPx9GzzinNvpFeIFPF2fiYaapOXQGUj9uFc8c1X+ZO5On5GOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI//y1xcVegH0T2tzHK4oiYEbVBpMB8GA1UdIwQY MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4 LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShcB9AU0 eRiJ0ICqMw3UQ26shO24r/APlahTzyZoqFB5TPUtIkZhEK/yJo501hTRtO6Q9Nzo 5TK/9I4RUjQ5DpZhMqaTrCPcuKe5fooJV1unXb935nwZSu2HeSSCOF99dDXLPAOx It+jOgC3/9y/QRjzlNTrBbVwTYQDm5SlyivlRdPoPqN2N6wsWy29eyWet6LhegED f0PI6NttO5HfEfdPzrgflEsXjWdRXqfif3w/cht+4exoxbBUCFWfeVw0ZE4vavoN vH5rRWcKViXnkbTYqZjNtLL/IsCDs5f6Nss62Btp2uz7SsHjLQqHBnr5uU/cDBJn EjX8YoYt5erX6A== -----END CERTIFICATE-----Generated at Wed Dec 17 17:58:21 2025 by rpki-client