This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json) Hash identifier: VEK/FysKK04587cP+Nx1wfG7Xh94PRetMif6gIQj69U= Subject key identifier: 6F:FB:74:75:6B:57:1C:6A:F1:16:4A:0E:D5:51:7E:30:71:11:EE:DD Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b Certificate serial: 019AF1D19375E6D06910792628B6104332EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: qthh4gNq1SL8vSN5_lWJGt2pcwI.roa (hash: B+0i/tQ7fiCSFHOJ8ekqNZr6VbEaL85Z1TQ1N6rfs1I=) 2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: KjARME6FGjCJAUGD1hPcWRGpBZC6KYXmWtqNBzkNHxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:93:75:e6:d0:69:10:79:26:28:b6:10:43:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=6ffb74756b571c6af1164a0ed5517e307111eedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:55:21:18:d2:0b:f5:89:8d:d5:68:b4:2b: 98:b9:61:3c:4a:21:6d:42:5f:60:a1:a4:29:46:69: b6:fb:b5:2c:d7:fa:93:89:4f:1f:59:b1:2b:32:d7: 7e:40:15:32:49:a4:c9:23:8e:0a:e3:d7:9d:03:7b: 7b:ee:4a:6c:cf:bc:49:26:84:3d:02:70:c0:58:2e: e5:a9:51:f9:e6:d1:9c:da:f2:04:7e:44:be:e4:f5: 52:76:d4:b0:21:d5:16:44:2f:5c:cc:52:d1:91:b7: 0f:ef:46:c4:f9:d1:a8:2d:8c:0d:1a:e5:9b:e6:f2: 6f:d8:e5:81:8e:b3:f9:ad:28:c6:10:e1:dc:5f:0b: 1c:60:da:20:ec:15:bc:a7:8e:b0:f6:0a:af:b7:38: c9:0a:4b:a9:e9:a9:f2:d7:10:3e:57:82:ff:31:0c: e2:75:25:0e:60:02:eb:8b:7f:25:28:3d:dc:08:91: 70:ad:dd:e1:75:ee:d7:8c:9e:8d:cc:f1:01:10:19: e9:8d:dc:bd:7c:53:75:dc:a6:68:c5:31:4b:10:29: 42:35:f5:de:47:dc:fc:2a:ca:71:c9:da:e0:68:03: 83:b9:1f:6a:d2:de:2e:ed:6c:91:0f:af:6c:63:02: 5a:d5:c0:fc:7d:77:75:84:14:f4:45:12:48:6f:48: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FB:74:75:6B:57:1C:6A:F1:16:4A:0E:D5:51:7E:30:71:11:EE:DD X509v3 Authority Key Identifier: keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:96:a6:33:1f:9b:36:df:50:01:3a:8a:94:dc:22:3c:27:57: a1:6b:ad:44:6b:51:90:b5:aa:ce:eb:69:e2:16:f6:75:1f:e4: cc:45:c9:ca:aa:c7:10:d1:ef:cd:21:df:06:2e:9d:ca:27:59: 01:9d:2b:35:bd:6a:84:b9:ac:70:2d:be:cc:9e:bd:69:26:c5: 75:56:46:2d:d7:08:48:c9:1c:1b:00:13:0e:f0:9d:6e:5a:b3: 08:f9:9a:dd:d8:c8:c9:5f:28:cc:a3:3e:6a:18:e7:d8:9c:4c: 44:03:4e:fe:49:86:42:e8:67:d0:20:84:c7:05:90:6f:14:2b: 01:29:4b:64:16:95:c4:c1:77:6c:64:b3:c4:0c:7a:7f:6c:6a: c1:29:97:ef:86:bc:03:bb:6a:0c:61:25:6e:f3:2d:08:cb:59: a7:5e:2a:69:43:02:93:05:68:8f:c6:88:f0:ab:b4:b4:ef:0c: fe:b7:7d:23:af:06:9d:30:8a:b4:56:32:9e:ff:58:1a:24:3e: a3:e7:90:0a:7b:c1:88:c5:cd:b5:46:63:13:5d:36:ab:c9:df: ba:fe:45:e4:d0:ac:c3:db:c0:2b:b0:8a:bb:e8:22:30:9c:46: 98:e1:26:6d:77:cb:02:89:1a:9c:f4:1f:e2:b3:92:eb:17:80: 56:82:42:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZN15tBpEHkmKLYQQzLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzc1MmE3MTliNzQwYTBlMDI0NGRkMjljNjUzMmY3OTE1 MTY0NmIwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg2ZmZiNzQ3NTZiNTcxYzZhZjExNjRhMGVkNTUxN2UzMDcxMTFlZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs19VIRjSC/WJjdVotCuYuWE8SiFt Ql9goaQpRmm2+7Us1/qTiU8fWbErMtd+QBUySaTJI44K49edA3t77kpsz7xJJoQ9 AnDAWC7lqVH55tGc2vIEfkS+5PVSdtSwIdUWRC9czFLRkbcP70bE+dGoLYwNGuWb 5vJv2OWBjrP5rSjGEOHcXwscYNog7BW8p46w9gqvtzjJCkup6any1xA+V4L/MQzi dSUOYALri38lKD3cCJFwrd3hde7XjJ6NzPEBEBnpjdy9fFN13KZoxTFLEClCNfXe R9z8KspxydrgaAODuR9q0t4u7WyRD69sYwJa1cD8fXd1hBT0RRJIb0g67QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/7dHVrVxxq8RZKDtVRfjBxEe7dMB8GA1UdIwQY MBaAFLt3UqcZt0Cg4CRN0pxlMveRUWRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYt MzM1NGFkYmExMWIxLzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zYzMyYjUtYzBjOC00MzZhLTlhZDYtMzM1NGFkYmExMWIx LzEvdTNkU3B4bTNRS0RnSkUzU25HVXk5NUZSWkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZamMx+b Nt9QATqKlNwiPCdXoWutRGtRkLWqzutp4hb2dR/kzEXJyqrHENHvzSHfBi6dyidZ AZ0rNb1qhLmscC2+zJ69aSbFdVZGLdcISMkcGwATDvCdblqzCPma3djIyV8ozKM+ ahjn2JxMRANO/kmGQuhn0CCExwWQbxQrASlLZBaVxMF3bGSzxAx6f2xqwSmX74a8 A7tqDGElbvMtCMtZp14qaUMCkwVoj8aI8Ku0tO8M/rd9I68GnTCKtFYynv9YGiQ+ o+eQCnvBiMXNtUZjE102q8nfuv5F5NCsw9vAK7CKu+giMJxGmOEmbXfLAokanPQf 4rOS6xeAVoJCoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:55 2025 by rpki-client