This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json) Hash identifier: SyUP2f7K7fKRliWfmlPat+ElJCUxjbV1ncPjLh74/YA= Subject key identifier: CA:E4:7C:7A:81:28:B0:E6:7F:82:E1:0C:0F:1A:7C:3E:BA:D0:AB:0E Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Certificate serial: 019B1E73ED0A23D51971D0393B28FE405CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft Manifest number: 0AAA Signing time: Sun 14 Dec 2025 20:01:12 +0000 Manifest this update: Sun 14 Dec 2025 20:01:12 +0000 Manifest next update: Mon 15 Dec 2025 20:01:12 +0000 Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=) 2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: NKITpQpM7QO9gDLYhzs9WhPeHY1z9YgcEVhmlURO/vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:ed:0a:23:d5:19:71:d0:39:3b:28:fe:40:5c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9 Validity Not Before: Dec 14 20:01:12 2025 GMT Not After : Dec 15 20:01:12 2025 GMT Subject: CN=cae47c7a8128b0e67f82e10c0f1a7c3ebad0ab0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c3:6d:96:44:f2:c4:ed:63:aa:c7:75:dd:92: 8e:f7:e4:be:ef:8a:01:b8:99:30:e1:7c:f6:3e:1c: fa:46:ad:5a:fb:c0:25:1b:a1:12:61:15:7b:4f:1e: 2a:ea:40:56:37:5a:c6:1c:81:ec:80:fe:f2:cf:70: 4d:21:91:de:dc:f5:57:3e:af:41:00:98:c9:66:9d: 41:4c:dd:30:28:a4:d4:30:45:3a:59:6e:f4:44:8c: fa:0e:8f:26:1b:fc:35:c7:0d:5e:17:16:56:98:75: 1c:4f:6a:0c:e0:60:5f:49:0b:50:53:6e:f6:5f:d6: 6f:8e:a7:c4:35:df:af:1c:ad:77:81:cc:22:e2:a7: bf:d2:e9:6e:79:47:50:67:18:2e:85:0d:09:67:b6: 8e:c1:c7:21:dc:ee:81:6b:d0:f9:2c:5e:3b:cd:61: 25:58:36:97:c9:33:e6:7a:ee:e2:66:37:2a:45:ec: a9:b1:df:1a:7b:f2:94:ea:04:7b:84:04:6c:2e:ae: 20:32:81:6e:51:cb:e1:26:5d:e0:48:86:9d:0a:e2: 0f:67:64:36:65:86:09:8b:97:73:d0:7a:20:b9:79: a0:df:31:f7:cf:5f:d4:d1:70:f5:02:34:ea:11:72: 0d:2d:b6:ce:a7:cd:0c:10:63:4a:fe:85:8d:fd:95: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E4:7C:7A:81:28:B0:E6:7F:82:E1:0C:0F:1A:7C:3E:BA:D0:AB:0E X509v3 Authority Key Identifier: keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c8:18:1b:9a:f8:63:42:36:b6:86:5d:37:89:f2:e2:fe:02: 51:88:b1:b2:58:dd:00:57:1c:35:c8:70:2d:47:12:71:68:9c: 3d:cd:87:91:c2:fe:a7:bc:68:c5:50:50:e4:03:a0:75:9d:cc: 98:c7:f1:7c:a8:18:a4:95:a7:61:05:08:7c:16:95:ce:d9:28: e4:68:cb:86:6f:c5:8a:89:e7:f2:ed:0b:dc:09:ad:24:3e:60: b1:b4:6c:51:a2:25:04:e1:13:d1:c2:ad:17:da:a8:8e:fe:84: b8:82:68:19:e9:af:d9:c1:43:45:c9:96:48:91:d8:84:25:d0: d0:2a:06:e1:6b:32:f6:50:16:5e:be:a1:ae:45:b5:57:3c:db: 14:4d:b9:46:8a:f5:fb:ea:28:c6:fa:86:38:02:f0:3b:c3:4a: e1:27:ce:82:63:ea:bf:86:be:52:b5:09:16:25:36:4c:62:d3: 4d:e2:2c:c3:d4:d0:76:a4:44:4f:6b:9b:36:88:62:fd:43:87: e6:48:3e:49:de:42:4a:2a:5c:0f:e6:86:28:43:8f:2e:1a:0b: 6b:a9:87:9b:e5:32:06:4f:9e:af:d8:b3:73:92:2e:f1:7a:5c: 35:14:08:ea:e3:b3:a5:b1:a5:36:fd:27:5f:6b:7d:e2:48:1e: 33:40:83:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec+0KI9UZcdA5Oyj+QFzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz MTUwZTkwHhcNMjUxMjE0MjAwMTEyWhcNMjUxMjE1MjAwMTEyWjAzMTEwLwYDVQQD EyhjYWU0N2M3YTgxMjhiMGU2N2Y4MmUxMGMwZjFhN2MzZWJhZDBhYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cNtlkTyxO1jqsd13ZKO9+S+74oB uJkw4Xz2Phz6Rq1a+8AlG6ESYRV7Tx4q6kBWN1rGHIHsgP7yz3BNIZHe3PVXPq9B AJjJZp1BTN0wKKTUMEU6WW70RIz6Do8mG/w1xw1eFxZWmHUcT2oM4GBfSQtQU272 X9ZvjqfENd+vHK13gcwi4qe/0ulueUdQZxguhQ0JZ7aOwcch3O6Ba9D5LF47zWEl WDaXyTPmeu7iZjcqReypsd8ae/KU6gR7hARsLq4gMoFuUcvhJl3gSIadCuIPZ2Q2 ZYYJi5dz0HoguXmg3zH3z1/U0XD1AjTqEXINLbbOp80MEGNK/oWN/ZVBrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrkfHqBKLDmf4LhDA8afD660KsOMB8GA1UdIwQY MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1 LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcgYG5r4 Y0I2toZdN4ny4v4CUYixsljdAFccNchwLUcScWicPc2HkcL+p7xoxVBQ5AOgdZ3M mMfxfKgYpJWnYQUIfBaVztko5GjLhm/Fionn8u0L3AmtJD5gsbRsUaIlBOET0cKt F9qojv6EuIJoGemv2cFDRcmWSJHYhCXQ0CoG4Wsy9lAWXr6hrkW1VzzbFE25Ror1 ++ooxvqGOALwO8NK4SfOgmPqv4a+UrUJFiU2TGLTTeIsw9TQdqRET2ubNohi/UOH 5kg+Sd5CSipcD+aGKEOPLhoLa6mHm+UyBk+er9izc5Iu8XpcNRQI6uOzpbGlNv0n X2t94kgeM0CDKw== -----END CERTIFICATE-----Generated at Mon Dec 15 00:55:32 2025 by rpki-client