This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json) Hash identifier: /ZlIaNu7IbhofzVcDXbN+uRImX6dREhlKqPBWfDNQFw= Subject key identifier: F6:95:18:4D:57:16:FA:90:C7:F1:08:DC:4E:05:E5:52:73:0B:44:30 Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Certificate serial: 019B12A6EE5370A8E518E9486B88E4E935EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 13:01:28 +0000 Manifest this update: Fri 12 Dec 2025 13:01:28 +0000 Manifest next update: Sat 13 Dec 2025 13:01:28 +0000 Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=) 2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: 3GHgJPyMzJkfLuCxZF8nWPzrpWtO4CgiPDqTBFe9XZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:ee:53:70:a8:e5:18:e9:48:6b:88:e4:e9:35:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56 Validity Not Before: Dec 12 13:01:28 2025 GMT Not After : Dec 13 13:01:28 2025 GMT Subject: CN=f695184d5716fa90c7f108dc4e05e552730b4430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:83:5c:b2:d1:f5:5e:d3:53:49:d2:95:c1: 47:5d:3a:a4:4b:92:4a:98:be:2f:a6:d9:a1:17:25: ca:82:2e:18:af:fd:91:2b:d7:01:3d:31:5c:95:3c: e6:29:46:fd:98:74:74:27:71:89:e0:01:18:e6:a1: 1d:32:3b:a4:5a:34:c4:7d:1a:d3:88:2b:e7:22:8e: 83:fa:f5:d1:28:22:a2:64:ac:78:59:6f:c2:24:d7: a7:fb:c9:ac:ee:75:0d:3c:95:12:a6:89:79:12:58: 04:5d:78:b1:08:4f:e2:f1:6c:0a:a9:0f:dc:4b:23: fe:07:0a:e5:64:09:7b:cb:bf:d8:2e:43:c9:45:82: d7:3c:e5:e8:bf:d2:68:de:4d:44:77:11:1f:d8:bb: 4e:4e:ed:1c:b3:b4:bd:89:47:80:51:c5:b0:88:2c: 86:4c:da:28:03:9d:e1:4c:8a:6c:cc:d4:55:44:3c: 6a:20:7f:65:b7:6a:61:0b:61:28:b7:9d:c0:d8:2b: 99:9b:d0:c3:70:9a:62:d7:8d:99:db:93:88:78:8a: c3:71:f8:a9:2a:25:5c:eb:e4:84:fd:56:10:69:cc: 64:d1:4b:a8:c0:1e:2f:5c:b8:5a:ad:c1:70:52:e4: f9:07:d2:57:c6:8d:93:3a:43:2b:14:b7:7a:47:01: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:18:4D:57:16:FA:90:C7:F1:08:DC:4E:05:E5:52:73:0B:44:30 X509v3 Authority Key Identifier: keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:92:d1:cf:e5:6d:ef:c8:53:14:94:c4:55:8d:0d:f7:b2:8e: 56:5b:a7:f7:1b:83:5b:8a:04:b9:59:7f:09:25:6f:8b:fe:4d: 74:8f:94:75:a8:00:a8:f3:f6:a2:29:1a:02:35:17:52:b0:79: af:66:6b:4d:f9:4c:62:2a:3d:03:85:50:4d:c6:21:81:5d:2e: b9:87:34:f8:74:eb:8e:78:99:8f:bc:b6:ff:65:1e:81:87:02: 6c:de:85:9c:3d:6f:5e:1f:36:47:97:84:3c:75:d3:2c:4b:b5: da:ac:1c:f8:65:78:a1:ca:e8:dc:33:44:ee:9a:c9:92:19:5c: 12:7a:f0:74:97:dc:2c:1e:da:a9:9e:18:a8:7a:7a:a7:01:6b: 66:1c:1b:55:70:ca:05:b4:6f:23:f0:a2:74:02:ca:96:84:d2: d6:8d:e2:d6:34:64:d9:7d:50:19:7d:ca:0e:74:17:20:e4:c5: 86:af:a2:90:4d:ef:cd:6b:d7:ba:c7:85:7d:9e:f5:f8:9c:f3: f9:bb:4e:ec:13:f9:f8:96:2b:e5:57:0e:c2:4a:c6:76:e7:c4: 3c:eb:c9:14:69:02:48:4d:4d:de:11:72:4e:17:e4:47:46:58: 43:8e:07:19:4d:5d:96:1b:31:6c:d6:f1:a7:70:89:88:36:f1: 1f:f4:77:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpu5TcKjlGOlIa4jk6TXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4 NDNjNTYwHhcNMjUxMjEyMTMwMTI4WhcNMjUxMjEzMTMwMTI4WjAzMTEwLwYDVQQD EyhmNjk1MTg0ZDU3MTZmYTkwYzdmMTA4ZGM0ZTA1ZTU1MjczMGI0NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwouDXLLR9V7TU0nSlcFHXTqkS5JK mL4vptmhFyXKgi4Yr/2RK9cBPTFclTzmKUb9mHR0J3GJ4AEY5qEdMjukWjTEfRrT iCvnIo6D+vXRKCKiZKx4WW/CJNen+8ms7nUNPJUSpol5ElgEXXixCE/i8WwKqQ/c SyP+BwrlZAl7y7/YLkPJRYLXPOXov9Jo3k1EdxEf2LtOTu0cs7S9iUeAUcWwiCyG TNooA53hTIpszNRVRDxqIH9lt2phC2Eot53A2CuZm9DDcJpi142Z25OIeIrDcfip KiVc6+SE/VYQacxk0UuowB4vXLharcFwUuT5B9JXxo2TOkMrFLd6RwEpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaVGE1XFvqQx/EI3E4F5VJzC0QwMB8GA1UdIwQY MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0 LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpLRz+Vt 78hTFJTEVY0N97KOVlun9xuDW4oEuVl/CSVvi/5NdI+UdagAqPP2oikaAjUXUrB5 r2ZrTflMYio9A4VQTcYhgV0uuYc0+HTrjniZj7y2/2UegYcCbN6FnD1vXh82R5eE PHXTLEu12qwc+GV4ocro3DNE7prJkhlcEnrwdJfcLB7aqZ4YqHp6pwFrZhwbVXDK BbRvI/CidALKloTS1o3i1jRk2X1QGX3KDnQXIOTFhq+ikE3vzWvXuseFfZ71+Jzz +btO7BP5+JYr5VcOwkrGdufEPOvJFGkCSE1N3hFyThfkR0ZYQ44HGU1dlhsxbNbx p3CJiDbxH/R3KQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:30:43 2025 by rpki-client