This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json) Hash identifier: C2SYiMJkdq2luNxl53T5+TN9Emp7DOWwgh63t5WjEIg= Subject key identifier: D1:DA:B9:7F:D9:13:86:1D:E6:3D:EA:9B:23:41:71:49:6B:14:2D:CD Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Certificate serial: 019B32D73B62E3D6B4B935BE5987C633D7DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:02:04 +0000 Manifest this update: Thu 18 Dec 2025 19:02:04 +0000 Manifest next update: Fri 19 Dec 2025 19:02:04 +0000 Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: VmC2ji2jKD3M4pQXSjYSusgBqZzsJpf6Btpgt3UtAyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:3b:62:e3:d6:b4:b9:35:be:59:87:c6:33:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Validity Not Before: Dec 18 19:02:04 2025 GMT Not After : Dec 19 19:02:04 2025 GMT Subject: CN=d1dab97fd913861de63dea9b234171496b142dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:63:e6:1c:b0:c3:1a:50:0a:b2:de:0d:2d: f4:dc:86:cd:19:f5:7f:69:b4:b7:2b:47:61:23:7d: a9:35:52:e2:b3:e6:c4:c6:48:88:97:54:06:24:79: 69:68:43:aa:a7:da:c0:e7:9b:92:4e:7b:df:c8:31: 1e:72:98:59:af:1b:fb:9c:02:43:9c:85:e0:82:69: af:e3:6c:e8:cb:13:f4:c0:0c:9e:8f:54:a2:de:42: a3:40:ab:ef:15:0a:a3:d2:b5:30:26:3f:68:34:ea: 61:85:8b:f0:ca:9b:d0:1f:5e:88:52:8c:23:19:67: c2:c8:27:bd:37:ac:0d:07:b7:e6:5e:da:bf:f7:ed: c1:4e:01:e8:90:c8:8f:76:8a:26:e2:02:f2:1e:99: 6e:6a:c6:98:d7:55:87:51:55:74:f8:aa:d2:8f:08: 58:00:ce:19:67:00:52:15:d7:b3:a0:58:a0:0d:f1: ae:e1:66:05:47:17:43:53:09:63:1e:94:f8:8f:4e: d3:6f:da:4d:42:ae:95:e6:2d:20:4b:af:fc:eb:16: 3d:16:6f:6b:8f:7e:c4:60:e6:18:50:62:ef:d8:72: 38:b8:b1:66:42:6c:fe:93:b1:e4:33:f1:15:09:19: ed:1d:28:1d:c6:ec:f6:d0:0a:8a:e4:11:e4:14:aa: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DA:B9:7F:D9:13:86:1D:E6:3D:EA:9B:23:41:71:49:6B:14:2D:CD X509v3 Authority Key Identifier: keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:f2:2a:28:e7:42:56:ef:a1:c3:69:ee:6a:b3:ac:9c:3d: b8:21:9b:7c:1c:97:e6:f6:a3:95:95:cd:d5:77:d1:f9:fa:b4: 62:e7:3e:67:7b:6a:fd:dd:33:80:c4:d0:02:fa:65:61:0a:2b: 3f:09:dd:72:1d:ab:92:4f:56:5c:66:20:f3:9f:8c:24:24:ef: 5c:b2:b1:fa:08:34:02:32:76:55:02:f9:7e:0f:8c:d8:36:55: 2d:3c:61:92:35:8f:01:04:fb:3c:f1:8a:c8:3e:c7:c0:4d:12: 6d:41:30:aa:b4:ba:96:5a:ff:f9:20:b7:ab:17:15:56:0d:cc: c0:7e:b6:0d:5a:cc:54:99:ba:fc:58:5e:7b:11:cd:80:36:3c: 15:f0:ad:05:4d:e6:f2:eb:2c:23:70:ba:09:a0:6c:8c:84:1c: f9:9b:7a:d1:9c:95:74:7a:52:b4:2a:41:6f:47:9c:57:e9:30: 3f:6d:b9:24:21:e8:29:f5:e6:42:e4:8a:af:9b:17:4a:ba:ea: 94:16:1b:00:89:cb:13:53:c7:4f:6a:75:ef:bb:8e:44:3b:81: c6:03:98:60:1f:a1:18:b4:42:b8:47:af:29:a0:ff:f1:e4:60: 21:61:cf:18:90:3c:fa:58:2c:b6:50:a6:d4:79:79:e6:72:77: 77:83:0f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1zti49a0uTW+WYfGM9fbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDU4NWI0Njc5MjM3MzZjNDJjNzk3MmUxMDQyZjFiMmUz MGRjNjYwHhcNMjUxMjE4MTkwMjA0WhcNMjUxMjE5MTkwMjA0WjAzMTEwLwYDVQQD EyhkMWRhYjk3ZmQ5MTM4NjFkZTYzZGVhOWIyMzQxNzE0OTZiMTQyZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx85j5hywwxpQCrLeDS303IbNGfV/ abS3K0dhI32pNVLis+bExkiIl1QGJHlpaEOqp9rA55uSTnvfyDEecphZrxv7nAJD nIXggmmv42zoyxP0wAyej1Si3kKjQKvvFQqj0rUwJj9oNOphhYvwypvQH16IUowj GWfCyCe9N6wNB7fmXtq/9+3BTgHokMiPdoom4gLyHpluasaY11WHUVV0+KrSjwhY AM4ZZwBSFdezoFigDfGu4WYFRxdDUwljHpT4j07Tb9pNQq6V5i0gS6/86xY9Fm9r j37EYOYYUGLv2HI4uLFmQmz+k7HkM/EVCRntHSgdxuz20AqK5BHkFKodUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHauX/ZE4Yd5j3qmyNBcUlrFC3NMB8GA1UdIwQY MBaAFLtFhbRnkjc2xCx5cuEELxsuMNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUt NjYzODEwMWUzMTliLzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUtNjYzODEwMWUzMTli LzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALijyKijn QlbvocNp7mqzrJw9uCGbfByX5vajlZXN1XfR+fq0Yuc+Z3tq/d0zgMTQAvplYQor Pwndch2rkk9WXGYg85+MJCTvXLKx+gg0AjJ2VQL5fg+M2DZVLTxhkjWPAQT7PPGK yD7HwE0SbUEwqrS6llr/+SC3qxcVVg3MwH62DVrMVJm6/FheexHNgDY8FfCtBU3m 8ussI3C6CaBsjIQc+Zt60ZyVdHpStCpBb0ecV+kwP225JCHoKfXmQuSKr5sXSrrq lBYbAInLE1PHT2p177uORDuBxgOYYB+hGLRCuEevKaD/8eRgIWHPGJA8+lgstlCm 1Hl55nJ3d4MPcA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:27:18 2025 by rpki-client