This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json) Hash identifier: 3fckHwkk45zSNLR9jxzR/DgOkUvvqWAgEtX22VAj8Dg= Subject key identifier: FD:D7:11:DC:E3:6D:3A:34:96:65:C1:09:1D:D0:AB:A3:5E:A5:32:46 Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Certificate serial: 019B25526238A31792FB04953F385C529FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 04:01:54 +0000 Manifest this update: Tue 16 Dec 2025 04:01:54 +0000 Manifest next update: Wed 17 Dec 2025 04:01:54 +0000 Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: 0UwoOHjnYCSkG4QshVXaRwGzQxhk9LcOi56jyE01XLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:62:38:a3:17:92:fb:04:95:3f:38:5c:52:9f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Validity Not Before: Dec 16 04:01:54 2025 GMT Not After : Dec 17 04:01:54 2025 GMT Subject: CN=fdd711dce36d3a349665c1091dd0aba35ea53246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:55:53:98:c7:52:4b:7e:08:d1:6b:bb:45:00: 09:12:c6:d5:02:fb:d2:12:cd:96:27:92:2c:d2:75: f3:9e:0b:d7:ae:3f:0e:e2:ea:1f:84:47:db:9b:47: fa:6a:31:df:03:8c:44:73:8c:bd:6b:14:2b:ce:64: e6:3f:8b:ff:ee:46:2f:0c:1f:7b:bf:9b:b4:f6:20: 9b:79:cf:46:b5:f2:b4:fa:5d:78:1b:57:d3:72:75: af:57:cc:1d:da:3d:fe:0d:b0:c0:2b:62:3c:b2:3a: 1d:db:b5:59:87:65:17:b3:7f:31:dc:82:10:5a:d5: 8d:ec:08:9f:18:ee:0f:86:44:c7:b8:02:e3:95:1d: 2c:21:e8:1a:fb:90:cd:fc:16:61:ca:b3:00:50:55: 56:00:35:24:1b:d5:70:ae:6a:66:0d:c4:48:8b:7f: 6a:3d:9d:e3:84:40:e3:2c:a2:20:1f:6c:8e:5c:ba: 62:79:d7:19:85:79:ce:5d:6f:16:87:ba:ae:84:38: 14:85:9d:bb:c6:e6:4f:9f:66:a1:b9:ec:2f:fa:d9: b1:ed:c0:91:5e:7f:bb:45:8e:c1:88:36:c7:69:cc: 3a:61:e4:8e:ff:93:88:3f:aa:8b:6c:3c:94:7f:40: c7:f7:59:74:45:74:33:42:e0:85:7a:d2:42:ce:ea: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:11:DC:E3:6D:3A:34:96:65:C1:09:1D:D0:AB:A3:5E:A5:32:46 X509v3 Authority Key Identifier: keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:42:78:9c:c4:4a:0a:f1:0b:f3:03:e6:0b:3d:83:a8:32:8b: 70:7f:f8:61:cc:3e:00:e8:87:f5:b0:f2:14:71:6d:14:54:29: ba:ec:67:4d:cf:23:8d:d7:d0:db:0e:ab:a7:e1:a4:40:af:62: a2:e8:65:88:9f:2a:23:25:e0:5a:bb:b4:e5:c2:81:4a:53:0a: e4:e8:05:86:97:f1:29:16:4b:ba:08:ce:56:c2:51:41:cb:c0: 06:2a:60:ca:49:92:a6:5e:a0:5e:89:1c:48:dc:56:a3:53:da: 77:65:8f:79:37:e2:c7:75:58:d5:1c:bb:97:d7:b3:c6:b2:1f: ef:3d:83:5d:d0:e6:89:df:36:4d:39:d8:4c:42:51:58:38:73: bb:00:4e:31:8a:dd:ea:65:34:51:fd:6e:1c:64:61:f8:ee:06: 3e:fb:55:5e:c1:84:73:5c:fc:18:23:6e:be:5d:6b:b8:34:66: c3:6c:77:1a:83:75:bf:28:8d:d1:24:b3:23:51:63:fc:43:f3: d1:51:40:bd:8c:bb:d2:01:c2:8a:1d:55:e7:e8:53:b0:de:fb: f4:58:6e:89:03:da:1c:88:0c:4d:2c:c8:28:df:61:98:ce:c3: bd:b8:49:f3:c4:67:3a:67:a7:68:90:d1:d3:25:96:d6:d2:2f: b0:1d:43:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUmI4oxeS+wSVPzhcUp/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDU4NWI0Njc5MjM3MzZjNDJjNzk3MmUxMDQyZjFiMmUz MGRjNjYwHhcNMjUxMjE2MDQwMTU0WhcNMjUxMjE3MDQwMTU0WjAzMTEwLwYDVQQD EyhmZGQ3MTFkY2UzNmQzYTM0OTY2NWMxMDkxZGQwYWJhMzVlYTUzMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FVTmMdSS34I0Wu7RQAJEsbVAvvS Es2WJ5Is0nXzngvXrj8O4uofhEfbm0f6ajHfA4xEc4y9axQrzmTmP4v/7kYvDB97 v5u09iCbec9GtfK0+l14G1fTcnWvV8wd2j3+DbDAK2I8sjod27VZh2UXs38x3IIQ WtWN7AifGO4PhkTHuALjlR0sIega+5DN/BZhyrMAUFVWADUkG9VwrmpmDcRIi39q PZ3jhEDjLKIgH2yOXLpiedcZhXnOXW8Wh7quhDgUhZ27xuZPn2ahuewv+tmx7cCR Xn+7RY7BiDbHacw6YeSO/5OIP6qLbDyUf0DH91l0RXQzQuCFetJCzurDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3XEdzjbTo0lmXBCR3Qq6NepTJGMB8GA1UdIwQY MBaAFLtFhbRnkjc2xCx5cuEELxsuMNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUt NjYzODEwMWUzMTliLzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUtNjYzODEwMWUzMTli LzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUJ4nMRK CvEL8wPmCz2DqDKLcH/4Ycw+AOiH9bDyFHFtFFQpuuxnTc8jjdfQ2w6rp+GkQK9i ouhliJ8qIyXgWru05cKBSlMK5OgFhpfxKRZLugjOVsJRQcvABipgykmSpl6gXokc SNxWo1Pad2WPeTfix3VY1Ry7l9ezxrIf7z2DXdDmid82TTnYTEJRWDhzuwBOMYrd 6mU0Uf1uHGRh+O4GPvtVXsGEc1z8GCNuvl1ruDRmw2x3GoN1vyiN0SSzI1Fj/EPz 0VFAvYy70gHCih1V5+hTsN779FhuiQPaHIgMTSzIKN9hmM7DvbhJ88RnOmenaJDR 0yWW1tIvsB1DpQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:41 2025 by rpki-client