This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json) Hash identifier: ysgLKzhX79dxKlbrTB2na5h8mykMD7q9tdZmmRkNokc= Subject key identifier: 71:10:73:72:67:EE:C3:CE:AA:63:E8:C2:DB:23:66:85:58:64:5C:3F Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Certificate serial: 019B1BAACA1E35DD716FE17A5EF410DD8E8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft Manifest number: 0821 Signing time: Sun 14 Dec 2025 07:02:16 +0000 Manifest this update: Sun 14 Dec 2025 07:02:16 +0000 Manifest next update: Mon 15 Dec 2025 07:02:16 +0000 Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: 8BLzv6fBU8Oxa4MXkwOTq9nd8KhIOB/Jcf+AoEkYeaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:ca:1e:35:dd:71:6f:e1:7a:5e:f4:10:dd:8e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Validity Not Before: Dec 14 07:02:16 2025 GMT Not After : Dec 15 07:02:16 2025 GMT Subject: CN=7110737267eec3ceaa63e8c2db23668558645c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:39:c7:b5:ea:82:5b:0b:7b:17:80:25:4c: 9e:ed:78:92:02:c2:d2:7f:cd:e8:d9:19:aa:21:44: 97:78:92:8b:bc:b8:d9:44:ac:d8:fc:4f:7b:50:a4: 69:d7:c6:80:62:42:31:22:5e:06:2f:d0:84:f6:fe: 56:ee:3c:ce:9c:b2:c6:9c:32:1c:cb:f1:d1:c6:03: 18:93:97:79:b3:98:d6:d0:13:00:82:d3:08:c7:fc: 05:37:3d:2f:5b:41:e4:b0:69:e8:53:38:83:cd:76: 64:e3:f9:54:82:26:49:2c:60:a8:f4:cd:c1:c7:87: c4:83:34:ad:3b:00:6d:cf:64:7b:f1:3e:10:53:56: 77:06:1a:7c:21:f5:1a:45:8a:f9:e5:8b:49:7b:2c: bb:00:31:82:a7:bd:20:78:e4:06:f5:53:d1:08:80: 14:31:14:4c:39:c6:d3:3d:98:e5:c8:1b:cb:f7:45: 3a:cd:6a:c3:4b:a6:9d:77:94:55:0e:63:46:1e:88: 94:99:47:db:9a:d0:0d:76:dc:8f:95:af:30:bf:ea: 7c:bc:a9:d1:61:0b:75:4e:03:e0:08:f9:02:4e:b8: 58:a9:b4:4b:d3:4a:9a:c5:b2:71:21:92:25:74:85: ef:f3:17:05:d1:03:3a:e1:17:11:2b:c0:ec:a8:32: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:73:72:67:EE:C3:CE:AA:63:E8:C2:DB:23:66:85:58:64:5C:3F X509v3 Authority Key Identifier: keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8a:bf:66:b3:11:b1:98:a5:70:0c:ee:9f:d3:d3:35:63:21: a1:8f:db:81:2f:da:6e:d2:5b:6b:e9:f3:bb:00:5d:a4:c0:fd: 63:15:ae:06:18:cd:58:48:ea:3d:c7:d5:9f:66:fc:e6:bf:ad: cc:96:78:11:88:b3:f2:4c:bd:4f:bf:30:ce:cf:f6:f4:98:18: af:5e:d9:0b:eb:d2:4f:3c:66:83:11:2d:d4:ae:34:a4:7b:4f: fe:6e:e5:d2:4f:2a:04:28:6f:9c:16:88:8a:7d:fe:da:61:8f: bb:e9:bd:38:51:4d:18:4c:0e:13:fb:70:49:47:8d:90:c6:22: dd:7c:fc:d0:b2:27:ff:d4:59:c7:98:ce:de:89:9e:2b:4e:b3: 8e:92:38:8b:b1:34:51:9e:15:98:e3:8c:63:cf:6e:a7:22:f6: 23:f1:e3:33:50:4f:aa:8a:5a:0d:ae:7c:bc:64:0b:ab:ff:8b: b4:17:7e:be:6f:90:7a:7e:9c:79:51:5b:4a:87:df:96:ad:f0: 72:38:90:7b:c1:83:f6:09:bc:2a:64:6b:5d:c7:73:0b:83:52: 78:2f:f4:c8:09:38:a3:e0:e9:2f:54:93:87:9a:8b:32:ae:60: 60:ab:b2:d5:37:9b:e4:ae:05:d6:02:11:40:04:b8:66:32:f7: 94:8f:19:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqsoeNd1xb+F6XvQQ3Y6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYjkxNDAxN2RiNDVlOWY3NWUzOGRkZTNmMDM1N2NlMmI3 MWQ4MjcwHhcNMjUxMjE0MDcwMjE2WhcNMjUxMjE1MDcwMjE2WjAzMTEwLwYDVQQD Eyg3MTEwNzM3MjY3ZWVjM2NlYWE2M2U4YzJkYjIzNjY4NTU4NjQ1YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgo5x7XqglsLexeAJUye7XiSAsLS f83o2RmqIUSXeJKLvLjZRKzY/E97UKRp18aAYkIxIl4GL9CE9v5W7jzOnLLGnDIc y/HRxgMYk5d5s5jW0BMAgtMIx/wFNz0vW0HksGnoUziDzXZk4/lUgiZJLGCo9M3B x4fEgzStOwBtz2R78T4QU1Z3Bhp8IfUaRYr55YtJeyy7ADGCp70geOQG9VPRCIAU MRRMOcbTPZjlyBvL90U6zWrDS6add5RVDmNGHoiUmUfbmtANdtyPla8wv+p8vKnR YQt1TgPgCPkCTrhYqbRL00qaxbJxIZIldIXv8xcF0QM64RcRK8DsqDIULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQc3Jn7sPOqmPowtsjZoVYZFw/MB8GA1UdIwQY MBaAFLu5FAF9tF6fdeON3j8DV84rcdgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMt NmJlOTdlMzcyNDFmLzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMtNmJlOTdlMzcyNDFm LzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4q/ZrMR sZilcAzun9PTNWMhoY/bgS/abtJba+nzuwBdpMD9YxWuBhjNWEjqPcfVn2b85r+t zJZ4EYiz8ky9T78wzs/29JgYr17ZC+vSTzxmgxEt1K40pHtP/m7l0k8qBChvnBaI in3+2mGPu+m9OFFNGEwOE/twSUeNkMYi3Xz80LIn/9RZx5jO3omeK06zjpI4i7E0 UZ4VmOOMY89upyL2I/HjM1BPqopaDa58vGQLq/+LtBd+vm+Qen6ceVFbSofflq3w cjiQe8GD9gm8KmRrXcdzC4NSeC/0yAk4o+DpL1STh5qLMq5gYKuy1Teb5K4F1gIR QAS4ZjL3lI8Z/Q== -----END CERTIFICATE-----Generated at Sun Dec 14 09:18:49 2025 by rpki-client