This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json) Hash identifier: 9Cjx9acEHIKrIvUxyWhT3wdv/ZfWf71/nOmIOVy7yNE= Subject key identifier: AD:E0:90:29:30:0E:B7:DA:82:2A:79:0C:6D:F4:F6:2A:FC:3C:D2:17 Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019B5A521A18763E45CA155F7DE61C85B596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft Manifest number: 0DB3 Signing time: Fri 26 Dec 2025 11:01:28 +0000 Manifest this update: Fri 26 Dec 2025 11:01:28 +0000 Manifest next update: Sat 27 Dec 2025 11:01:28 +0000 Files and hashes: 1: REPOw149mODWNiaUKef3JQas7O0.roa (hash: iyQwZYLXGMmlpdToH0d9XmPw4cuKdZskqJ2oxIivdzA=) 2: rndMlM-Kmotx4ZTMDFABZDqeWXo.roa (hash: FbnOY8Bh8pIyTC0Uqy9f/1TBfdxIcNvVYwe7iz7GTqs=) 3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: 29upnZeWeTLzpnPS5oyXHMNuHdBgSnkJ8XTSMMUmqHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1a:18:76:3e:45:ca:15:5f:7d:e6:1c:85:b5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Dec 26 11:01:28 2025 GMT Not After : Dec 27 11:01:28 2025 GMT Subject: CN=ade09029300eb7da822a790c6df4f62afc3cd217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:09:98:13:d7:9b:90:d7:8b:0c:5b:2d:1c: cf:ac:ef:b5:02:ac:a0:86:0a:ff:93:a6:a7:e8:48: 17:51:54:10:b6:10:25:c3:6a:c9:65:56:ee:93:03: 24:0c:3a:e7:19:51:f8:76:4c:5b:03:52:ed:3b:70: 90:02:4d:02:3e:22:b8:d3:fe:13:1b:64:e7:29:af: 80:d8:8c:04:79:0c:9a:36:b7:3e:8f:fd:bf:3d:e3: 7b:61:75:51:f5:e0:3b:32:46:3d:1c:18:fc:d0:7d: 5c:c1:9c:be:1c:7e:57:27:0d:68:13:33:62:98:7c: 55:be:66:64:9a:de:02:09:eb:4d:0e:53:4c:77:fc: 66:37:d4:a9:79:b7:0b:f5:d7:98:aa:61:21:fd:7a: 2a:ae:4e:2b:35:cc:1a:ec:40:89:d0:30:c4:be:19: d9:d3:e4:6e:0a:a8:e1:f9:53:d3:0a:d6:ff:15:a2: ba:74:a6:d8:31:be:11:30:b9:56:dd:1a:6e:fd:ba: d8:3e:e2:dd:fb:45:9c:c8:d4:01:c2:42:53:a8:b2: 5c:58:64:92:e9:37:04:ba:cc:00:79:cb:1d:95:5d: 12:88:b5:12:15:a9:f0:96:6a:14:36:7e:71:c6:5f: ed:d7:95:ad:1c:38:41:60:79:c0:ae:a6:11:0a:e7: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:90:29:30:0E:B7:DA:82:2A:79:0C:6D:F4:F6:2A:FC:3C:D2:17 X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6a:7f:c6:f6:a9:84:11:a8:d7:aa:d1:fb:ee:eb:1e:b9:0a: 8c:9c:d3:56:1c:ca:ea:e7:05:b4:cb:d6:65:a3:97:ed:27:00: 33:d4:24:20:1d:70:a8:dc:64:e9:ca:c2:65:d6:31:6e:d3:39: 51:4c:5c:0c:22:4a:32:74:7d:06:8a:dc:27:fb:9e:53:cf:16: 66:74:21:19:00:9c:81:1d:1c:c3:53:61:55:91:87:d1:3d:8b: 36:24:f0:f6:de:12:a7:c3:6d:e3:2b:78:bc:26:be:ac:b0:49: 25:a9:90:02:1a:de:91:18:6f:4c:be:ae:ea:2b:73:db:07:fa: a5:d5:e6:e1:4a:fb:a8:ba:ad:c6:eb:0d:19:1d:d7:0d:9a:86: 68:3a:e8:81:b5:e8:a9:c3:4e:fb:6e:4b:06:ac:f4:96:d1:8e: 9d:39:5e:a8:2e:d6:09:ef:67:bd:39:d9:34:b0:73:3a:c8:c1: bb:71:38:9a:ef:d7:85:18:6c:79:f1:76:77:37:ef:c5:05:55: 45:78:cd:70:b8:e8:d9:80:6e:f3:b3:00:b4:84:0d:8b:d0:cf: dd:59:d4:ca:e1:d7:08:85:07:0d:e5:17:aa:35:fa:5d:af:59: 2c:2c:b7:6c:ff:b5:4f:a0:ea:bd:a4:8f:6f:81:01:6d:17:e1: b2:59:22:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhoYdj5FyhVffeYchbWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjUxMjI2MTEwMTI4WhcNMjUxMjI3MTEwMTI4WjAzMTEwLwYDVQQD EyhhZGUwOTAyOTMwMGViN2RhODIyYTc5MGM2ZGY0ZjYyYWZjM2NkMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2EJmBPXm5DXiwxbLRzPrO+1Aqyg hgr/k6an6EgXUVQQthAlw2rJZVbukwMkDDrnGVH4dkxbA1LtO3CQAk0CPiK40/4T G2TnKa+A2IwEeQyaNrc+j/2/PeN7YXVR9eA7MkY9HBj80H1cwZy+HH5XJw1oEzNi mHxVvmZkmt4CCetNDlNMd/xmN9SpebcL9deYqmEh/Xoqrk4rNcwa7ECJ0DDEvhnZ 0+RuCqjh+VPTCtb/FaK6dKbYMb4RMLlW3Rpu/brYPuLd+0WcyNQBwkJTqLJcWGSS 6TcEuswAecsdlV0SiLUSFanwlmoUNn5xxl/t15WtHDhBYHnArqYRCucxqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3gkCkwDrfagip5DG309ir8PNIXMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2p/xvap hBGo16rR++7rHrkKjJzTVhzK6ucFtMvWZaOX7ScAM9QkIB1wqNxk6crCZdYxbtM5 UUxcDCJKMnR9BorcJ/ueU88WZnQhGQCcgR0cw1NhVZGH0T2LNiTw9t4Sp8Nt4yt4 vCa+rLBJJamQAhrekRhvTL6u6itz2wf6pdXm4Ur7qLqtxusNGR3XDZqGaDrogbXo qcNO+25LBqz0ltGOnTleqC7WCe9nvTnZNLBzOsjBu3E4mu/XhRhsefF2dzfvxQVV RXjNcLjo2YBu87MAtIQNi9DP3VnUyuHXCIUHDeUXqjX6Xa9ZLCy3bP+1T6DqvaSP b4EBbRfhslki6w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:26 2025 by rpki-client