This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft File: u-BbYYon9sEO-Zm8ltmqDL0UraU.mft (raw, json) Hash identifier: AIzf6LE7clzD6uHP8XDA3c/QaDrn6yHDJF1fXEnLpm8= Subject key identifier: 39:49:C2:D8:8F:EA:02:89:91:14:4B:DB:7E:FD:2E:C0:77:8A:DB:96 Authority key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 Certificate issuer: /CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5 Certificate serial: 019B48F022C9E729F4D0BF4594C09AC61A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft Manifest number: 0310 Signing time: Tue 23 Dec 2025 02:00:55 +0000 Manifest this update: Tue 23 Dec 2025 02:00:55 +0000 Manifest next update: Wed 24 Dec 2025 02:00:55 +0000 Files and hashes: 1: u-BbYYon9sEO-Zm8ltmqDL0UraU.crl (hash: mQMVI/UWQ9mhE20LhPgsFwVmTZjCWNGzKgUwNMyX6Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:22:c9:e7:29:f4:d0:bf:45:94:c0:9a:c6:1a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5 Validity Not Before: Dec 23 02:00:55 2025 GMT Not After : Dec 24 02:00:55 2025 GMT Subject: CN=3949c2d88fea028991144bdb7efd2ec0778adb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:05:0b:b5:a6:7a:85:01:65:2d:64:95:c6: 07:f3:db:4b:db:14:3d:25:b3:75:a8:c2:a2:14:85: eb:1b:ee:32:b9:b9:8c:04:fe:c1:36:7d:27:db:ba: ae:67:7e:8f:c8:34:af:de:7b:65:77:0f:ad:d3:55: cf:f5:ee:9e:38:8b:ee:f7:62:83:a8:d4:eb:cd:ef: 57:7d:3d:de:30:8a:a2:6d:4a:f8:8c:4c:25:7b:7d: 11:2d:22:93:a6:e9:0e:50:00:5e:7d:ac:08:ba:5d: 07:eb:7c:b7:73:20:ea:e8:bb:96:d4:d9:51:dd:57: d5:11:20:c4:6b:c0:23:45:90:15:04:cb:5e:e4:b7: 3f:49:20:85:19:49:5f:f8:df:74:50:fe:cd:f3:9d: d5:77:c1:ea:7e:73:07:97:37:d0:1e:a6:5e:69:f8: 82:aa:c8:32:0e:54:6e:2f:a5:10:a0:ec:c5:f1:05: 4d:68:b9:41:f3:f9:d5:8d:50:fa:88:bc:d4:45:34: cd:26:19:3a:92:54:cf:22:ee:23:23:52:41:f0:88: 56:20:a9:ac:87:ff:87:f7:1a:a1:5e:b1:f3:53:6a: db:95:61:22:85:25:90:f4:4a:13:be:56:ce:e3:5c: 7d:9f:3d:f7:62:4d:15:da:ab:24:e9:2e:d7:ac:3f: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:C2:D8:8F:EA:02:89:91:14:4B:DB:7E:FD:2E:C0:77:8A:DB:96 X509v3 Authority Key Identifier: keyid:BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:eb:26:74:cf:20:17:e6:31:85:2c:af:9d:a5:7e:4a:ef:0e: 8e:c4:b0:51:64:0a:40:d6:db:19:69:f6:15:53:9a:9c:bf:b3: 49:7c:50:6c:d0:b4:62:c2:dd:2d:3d:d0:12:50:8d:56:08:b3: d2:54:3c:7e:ee:21:0d:91:1d:80:89:76:af:1b:d4:de:a5:a1: 6d:12:f3:94:37:82:df:89:cc:8c:31:00:98:5c:2c:74:9b:41: 5b:9a:a7:30:1e:c1:b5:93:0c:33:3d:6f:bb:f3:b0:e9:9c:07: 96:1d:e7:b5:46:05:e4:4d:24:9d:0a:b2:1d:b1:1e:a6:2f:21: 93:f6:ac:b6:da:df:28:05:6c:69:b3:60:5c:0f:c8:78:54:6f: 58:ba:05:a9:e1:95:e1:69:b7:21:fb:01:b9:ea:ac:ba:28:73: fe:98:da:21:67:71:9b:45:29:2c:31:6b:8b:ec:19:26:28:db: 96:81:64:65:79:f5:c5:20:39:0e:a0:23:5f:33:68:23:55:37: cd:3d:93:0f:e7:50:60:77:d3:f9:b8:51:96:ae:a0:3e:76:26: 7e:75:26:d4:56:77:e8:35:3d:c9:68:8f:37:2a:1a:7a:df:f4: c6:19:52:d9:d2:fd:4d:77:12:42:f0:0d:57:9b:f2:a0:2b:4f: 5b:6c:5d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CLJ5yn00L9FlMCaxhppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTA1YjYxOGEyN2Y2YzEwZWY5OTliYzk2ZDlhYTBjYmQx NGFkYTUwHhcNMjUxMjIzMDIwMDU1WhcNMjUxMjI0MDIwMDU1WjAzMTEwLwYDVQQD EygzOTQ5YzJkODhmZWEwMjg5OTExNDRiZGI3ZWZkMmVjMDc3OGFkYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYFC7WmeoUBZS1klcYH89tL2xQ9 JbN1qMKiFIXrG+4yubmMBP7BNn0n27quZ36PyDSv3ntldw+t01XP9e6eOIvu92KD qNTrze9XfT3eMIqibUr4jEwle30RLSKTpukOUABefawIul0H63y3cyDq6LuW1NlR 3VfVESDEa8AjRZAVBMte5Lc/SSCFGUlf+N90UP7N853Vd8HqfnMHlzfQHqZeafiC qsgyDlRuL6UQoOzF8QVNaLlB8/nVjVD6iLzURTTNJhk6klTPIu4jI1JB8IhWIKms h/+H9xqhXrHzU2rblWEihSWQ9EoTvlbO41x9nz33Yk0V2qsk6S7XrD/xQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlJwtiP6gKJkRRL2379LsB3ituWMB8GA1UdIwQY MBaAFLvgW2GKJ/bBDvmZvJbZqgy9FK2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1Mzgt ZjMwMjljMzliNjZlLzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82ZTAyYTktMDhhZC00NzQzLWI1MzgtZjMwMjljMzliNjZl LzEvdS1CYllZb245c0VPLVptOGx0bXFETDBVcmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXesmdM8g F+YxhSyvnaV+Su8OjsSwUWQKQNbbGWn2FVOanL+zSXxQbNC0YsLdLT3QElCNVgiz 0lQ8fu4hDZEdgIl2rxvU3qWhbRLzlDeC34nMjDEAmFwsdJtBW5qnMB7BtZMMMz1v u/Ow6ZwHlh3ntUYF5E0knQqyHbEepi8hk/asttrfKAVsabNgXA/IeFRvWLoFqeGV 4Wm3IfsBueqsuihz/pjaIWdxm0UpLDFri+wZJijbloFkZXn1xSA5DqAjXzNoI1U3 zT2TD+dQYHfT+bhRlq6gPnYmfnUm1FZ36DU9yWiPNyoaet/0xhlS2dL9TXcSQvAN V5vyoCtPW2xdLQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:46 2025 by rpki-client