This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json) Hash identifier: 8+txmxNsX8zLh0F+TY6UooPW9KyPqh0NOkeULXkeUd8= Subject key identifier: A9:01:B0:12:36:05:5C:B6:D0:50:DA:DF:91:3D:02:69:96:54:A3:70 Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Certificate serial: 019B1CBC6EE83C1B993EF7788C0E614D745E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft Manifest number: 0115 Signing time: Sun 14 Dec 2025 12:01:09 +0000 Manifest this update: Sun 14 Dec 2025 12:01:09 +0000 Manifest next update: Mon 15 Dec 2025 12:01:09 +0000 Files and hashes: 1: 3OCyfd9-b0yR0abVJP1F9gKnVqM.roa (hash: /G4JQWC4tt8/O3EYdqfvI2PzBBGKVWMhd1Rq8kOs3ds=) 2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: /T2cmBpVbQC0+9OGKUlTtftOKUsJu7d992fQVQKMtPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:6e:e8:3c:1b:99:3e:f7:78:8c:0e:61:4d:74:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Validity Not Before: Dec 14 12:01:09 2025 GMT Not After : Dec 15 12:01:09 2025 GMT Subject: CN=a901b01236055cb6d050dadf913d02699654a370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:c1:5d:f1:db:51:4b:20:d7:f4:23:65:4c: 11:4a:5a:3c:b6:3c:e4:98:ee:1b:ce:8e:d9:4a:e3: 1e:6c:25:52:e8:8c:ae:8b:5f:17:26:af:c7:d1:cf: a3:2f:e9:09:d5:5c:58:26:a3:1a:da:d3:3a:bc:8e: 6c:53:bb:ca:78:0b:bd:01:93:6c:5b:7e:10:ce:57: 49:45:97:f4:15:f3:a1:58:02:d3:dc:e9:52:55:47: 78:59:60:bd:3b:08:23:42:1e:a6:47:0b:76:ee:31: 8a:e1:69:6a:db:72:84:65:b6:42:03:d5:98:f1:2d: f9:df:10:52:2a:af:38:df:92:77:f6:32:68:75:78: 07:71:99:e9:de:e8:e0:b5:75:dd:45:37:1c:57:ca: 8b:18:b6:b8:82:5e:fb:5b:f8:e4:e1:35:99:1d:d6: 89:11:55:87:9c:7b:39:57:c5:b1:00:8c:f1:42:29: f9:89:ee:09:5a:ad:7e:1f:27:98:7f:ab:2f:50:62: ac:af:72:4b:32:79:6d:58:60:b3:5a:67:75:aa:09: a7:81:95:4c:f0:73:f4:4e:8e:fe:3d:bc:0e:a4:87: 31:ff:3e:53:c5:46:34:52:8d:4f:a9:b5:97:8e:d7: ca:47:ce:e4:54:c8:bc:b1:1f:b7:97:bc:77:af:f0: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:01:B0:12:36:05:5C:B6:D0:50:DA:DF:91:3D:02:69:96:54:A3:70 X509v3 Authority Key Identifier: keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e5:34:a9:2f:81:d5:ca:f8:bd:d9:a9:f0:22:0c:cb:a6:ea: cc:4d:01:7e:63:d8:6f:69:3a:ce:b1:69:12:b4:d6:42:22:34: a8:4f:7c:e2:7c:6b:42:15:0d:59:40:19:b9:7b:27:ed:c0:de: bc:eb:79:11:e6:ee:a1:ea:b0:05:36:0e:01:d6:01:05:1a:04: 43:4e:7f:0c:c3:50:d0:3f:c0:90:f7:8b:89:10:5c:cf:a4:3d: c9:08:6c:de:da:fc:f9:ee:6a:3a:96:c5:49:ca:98:b3:4f:a0: 08:34:eb:70:16:78:70:87:a2:8a:31:da:49:2c:19:6d:31:58: 49:b1:3a:56:f0:1a:c7:c0:d9:ee:5d:07:fd:aa:bf:cd:3f:ac: be:f5:0c:d7:9a:d8:38:ab:f2:88:09:32:bb:57:50:b9:0d:2c: b7:4a:b8:fd:7a:95:bb:60:b4:0b:9c:bf:2d:d6:94:75:5f:c6: 6f:01:0a:c9:2b:c4:62:97:a3:1d:b7:d6:cd:94:5a:4b:31:0b: 05:c9:fe:43:d5:3e:cc:4a:d8:4d:c3:78:c3:a1:40:75:b6:4f: b3:7a:ba:01:29:b4:c5:c1:48:96:85:53:c2:f6:8c:dd:51:31: 76:f0:89:16:e6:27:f3:65:c7:fa:56:b2:e8:ba:98:e2:83:f0: 19:65:f0:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvG7oPBuZPvd4jA5hTXReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTNiZGIyYzc4NDZmYmY3ZDAwODdkYjQ1NTJlZWIzNjNk ZjllYTUwHhcNMjUxMjE0MTIwMTA5WhcNMjUxMjE1MTIwMTA5WjAzMTEwLwYDVQQD EyhhOTAxYjAxMjM2MDU1Y2I2ZDA1MGRhZGY5MTNkMDI2OTk2NTRhMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoanBXfHbUUsg1/QjZUwRSlo8tjzk mO4bzo7ZSuMebCVS6Iyui18XJq/H0c+jL+kJ1VxYJqMa2tM6vI5sU7vKeAu9AZNs W34QzldJRZf0FfOhWALT3OlSVUd4WWC9OwgjQh6mRwt27jGK4Wlq23KEZbZCA9WY 8S353xBSKq8435J39jJodXgHcZnp3ujgtXXdRTccV8qLGLa4gl77W/jk4TWZHdaJ EVWHnHs5V8WxAIzxQin5ie4JWq1+HyeYf6svUGKsr3JLMnltWGCzWmd1qgmngZVM 8HP0To7+PbwOpIcx/z5TxUY0Uo1PqbWXjtfKR87kVMi8sR+3l7x3r/ByIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkBsBI2BVy20FDa35E9AmmWVKNwMB8GA1UdIwQY MBaAFLujvbLHhG+/fQCH20VS7rNj356lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMt YWEzNGQxZmZmMzg3LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMtYWEzNGQxZmZmMzg3 LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+U0qS+B 1cr4vdmp8CIMy6bqzE0BfmPYb2k6zrFpErTWQiI0qE984nxrQhUNWUAZuXsn7cDe vOt5EebuoeqwBTYOAdYBBRoEQ05/DMNQ0D/AkPeLiRBcz6Q9yQhs3tr8+e5qOpbF ScqYs0+gCDTrcBZ4cIeiijHaSSwZbTFYSbE6VvAax8DZ7l0H/aq/zT+svvUM15rY OKvyiAkyu1dQuQ0st0q4/XqVu2C0C5y/LdaUdV/GbwEKySvEYpejHbfWzZRaSzEL Bcn+Q9U+zErYTcN4w6FAdbZPs3q6ASm0xcFIloVTwvaM3VExdvCJFuYn82XH+lay 6LqY4oPwGWXwJw== -----END CERTIFICATE-----Generated at Sun Dec 14 18:57:01 2025 by rpki-client