This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json) Hash identifier: ac3o44my4I/hLC4F+q6856GU2iL4n6O6JbiHlgsyyV8= Subject key identifier: C6:21:19:EC:F5:CA:60:C5:D8:A4:1B:94:A0:D4:B1:3C:FB:94:0F:7F Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Certificate serial: 019B13B8B2B38A203DD7DED09509879BE785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft Manifest number: 0163 Signing time: Fri 12 Dec 2025 18:00:30 +0000 Manifest this update: Fri 12 Dec 2025 18:00:30 +0000 Manifest next update: Sat 13 Dec 2025 18:00:30 +0000 Files and hashes: 1: j8bQQ_2ixu-vog4cLNKhBgofx1M.roa (hash: v4k62I4wJVyjDK80IFPhBu/XJr/LGdFEyW7xkPuyAOU=) 2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: BtRJiDMcfj/iZm3MNgCzNK4BpHjeZtZHuxZxBSnTiLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:b8:b2:b3:8a:20:3d:d7:de:d0:95:09:87:9b:e7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Validity Not Before: Dec 12 18:00:30 2025 GMT Not After : Dec 13 18:00:30 2025 GMT Subject: CN=c62119ecf5ca60c5d8a41b94a0d4b13cfb940f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:57:ce:ea:69:de:12:5c:68:57:0f:27:7c: 6e:f7:b7:af:57:d5:9c:74:3b:f4:02:00:0d:33:b5: 7b:22:ab:4f:54:c7:fe:30:63:26:83:73:b8:c8:23: 45:18:d8:df:b3:59:f8:43:f3:2d:2d:04:5c:75:fd: 2c:ea:02:c2:02:e0:9d:c0:80:14:fa:30:64:56:6f: a2:3c:9d:fc:ed:72:58:a8:10:ef:20:dc:29:6f:3c: 6a:b2:54:76:4b:04:28:db:d5:8b:2f:a5:74:ec:92: 72:68:9e:17:55:b8:ff:69:c8:2b:fc:bb:9a:cd:ee: 19:f9:3a:56:10:42:e7:73:c0:3c:8c:11:dc:e6:5a: f8:60:17:15:80:f9:17:bb:77:d3:0a:26:1e:f9:af: bc:94:d2:df:fe:d2:70:79:1a:1b:ac:37:08:c9:00: f1:e2:62:7f:a6:e4:40:5f:f2:65:22:80:95:43:78: 9e:cd:42:3f:12:cb:ea:6b:cd:c0:61:1c:5a:be:a7: 9b:2e:bf:26:77:c3:32:2c:b4:88:4d:fc:e9:ac:6c: 81:c7:39:ce:53:ed:07:fe:60:e9:69:50:68:42:af: a8:77:29:ca:f8:29:bf:dd:96:b8:d5:6f:d8:1c:89: 5c:ae:84:59:fa:84:e2:27:b7:a5:f6:b9:88:57:7c: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:19:EC:F5:CA:60:C5:D8:A4:1B:94:A0:D4:B1:3C:FB:94:0F:7F X509v3 Authority Key Identifier: keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a5:6e:05:a8:1c:43:ff:9d:7e:06:1f:98:d0:b2:5a:ee:fe: 2b:b5:da:74:e7:12:12:3f:6c:73:ee:21:bf:f7:a1:37:d8:9a: 62:07:68:20:c6:62:8f:01:d7:6e:ed:ef:30:6c:21:db:09:59: 34:6e:51:d8:3f:db:70:4d:d1:92:bb:4f:c5:94:85:19:03:59: 5a:aa:42:b9:b0:5c:e4:a2:eb:98:b7:4a:69:6a:b0:11:f6:49: d7:b7:d9:e6:cc:20:8e:7d:7a:ac:b4:e8:1f:3e:a5:44:78:08: 32:40:3d:18:36:90:48:b6:3c:cc:f6:bd:20:0c:da:32:32:46: 9a:53:60:6b:8b:c0:fc:26:bf:9e:48:a5:01:9f:3f:a5:2a:51: f5:85:53:fa:e7:92:22:88:60:b3:11:71:dc:25:bd:6a:50:f6: f7:b6:05:e2:ff:1e:4c:fb:c1:72:6e:19:30:83:ff:6a:70:6d: fd:fb:9e:54:6d:66:27:99:58:5e:29:c9:5a:d0:a5:a6:73:ec: 85:44:96:61:65:b9:55:cc:8b:92:b9:11:48:04:48:68:09:74: 50:80:0e:6e:35:93:18:46:06:b9:0b:07:fe:0a:94:13:ab:02: 76:20:cd:cb:0b:4a:5b:11:a2:5e:97:d4:d6:8e:ee:1b:d1:90: e4:90:0e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTuLKziiA9197QlQmHm+eFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2 MGE4MjAwHhcNMjUxMjEyMTgwMDMwWhcNMjUxMjEzMTgwMDMwWjAzMTEwLwYDVQQD EyhjNjIxMTllY2Y1Y2E2MGM1ZDhhNDFiOTRhMGQ0YjEzY2ZiOTQwZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0pXzupp3hJcaFcPJ3xu97evV9Wc dDv0AgANM7V7IqtPVMf+MGMmg3O4yCNFGNjfs1n4Q/MtLQRcdf0s6gLCAuCdwIAU +jBkVm+iPJ387XJYqBDvINwpbzxqslR2SwQo29WLL6V07JJyaJ4XVbj/acgr/Lua ze4Z+TpWEELnc8A8jBHc5lr4YBcVgPkXu3fTCiYe+a+8lNLf/tJweRobrDcIyQDx 4mJ/puRAX/JlIoCVQ3iezUI/Esvqa83AYRxavqebLr8md8MyLLSITfzprGyBxznO U+0H/mDpaVBoQq+odynK+Cm/3Za41W/YHIlcroRZ+oTiJ7el9rmIV3zbKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYhGez1ymDF2KQblKDUsTz7lA9/MB8GA1UdIwQY MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKVuBagc Q/+dfgYfmNCyWu7+K7XadOcSEj9sc+4hv/ehN9iaYgdoIMZijwHXbu3vMGwh2wlZ NG5R2D/bcE3RkrtPxZSFGQNZWqpCubBc5KLrmLdKaWqwEfZJ17fZ5swgjn16rLTo Hz6lRHgIMkA9GDaQSLY8zPa9IAzaMjJGmlNga4vA/Ca/nkilAZ8/pSpR9YVT+ueS IohgsxFx3CW9alD297YF4v8eTPvBcm4ZMIP/anBt/fueVG1mJ5lYXinJWtClpnPs hUSWYWW5VcyLkrkRSARIaAl0UIAObjWTGEYGuQsH/gqUE6sCdiDNywtKWxGiXpfU 1o7uG9GQ5JAOxQ== -----END CERTIFICATE-----Generated at Sat Dec 13 02:20:54 2025 by rpki-client