This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json) Hash identifier: Is1av/hiWDaIcT4ZF/TDOHBjyyFoN7jcCMAVp3E8nKQ= Subject key identifier: BE:37:69:6B:06:18:B3:65:46:53:20:75:8A:F0:40:56:51:D4:CC:B8 Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d Certificate serial: 019B0FA5D1515F5509279A6302E0F45217F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft Manifest number: 03D7 Signing time: Thu 11 Dec 2025 23:01:23 +0000 Manifest this update: Thu 11 Dec 2025 23:01:23 +0000 Manifest next update: Fri 12 Dec 2025 23:01:23 +0000 Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=) 2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=) 3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=) 4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: rX05jAwWB/wrAUtZ27M02pGIgT/v6a2c7vUbv07xalI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:d1:51:5f:55:09:27:9a:63:02:e0:f4:52:17:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d Validity Not Before: Dec 11 23:01:23 2025 GMT Not After : Dec 12 23:01:23 2025 GMT Subject: CN=be37696b0618b365465320758af0405651d4ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:75:e1:de:b1:26:fe:82:6f:57:50:f6:95: 2d:2e:7c:44:0b:7f:77:be:61:0f:2e:82:3e:da:ee: 07:f2:1a:29:ec:45:47:da:06:fd:d8:da:4c:3a:ea: d5:02:20:92:6b:f0:34:fe:20:bc:3e:c1:a3:a7:de: cd:bb:6f:a6:c5:66:fc:b0:13:ed:ca:44:f5:98:b0: 4b:96:30:97:2c:0b:34:84:3f:f6:05:9d:92:e5:bc: 48:9c:35:c4:73:7a:6b:c1:1f:93:12:3b:0e:34:84: 07:31:d5:dc:4c:51:58:59:88:af:73:15:8a:17:9d: e7:76:c8:0a:83:8c:2d:f5:68:e4:49:e9:9d:3f:51: 88:af:66:16:2a:9d:ba:94:42:95:93:28:92:e5:23: 5b:76:fb:54:db:d3:e6:05:39:f7:ca:62:78:b8:5e: 16:9c:92:50:3d:69:09:4c:72:b9:78:d4:53:a2:21: 12:d0:89:f5:c6:95:21:6a:e6:6a:a6:0d:06:0c:1e: 3a:30:28:fa:d8:9e:00:f9:58:4a:84:99:aa:39:08: 33:7e:22:0c:27:de:3f:86:4e:57:90:cd:16:6f:72: 25:0b:cf:67:e6:09:9d:73:e5:a7:2a:7c:2d:0d:a9: 07:04:e6:37:d2:65:9b:96:7d:9f:21:b3:18:4c:62: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:69:6B:06:18:B3:65:46:53:20:75:8A:F0:40:56:51:D4:CC:B8 X509v3 Authority Key Identifier: keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3b:f0:a2:12:d7:96:f8:49:a1:81:e1:6f:de:12:a6:99:a8: 9b:46:ca:a1:e8:17:a5:4f:d7:f7:99:c0:a8:99:5a:bb:58:ff: 71:df:58:58:05:c5:80:82:ce:8d:c1:26:5c:15:b4:71:f8:d8: 8b:4d:13:f8:09:8c:0a:3a:e9:6d:c5:e0:e1:71:ee:22:1c:f8: 20:7a:0f:d9:f3:76:d1:d3:20:a2:8f:54:be:4a:ed:c4:94:53: 10:75:41:86:a1:71:38:53:48:69:da:2e:4f:b9:1b:88:f4:99: 9e:c0:4b:69:65:08:f1:1a:c9:25:f7:8c:96:ed:b9:92:55:e0: 25:f9:ea:09:ca:d3:97:09:6c:78:37:83:35:e1:89:09:49:21: 86:84:6b:9b:b8:e2:f7:35:a2:51:e5:15:db:d8:54:25:a7:33: da:4a:89:cf:25:69:23:b6:c6:57:83:7f:9d:57:bf:f7:f6:03: 7d:34:36:e1:24:e2:4b:21:90:31:74:b7:36:cf:23:f0:48:b0: a3:ea:e5:a4:db:18:8d:57:0b:a9:67:3c:68:81:2e:ac:61:c8: bc:5e:50:f3:a3:52:c2:bb:e4:b0:2d:67:27:3e:51:d6:ed:9a: 2d:56:03:fd:3b:a2:3f:5e:62:88:3a:2e:b3:8d:8e:9b:fc:ba: ed:28:18:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpdFRX1UJJ5pjAuD0UhfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj MjAwNmQwHhcNMjUxMjExMjMwMTIzWhcNMjUxMjEyMjMwMTIzWjAzMTEwLwYDVQQD EyhiZTM3Njk2YjA2MThiMzY1NDY1MzIwNzU4YWYwNDA1NjUxZDRjY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3914d6xJv6Cb1dQ9pUtLnxEC393 vmEPLoI+2u4H8hop7EVH2gb92NpMOurVAiCSa/A0/iC8PsGjp97Nu2+mxWb8sBPt ykT1mLBLljCXLAs0hD/2BZ2S5bxInDXEc3prwR+TEjsONIQHMdXcTFFYWYivcxWK F53ndsgKg4wt9WjkSemdP1GIr2YWKp26lEKVkyiS5SNbdvtU29PmBTn3ymJ4uF4W nJJQPWkJTHK5eNRToiES0In1xpUhauZqpg0GDB46MCj62J4A+VhKhJmqOQgzfiIM J94/hk5XkM0Wb3IlC89n5gmdc+WnKnwtDakHBOY30mWbln2fIbMYTGJTqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL43aWsGGLNlRlMgdYrwQFZR1My4MB8GA1UdIwQY MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt NDVmNzdkZmEyNjM2LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2 LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTvwohLX lvhJoYHhb94Sppmom0bKoegXpU/X95nAqJlau1j/cd9YWAXFgILOjcEmXBW0cfjY i00T+AmMCjrpbcXg4XHuIhz4IHoP2fN20dMgoo9UvkrtxJRTEHVBhqFxOFNIadou T7kbiPSZnsBLaWUI8RrJJfeMlu25klXgJfnqCcrTlwlseDeDNeGJCUkhhoRrm7ji 9zWiUeUV29hUJacz2kqJzyVpI7bGV4N/nVe/9/YDfTQ24STiSyGQMXS3Ns8j8Eiw o+rlpNsYjVcLqWc8aIEurGHIvF5Q86NSwrvksC1nJz5R1u2aLVYD/TuiP15iiDou s42Om/y67SgYyQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:51 2025 by rpki-client