This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json) Hash identifier: Hal1MZSjd8PD+h0uOYsycZz2/VXAh5zhndprfEtxF7o= Subject key identifier: B1:CE:3B:FF:96:40:14:35:E9:E3:0C:71:FB:DE:5B:5E:D4:3A:9C:46 Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6 Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6 Certificate serial: 019B58D16AAD280C29C90E2A89778EEC3E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft Manifest number: 113E Signing time: Fri 26 Dec 2025 04:01:17 +0000 Manifest this update: Fri 26 Dec 2025 04:01:17 +0000 Manifest next update: Sat 27 Dec 2025 04:01:17 +0000 Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: T+YM9IOxPJLzEIuo7+Jl29PLmmRxOvVOgAz7WsKhKJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:6a:ad:28:0c:29:c9:0e:2a:89:77:8e:ec:3e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6 Validity Not Before: Dec 26 04:01:17 2025 GMT Not After : Dec 27 04:01:17 2025 GMT Subject: CN=b1ce3bff96401435e9e30c71fbde5b5ed43a9c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:08:1e:48:9d:b1:bd:b4:f0:82:f2:65:20: e5:b2:84:f9:a2:6b:b4:cf:74:d5:54:0b:1b:3e:27: f6:bd:ba:7c:70:de:2e:57:4c:bd:11:2e:8f:bf:a7: 64:67:63:fa:31:3c:71:4f:80:39:6d:68:a4:95:41: 5b:38:35:24:61:9f:31:6e:45:ef:ce:c5:26:82:03: 4d:74:bc:cb:0f:9e:01:d8:87:27:7c:72:e8:17:d2: bc:1a:91:e3:1c:cd:95:9c:2b:26:41:17:66:71:96: a4:95:9d:83:1d:b4:ff:71:a0:6b:65:05:e9:86:63: 38:c0:df:82:e3:e8:6f:e0:04:7f:ab:a8:f5:80:4f: 12:ba:46:5d:4b:97:0d:ba:0a:a3:86:81:c0:9b:70: 6b:d0:2d:a8:c8:e0:00:e8:d0:a2:4e:b5:6a:4c:23: 97:f5:92:32:01:13:87:e7:20:9c:74:79:83:13:cc: 75:e4:26:83:1e:55:22:d6:2c:67:83:71:16:6f:a7: e2:8d:db:9b:9c:07:d6:5e:a9:a7:be:e5:f6:60:6a: ba:1d:03:29:4b:4a:2f:66:2a:bf:08:77:ba:09:70: f3:5a:98:90:ee:72:4a:65:ee:03:e8:93:39:14:b1: 60:40:be:b0:8e:a0:3b:6e:24:c5:eb:2a:87:25:84: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:3B:FF:96:40:14:35:E9:E3:0C:71:FB:DE:5B:5E:D4:3A:9C:46 X509v3 Authority Key Identifier: keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:f4:f7:d8:c8:cc:31:4a:9b:6a:a3:0a:20:40:a7:a4:a8: a8:18:83:c1:60:ac:a7:29:52:f0:92:00:bf:d2:21:86:53:25: 9e:11:e5:43:72:51:23:5b:a8:a2:b0:95:23:12:b1:56:ec:25: 02:1f:85:55:67:3f:3d:d4:1f:aa:29:ff:5f:cb:80:c0:0b:e9: 73:cc:80:ac:b3:98:a2:7a:bf:94:f0:39:8a:0f:bd:5d:e2:5a: 10:b6:80:ce:0e:f9:93:d7:89:6f:33:df:e9:07:37:70:8b:60: 9d:4b:80:88:d5:4c:f5:0d:4b:98:a8:3b:99:28:89:4c:b2:09: 7b:85:56:17:be:7e:a9:25:c7:e8:2d:28:38:31:a4:5b:41:76: 2f:4e:37:e9:8a:97:86:cd:66:39:5e:2b:fb:52:f4:2d:d1:54: 8e:2f:44:ac:b9:79:66:f0:c4:fe:00:98:bd:00:34:11:a2:b1: a6:16:5d:6a:9c:63:25:e3:e8:84:ab:9c:91:55:3e:3e:e9:5a: 55:4a:c0:47:53:bd:d4:73:2e:df:f3:4f:7d:8e:3a:99:f6:c4: 27:5b:8a:59:45:6a:8a:7e:b3:ee:8c:56:72:9c:9d:03:16:d1: 20:99:6c:94:60:c6:bb:67:77:41:96:19:a6:1c:1c:49:0b:96: fc:49:9e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0WqtKAwpyQ4qiXeO7D6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0 MTExZDYwHhcNMjUxMjI2MDQwMTE3WhcNMjUxMjI3MDQwMTE3WjAzMTEwLwYDVQQD EyhiMWNlM2JmZjk2NDAxNDM1ZTllMzBjNzFmYmRlNWI1ZWQ0M2E5YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIgIHkidsb208ILyZSDlsoT5omu0 z3TVVAsbPif2vbp8cN4uV0y9ES6Pv6dkZ2P6MTxxT4A5bWiklUFbODUkYZ8xbkXv zsUmggNNdLzLD54B2IcnfHLoF9K8GpHjHM2VnCsmQRdmcZaklZ2DHbT/caBrZQXp hmM4wN+C4+hv4AR/q6j1gE8SukZdS5cNugqjhoHAm3Br0C2oyOAA6NCiTrVqTCOX 9ZIyAROH5yCcdHmDE8x15CaDHlUi1ixng3EWb6fijdubnAfWXqmnvuX2YGq6HQMp S0ovZiq/CHe6CXDzWpiQ7nJKZe4D6JM5FLFgQL6wjqA7biTF6yqHJYRT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHOO/+WQBQ16eMMcfveW17UOpxGMB8GA1UdIwQY MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRX099jI zDFKm2qjCiBAp6SoqBiDwWCspylS8JIAv9IhhlMlnhHlQ3JRI1uoorCVIxKxVuwl Ah+FVWc/PdQfqin/X8uAwAvpc8yArLOYonq/lPA5ig+9XeJaELaAzg75k9eJbzPf 6Qc3cItgnUuAiNVM9Q1LmKg7mSiJTLIJe4VWF75+qSXH6C0oODGkW0F2L0436YqX hs1mOV4r+1L0LdFUji9ErLl5ZvDE/gCYvQA0EaKxphZdapxjJePohKuckVU+Pula VUrAR1O91HMu3/NPfY46mfbEJ1uKWUVqin6z7oxWcpydAxbRIJlslGDGu2d3QZYZ phwcSQuW/Emelg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:24 2025 by rpki-client