This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: FseWdgQfR93VZheTtQ9mt6PMmtoBlZW6ixXVgzcJeco= Subject key identifier: 0D:F9:A7:5B:8C:F8:0C:32:65:0D:8E:06:22:5A:BF:32:73:16:E5:CD Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019B11CA6A8C405151F66693E767A20A9DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1821 Signing time: Fri 12 Dec 2025 09:00:36 +0000 Manifest this update: Fri 12 Dec 2025 09:00:36 +0000 Manifest next update: Sat 13 Dec 2025 09:00:36 +0000 Files and hashes: 1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=) 2: 4b9izW4q-rZz0OWQO5fC5XUHYeY.roa (hash: 9wYly/cGREYrx63PXNBvuVlfGIfSHaXqrrjuZtYRkA0=) 3: 59LH6Adk14fzU8O8cL1tS0tjZrg.roa (hash: U0MyjNG++pvqNJQab0gsWnbWL6x0Di05kdY9Z+I6oU4=) 4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=) 5: Or69i08je9IL_3FfPQ5ndTzvaFs.roa (hash: EOOy075Oq0onvPdfIA9R8xzQhr3n3IW53fTBxa2LQcc=) 6: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=) 7: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=) 8: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=) 9: jKuBkTFSm7vVQcDV5UXLoMekbuA.roa (hash: QUSYZlnKsNYFfl6hvjZ1kYMi2eWV2gS09jUdYYvdxtM=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: oPaCp97BU0BKzdJQ0XFU1fkqZ7Eko/x+WGppiSPE2fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:6a:8c:40:51:51:f6:66:93:e7:67:a2:0a:9d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Dec 12 09:00:36 2025 GMT Not After : Dec 13 09:00:36 2025 GMT Subject: CN=0df9a75b8cf80c32650d8e06225abf327316e5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:83:05:fd:39:91:de:75:03:57:0f:9d:ec: 52:41:62:30:f4:6e:b5:c5:b2:a9:0c:78:4b:f9:6a: e0:01:2c:86:31:d2:ee:18:bb:b6:a9:32:66:c7:72: 06:6d:c8:30:91:83:b5:1f:aa:40:da:ea:a7:71:a1: 8d:ba:66:2e:52:a6:e3:51:de:6e:ea:cf:4f:a7:c7: 03:80:e4:41:4b:53:37:82:c6:aa:0e:62:83:6a:ca: 08:b8:f8:d9:37:8e:e6:fd:dd:b2:1d:b0:0e:80:b4: 68:92:d2:5c:bb:12:00:0b:04:4c:d5:66:b9:23:85: 81:cd:43:7a:d0:f3:1d:4a:33:03:6f:c4:d4:88:ca: 29:2f:73:06:d9:8f:3b:ca:67:56:5c:9f:07:6e:5f: 83:90:bb:bd:fc:1e:c8:88:4a:5d:41:42:68:99:89: d9:61:9e:8c:36:88:4f:52:86:b4:e0:ec:fb:7c:56: f7:86:ba:67:21:bc:fc:31:1e:0b:d3:40:2c:87:31: 32:3d:8b:aa:bd:56:86:d8:d3:1f:fd:71:a6:95:38: bf:e4:be:69:7c:eb:5d:4e:b9:8b:08:c8:23:65:47: 09:ed:8e:0d:85:ef:db:16:7c:a5:61:ec:49:b7:85: 34:a1:b3:c4:cc:34:16:69:b3:69:30:3a:a6:0e:08: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F9:A7:5B:8C:F8:0C:32:65:0D:8E:06:22:5A:BF:32:73:16:E5:CD X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:90:31:ba:a4:eb:ec:0b:75:42:ee:ee:83:56:13:78:d7:83: 44:e1:92:80:2e:06:10:4b:ad:30:73:78:b7:b6:27:9f:6e:c4: 8a:c1:0f:1d:a2:b0:fd:2e:63:c1:73:04:a4:50:6b:4a:5d:ca: 0e:9e:cc:cf:f9:2e:c6:d0:ce:e5:87:50:c3:1c:cb:f6:b1:92: 19:bb:46:32:42:58:f5:1e:21:d6:fc:82:9b:21:8e:df:f5:52: f5:b6:bd:bd:61:86:c5:ca:9f:ac:00:79:a7:92:ed:92:c6:a0: 6b:c2:47:5d:3e:6c:58:d1:1d:6c:7d:2a:a2:45:36:23:81:81: b4:a3:97:02:a4:af:ff:c5:68:d7:b9:d2:86:f4:75:81:bc:5e: ab:70:0a:2f:e4:31:64:c3:fa:f9:7e:13:0a:aa:b3:1d:a8:75: 29:40:45:3e:a4:3a:bd:6d:7e:82:93:3d:73:e2:19:61:97:2f: be:3c:a7:42:09:ba:f7:b1:82:7d:ed:26:4c:4a:51:76:88:d9: 19:cb:a5:47:4b:57:5d:65:73:fa:37:c4:1b:29:55:3d:d4:f8: 62:83:24:f6:70:49:2b:49:30:e6:3c:c6:2c:a7:13:d2:0f:8e: 17:35:f9:38:e5:a1:8d:0c:66:20:e7:4d:11:5a:fc:ab:ba:22: 2a:a5:8b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRymqMQFFR9maT52eiCp34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjUxMjEyMDkwMDM2WhcNMjUxMjEzMDkwMDM2WjAzMTEwLwYDVQQD EygwZGY5YTc1YjhjZjgwYzMyNjUwZDhlMDYyMjVhYmYzMjczMTZlNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3KDBf05kd51A1cPnexSQWIw9G61 xbKpDHhL+WrgASyGMdLuGLu2qTJmx3IGbcgwkYO1H6pA2uqncaGNumYuUqbjUd5u 6s9Pp8cDgORBS1M3gsaqDmKDasoIuPjZN47m/d2yHbAOgLRoktJcuxIACwRM1Wa5 I4WBzUN60PMdSjMDb8TUiMopL3MG2Y87ymdWXJ8Hbl+DkLu9/B7IiEpdQUJomYnZ YZ6MNohPUoa04Oz7fFb3hrpnIbz8MR4L00AshzEyPYuqvVaG2NMf/XGmlTi/5L5p fOtdTrmLCMgjZUcJ7Y4Nhe/bFnylYexJt4U0obPEzDQWabNpMDqmDgh5JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA35p1uM+AwyZQ2OBiJavzJzFuXNMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZAxuqTr 7At1Qu7ug1YTeNeDROGSgC4GEEutMHN4t7Ynn27EisEPHaKw/S5jwXMEpFBrSl3K Dp7Mz/kuxtDO5YdQwxzL9rGSGbtGMkJY9R4h1vyCmyGO3/VS9ba9vWGGxcqfrAB5 p5Ltksaga8JHXT5sWNEdbH0qokU2I4GBtKOXAqSv/8Vo17nShvR1gbxeq3AKL+Qx ZMP6+X4TCqqzHah1KUBFPqQ6vW1+gpM9c+IZYZcvvjynQgm697GCfe0mTEpRdojZ GculR0tXXWVz+jfEGylVPdT4YoMk9nBJK0kw5jzGLKcT0g+OFzX5OOWhjQxmIOdN EVr8q7oiKqWLzQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:41:24 2025 by rpki-client