This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json) Hash identifier: WRvlyxc3+xjs+ZAwPEYH34U/29ETcvUaqclSOn0RYRo= Subject key identifier: 07:09:7D:87:08:C1:68:4E:E8:D1:7F:9F:9C:EA:66:A6:14:4C:DC:E4 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019B243EDC9AFC41C8CFC8D753F30506F51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft Manifest number: 1252 Signing time: Mon 15 Dec 2025 23:00:57 +0000 Manifest this update: Mon 15 Dec 2025 23:00:57 +0000 Manifest next update: Tue 16 Dec 2025 23:00:57 +0000 Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=) 2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: mOfK/XycGUhT842S560MKxfvIOZT3lb9QqIBWQWTlrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:dc:9a:fc:41:c8:cf:c8:d7:53:f3:05:06:f5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Dec 15 23:00:57 2025 GMT Not After : Dec 16 23:00:57 2025 GMT Subject: CN=07097d8708c1684ee8d17f9f9cea66a6144cdce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:14:69:9c:14:35:67:b0:a9:f2:1d:e9:53: 2c:d1:69:76:84:9d:a6:c1:5b:f8:2f:41:f9:40:78: 82:02:a0:2a:62:1b:a0:9a:ed:d7:2d:c3:61:a9:3e: 89:ba:ef:d4:8b:cf:ef:80:05:be:e4:64:af:1c:a1: 72:de:2b:e6:37:2e:fe:54:d2:aa:d2:3f:90:bc:6b: 38:8e:d1:1a:2d:07:e3:ab:38:75:75:1b:3f:08:fc: 53:8e:65:6b:76:76:5a:6c:0a:fa:66:ec:a4:66:e3: a4:d7:33:4b:ac:06:93:6c:b1:a6:71:cd:6c:d9:cf: 0d:08:74:38:86:2a:2b:aa:9f:ef:15:78:4c:e4:d4: 7b:b2:28:4d:55:78:01:f4:0a:5e:48:3a:0b:aa:38: a5:fc:c4:e8:5f:08:37:3b:00:7c:cf:82:9c:66:dd: a6:46:1d:bf:05:35:55:9c:c9:5c:6f:c5:de:db:4b: 17:c5:4d:76:a1:eb:70:56:4d:bd:ea:83:9b:97:c8: a4:49:95:08:d0:66:92:f6:48:e3:4c:8f:f6:1d:ba: 99:b0:c4:78:c0:04:e2:78:78:5e:1d:24:c5:6e:3c: fb:45:40:76:f1:dc:b6:25:9e:c5:39:a6:6b:73:97: 38:3a:30:2e:1d:f4:9f:97:22:25:71:7c:41:ca:47: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:09:7D:87:08:C1:68:4E:E8:D1:7F:9F:9C:EA:66:A6:14:4C:DC:E4 X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d5:2e:50:12:57:cd:ac:76:98:f2:6e:71:1c:f0:63:2c:3a: c0:23:8e:46:a9:67:0c:56:84:d2:fb:a5:6b:4e:21:ec:74:c7: 20:7e:47:ee:d6:a2:79:da:28:e1:45:03:69:48:a9:c9:36:b2: b5:2c:2a:7a:c1:ed:7c:5a:54:0b:73:e8:5c:6c:6f:3a:3c:07: f8:3b:84:1d:eb:18:2b:bb:44:1d:0e:f1:6c:6e:0a:ea:51:8a: 6c:21:08:04:69:b3:8f:c5:b1:26:af:19:3e:e6:fc:4b:55:65: d2:68:ce:5b:5d:0a:f5:6b:ac:31:02:26:e5:05:5d:5a:31:e4: 77:63:d5:45:c7:04:b8:c5:96:41:03:ac:76:ea:15:6c:e4:c4: aa:fa:7c:18:64:03:44:49:9c:8e:58:a2:4f:97:e0:a5:8b:f2: ad:3b:68:1f:d9:d8:84:87:30:f1:ed:26:0f:cd:99:1a:7d:dd: 44:33:87:fb:ea:4e:e9:aa:d2:5c:68:7b:8a:cc:a8:7a:c4:f1: 09:fd:6d:6b:52:48:22:d5:34:7b:ff:70:a9:cb:98:70:37:68: 1a:97:d9:c5:6d:52:ca:99:2b:39:34:36:c6:c5:91:a2:d4:b2: 9f:1b:16:3b:0f:7c:0d:ff:02:f9:96:26:6e:33:16:ac:d4:3f: d5:d1:74:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPtya/EHIz8jXU/MFBvUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjUxMjE1MjMwMDU3WhcNMjUxMjE2MjMwMDU3WjAzMTEwLwYDVQQD EygwNzA5N2Q4NzA4YzE2ODRlZThkMTdmOWY5Y2VhNjZhNjE0NGNkY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fAUaZwUNWewqfId6VMs0Wl2hJ2m wVv4L0H5QHiCAqAqYhugmu3XLcNhqT6Juu/Ui8/vgAW+5GSvHKFy3ivmNy7+VNKq 0j+QvGs4jtEaLQfjqzh1dRs/CPxTjmVrdnZabAr6ZuykZuOk1zNLrAaTbLGmcc1s 2c8NCHQ4hiorqp/vFXhM5NR7sihNVXgB9ApeSDoLqjil/MToXwg3OwB8z4KcZt2m Rh2/BTVVnMlcb8Xe20sXxU12oetwVk296oObl8ikSZUI0GaS9kjjTI/2HbqZsMR4 wATieHheHSTFbjz7RUB28dy2JZ7FOaZrc5c4OjAuHfSflyIlcXxBykcM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcJfYcIwWhO6NF/n5zqZqYUTNzkMB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNUuUBJX zax2mPJucRzwYyw6wCOORqlnDFaE0vula04h7HTHIH5H7taiedoo4UUDaUipyTay tSwqesHtfFpUC3PoXGxvOjwH+DuEHesYK7tEHQ7xbG4K6lGKbCEIBGmzj8WxJq8Z Pub8S1Vl0mjOW10K9WusMQIm5QVdWjHkd2PVRccEuMWWQQOsduoVbOTEqvp8GGQD REmcjliiT5fgpYvyrTtoH9nYhIcw8e0mD82ZGn3dRDOH++pO6arSXGh7isyoesTx Cf1ta1JIItU0e/9wqcuYcDdoGpfZxW1SypkrOTQ2xsWRotSynxsWOw98Df8C+ZYm bjMWrNQ/1dF0LA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:52 2025 by rpki-client