This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json) Hash identifier: R5K2A7ALa5C1k7I4uCNJXgaKV0lLeiKDt70kat39ywo= Subject key identifier: 78:94:C6:74:17:90:01:3D:5E:03:EE:87:ED:1A:D0:29:14:9A:89:D7 Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f Certificate serial: 019B5977B3A7AD03FE6540EEC94C6B03378E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:02:55 +0000 Manifest this update: Fri 26 Dec 2025 07:02:55 +0000 Manifest next update: Sat 27 Dec 2025 07:02:55 +0000 Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=) 2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: TJqcYtcKE6FcYpxikFD1bJjODBADArTY+Hqg/L5s/xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:b3:a7:ad:03:fe:65:40:ee:c9:4c:6b:03:37:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f Validity Not Before: Dec 26 07:02:55 2025 GMT Not After : Dec 27 07:02:55 2025 GMT Subject: CN=7894c6741790013d5e03ee87ed1ad029149a89d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:02:a8:7a:9c:d4:95:04:bd:9b:f0:7d:53: 50:4c:2e:b9:81:bf:eb:c8:ae:f3:ef:6f:eb:fb:ce: 97:73:86:9e:c6:0b:92:62:19:56:31:d2:7a:cb:50: 36:95:ff:f1:bf:d1:77:2c:70:12:5f:92:6f:7f:99: 28:32:ad:4d:a3:da:0c:e0:9d:a4:94:fa:57:54:8b: b3:69:8e:5c:5b:20:b0:27:2f:50:1d:77:92:e9:58: d6:86:5e:0a:d6:ae:ac:52:6d:a7:3f:8d:84:cf:28: 44:93:a1:d5:64:22:61:43:f7:c4:6f:76:9f:4f:a9: 32:44:b8:a6:66:00:d7:7b:91:9c:2f:bc:2c:8e:42: 80:de:65:2d:6a:b4:ec:ee:4d:4b:40:38:dc:71:64: 39:2d:90:3f:d9:8c:14:69:6f:43:02:e7:e3:94:68: 0a:e8:b7:7b:ef:e6:1b:e8:62:01:94:64:f0:9b:71: 6d:a1:6a:25:42:72:24:b1:94:4a:31:2d:21:64:31: b0:44:4b:93:07:74:ca:ea:5b:64:53:87:4c:25:55: 4e:d0:f7:f1:32:e9:b9:66:d2:57:bd:34:9e:d2:2a: 0e:5d:21:d3:06:4a:6f:22:32:09:8e:ba:1b:f3:17: c1:71:ea:69:0d:c3:b0:b0:c3:36:da:de:ea:0d:5b: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:C6:74:17:90:01:3D:5E:03:EE:87:ED:1A:D0:29:14:9A:89:D7 X509v3 Authority Key Identifier: keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c0:5e:a2:47:68:c6:2a:6c:9c:8d:a6:9c:c5:81:c9:71:d7: e9:ae:84:97:75:2d:1f:ea:17:09:43:b2:1a:8a:24:c7:36:40: e2:c0:f3:ac:37:cb:5d:0f:e8:58:45:c1:d9:55:26:64:a2:ab: 60:89:9e:54:36:59:ef:dc:6d:cf:35:96:42:68:ae:8c:4c:f5: e4:b3:36:55:45:91:c6:0e:b8:08:43:8d:4f:d9:15:23:bb:6d: 94:3e:55:06:a2:5b:e3:57:c5:fc:5e:a5:24:0b:f6:32:ac:1e: 8c:99:68:db:fc:da:3d:9e:b6:b9:db:09:4e:aa:1b:e5:03:1d: e5:17:3d:87:13:7a:d2:51:a1:df:7b:18:62:94:db:ea:45:9b: ee:09:a5:26:0e:a8:15:e7:cf:ff:94:c0:2d:50:c2:3f:7d:d4: ed:cf:cb:ea:24:c7:8c:0a:30:93:f3:33:87:86:f8:92:29:c0: 8b:f2:f5:fa:1a:48:a6:64:a0:92:86:10:ec:5a:a0:4f:b3:35: 0d:0b:b6:8f:bc:02:47:07:08:f5:10:4e:3f:59:6f:9f:97:14: 32:2d:fe:af:f0:3c:94:d2:8f:32:60:24:8c:48:93:31:13:3f: 9e:3c:ca:10:3a:f7:6c:4e:20:ce:62:1c:27:ec:06:52:bf:43: 10:fa:e6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd7OnrQP+ZUDuyUxrAzeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2QzNzljMDRmODE3NWIzNWVmNjczZDc2YzY4ZTQ0Yzcw ZTgzM2YwHhcNMjUxMjI2MDcwMjU1WhcNMjUxMjI3MDcwMjU1WjAzMTEwLwYDVQQD Eyg3ODk0YzY3NDE3OTAwMTNkNWUwM2VlODdlZDFhZDAyOTE0OWE4OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlUCqHqc1JUEvZvwfVNQTC65gb/r yK7z72/r+86Xc4aexguSYhlWMdJ6y1A2lf/xv9F3LHASX5Jvf5koMq1No9oM4J2k lPpXVIuzaY5cWyCwJy9QHXeS6VjWhl4K1q6sUm2nP42EzyhEk6HVZCJhQ/fEb3af T6kyRLimZgDXe5GcL7wsjkKA3mUtarTs7k1LQDjccWQ5LZA/2YwUaW9DAufjlGgK 6Ld77+Yb6GIBlGTwm3FtoWolQnIksZRKMS0hZDGwREuTB3TK6ltkU4dMJVVO0Pfx Mum5ZtJXvTSe0ioOXSHTBkpvIjIJjrob8xfBceppDcOwsMM22t7qDVsCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiUxnQXkAE9XgPuh+0a0CkUmonXMB8GA1UdIwQY MBaAFLt9N5wE+BdbNe9nPXbGjkTHDoM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQt MzNlYmFiMjRiYmIzLzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZTBmNWUtODE0MS00M2M5LThmNDQtMzNlYmFiMjRiYmIz LzEvdTMwM25BVDRGMXMxNzJjOWRzYU9STWNPZ3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsBeokdo xipsnI2mnMWByXHX6a6El3UtH+oXCUOyGookxzZA4sDzrDfLXQ/oWEXB2VUmZKKr YImeVDZZ79xtzzWWQmiujEz15LM2VUWRxg64CEONT9kVI7ttlD5VBqJb41fF/F6l JAv2MqwejJlo2/zaPZ62udsJTqob5QMd5Rc9hxN60lGh33sYYpTb6kWb7gmlJg6o FefP/5TALVDCP33U7c/L6iTHjAowk/Mzh4b4kinAi/L1+hpIpmSgkoYQ7FqgT7M1 DQu2j7wCRwcI9RBOP1lvn5cUMi3+r/A8lNKPMmAkjEiTMRM/njzKEDr3bE4gzmIc J+wGUr9DEPrm4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:19 2025 by rpki-client