This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json) Hash identifier: gOTIirSGLSeCD+4MaQPTEbOuU9Wxk9Wv8hAt86MQFjU= Subject key identifier: 9B:11:BA:84:CE:8F:DD:97:FB:40:B5:7F:E4:05:49:EF:C4:F7:A9:D3 Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Certificate serial: 019B21075C592C39CF288E7003EF9754C5E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft Manifest number: 12FB Signing time: Mon 15 Dec 2025 08:01:29 +0000 Manifest this update: Mon 15 Dec 2025 08:01:29 +0000 Manifest next update: Tue 16 Dec 2025 08:01:29 +0000 Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=) 2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: XsNLYifqbmx+6dqavWihCoG90VRtiOTaCnE6k5/yfQM=) 3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:5c:59:2c:39:cf:28:8e:70:03:ef:97:54:c5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c Validity Not Before: Dec 15 08:01:29 2025 GMT Not After : Dec 16 08:01:29 2025 GMT Subject: CN=9b11ba84ce8fdd97fb40b57fe40549efc4f7a9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:06:fa:d4:b3:b2:e9:98:f9:70:54:f8:83: de:f0:d3:4f:f7:00:ec:5a:71:97:a6:26:55:64:65: 05:90:19:47:42:f7:32:de:9a:6f:8b:25:93:d0:df: 79:7d:26:fc:b4:52:b6:fe:77:ce:94:f3:46:b0:b9: ed:7c:53:10:5d:37:37:b8:4e:b4:34:1c:3d:2d:1b: 0c:03:69:20:22:47:40:0b:15:e5:a0:25:73:2c:6f: 07:24:d1:f1:d4:4c:c7:ff:82:7f:79:63:3f:f9:bd: 8f:4e:68:89:bd:cd:b5:84:3e:23:bf:bf:e2:1e:b2: c7:c2:3b:fd:bd:3a:bb:70:23:9f:7a:f8:34:45:b1: 0a:78:46:c7:cd:a9:11:78:56:a8:40:bc:70:01:77: c7:27:8e:bd:61:71:b1:cc:55:5c:64:e4:8b:cc:1e: b9:bb:96:1b:37:c9:e6:64:c5:9a:e1:c4:e1:95:ba: 7b:5a:ab:80:c3:61:f1:a9:b9:4b:fd:d1:4f:15:09: d2:b6:8c:93:d1:0d:02:9e:9f:ea:c7:70:06:1f:fd: 3e:d9:8e:00:b6:31:1d:11:3c:9d:96:c2:7a:96:e2: 0a:38:b8:fc:e5:57:d8:70:83:f3:e2:84:10:0b:48: 9c:56:22:85:e9:82:1d:4c:e9:d5:7c:de:a5:eb:8f: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:BA:84:CE:8F:DD:97:FB:40:B5:7F:E4:05:49:EF:C4:F7:A9:D3 X509v3 Authority Key Identifier: keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f8:9b:43:e5:01:54:eb:cf:1a:79:af:1c:fa:c1:a1:e3:2a: 74:d3:0c:a7:24:b0:2d:06:2f:39:4f:35:d2:96:12:22:49:8c: c1:6d:a1:96:9b:41:01:e3:81:ee:ba:91:e1:7a:12:d9:2c:fb: b1:f7:05:a5:1e:37:0c:45:8d:c1:e6:4b:96:bd:dc:13:bb:6b: a4:26:7c:29:89:00:86:b3:60:e2:35:5c:65:7f:c3:3b:2a:a9: 66:0e:06:16:7b:0a:a5:64:6d:58:4d:7f:09:5d:21:33:34:20: 3e:b9:af:9d:0d:a0:56:4e:2c:78:48:5d:e2:c3:f6:c8:3a:06: 83:c5:04:91:5a:2d:d1:94:70:35:19:89:44:68:df:49:c0:9c: 14:3b:dc:32:db:5f:ce:01:46:7d:de:8f:f0:50:6d:2e:0e:63: 9f:00:66:b4:c5:0e:f6:96:0a:9b:82:c7:61:c2:34:6c:a7:2e: 6b:d3:57:55:64:de:9e:84:05:37:15:a4:f5:4c:eb:13:52:71: ee:c4:64:33:8a:14:a3:e9:c0:58:11:bf:e2:75:03:c1:88:71: 6c:d3:db:54:ca:85:5d:b7:9b:d6:04:48:ab:90:64:c8:af:10: 6f:79:4c:f4:47:b0:4b:1f:02:af:f6:a5:b0:6b:85:35:5f:5a: b9:5a:8d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB1xZLDnPKI5wA++XVMXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3 NzQ1OWMwHhcNMjUxMjE1MDgwMTI5WhcNMjUxMjE2MDgwMTI5WjAzMTEwLwYDVQQD Eyg5YjExYmE4NGNlOGZkZDk3ZmI0MGI1N2ZlNDA1NDllZmM0ZjdhOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0wG+tSzsumY+XBU+IPe8NNP9wDs WnGXpiZVZGUFkBlHQvcy3ppviyWT0N95fSb8tFK2/nfOlPNGsLntfFMQXTc3uE60 NBw9LRsMA2kgIkdACxXloCVzLG8HJNHx1EzH/4J/eWM/+b2PTmiJvc21hD4jv7/i HrLHwjv9vTq7cCOfevg0RbEKeEbHzakReFaoQLxwAXfHJ469YXGxzFVcZOSLzB65 u5YbN8nmZMWa4cThlbp7WquAw2HxqblL/dFPFQnStoyT0Q0Cnp/qx3AGH/0+2Y4A tjEdETydlsJ6luIKOLj85VfYcIPz4oQQC0icViKF6YIdTOnVfN6l648viwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsRuoTOj92X+0C1f+QFSe/E96nTMB8GA1UdIwQY MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvibQ+UB VOvPGnmvHPrBoeMqdNMMpySwLQYvOU810pYSIkmMwW2hlptBAeOB7rqR4XoS2Sz7 sfcFpR43DEWNweZLlr3cE7trpCZ8KYkAhrNg4jVcZX/DOyqpZg4GFnsKpWRtWE1/ CV0hMzQgPrmvnQ2gVk4seEhd4sP2yDoGg8UEkVot0ZRwNRmJRGjfScCcFDvcMttf zgFGfd6P8FBtLg5jnwBmtMUO9pYKm4LHYcI0bKcua9NXVWTenoQFNxWk9UzrE1Jx 7sRkM4oUo+nAWBG/4nUDwYhxbNPbVMqFXbeb1gRIq5BkyK8Qb3lM9EewSx8Cr/al sGuFNV9auVqNGA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:51:29 2025 by rpki-client