This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft File: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json) Hash identifier: HE0jbcEJhCQC61uBNwNnPAUylLfhVaaUVWWejvLMzvA= Subject key identifier: 11:25:71:E7:0F:14:99:29:AF:DD:1E:B3:E6:92:B3:B6:78:F2:C6:EB Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277 Certificate serial: 019B1238CECC41FE308E919ED6B04460BACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 11:01:11 +0000 Manifest this update: Fri 12 Dec 2025 11:01:11 +0000 Manifest next update: Sat 13 Dec 2025 11:01:11 +0000 Files and hashes: 1: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (hash: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=) 2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: 3JAyMK+LlsQsoA6MPjwC2pqWrCVeZ6rabC77ztBi6SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:ce:cc:41:fe:30:8e:91:9e:d6:b0:44:60:ba:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277 Validity Not Before: Dec 12 11:01:11 2025 GMT Not After : Dec 13 11:01:11 2025 GMT Subject: CN=112571e70f149929afdd1eb3e692b3b678f2c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:b5:3f:8d:61:fd:e4:7e:bb:54:f9:c2:f4: 15:f9:05:7b:b6:db:7e:d7:b0:07:a6:d1:a2:12:cd: 5f:8f:2d:48:67:58:97:62:a9:c1:11:e8:11:76:aa: 58:af:6b:6e:e9:78:59:aa:78:b3:35:7f:48:93:8e: 8b:f3:d5:e2:7a:ac:b8:a3:2a:fa:3a:23:86:89:b6: ca:69:d3:3e:d0:66:36:08:83:bd:06:2a:64:ed:aa: a2:fa:93:68:73:2b:38:9b:02:07:ec:e6:0a:27:d9: aa:10:eb:71:fd:28:42:d9:53:b0:14:e1:c3:5e:87: 13:76:5f:99:b3:03:21:b9:d6:97:cf:c9:73:81:52: e4:4b:3a:f5:44:ea:1d:d9:40:d7:41:fd:37:5a:6c: 10:20:f4:d6:1e:da:e5:1f:22:a2:89:77:ab:79:7c: 31:57:2c:0f:4b:a7:8c:76:b2:09:77:ee:3c:7c:a9: 47:09:70:8f:62:50:51:7a:df:0d:c8:22:5d:cf:5a: 73:c8:c0:5a:d6:63:7c:a3:83:b4:0b:80:de:44:26: 89:dd:47:95:f7:d2:f7:34:de:78:73:3d:f5:d3:44: f3:21:6a:ba:44:fc:04:c2:e9:79:47:a2:27:40:f1: 93:fc:99:cc:b3:da:7e:c7:77:97:ec:f1:1d:3f:ab: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:25:71:E7:0F:14:99:29:AF:DD:1E:B3:E6:92:B3:B6:78:F2:C6:EB X509v3 Authority Key Identifier: keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:09:9b:03:cd:b5:39:60:a3:66:d6:1f:5f:b5:ca:87:83:5a: 8b:e4:c9:78:ec:21:d6:b3:5f:f5:72:2c:ea:b1:77:5f:72:88: b4:31:47:cf:cd:4f:bd:54:18:56:6c:6d:d2:7d:04:85:0c:a1: 02:ee:e7:0b:7b:9b:42:8b:b5:3e:79:28:be:9d:af:ed:fa:2f: c0:1b:e2:9b:92:b3:69:c8:75:d0:c7:24:12:4c:3f:49:6b:69: 21:ff:19:be:d9:4d:ed:a8:08:39:23:d0:c1:f9:d9:0f:65:ef: a4:a8:06:9c:43:27:34:f7:ba:f2:fc:7c:61:f1:8e:03:e1:b6: df:cf:01:f0:0e:44:e5:55:dd:52:b0:91:1f:ab:ce:d3:26:6f: eb:63:01:84:38:c6:68:32:3f:1c:a8:c1:24:c2:83:56:33:84: 8d:10:70:9a:f3:7b:87:3e:df:90:cc:4f:2e:34:eb:e2:8f:6b: 36:39:2e:f6:c7:5a:8e:d7:c0:d7:de:c1:7c:22:55:53:e8:cc: 90:a7:b4:b5:41:66:87:57:5a:64:58:bb:2a:6a:48:dd:a7:1c: 87:b3:1b:29:8f:11:58:4b:a5:e0:2d:8a:ec:79:e1:f9:ab:86: 60:89:0a:03:c4:df:dd:a7:7e:3b:c3:52:0b:85:32:7f:72:15: dd:e9:75:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOM7MQf4wjpGe1rBEYLrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmJlZTRhOTY4ZGYwZmFjNDc1MWI0ZjQ5MDI3ZmEwOTVj NjUyNzcwHhcNMjUxMjEyMTEwMTExWhcNMjUxMjEzMTEwMTExWjAzMTEwLwYDVQQD EygxMTI1NzFlNzBmMTQ5OTI5YWZkZDFlYjNlNjkyYjNiNjc4ZjJjNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zO1P41h/eR+u1T5wvQV+QV7ttt+ 17AHptGiEs1fjy1IZ1iXYqnBEegRdqpYr2tu6XhZqnizNX9Ik46L89Xieqy4oyr6 OiOGibbKadM+0GY2CIO9Bipk7aqi+pNocys4mwIH7OYKJ9mqEOtx/ShC2VOwFOHD XocTdl+ZswMhudaXz8lzgVLkSzr1ROod2UDXQf03WmwQIPTWHtrlHyKiiXereXwx VywPS6eMdrIJd+48fKlHCXCPYlBRet8NyCJdz1pzyMBa1mN8o4O0C4DeRCaJ3UeV 99L3NN54cz3100TzIWq6RPwEwul5R6InQPGT/JnMs9p+x3eX7PEdP6tZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBElcecPFJkpr90es+aSs7Z48sbrMB8GA1UdIwQY MBaAFLv77kqWjfD6xHUbT0kCf6CVxlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAt MGE4OWM2OTk2ZmVmLzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAtMGE4OWM2OTk2ZmVm LzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQmbA821 OWCjZtYfX7XKh4Nai+TJeOwh1rNf9XIs6rF3X3KItDFHz81PvVQYVmxt0n0EhQyh Au7nC3ubQou1Pnkovp2v7fovwBvim5Kzach10MckEkw/SWtpIf8ZvtlN7agIOSPQ wfnZD2XvpKgGnEMnNPe68vx8YfGOA+G2388B8A5E5VXdUrCRH6vO0yZv62MBhDjG aDI/HKjBJMKDVjOEjRBwmvN7hz7fkMxPLjTr4o9rNjku9sdajtfA197BfCJVU+jM kKe0tUFmh1daZFi7KmpI3acch7MbKY8RWEul4C2K7Hnh+auGYIkKA8Tf3ad+O8NS C4Uyf3IV3el19A== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:30 2025 by rpki-client