This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json) Hash identifier: 3TdoV6MMY+9ett9R7kOXsnwgqOQgwBjUAwfDSB5Sw9s= Subject key identifier: 7F:36:D6:07:9C:D9:FB:45:4A:9F:93:59:BB:BF:B7:1E:68:95:2F:55 Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019B09A35FF5EC40B982774585F8FA7B9289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft Manifest number: 1777 Signing time: Wed 10 Dec 2025 19:01:00 +0000 Manifest this update: Wed 10 Dec 2025 19:01:00 +0000 Manifest next update: Thu 11 Dec 2025 19:01:00 +0000 Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=) 2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=) 3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: 5cFVlN6FlXP875v41tayY7gKt3bBi02F/WyzfwsnLew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:a3:5f:f5:ec:40:b9:82:77:45:85:f8:fa:7b:92:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Dec 10 19:01:00 2025 GMT Not After : Dec 11 19:01:00 2025 GMT Subject: CN=7f36d6079cd9fb454a9f9359bbbfb71e68952f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f6:ce:1f:66:ca:18:cb:e9:e2:28:2a:a8:60: 42:5b:b7:f9:44:b5:24:f8:0a:92:f5:31:fd:03:cd: f5:1a:29:43:b4:9e:a3:87:99:d0:a5:97:ac:e3:76: 4c:d8:4c:72:ae:ac:e1:11:90:c8:72:ae:58:77:93: 95:f1:17:d0:c0:4e:e1:42:de:43:0e:30:41:ac:24: bd:b7:ee:7f:08:e4:50:29:eb:b8:b1:01:93:91:6e: 39:61:5b:a8:cf:f8:4a:e5:8b:29:50:91:4a:6d:ce: 13:ac:c2:93:e9:85:4d:0a:4a:4c:dc:ca:34:5c:7b: c8:88:de:04:02:89:0f:62:1c:bc:d9:79:a6:88:49: 48:c0:89:ef:85:e7:7f:5d:51:c6:6a:02:ad:d6:58: f7:b5:aa:3d:4e:3e:33:98:90:bf:21:2c:a8:96:cc: ce:2b:d8:a5:ad:e2:81:e5:44:be:f9:98:ce:2a:1b: 77:c6:25:db:97:db:88:c2:3c:fe:69:ac:13:5e:29: b0:cf:af:ef:f9:c0:b2:ac:af:71:7b:50:5b:81:24: e9:04:af:e9:15:5e:3e:54:76:da:16:de:3c:9a:71: 42:cc:47:41:a0:66:c9:01:c9:26:45:49:fe:75:c7: 8b:83:eb:6d:68:3a:33:01:6c:24:d8:72:60:06:d5: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:36:D6:07:9C:D9:FB:45:4A:9F:93:59:BB:BF:B7:1E:68:95:2F:55 X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:65:b0:f6:1b:a1:b8:ae:b9:d4:08:ef:7e:e8:e1:34:60:4b: 46:63:85:89:9f:22:26:2f:33:d1:5c:25:fb:30:2a:d1:01:0a: 8f:b3:64:09:7a:74:3e:a0:24:9d:44:a8:5b:2f:c8:8c:c3:10: b0:fe:53:4b:f1:d2:99:20:57:ba:28:45:ac:01:da:11:3e:f7: 85:ba:a3:20:78:15:d6:89:02:ea:92:73:87:31:fa:19:f4:61: de:2a:e2:32:c6:49:62:f4:48:6f:03:7b:f8:b8:91:1b:58:63: cf:27:c2:25:f4:fd:4d:a6:d0:32:4a:60:78:78:b9:a4:76:fd: fa:50:85:9c:29:2a:48:8f:e4:5c:54:ae:0e:4d:39:0a:c8:ab: d5:d8:7d:67:4f:bb:06:82:82:b3:2e:c2:7f:b7:dc:5b:74:50: bb:b4:be:7f:fb:4b:9c:2d:03:53:1a:7f:0d:94:af:2f:46:05: e9:91:aa:1b:51:f5:da:98:21:c7:bd:ae:b0:0c:47:d7:20:52: 47:55:22:17:fe:52:4c:b9:82:93:98:b4:f7:15:72:55:63:d2: b5:73:09:9e:9e:16:75:d6:e8:57:54:50:c5:71:7f:13:ba:0a: 00:2f:38:10:99:67:a4:16:f7:8c:82:50:d7:f6:17:e0:b1:44: 87:76:b7:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJo1/17EC5gndFhfj6e5KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjUxMjEwMTkwMTAwWhcNMjUxMjExMTkwMTAwWjAzMTEwLwYDVQQD Eyg3ZjM2ZDYwNzljZDlmYjQ1NGE5ZjkzNTliYmJmYjcxZTY4OTUyZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vbOH2bKGMvp4igqqGBCW7f5RLUk +AqS9TH9A831GilDtJ6jh5nQpZes43ZM2ExyrqzhEZDIcq5Yd5OV8RfQwE7hQt5D DjBBrCS9t+5/CORQKeu4sQGTkW45YVuoz/hK5YspUJFKbc4TrMKT6YVNCkpM3Mo0 XHvIiN4EAokPYhy82XmmiElIwInvhed/XVHGagKt1lj3tao9Tj4zmJC/ISyolszO K9ilreKB5US++ZjOKht3xiXbl9uIwjz+aawTXimwz6/v+cCyrK9xe1BbgSTpBK/p FV4+VHbaFt48mnFCzEdBoGbJAckmRUn+dceLg+ttaDozAWwk2HJgBtXuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH821gec2ftFSp+TWbu/tx5olS9VMB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmWw9huh uK651AjvfujhNGBLRmOFiZ8iJi8z0Vwl+zAq0QEKj7NkCXp0PqAknUSoWy/IjMMQ sP5TS/HSmSBXuihFrAHaET73hbqjIHgV1okC6pJzhzH6GfRh3iriMsZJYvRIbwN7 +LiRG1hjzyfCJfT9TabQMkpgeHi5pHb9+lCFnCkqSI/kXFSuDk05Csir1dh9Z0+7 BoKCsy7Cf7fcW3RQu7S+f/tLnC0DUxp/DZSvL0YF6ZGqG1H12pghx72usAxH1yBS R1UiF/5STLmCk5i09xVyVWPStXMJnp4WddboV1RQxXF/E7oKAC84EJlnpBb3jIJQ 1/YX4LFEh3a3uw== -----END CERTIFICATE-----Generated at Thu Dec 11 05:20:57 2025 by rpki-client