This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json) Hash identifier: 3yjx/HWV9ASsiPAGuDy2HrBByBcJpyCW1mZ7zX/bvq4= Subject key identifier: AA:BB:02:F0:09:EA:B2:5E:EB:83:81:69:60:6F:5C:0E:52:12:D9:79 Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a Certificate serial: 019B2D41B50C0377CDA4DC9A5981C549B4A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 17:00:39 +0000 Manifest this update: Wed 17 Dec 2025 17:00:39 +0000 Manifest next update: Thu 18 Dec 2025 17:00:39 +0000 Files and hashes: 1: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (hash: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=) 2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: TlkdlXWnTbP3teGhqG/mwLjLUThJKvrjVnGcfaxvgmU=) 3: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (hash: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=) 4: hfyAz_QYTue5Wbe5vJxSavU_6HY.roa (hash: 4N/5nYpUdCpyKpn/U/R7SrWZ90U5qc3XnEimDy5XhF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:b5:0c:03:77:cd:a4:dc:9a:59:81:c5:49:b4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a Validity Not Before: Dec 17 17:00:39 2025 GMT Not After : Dec 18 17:00:39 2025 GMT Subject: CN=aabb02f009eab25eeb838169606f5c0e5212d979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:ca:80:45:4c:20:72:72:2d:49:8c:01:e8: c1:d3:c4:e9:cf:8b:58:d7:86:98:c1:81:78:d2:38: 54:ac:72:9c:c7:28:d0:d8:dd:25:7d:22:d6:ac:fc: 95:97:e2:fb:c5:36:9e:c1:38:c8:81:f8:7b:b8:6b: 5d:df:b7:2e:ef:48:bb:28:e6:01:23:72:ec:c4:34: 42:ac:9b:40:15:c5:25:7a:74:b0:4e:9e:6f:b2:43: 5b:19:ad:29:dd:bb:dd:e1:78:dc:40:23:eb:d6:26: c4:4d:51:a9:88:77:ed:b4:87:d2:8f:88:12:22:ba: 20:7f:19:96:48:5b:14:79:89:51:a3:23:06:b4:92: 75:f6:5c:bf:e5:df:f4:89:56:37:05:9a:92:d0:db: b0:be:11:d7:68:b6:df:85:0d:22:c0:c5:7a:1b:d0: 88:a2:b0:2a:cc:4b:b9:80:86:44:2a:3d:95:6b:d5: 8b:6f:b0:db:69:c3:1b:cc:fe:ba:9a:90:f9:6b:9f: e1:d3:3a:00:d7:f9:0d:24:c8:60:88:2b:4c:93:42: 8e:d4:76:bc:01:d5:61:2c:f3:a6:c6:37:d9:a7:b0: 57:15:0e:d8:e8:5b:f7:68:67:b6:db:97:e4:76:6d: 12:d8:ac:df:5f:f0:83:6b:a1:da:da:c7:26:1e:bb: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:02:F0:09:EA:B2:5E:EB:83:81:69:60:6F:5C:0E:52:12:D9:79 X509v3 Authority Key Identifier: keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:26:9b:32:2d:bf:2f:e0:6d:fa:af:30:64:79:19:fa:58:90: c9:ee:a2:90:c1:66:53:fe:aa:e3:62:ee:dd:62:4b:c5:06:c6: 83:43:0f:d4:1c:7f:a9:31:05:91:3b:6e:83:67:4f:54:67:72: d7:5a:4a:1f:3b:eb:c1:5f:84:cc:d4:d2:9c:7c:49:0d:f3:3d: 45:5c:53:79:4e:82:a9:a8:52:cb:e7:78:9c:b3:ac:72:51:52: 62:b5:83:28:fa:89:a4:3b:c4:0d:dc:b1:42:0f:70:63:ba:05: 54:42:60:36:d8:1d:95:0a:d6:2e:3b:b9:ba:3d:38:3e:62:b5: c5:ac:d2:b5:2c:be:dc:48:39:3d:17:ea:10:f9:1a:6d:1a:77: 14:30:94:b7:57:16:66:e9:61:13:ad:3c:5e:b9:92:ce:fa:b2: a0:52:d6:da:4c:99:eb:1a:35:e7:e4:52:fd:4c:4e:22:cb:e2: 30:04:17:98:69:04:1f:18:53:0d:0f:24:52:58:b1:9e:c6:cf: b2:2d:b9:e4:4c:d8:19:4a:8d:4e:2d:7b:1f:00:72:f0:aa:e8: e3:88:c3:10:8e:a0:f9:7c:dd:3d:2d:01:76:06:6d:65:a4:37: 58:83:0c:bc:3c:41:8f:9e:62:32:cd:65:76:95:6f:b4:e4:c1: fd:5d:7b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQbUMA3fNpNyaWYHFSbShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTNiZGY0ZGM3NDM1ZmFmNTFiYTkzNGQ2NTU3MGY3MWMy MTczMWEwHhcNMjUxMjE3MTcwMDM5WhcNMjUxMjE4MTcwMDM5WjAzMTEwLwYDVQQD EyhhYWJiMDJmMDA5ZWFiMjVlZWI4MzgxNjk2MDZmNWMwZTUyMTJkOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMHKgEVMIHJyLUmMAejB08Tpz4tY 14aYwYF40jhUrHKcxyjQ2N0lfSLWrPyVl+L7xTaewTjIgfh7uGtd37cu70i7KOYB I3LsxDRCrJtAFcUlenSwTp5vskNbGa0p3bvd4XjcQCPr1ibETVGpiHfttIfSj4gS IrogfxmWSFsUeYlRoyMGtJJ19ly/5d/0iVY3BZqS0NuwvhHXaLbfhQ0iwMV6G9CI orAqzEu5gIZEKj2Va9WLb7DbacMbzP66mpD5a5/h0zoA1/kNJMhgiCtMk0KO1Ha8 AdVhLPOmxjfZp7BXFQ7Y6Fv3aGe225fkdm0S2KzfX/CDa6Ha2scmHrvxYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq7AvAJ6rJe64OBaWBvXA5SEtl5MB8GA1UdIwQY MBaAFEQTvfTcdDX69RupNNZVcPccIXMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTkt YmM5ZWNjMmFkYjQzLzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTktYmM5ZWNjMmFkYjQz LzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCabMi2/ L+Bt+q8wZHkZ+liQye6ikMFmU/6q42Lu3WJLxQbGg0MP1Bx/qTEFkTtug2dPVGdy 11pKHzvrwV+EzNTSnHxJDfM9RVxTeU6CqahSy+d4nLOsclFSYrWDKPqJpDvEDdyx Qg9wY7oFVEJgNtgdlQrWLju5uj04PmK1xazStSy+3Eg5PRfqEPkabRp3FDCUt1cW ZulhE608XrmSzvqyoFLW2kyZ6xo15+RS/UxOIsviMAQXmGkEHxhTDQ8kUlixnsbP si255EzYGUqNTi17HwBy8Kro44jDEI6g+XzdPS0BdgZtZaQ3WIMMvDxBj55iMs1l dpVvtOTB/V17sw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:33 2025 by rpki-client