This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json) Hash identifier: /7ot4ROg8T/Wr2hZxkVpBWYtLJNn+lHhJ+KiO5JOmC0= Subject key identifier: C5:24:01:24:71:DB:D1:FE:DB:A3:27:4D:E6:6C:FF:0F:4F:25:91:53 Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Certificate serial: 019AF2096230AE26A342B36F6448E9C33512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft Manifest number: 11F6 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: yyDF8uBFsJwYdq9+X0/Vnf845NCD9FkCKrnVnKxapOg=) 2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:62:30:ae:26:a3:42:b3:6f:64:48:e9:c3:35:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=c524012471dbd1fedba3274de66cff0f4f259153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:6b:d4:ef:a3:61:ed:41:dd:84:8c:bf:e9: b3:23:38:fb:06:d5:d7:5f:03:24:90:9f:84:a5:59: 76:cd:1c:ed:42:68:11:30:ef:f0:c2:5c:4f:b9:e8: 8e:6c:23:36:74:69:c0:74:07:3e:ff:e5:9b:04:ec: 2d:d8:22:31:45:e5:df:d1:12:f3:07:84:3d:b4:a8: d6:42:37:35:81:24:8f:fa:df:d4:4f:5b:ab:64:7b: 7a:e7:bd:4f:41:d3:45:4d:d3:93:c0:55:10:21:32: c2:a9:94:9a:4f:54:b8:2d:8c:ab:13:42:2c:34:42: 1d:de:2c:a7:19:23:0b:46:30:a3:ac:7c:70:70:3b: 53:1b:db:15:b8:2f:7a:46:cc:6c:a2:a3:3a:13:ab: 08:bd:03:d6:5d:a1:d4:be:7d:30:00:f3:ee:52:6f: ab:60:63:9a:84:65:e2:7a:46:28:0e:46:04:4e:b1: 34:c4:39:75:b3:31:3f:bd:af:c4:ae:5e:6e:e1:86: d8:64:9c:93:68:07:9f:68:01:af:36:9a:bb:62:16: 77:70:20:3a:cc:d7:63:39:ac:2f:98:08:32:90:4e: 33:70:9f:14:98:d5:44:4e:24:07:7c:07:85:d3:4f: 26:c8:66:8f:6f:a7:12:fb:ee:49:76:29:3c:58:e5: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:24:01:24:71:DB:D1:FE:DB:A3:27:4D:E6:6C:FF:0F:4F:25:91:53 X509v3 Authority Key Identifier: keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:f0:09:b9:78:45:b7:d6:50:4d:cd:e6:79:7b:d3:c1:45: e3:a7:63:0b:7f:fd:77:8e:9b:d8:ed:44:b5:84:53:e9:f6:80: 50:5e:83:0e:e2:21:df:5a:4b:54:4d:b5:74:07:3e:22:5f:06: 0f:c3:7c:be:c7:00:22:9a:af:21:4d:f0:36:c7:11:9b:a4:0a: d9:46:ca:9f:16:56:59:17:b3:bc:e0:0d:f7:11:f5:18:a9:a6: c4:e0:27:1b:52:7a:fc:9f:98:5d:a1:f4:03:a6:de:ca:19:ad: fc:cd:17:0c:46:b6:41:0d:f0:2e:50:3b:13:d2:ff:24:b5:25: db:2d:29:e4:f9:19:c3:71:67:1d:d4:b1:3b:64:75:f4:15:4a: 5f:8a:67:ac:9f:4a:08:6b:57:0a:ce:8f:7b:e9:f9:0d:10:45: fb:a0:3e:6e:6e:8f:52:ee:3f:23:50:3c:63:22:2b:ff:2e:ff: 35:19:22:21:6d:40:28:2c:5b:6f:2e:76:f4:cd:be:91:d6:3c: b3:76:de:1b:e9:d8:bc:08:52:b6:d2:30:27:d1:6f:1f:4a:4f: db:88:ea:6d:4f:ee:13:72:a2:86:23:d5:53:57:87:4f:88:8a: 19:ad:8c:9f:c7:79:f1:40:53:7b:2c:6e:16:19:33:01:cc:21: ef:c3:02:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWIwriajQrNvZEjpwzUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi YTZjYWQwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD EyhjNTI0MDEyNDcxZGJkMWZlZGJhMzI3NGRlNjZjZmYwZjRmMjU5MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD9r1O+jYe1B3YSMv+mzIzj7BtXX XwMkkJ+EpVl2zRztQmgRMO/wwlxPueiObCM2dGnAdAc+/+WbBOwt2CIxReXf0RLz B4Q9tKjWQjc1gSSP+t/UT1urZHt6571PQdNFTdOTwFUQITLCqZSaT1S4LYyrE0Is NEId3iynGSMLRjCjrHxwcDtTG9sVuC96RsxsoqM6E6sIvQPWXaHUvn0wAPPuUm+r YGOahGXiekYoDkYETrE0xDl1szE/va/Erl5u4YbYZJyTaAefaAGvNpq7YhZ3cCA6 zNdjOawvmAgykE4zcJ8UmNVETiQHfAeF008myGaPb6cS++5Jdik8WOW1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUkASRx29H+26MnTeZs/w9PJZFTMB8GA1UdIwQY MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1 LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3LwCbl4 RbfWUE3N5nl708FF46djC3/9d46b2O1EtYRT6faAUF6DDuIh31pLVE21dAc+Il8G D8N8vscAIpqvIU3wNscRm6QK2UbKnxZWWRezvOAN9xH1GKmmxOAnG1J6/J+YXaH0 A6beyhmt/M0XDEa2QQ3wLlA7E9L/JLUl2y0p5PkZw3FnHdSxO2R19BVKX4pnrJ9K CGtXCs6Pe+n5DRBF+6A+bm6PUu4/I1A8YyIr/y7/NRkiIW1AKCxbby529M2+kdY8 s3beG+nYvAhSttIwJ9FvH0pP24jqbU/uE3KihiPVU1eHT4iKGa2Mn8d58UBTeyxu FhkzAcwh78MC3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:32 2025 by rpki-client