This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json) Hash identifier: es+aTxtwVRUjvTq25ttIyAHNQfC6KLwJqv1QTYS5c6Q= Subject key identifier: 13:58:CE:32:DE:E1:F1:A5:26:58:27:C7:69:5A:64:CF:86:EF:ED:04 Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Certificate serial: 019AF31BC72473502F9CF679F54DE3B6E8C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: /eztLum6m9cTuoGzljIOCkCLOUuecUXJmD57YyKW2M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c7:24:73:50:2f:9c:f6:79:f5:4d:e3:b6:e8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=1358ce32dee1f1a5265827c7695a64cf86efed04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:a7:0f:af:d9:a2:87:db:e9:5c:3d:c9:e6: f7:4a:f4:15:e5:08:48:f3:43:c0:52:6d:60:54:bb: c1:11:72:f0:04:49:56:78:56:8a:82:03:41:0b:98: 31:f2:bf:6e:85:0f:4f:1f:27:7a:d8:98:3a:e8:97: d4:d3:2d:35:4c:55:51:cd:b5:fa:e1:08:11:28:0e: d1:dc:57:2c:70:2b:30:2e:b5:05:53:81:79:ca:7d: 14:3b:b8:fb:d2:67:16:56:1e:ad:5d:2a:b1:93:fa: e9:44:ab:11:bf:ac:6f:ec:a5:7f:48:a7:73:a8:bf: 8c:5c:38:e5:83:78:dd:61:90:83:a5:b0:69:57:e0: a8:9c:72:c6:7f:7d:42:a1:a1:88:7d:c8:00:7d:e2: 90:04:55:96:eb:54:b1:38:5e:24:8d:9c:df:02:7c: 98:67:c9:06:e2:71:e8:37:ef:00:76:2f:54:3b:0b: 21:40:a5:ac:ff:95:87:e4:ac:a8:c9:6f:a5:78:e8: 69:6e:51:31:8b:01:ba:9c:58:e8:b1:a4:e8:96:fb: a2:f7:92:21:7b:2d:1b:ed:66:50:4e:26:7a:42:82: 31:ee:22:42:2b:89:6d:a6:b8:6e:b1:1e:1c:1b:95: 51:ba:09:4e:c8:71:30:ee:b0:df:95:fc:b3:da:f1: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:CE:32:DE:E1:F1:A5:26:58:27:C7:69:5A:64:CF:86:EF:ED:04 X509v3 Authority Key Identifier: keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a5:ce:d0:a5:ad:86:d1:37:1f:76:91:50:40:6f:7c:eb:e8: 02:fb:b7:ac:58:22:52:c1:bf:00:c6:3b:36:b0:98:d8:37:d3: a2:77:ee:b8:9d:6e:9c:56:ac:1b:48:06:62:d2:03:65:1f:91: 13:58:3e:d3:08:ff:d2:e3:95:f3:5b:ea:62:fc:82:3d:ab:44: dd:fc:c3:18:39:9a:d5:61:7c:53:f5:18:fd:6f:9b:3b:af:b0: 48:65:53:e1:ae:a4:6d:5b:35:74:18:34:f7:ed:7f:47:76:87: 3f:fe:1f:11:d2:50:73:eb:61:33:af:c9:9f:9c:01:d3:c4:ed: d4:90:29:4e:0e:24:89:fc:63:81:ba:6d:db:96:ef:6b:4b:59: c8:e9:27:0d:d7:9e:26:70:b2:42:0c:7e:3c:46:d3:00:62:ff: 1f:89:58:2e:b0:bd:48:85:9f:a4:37:ca:d9:f2:14:30:43:e8: de:5e:23:dd:0c:41:58:d7:74:cf:0a:e9:80:53:e4:68:0a:27: c9:a5:00:5f:8a:a2:c8:9a:2e:d9:54:a2:cf:6e:c4:31:14:6b: c5:f2:86:06:0d:d8:80:52:dc:8b:22:6f:00:71:09:22:e8:e1: 1c:cc:f6:c4:c3:7b:0d:2a:de:02:c5:d0:d9:c7:0f:64:2a:f0: 91:be:4c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8ckc1AvnPZ59U3jtujBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk Y2YwMjgwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EygxMzU4Y2UzMmRlZTFmMWE1MjY1ODI3Yzc2OTVhNjRjZjg2ZWZlZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2mnD6/Zoofb6Vw9yeb3SvQV5QhI 80PAUm1gVLvBEXLwBElWeFaKggNBC5gx8r9uhQ9PHyd62Jg66JfU0y01TFVRzbX6 4QgRKA7R3FcscCswLrUFU4F5yn0UO7j70mcWVh6tXSqxk/rpRKsRv6xv7KV/SKdz qL+MXDjlg3jdYZCDpbBpV+ConHLGf31CoaGIfcgAfeKQBFWW61SxOF4kjZzfAnyY Z8kG4nHoN+8Adi9UOwshQKWs/5WH5KyoyW+leOhpblExiwG6nFjosaTolvui95Ih ey0b7WZQTiZ6QoIx7iJCK4ltprhusR4cG5VRuglOyHEw7rDflfyz2vFEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNYzjLe4fGlJlgnx2laZM+G7+0EMB8GA1UdIwQY MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1 LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKXO0KWt htE3H3aRUEBvfOvoAvu3rFgiUsG/AMY7NrCY2DfTonfuuJ1unFasG0gGYtIDZR+R E1g+0wj/0uOV81vqYvyCPatE3fzDGDma1WF8U/UY/W+bO6+wSGVT4a6kbVs1dBg0 9+1/R3aHP/4fEdJQc+thM6/Jn5wB08Tt1JApTg4kifxjgbpt25bva0tZyOknDdee JnCyQgx+PEbTAGL/H4lYLrC9SIWfpDfK2fIUMEPo3l4j3QxBWNd0zwrpgFPkaAon yaUAX4qiyJou2VSiz27EMRRrxfKGBg3YgFLciyJvAHEJIujhHMz2xMN7DSreAsXQ 2ccPZCrwkb5M9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:38 2025 by rpki-client