This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json) Hash identifier: LDmBYEOLAqBd1BrNCsmiD3M1u5ik+8fJ9E2Eni/yTC0= Subject key identifier: F0:9F:49:36:13:0E:AF:CF:8F:DB:54:2B:C5:50:BB:FB:B7:40:40:89 Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e Certificate serial: 019AF3C00DBE20F5CD3833FBDA0D4D1C240E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=) 2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: sRaXdHmqqBqi3vt3+VBczjqrtmUSrOsmEEnLlgC63Tw=) 3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0d:be:20:f5:cd:38:33:fb:da:0d:4d:1c:24:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=f09f4936130eafcf8fdb542bc550bbfbb7404089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:25:37:b2:06:7b:01:d7:4b:87:0d:0a:ac: d8:7a:0f:59:68:36:c4:0e:65:86:99:67:15:c7:af: 7c:46:b0:14:da:b3:8c:be:91:29:c8:05:3e:84:a5: fd:dd:ba:c2:5c:2f:12:1d:22:3f:31:ba:c2:d6:91: e0:11:6a:af:61:fb:3d:7c:14:3c:fb:1a:9b:a3:1f: 30:dd:7b:8e:3c:fb:81:f4:f8:ee:68:e7:63:15:ff: 3d:0a:15:3a:c0:5a:3b:86:7d:f1:7e:6a:9b:a7:3d: 93:dc:97:c8:c7:30:7f:62:52:12:87:ed:ce:48:b2: d3:7a:01:7d:93:20:19:bc:79:d4:a1:dd:e1:4a:dd: 95:12:11:59:36:a2:15:e7:19:08:bd:04:f3:1c:f8: 99:6e:e9:1c:67:8a:fc:d1:85:2d:12:13:f6:bc:98: 8b:4e:ad:13:dc:a3:6a:79:3d:f7:95:c8:ae:e0:a2: 08:28:8b:d8:a6:3a:ac:e4:40:75:a6:d1:c8:f3:2f: 3c:34:ff:ca:94:a3:64:2a:71:8b:f4:e0:b1:bc:89: 47:09:59:86:e6:ca:af:2c:f7:78:53:66:ae:11:79: 7c:72:1b:f3:90:a4:22:ba:85:6b:96:5d:33:71:d3: 37:4c:b8:f3:25:78:38:85:78:fb:9b:a0:30:69:8e: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9F:49:36:13:0E:AF:CF:8F:DB:54:2B:C5:50:BB:FB:B7:40:40:89 X509v3 Authority Key Identifier: keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b9:a5:23:73:cf:b6:42:99:df:bb:8b:bb:0b:f6:3f:18:99: 4a:24:e7:c8:69:82:85:0f:8f:ba:58:59:56:33:a3:1f:21:ff: 21:69:fd:fe:40:4f:55:87:43:61:1e:aa:1f:50:c6:50:9d:18: 65:f3:13:4a:ac:c7:b7:8e:63:1b:c2:e2:97:0a:53:fb:fe:9d: 94:be:7f:c5:61:67:da:c0:a0:0c:2d:85:b0:e3:fe:7e:c3:3e: 15:47:e3:fe:74:21:1e:d3:ef:c6:5c:82:6a:19:fa:19:cd:7f: d9:87:f9:09:a3:7a:29:ae:c7:a7:db:60:d6:8a:61:07:8a:55: d4:a4:28:94:73:42:27:39:37:f8:dd:09:2b:03:0c:2a:a8:b8: 54:84:38:e0:4c:0b:7b:a3:8a:01:cf:6c:63:4a:b4:f0:0f:1f: cf:8a:e8:db:bd:f8:fb:04:6f:47:8e:e5:73:f3:eb:96:b6:23: 68:b7:51:c8:c3:6e:55:21:17:cd:28:d1:e8:e4:7e:69:ea:94: dc:a1:04:78:50:84:6e:c9:11:d8:05:55:4c:84:1f:d1:b1:67: 4c:27:05:0d:55:9d:b6:1f:72:04:5d:ea:c8:13:c0:f5:30:1f: 78:df:05:13:f9:47:c5:e5:5f:2a:64:9a:62:7d:91:30:a0:c5: 12:98:a6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwA2+IPXNODP72g1NHCQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Njg1MTEwNGE5MjE4ZWZmMTczZjQzNGY1NWJkZDI0MjBh YWFlMmUwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD EyhmMDlmNDkzNjEzMGVhZmNmOGZkYjU0MmJjNTUwYmJmYmI3NDA0MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrQlN7IGewHXS4cNCqzYeg9ZaDbE DmWGmWcVx698RrAU2rOMvpEpyAU+hKX93brCXC8SHSI/MbrC1pHgEWqvYfs9fBQ8 +xqbox8w3XuOPPuB9PjuaOdjFf89ChU6wFo7hn3xfmqbpz2T3JfIxzB/YlISh+3O SLLTegF9kyAZvHnUod3hSt2VEhFZNqIV5xkIvQTzHPiZbukcZ4r80YUtEhP2vJiL Tq0T3KNqeT33lciu4KIIKIvYpjqs5EB1ptHI8y88NP/KlKNkKnGL9OCxvIlHCVmG 5sqvLPd4U2auEXl8chvzkKQiuoVrll0zcdM3TLjzJXg4hXj7m6AwaY6NFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCfSTYTDq/Pj9tUK8VQu/u3QECJMB8GA1UdIwQY MBaAFAdoURBKkhjv8XP0NPVb3SQgqq4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEt MDkyZTdhMTZiNzRlLzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEtMDkyZTdhMTZiNzRl LzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7mlI3PP tkKZ37uLuwv2PxiZSiTnyGmChQ+PulhZVjOjHyH/IWn9/kBPVYdDYR6qH1DGUJ0Y ZfMTSqzHt45jG8LilwpT+/6dlL5/xWFn2sCgDC2FsOP+fsM+FUfj/nQhHtPvxlyC ahn6Gc1/2Yf5CaN6Ka7Hp9tg1ophB4pV1KQolHNCJzk3+N0JKwMMKqi4VIQ44EwL e6OKAc9sY0q08A8fz4ro2734+wRvR47lc/PrlrYjaLdRyMNuVSEXzSjR6OR+aeqU 3KEEeFCEbskR2AVVTIQf0bFnTCcFDVWdth9yBF3qyBPA9TAfeN8FE/lHxeVfKmSa Yn2RMKDFEpimgw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:48 2025 by rpki-client