This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json) Hash identifier: LlzKi/ethlCQgOAfriqqXGKbTcj3mvS+n9w6dKHZM5g= Subject key identifier: BB:28:DF:48:B7:95:F5:12:B8:CD:45:A8:8F:E5:1F:78:49:2F:E4:8E Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Certificate serial: 019AF209A8A10FD12F4950B10969B4F4CBE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft Manifest number: 1627 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: PcR1i7Ai+AT+oWC3M4jz71A48AoJLxzIiV6tEtfxNr0=) 2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=) 3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a8:a1:0f:d1:2f:49:50:b1:09:69:b4:f4:cb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=bb28df48b795f512b8cd45a88fe51f78492fe48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:f5:42:65:8a:f3:84:5d:c4:ed:d5:3c:7d: 67:48:95:48:f5:29:dd:6a:d9:3c:ea:69:4a:27:d2: 3b:bc:8e:64:f8:ba:ae:63:04:bb:86:f2:d9:94:0b: 76:65:5e:01:dc:4f:ff:c1:e2:4c:6f:e5:78:36:55: 9c:6e:bc:ee:35:d1:a0:45:56:4a:1b:46:23:9b:84: bf:58:73:5d:fe:ed:06:fe:3d:c5:4f:44:ca:95:a6: c8:55:30:f7:e8:69:15:df:a1:36:df:f1:73:73:37: b0:34:56:ce:da:f5:f9:fd:4a:95:77:7e:ce:50:fe: 28:dd:d0:ff:eb:e5:49:44:74:99:4c:c8:30:f4:7c: ec:34:6a:10:0d:b1:fc:13:f1:de:9b:a3:33:9a:64: a6:f6:4d:50:ab:d6:a1:0d:97:fd:29:b2:45:ce:6e: 11:05:bd:db:17:82:5e:99:d3:ad:42:ac:df:0a:f6: 10:c5:cb:9b:ff:36:f5:9c:a9:7a:ba:64:8d:01:cf: 25:52:13:35:9f:66:ca:02:13:68:d3:ce:f0:76:74: a0:11:c0:53:44:58:fe:f0:07:df:1a:29:27:d0:c2: ed:c4:7d:13:90:56:e3:c6:47:b3:49:05:a9:18:b8: 2b:0c:af:14:c9:5e:bd:91:3d:0b:0a:c0:3a:b1:e6: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:DF:48:B7:95:F5:12:B8:CD:45:A8:8F:E5:1F:78:49:2F:E4:8E X509v3 Authority Key Identifier: keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ca:bc:83:af:1c:70:e1:d0:b0:4d:85:1b:74:14:32:36:d6: 40:35:14:c5:f5:b8:9c:df:59:ad:d1:c0:25:5e:58:4a:cc:5c: f2:2f:b9:bb:6a:7a:f5:06:3b:19:19:ac:e1:5e:1d:43:16:70: 27:92:39:7c:9a:04:68:d6:fd:8d:8d:d8:22:c2:4f:e2:c6:cb: 15:2e:16:f6:bd:dc:2b:30:69:1d:91:22:4b:d9:0c:b9:e0:19: 3a:dc:f1:a2:bf:10:87:00:a2:d6:3d:22:10:91:bc:27:0a:78: 3e:5f:40:24:79:3c:20:26:eb:6b:11:69:f4:6e:29:87:dd:f4: 81:95:fe:99:1d:1b:29:37:01:a9:a9:29:29:6b:85:88:2d:6a: e7:cd:03:93:0c:a6:39:a1:5a:fc:b8:3d:d7:e4:09:ce:d0:42: 7a:00:9b:50:d1:7e:3e:21:5e:98:42:71:8a:47:f5:00:4f:e9: d2:b8:e7:b9:c0:00:61:be:f8:d1:d8:01:f7:47:e9:72:84:10: d1:d8:39:93:3b:fa:93:f5:31:d6:19:45:99:e9:6f:fe:e9:31: 78:6f:73:d0:fa:5c:7f:42:67:b3:93:8e:18:8f:ad:ff:52:6a: da:cd:a2:78:c0:0d:a8:a2:80:6d:fd:bd:61:71:6b:4c:9a:52: e5:c8:3d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaihD9EvSVCxCWm09MvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl NTI2ZGIwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EyhiYjI4ZGY0OGI3OTVmNTEyYjhjZDQ1YTg4ZmU1MWY3ODQ5MmZlNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+v1QmWK84RdxO3VPH1nSJVI9Snd atk86mlKJ9I7vI5k+LquYwS7hvLZlAt2ZV4B3E//weJMb+V4NlWcbrzuNdGgRVZK G0Yjm4S/WHNd/u0G/j3FT0TKlabIVTD36GkV36E23/FzczewNFbO2vX5/UqVd37O UP4o3dD/6+VJRHSZTMgw9HzsNGoQDbH8E/Hem6MzmmSm9k1Qq9ahDZf9KbJFzm4R Bb3bF4JemdOtQqzfCvYQxcub/zb1nKl6umSNAc8lUhM1n2bKAhNo087wdnSgEcBT RFj+8AffGikn0MLtxH0TkFbjxkezSQWpGLgrDK8UyV69kT0LCsA6sebBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLso30i3lfUSuM1FqI/lH3hJL+SOMB8GA1UdIwQY MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4 LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcq8g68c cOHQsE2FG3QUMjbWQDUUxfW4nN9ZrdHAJV5YSsxc8i+5u2p69QY7GRms4V4dQxZw J5I5fJoEaNb9jY3YIsJP4sbLFS4W9r3cKzBpHZEiS9kMueAZOtzxor8QhwCi1j0i EJG8Jwp4Pl9AJHk8ICbraxFp9G4ph930gZX+mR0bKTcBqakpKWuFiC1q580Dkwym OaFa/Lg91+QJztBCegCbUNF+PiFemEJxikf1AE/p0rjnucAAYb740dgB90fpcoQQ 0dg5kzv6k/Ux1hlFmelv/ukxeG9z0Ppcf0Jns5OOGI+t/1Jq2s2ieMANqKKAbf29 YXFrTJpS5cg9tg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:05 2025 by rpki-client