This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft File: b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json) Hash identifier: XfNwJlFJF+5Ud3zUd2Pd7OBSeUkXCffQkAFtjJ4Dcoo= Subject key identifier: DB:41:2C:38:AC:14:00:7E:6F:A4:D5:A7:65:C5:03:0F:2C:55:4A:2D Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019AF08880021FCB6643B6ECBA13CD88348C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft Manifest number: 112F Signing time: Fri 05 Dec 2025 22:01:08 +0000 Manifest this update: Fri 05 Dec 2025 22:01:08 +0000 Manifest next update: Sat 06 Dec 2025 22:01:08 +0000 Files and hashes: 1: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: lnPeMhjkgsRXy2krRrWEnwk1dsvim5pM+KBZgMNP6iE=) 2: exWn383Me8YqefkEkqOEr7GA0lc.roa (hash: 8G5LjurjltQVZ/Cei3JUqckWZBdyjOdLypvjmgHtD9Q=) 3: j8hnOgwPyOJJER9yhbqnSy6j-6E.roa (hash: OSveZybS9oVkY+wpn3hX+0Fo2xDMcVDw4ufaSD54UIM=) 4: phl5ADT4JOxw9LjD_howBB9yfb0.roa (hash: 82y/mhEJRV2o/QC0q9OGEvAp2yixVnuDKDU0FyYM5oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:80:02:1f:cb:66:43:b6:ec:ba:13:cd:88:34:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Dec 5 22:01:08 2025 GMT Not After : Dec 6 22:01:08 2025 GMT Subject: CN=db412c38ac14007e6fa4d5a765c5030f2c554a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:df:ec:25:ef:aa:bc:1f:26:73:70:7b:97: cb:fd:e4:35:3d:08:2e:29:43:ae:99:34:2a:cd:2e: 36:60:9b:63:9d:cf:a4:75:21:f4:5c:05:36:bc:f9: bf:67:29:9f:3b:e3:a1:b1:82:7d:d6:b1:6b:51:b1: 09:ff:03:f0:fc:d0:a4:bd:31:79:40:ea:e8:b9:77: d5:c9:13:b1:9e:45:ce:2f:7f:94:b6:2f:a6:2d:1e: 62:dc:a1:2b:3d:a2:64:1c:8e:12:95:02:74:ea:48: d3:f7:6f:5b:99:52:17:31:0e:55:65:e4:cf:34:03: c7:c2:5a:7c:be:60:99:ca:f0:f3:8e:70:58:ce:13: 01:b4:0f:2e:c8:40:45:7d:99:d7:07:b8:c4:6a:9a: 72:9f:01:06:76:3e:86:82:70:79:75:5c:16:3b:18: a8:87:42:de:f7:df:d0:18:62:09:67:28:92:1d:24: f3:23:6d:04:b3:80:58:4c:9e:80:65:79:0a:37:d7: 60:80:5c:78:ba:c8:52:04:e4:66:3b:c2:2b:b2:82: 22:bf:f5:d8:88:7b:22:12:bf:f0:45:18:0a:d0:21: 88:1c:63:d1:23:b6:5e:7e:8f:a5:92:2a:4f:ee:e6: 48:7c:af:7c:f0:4c:4d:18:f3:c8:e4:7c:c3:e7:fc: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:41:2C:38:AC:14:00:7E:6F:A4:D5:A7:65:C5:03:0F:2C:55:4A:2D X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:6c:f1:95:ba:58:8c:0e:43:65:cd:9c:29:f7:16:92:31: ca:05:be:28:8f:4c:6c:6b:aa:bd:e3:a6:de:bf:cc:69:ba:27: 1c:14:65:e9:2f:6d:32:91:e9:1f:ef:c9:87:25:59:79:11:08: 0f:05:24:d2:9a:a4:86:c4:74:e2:13:d3:bc:e7:df:d6:50:c3: 86:32:d4:75:28:75:e3:49:44:1a:f3:e1:3c:f5:80:cd:3b:56: f2:91:b1:e6:ae:78:51:78:cd:39:7f:ed:54:5c:bb:da:b6:b1: 2b:80:a3:dd:ac:c6:1d:8a:c2:1f:4f:74:59:6a:63:ba:59:94: 8f:fa:ea:7e:b4:a6:6a:5e:77:a7:9a:ea:91:7f:12:8f:ca:20: 74:ab:41:d7:0f:52:fe:3f:74:bb:b4:01:1a:60:82:3b:14:b4: 83:a0:59:3a:6a:d5:2a:62:14:a5:05:86:ba:86:39:f0:92:e0: 57:87:4a:34:da:97:98:d2:25:2d:51:e5:42:70:de:9c:78:0e: 6b:a3:5d:39:2f:88:b2:8c:fa:c1:b9:82:43:7e:96:9e:06:46: 93:8c:82:20:b4:d2:ac:5a:2d:35:14:3d:40:f6:a7:1c:85:1f: 1b:98:74:a0:9c:ab:1d:32:78:a8:e4:1c:0e:b2:ad:42:43:9d: e0:db:50:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIACH8tmQ7bsuhPNiDSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjUxMjA1MjIwMTA4WhcNMjUxMjA2MjIwMTA4WjAzMTEwLwYDVQQD EyhkYjQxMmMzOGFjMTQwMDdlNmZhNGQ1YTc2NWM1MDMwZjJjNTU0YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEDf7CXvqrwfJnNwe5fL/eQ1PQgu KUOumTQqzS42YJtjnc+kdSH0XAU2vPm/ZymfO+OhsYJ91rFrUbEJ/wPw/NCkvTF5 QOrouXfVyROxnkXOL3+Uti+mLR5i3KErPaJkHI4SlQJ06kjT929bmVIXMQ5VZeTP NAPHwlp8vmCZyvDzjnBYzhMBtA8uyEBFfZnXB7jEappynwEGdj6GgnB5dVwWOxio h0Le99/QGGIJZyiSHSTzI20Es4BYTJ6AZXkKN9dggFx4ushSBORmO8IrsoIiv/XY iHsiEr/wRRgK0CGIHGPRI7Zefo+lkipP7uZIfK988ExNGPPI5HzD5/xRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtBLDisFAB+b6TVp2XFAw8sVUotMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdVs8ZW6 WIwOQ2XNnCn3FpIxygW+KI9MbGuqveOm3r/MabonHBRl6S9tMpHpH+/JhyVZeREI DwUk0pqkhsR04hPTvOff1lDDhjLUdSh140lEGvPhPPWAzTtW8pGx5q54UXjNOX/t VFy72raxK4Cj3azGHYrCH090WWpjulmUj/rqfrSmal53p5rqkX8Sj8ogdKtB1w9S /j90u7QBGmCCOxS0g6BZOmrVKmIUpQWGuoY58JLgV4dKNNqXmNIlLVHlQnDenHgO a6NdOS+Isoz6wbmCQ36WngZGk4yCILTSrFotNRQ9QPanHIUfG5h0oJyrHTJ4qOQc DrKtQkOd4NtQAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:49 2025 by rpki-client