This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json) Hash identifier: jVgdLAKVRgzoJefoflN6iCXhtcfeUO5opPhrWUrfnV4= Subject key identifier: B0:A1:87:45:77:7E:9A:2E:D6:2F:84:2B:AC:B8:F5:B9:0E:A8:A1:BB Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Certificate serial: 019AF49BB9715AA97A414D8CA4235A4F6CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: gNdlmTUU9Q21A3SNZ4MonLDoPgmZCJEzG7taNFalMdc=) 2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b9:71:5a:a9:7a:41:4d:8c:a4:23:5a:4f:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=b0a18745777e9a2ed62f842bacb8f5b90ea8a1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:0d:e4:e1:02:e9:89:d3:7e:68:aa:b8:19: 13:11:6e:ca:e4:ba:ce:20:ef:8b:8a:4d:54:d5:f2: c0:49:27:99:17:65:d2:c2:73:2d:7b:7f:38:ce:a6: 27:0a:a1:7a:28:3e:c4:86:8a:2c:1e:05:ca:f3:ae: 72:2b:8a:d5:45:dc:a7:5c:d6:cc:d3:bb:53:0e:26: 97:46:c1:23:6d:7d:70:ed:05:7f:3a:4f:6c:0e:05: d1:5f:bf:d5:ac:32:b5:ea:85:da:d4:fc:0c:1d:19: ec:7c:13:f8:f2:88:8e:cd:b5:63:61:97:30:2d:6b: a4:d4:58:11:29:b7:6f:c1:ee:02:29:0f:a1:bd:78: b7:3b:25:db:71:df:b0:d5:23:5e:0f:ee:a5:7a:bc: 7d:f9:66:cc:13:66:fe:02:5c:9b:e4:19:64:c5:90: c8:1a:76:19:fc:97:cb:b9:09:93:da:64:cd:69:03: 58:f1:23:95:98:d0:c8:8b:a2:f4:d2:b0:38:34:3f: 82:64:aa:95:3c:85:ed:f0:bf:49:bc:d6:f2:e0:7a: 9c:e1:d8:c6:1c:b2:6c:d2:01:78:97:1a:8f:27:e7: 15:f0:c5:c6:51:ef:98:81:73:ae:2e:14:d2:89:49: 0e:c5:86:eb:24:b1:8e:fc:7e:af:27:f4:03:33:82: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A1:87:45:77:7E:9A:2E:D6:2F:84:2B:AC:B8:F5:B9:0E:A8:A1:BB X509v3 Authority Key Identifier: keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c5:3a:d2:a2:64:05:8f:02:2c:87:66:5a:8f:37:19:fb:30: 61:78:2e:7d:6d:ff:64:9c:61:ce:e2:20:cb:41:f7:63:55:d8: f9:5f:ed:31:02:ee:2c:54:0a:9e:3a:d6:f0:6d:21:fe:ee:fb: ee:0c:10:60:89:47:a8:e7:30:79:d1:6e:d2:1c:4e:70:c8:98: 57:90:ae:ca:ec:cd:cc:2f:f6:56:6d:a4:6c:f0:e0:79:bc:5a: 1d:d1:e2:6d:8c:6c:ae:99:7f:99:f3:7c:e7:6d:6b:39:84:b6: a2:fb:fd:7d:c5:67:fd:13:1c:96:cd:a4:c8:3b:5b:f6:6f:f8: b0:ff:6e:69:97:db:44:eb:2c:88:42:99:84:ac:09:75:43:68: 9a:c2:ce:63:27:db:ce:89:d4:ac:68:e7:6c:b5:bb:f6:c6:9c: dc:cd:3b:04:c1:65:58:af:ac:ae:0f:0f:3f:22:b9:29:00:fa: 81:1d:64:63:6f:c6:8d:d2:22:13:85:6a:c1:20:b8:26:bf:e1: 25:2b:38:26:5e:e8:d2:a4:bd:f0:87:1c:33:02:05:bd:56:e3: 2d:eb:67:ad:99:5b:95:12:b9:8d:ea:6b:df:13:c4:3b:b9:5b: 5f:f3:aa:1c:c6:aa:ae:98:31:f5:89:a5:65:9a:a8:d2:b1:c9: 3e:d6:80:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7lxWql6QU2MpCNaT2zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk Nzg2ZTcwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD EyhiMGExODc0NTc3N2U5YTJlZDYyZjg0MmJhY2I4ZjViOTBlYThhMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jYN5OEC6YnTfmiquBkTEW7K5LrO IO+Lik1U1fLASSeZF2XSwnMte384zqYnCqF6KD7EhoosHgXK865yK4rVRdynXNbM 07tTDiaXRsEjbX1w7QV/Ok9sDgXRX7/VrDK16oXa1PwMHRnsfBP48oiOzbVjYZcw LWuk1FgRKbdvwe4CKQ+hvXi3OyXbcd+w1SNeD+6lerx9+WbME2b+Alyb5BlkxZDI GnYZ/JfLuQmT2mTNaQNY8SOVmNDIi6L00rA4ND+CZKqVPIXt8L9JvNby4Hqc4djG HLJs0gF4lxqPJ+cV8MXGUe+YgXOuLhTSiUkOxYbrJLGO/H6vJ/QDM4LbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLChh0V3fpou1i+EK6y49bkOqKG7MB8GA1UdIwQY MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsU60qJk BY8CLIdmWo83GfswYXgufW3/ZJxhzuIgy0H3Y1XY+V/tMQLuLFQKnjrW8G0h/u77 7gwQYIlHqOcwedFu0hxOcMiYV5CuyuzNzC/2Vm2kbPDgebxaHdHibYxsrpl/mfN8 521rOYS2ovv9fcVn/RMcls2kyDtb9m/4sP9uaZfbROssiEKZhKwJdUNomsLOYyfb zonUrGjnbLW79sac3M07BMFlWK+srg8PPyK5KQD6gR1kY2/GjdIiE4VqwSC4Jr/h JSs4Jl7o0qS98IccMwIFvVbjLetnrZlblRK5jepr3xPEO7lbX/OqHMaqrpgx9Yml ZZqo0rHJPtaAQw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:54 2025 by rpki-client