This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: 1ZddC1Uxt1OsYzNItJ6kNiqgeEwqv2MzlBHilRoDOR8= Subject key identifier: 89:DD:AE:39:12:71:15:95:4B:4C:C2:0E:B3:1A:9E:8A:D0:A0:39:DD Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019AF2402BC0E5C40E838D47B7FECBF817E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 08BC Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: sRU7MkEL22tw6qDN+X1FwkbZ74G34+9Z+Pp7xecE9VQ=) 2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2b:c0:e5:c4:0e:83:8d:47:b7:fe:cb:f8:17:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=89ddae39127115954b4cc20eb31a9e8ad0a039dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:cd:e5:4d:81:91:cb:74:7a:98:67:f7:b6: f3:c6:52:17:05:88:e5:0a:f4:6e:63:eb:26:f4:e6: 50:c1:0d:ac:d6:80:07:33:d4:d4:24:30:8f:77:bd: 72:9a:73:4b:0c:9a:6f:67:ff:da:df:9c:7d:bf:bd: 58:a8:c4:cf:f9:28:36:6a:34:59:ea:3c:38:fd:ce: 36:77:e4:78:29:99:6d:2a:e1:ee:9d:d3:a4:5d:7d: d7:5e:65:70:53:c2:d1:40:8b:78:d7:55:74:9b:63: ca:c1:c2:15:81:bd:83:3d:71:75:2c:59:41:ef:5c: 8c:b9:c0:6d:32:25:a4:47:2b:0f:4d:12:99:1b:29: cd:c0:85:22:7a:19:f8:fa:1c:35:0c:61:2e:43:98: 55:bd:ab:0a:9c:ad:77:76:68:87:56:c0:69:f8:3b: f6:4b:49:a1:95:de:bd:4d:a7:b4:2e:fe:02:5c:b7: 01:37:15:b1:a3:1a:80:6f:67:67:5e:ff:c6:c1:4c: e1:d0:5f:a2:0d:b9:6e:10:1d:13:73:6b:5e:50:78: c5:6b:a5:b7:8c:1d:23:5c:99:85:79:63:a1:4b:0a: 6a:e9:cb:df:98:cf:fb:1a:df:d9:42:cd:c7:81:88: f4:6d:e0:d3:b4:28:3c:51:5e:2d:eb:59:04:cb:36: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:AE:39:12:71:15:95:4B:4C:C2:0E:B3:1A:9E:8A:D0:A0:39:DD X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:40:eb:c8:fa:48:f2:5e:df:b8:1e:2c:d3:0e:d2:61:90: e8:8c:b2:96:96:f8:89:5b:5b:13:b3:46:6b:e8:d9:9d:6a:bd: 66:ce:dc:2b:90:dd:1b:0c:67:d8:88:fe:f0:39:b3:26:29:c7: 01:4c:a5:5d:24:83:9c:03:5c:92:44:7f:de:07:d3:8d:9e:83: 87:f0:4d:d8:d2:65:8f:7c:6a:c9:af:a9:6e:74:0d:82:82:51: 0f:c5:ee:9c:ea:42:97:92:ac:76:91:8c:e3:ae:bf:cb:9f:d6: 74:c9:f4:50:4c:66:5f:c5:3e:59:df:d4:97:44:2d:8d:d2:f1: 4c:c9:b3:4d:db:28:83:e0:75:6f:1e:05:b5:c8:92:51:89:0e: 61:8e:c8:46:86:76:48:f5:8f:7c:d5:08:07:de:f8:c6:a0:f7: f8:37:63:5e:ed:c0:57:e3:06:68:50:7d:0d:5e:06:33:72:d8: 81:1a:cc:01:9c:1d:e6:5d:96:fc:c6:37:d7:91:d2:92:69:bc: bb:38:83:a1:5e:c5:40:05:d4:fb:49:98:d2:54:b1:6b:0f:31: 9c:33:4b:4f:8a:54:10:27:b2:87:e0:19:9e:d7:91:a2:a0:00: 83:06:51:99:25:77:f4:99:a4:73:46:96:fd:ec:6e:6d:fd:42: ba:ed:a3:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCvA5cQOg41Ht/7L+BfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD Eyg4OWRkYWUzOTEyNzExNTk1NGI0Y2MyMGViMzFhOWU4YWQwYTAzOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqefN5U2Bkct0ephn97bzxlIXBYjl CvRuY+sm9OZQwQ2s1oAHM9TUJDCPd71ymnNLDJpvZ//a35x9v71YqMTP+Sg2ajRZ 6jw4/c42d+R4KZltKuHundOkXX3XXmVwU8LRQIt411V0m2PKwcIVgb2DPXF1LFlB 71yMucBtMiWkRysPTRKZGynNwIUiehn4+hw1DGEuQ5hVvasKnK13dmiHVsBp+Dv2 S0mhld69Tae0Lv4CXLcBNxWxoxqAb2dnXv/GwUzh0F+iDbluEB0Tc2teUHjFa6W3 jB0jXJmFeWOhSwpq6cvfmM/7Gt/ZQs3HgYj0beDTtCg8UV4t61kEyzbCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIndrjkScRWVS0zCDrManorQoDndMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+5A68j6 SPJe37geLNMO0mGQ6Iyylpb4iVtbE7NGa+jZnWq9Zs7cK5DdGwxn2Ij+8DmzJinH AUylXSSDnANckkR/3gfTjZ6Dh/BN2NJlj3xqya+pbnQNgoJRD8XunOpCl5KsdpGM 466/y5/WdMn0UExmX8U+Wd/Ul0QtjdLxTMmzTdsog+B1bx4FtciSUYkOYY7IRoZ2 SPWPfNUIB974xqD3+DdjXu3AV+MGaFB9DV4GM3LYgRrMAZwd5l2W/MY315HSkmm8 uziDoV7FQAXU+0mY0lSxaw8xnDNLT4pUECeyh+AZnteRoqAAgwZRmSV39Jmkc0aW /exubf1Cuu2jqw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:33 2025 by rpki-client