This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json) Hash identifier: CcX2uTCtyPcfGXngWZ0OzhVxxV44NOKxFzAW5XCgdhc= Subject key identifier: F3:EF:C7:AA:8F:66:28:6A:2F:39:97:07:C0:9B:34:B6:8A:DC:48:BC Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Certificate serial: 019AF051B5DD785892AF82EDD039280D4E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft Manifest number: 02AE Signing time: Fri 05 Dec 2025 21:01:18 +0000 Manifest this update: Fri 05 Dec 2025 21:01:18 +0000 Manifest next update: Sat 06 Dec 2025 21:01:18 +0000 Files and hashes: 1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=) 2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: 7kEmaDvq8P9FVkISNK5/Fy3DaWor4BtOZWXFI+6XcQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:b5:dd:78:58:92:af:82:ed:d0:39:28:0d:4e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Validity Not Before: Dec 5 21:01:18 2025 GMT Not After : Dec 6 21:01:18 2025 GMT Subject: CN=f3efc7aa8f66286a2f399707c09b34b68adc48bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:3a:52:e2:32:28:0f:7a:0f:25:1d:04:9b: d7:87:59:5c:57:86:43:6d:9b:a8:bb:f2:c2:5f:b9: 45:b1:7f:0c:bb:5a:38:f1:ac:88:cf:6b:38:5a:1e: 98:37:a7:31:f9:ad:87:f7:2b:c2:de:fd:73:5a:db: 2b:4a:f1:8b:8d:ff:dc:e9:bf:6f:1a:d6:26:55:44: 7c:be:0d:d6:1c:86:f9:d0:61:d8:c3:60:c4:68:7d: ee:fc:c2:31:89:16:68:f9:c8:9d:38:d2:56:62:b3: ec:4d:18:3d:3c:09:22:e4:cf:47:0a:9f:2b:63:e2: 41:82:d9:8d:b6:cf:ab:48:9e:40:41:56:a4:ee:8b: a7:82:b9:20:ec:d0:09:06:60:62:12:7c:78:70:14: 38:c7:3e:bb:18:7d:14:66:f2:e0:66:22:a9:e7:20: 8f:85:87:53:19:38:1d:12:26:f1:fd:e3:82:5e:f9: ee:3a:76:6b:b4:1b:6b:eb:21:08:c2:22:a8:d3:3b: 3b:32:cd:6d:98:a2:76:66:1a:8b:c2:ad:18:60:64: 49:58:68:a3:4e:ae:db:ec:d9:c0:51:bc:51:cc:16: ef:ff:80:42:83:3e:24:5a:97:f1:40:98:d2:6c:bc: 2a:56:68:15:5d:ce:cb:f9:37:b9:0d:05:1f:45:44: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:C7:AA:8F:66:28:6A:2F:39:97:07:C0:9B:34:B6:8A:DC:48:BC X509v3 Authority Key Identifier: keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9a:7b:0c:cc:e8:10:4b:89:e9:8c:6a:44:c3:76:c2:36:63: a0:7a:7a:f9:66:95:a9:b6:8f:c3:b1:fa:fe:73:08:1f:01:e0: 23:e6:47:2e:9e:e2:58:61:61:d0:48:92:a5:5f:c8:30:a0:26: 3f:9a:02:2d:3d:93:8d:dc:f7:c7:cc:36:b6:8e:29:12:25:4c: 4f:d0:d7:69:d0:97:e2:f2:e2:9a:52:21:f0:e1:43:4e:eb:63: 8c:0b:69:f7:e7:50:8e:83:d3:ce:75:1c:e3:88:57:69:93:6d: 20:f6:e3:95:04:94:32:32:08:6d:01:0d:04:93:72:98:ba:23: 31:af:dd:a6:4e:57:b9:00:c0:54:91:b2:c1:ef:d9:1f:5c:0a: 00:89:77:b6:0c:e5:e1:79:fb:69:b7:5c:ee:0a:65:f4:a0:52: 39:86:0d:4a:72:6f:c4:1c:d4:27:cc:ac:79:bf:f2:ed:0f:47: aa:20:08:a7:9e:97:b5:ed:e4:b9:86:51:2e:43:00:be:66:78: 68:1c:8c:c9:77:01:a0:db:2e:ca:d8:7c:e0:d0:e1:c9:83:e6: 93:0c:c5:85:2d:11:ca:7c:b8:d1:51:8b:d3:f2:10:3b:63:36: 09:f3:47:b6:c3:f9:35:f9:1e:a6:4f:93:aa:b7:e3:4f:c8:02: c4:e9:14:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUbXdeFiSr4Lt0DkoDU6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx MDQ4YTUwHhcNMjUxMjA1MjEwMTE4WhcNMjUxMjA2MjEwMTE4WjAzMTEwLwYDVQQD EyhmM2VmYzdhYThmNjYyODZhMmYzOTk3MDdjMDliMzRiNjhhZGM0OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxk6UuIyKA96DyUdBJvXh1lcV4ZD bZuou/LCX7lFsX8Mu1o48ayIz2s4Wh6YN6cx+a2H9yvC3v1zWtsrSvGLjf/c6b9v GtYmVUR8vg3WHIb50GHYw2DEaH3u/MIxiRZo+cidONJWYrPsTRg9PAki5M9HCp8r Y+JBgtmNts+rSJ5AQVak7oungrkg7NAJBmBiEnx4cBQ4xz67GH0UZvLgZiKp5yCP hYdTGTgdEibx/eOCXvnuOnZrtBtr6yEIwiKo0zs7Ms1tmKJ2ZhqLwq0YYGRJWGij Tq7b7NnAUbxRzBbv/4BCgz4kWpfxQJjSbLwqVmgVXc7L+Te5DQUfRUQ78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPvx6qPZihqLzmXB8CbNLaK3Ei8MB8GA1UdIwQY MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5p7DMzo EEuJ6YxqRMN2wjZjoHp6+WaVqbaPw7H6/nMIHwHgI+ZHLp7iWGFh0EiSpV/IMKAm P5oCLT2Tjdz3x8w2to4pEiVMT9DXadCX4vLimlIh8OFDTutjjAtp9+dQjoPTznUc 44hXaZNtIPbjlQSUMjIIbQENBJNymLojMa/dpk5XuQDAVJGywe/ZH1wKAIl3tgzl 4Xn7abdc7gpl9KBSOYYNSnJvxBzUJ8yseb/y7Q9HqiAIp56Xte3kuYZRLkMAvmZ4 aByMyXcBoNsuyth84NDhyYPmkwzFhS0Ryny40VGL0/IQO2M2CfNHtsP5Nfkepk+T qrfjT8gCxOkUww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:13 2025 by rpki-client