This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json) Hash identifier: enntsuCuZmR3prch3nZDxgyWnGU8WUssAPb1FpjcDMg= Subject key identifier: 68:09:F9:79:ED:40:0F:E5:5C:5A:2F:0B:02:4F:5F:4D:41:B0:BE:FD Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29 Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029 Certificate serial: 019B2E1DA62156D4824F5653981DE211E192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft Manifest number: 0B8E Signing time: Wed 17 Dec 2025 21:00:53 +0000 Manifest this update: Wed 17 Dec 2025 21:00:53 +0000 Manifest next update: Thu 18 Dec 2025 21:00:53 +0000 Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=) 2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: VAVLqstbb06NNypkQ6EJJ4qJEsvRahaupZZ8tc5iCeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:a6:21:56:d4:82:4f:56:53:98:1d:e2:11:e1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029 Validity Not Before: Dec 17 21:00:53 2025 GMT Not After : Dec 18 21:00:53 2025 GMT Subject: CN=6809f979ed400fe55c5a2f0b024f5f4d41b0befd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:9c:aa:42:03:c1:7a:66:79:e8:9f:37:b1: 77:1f:a6:cd:6d:a4:93:d4:3f:62:eb:47:e0:c3:36: dc:1a:f9:6d:c8:0c:ee:bd:30:12:7d:f9:4f:82:87: fb:04:33:b1:58:71:81:c6:a3:7d:98:b7:a7:e2:73: 82:81:57:05:c8:7f:72:da:98:c5:03:86:b1:ea:90: f5:b7:09:2c:81:db:8d:c7:75:10:a0:26:19:88:28: f2:c8:13:d0:cf:1d:7c:4b:67:d9:0b:f9:24:a6:40: 09:92:97:e4:88:1e:a5:36:af:17:04:c2:5a:1c:91: 7b:34:a6:c1:be:0e:8a:a5:9e:45:20:d9:eb:32:94: 13:ef:c8:3d:fb:49:85:65:94:4b:df:cd:0f:ce:7e: 59:94:81:8d:29:3e:0c:6f:c0:5f:7a:e7:36:9c:b7: cc:c3:85:e6:83:ff:b2:ec:c2:b6:81:02:61:8f:4e: 02:12:45:23:c0:3d:90:42:50:28:67:a3:a1:27:a6: 5a:4e:ee:f9:78:65:e0:d2:db:82:c5:a8:a3:bd:ea: 6e:f7:0b:7c:c0:b6:31:fe:3b:90:56:18:4c:e5:57: 1f:17:17:fd:84:53:26:7b:e8:bf:c3:38:e9:18:31: 2c:44:ef:ae:70:c1:22:bd:30:f8:68:79:b3:b1:08: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:F9:79:ED:40:0F:E5:5C:5A:2F:0B:02:4F:5F:4D:41:B0:BE:FD X509v3 Authority Key Identifier: keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:53:a7:24:f1:73:17:41:ca:7e:e8:00:9c:82:77:e7:b7:47: f9:e1:b3:bc:66:11:c0:68:74:26:18:f6:6f:73:92:a9:01:02: 9e:91:60:3a:29:f7:df:db:73:a6:0a:c5:a4:c7:fb:97:b1:e3: 2f:90:b8:1e:e3:7f:8b:f7:4d:3c:10:ee:dd:17:77:2b:df:c0: dc:84:09:fc:e4:dd:49:2c:53:e9:d8:15:3e:82:85:5f:ef:4e: dc:fe:4d:b1:4f:57:97:88:af:1e:02:fc:32:f1:23:0a:92:0a: f0:f9:d9:27:82:8e:4f:44:54:52:9e:0d:9c:eb:8c:af:dd:ff: f0:71:68:ed:06:6b:17:1c:3b:0f:de:34:e0:80:73:59:94:40: 49:25:fb:0d:61:03:10:78:bc:e7:26:f9:d4:78:b9:4b:10:71: 50:3a:c8:ea:67:78:dc:7f:22:b7:18:d0:97:f6:32:45:69:ef: 45:bc:26:a6:39:db:64:9e:64:b4:bf:56:20:49:80:ea:88:df: b3:08:73:92:3e:e4:c6:d7:71:00:81:5d:df:12:40:eb:46:a9: 38:98:29:3b:53:65:22:3b:04:58:99:24:0a:61:53:8a:8c:6d: df:3a:d0:27:39:2d:de:b2:70:8b:2b:db:89:cf:da:13:3e:be: 4b:8b:79:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHaYhVtSCT1ZTmB3iEeGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGU0NDBjMTRkOTc2NjUwM2NiNWM5MWI5NTBiODEwNjJk MTEwMjkwHhcNMjUxMjE3MjEwMDUzWhcNMjUxMjE4MjEwMDUzWjAzMTEwLwYDVQQD Eyg2ODA5Zjk3OWVkNDAwZmU1NWM1YTJmMGIwMjRmNWY0ZDQxYjBiZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NGcqkIDwXpmeeifN7F3H6bNbaST 1D9i60fgwzbcGvltyAzuvTASfflPgof7BDOxWHGBxqN9mLen4nOCgVcFyH9y2pjF A4ax6pD1twksgduNx3UQoCYZiCjyyBPQzx18S2fZC/kkpkAJkpfkiB6lNq8XBMJa HJF7NKbBvg6KpZ5FINnrMpQT78g9+0mFZZRL380Pzn5ZlIGNKT4Mb8Bfeuc2nLfM w4Xmg/+y7MK2gQJhj04CEkUjwD2QQlAoZ6OhJ6ZaTu75eGXg0tuCxaijvepu9wt8 wLYx/juQVhhM5VcfFxf9hFMme+i/wzjpGDEsRO+ucMEivTD4aHmzsQiacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgJ+XntQA/lXFovCwJPX01BsL79MB8GA1UdIwQY MBaAFG/eRAwU2XZlA8tckblQuBBi0RApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUt OTgxMjhlZWEzYTY1LzEvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUtOTgxMjhlZWEzYTY1 LzEvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFOnJPFz F0HKfugAnIJ357dH+eGzvGYRwGh0Jhj2b3OSqQECnpFgOin339tzpgrFpMf7l7Hj L5C4HuN/i/dNPBDu3Rd3K9/A3IQJ/OTdSSxT6dgVPoKFX+9O3P5NsU9Xl4ivHgL8 MvEjCpIK8PnZJ4KOT0RUUp4NnOuMr93/8HFo7QZrFxw7D9404IBzWZRASSX7DWED EHi85yb51Hi5SxBxUDrI6md43H8itxjQl/YyRWnvRbwmpjnbZJ5ktL9WIEmA6ojf swhzkj7kxtdxAIFd3xJA60apOJgpO1NlIjsEWJkkCmFTioxt3zrQJzkt3rJwiyvb ic/aEz6+S4t55w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:42 2025 by rpki-client