This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json) Hash identifier: 8m/3LVSMlTJpD810XYKm5McpE2uaInkGAJXMq9RdQPQ= Subject key identifier: EE:BB:8C:C1:C9:28:70:7F:3D:FE:D9:54:0F:2D:F2:8C:D0:02:E7:FB Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Certificate serial: 019AF209125D0409A699E771A91CD2959CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft Manifest number: 0B25 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: 26swJmIEt4sAXA+CqFDd46S/8OLLsUjtNS9aPPgKXB8=) 2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:12:5d:04:09:a6:99:e7:71:a9:1c:d2:95:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=eebb8cc1c928707f3dfed9540f2df28cd002e7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:b0:5f:e4:0b:61:eb:0d:fd:64:ad:b2:90: c2:2a:86:50:ce:75:58:cd:7b:80:66:44:9b:02:ac: a4:66:29:3e:90:52:4e:cd:ef:bd:32:61:d8:76:04: b9:05:38:ec:d8:fe:41:02:6e:d2:83:a9:4d:0e:db: bc:f8:d8:d8:76:04:b9:37:98:e8:5f:60:3e:fa:a0: dd:a2:26:4a:e9:19:db:b3:4f:f8:ec:78:b9:60:58: d4:4f:92:d1:cd:26:94:35:58:d9:fe:3c:31:28:26: 58:17:95:89:4b:b7:ba:bb:b7:14:53:22:bc:22:24: 56:13:60:a7:e1:a1:57:02:38:b6:11:99:9c:6a:6c: e7:2b:9f:36:a2:b0:4f:bf:d0:63:73:d5:56:e7:7b: 42:e9:68:c4:d3:18:14:42:98:28:8d:8d:df:ff:ea: 05:2f:03:35:da:ed:de:95:69:c2:11:ee:99:d4:01: 5f:f1:98:4a:ca:1f:0f:77:7f:b1:b2:ad:b0:b9:f9: e4:25:01:d7:f0:c1:4b:1a:a8:69:ee:28:02:e3:4b: d8:70:82:7e:36:90:9a:3d:04:25:81:ae:be:59:3e: 1c:7c:5a:bb:d8:2e:fe:ec:dc:1b:bc:b0:75:9b:ab: ea:43:8f:9e:0f:48:00:68:b4:02:3c:d8:73:21:ae: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BB:8C:C1:C9:28:70:7F:3D:FE:D9:54:0F:2D:F2:8C:D0:02:E7:FB X509v3 Authority Key Identifier: keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:33:7f:23:bb:41:c2:7d:84:28:b7:f6:4c:5c:2f:09:19:ff: 73:59:70:ed:be:a6:13:3f:5f:84:7b:ec:30:f9:3b:ea:8e:49: a2:33:4e:74:fa:25:bc:85:22:98:f7:31:58:4b:ae:7e:b9:5a: 3f:71:05:14:55:2b:d0:d8:c8:9f:7d:04:9f:50:08:44:f2:7a: 52:33:10:bd:7b:db:f1:11:61:b7:63:0d:e1:f9:f2:4f:23:45: 61:56:ee:84:9a:90:cb:e5:c7:f1:c6:0b:90:a3:9c:e2:90:7e: 70:26:7b:d7:4e:52:ac:68:85:43:cd:d8:d6:0a:9e:c6:9f:8c: 93:06:e1:23:32:10:fd:27:0c:12:f3:94:30:79:5a:92:3c:f7: ad:f5:0f:a0:b2:0f:d1:7a:1d:fb:04:50:94:8b:72:a5:12:b6: e4:d2:78:8a:c4:44:66:21:66:89:36:f4:d7:04:00:a5:f2:65: 96:3b:40:0c:2e:e6:8f:7d:8a:d0:97:d0:9e:b7:c1:6f:c9:9e: e3:63:78:ec:c6:ff:24:25:97:11:a7:ea:91:0d:6c:fb:7f:07: 1b:7f:7c:f7:bc:89:92:81:fb:2a:bb:ce:87:bc:0a:90:79:e1: 15:38:d7:c5:88:3e:35:a5:25:8b:70:6a:77:0e:32:06:05:c3: 61:e1:96:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRJdBAmmmedxqRzSlZzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4 YzlhMjQwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EyhlZWJiOGNjMWM5Mjg3MDdmM2RmZWQ5NTQwZjJkZjI4Y2QwMDJlN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJywX+QLYesN/WStspDCKoZQznVY zXuAZkSbAqykZik+kFJOze+9MmHYdgS5BTjs2P5BAm7Sg6lNDtu8+NjYdgS5N5jo X2A++qDdoiZK6Rnbs0/47Hi5YFjUT5LRzSaUNVjZ/jwxKCZYF5WJS7e6u7cUUyK8 IiRWE2Cn4aFXAji2EZmcamznK582orBPv9Bjc9VW53tC6WjE0xgUQpgojY3f/+oF LwM12u3elWnCEe6Z1AFf8ZhKyh8Pd3+xsq2wufnkJQHX8MFLGqhp7igC40vYcIJ+ NpCaPQQlga6+WT4cfFq72C7+7NwbvLB1m6vqQ4+eD0gAaLQCPNhzIa7PTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO67jMHJKHB/Pf7ZVA8t8ozQAuf7MB8GA1UdIwQY MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDN/I7tB wn2EKLf2TFwvCRn/c1lw7b6mEz9fhHvsMPk76o5JojNOdPolvIUimPcxWEuufrla P3EFFFUr0NjIn30En1AIRPJ6UjMQvXvb8RFht2MN4fnyTyNFYVbuhJqQy+XH8cYL kKOc4pB+cCZ7105SrGiFQ83Y1gqexp+MkwbhIzIQ/ScMEvOUMHlakjz3rfUPoLIP 0Xod+wRQlItypRK25NJ4isREZiFmiTb01wQApfJlljtADC7mj32K0JfQnrfBb8me 42N47Mb/JCWXEafqkQ1s+38HG39897yJkoH7KrvOh7wKkHnhFTjXxYg+NaUli3Bq dw4yBgXDYeGWRg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:51 2025 by rpki-client