This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft File: B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json) Hash identifier: cRki6lRbVLjYh/fk++Na8yBREUplDy/AvanscbLjABI= Subject key identifier: DB:64:CB:8A:61:BA:49:FE:34:1D:CC:C4:03:FB:10:49:31:8A:88:79 Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed Certificate serial: 019B3A9089C742D6C7B80AFF6CD55ADC3D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft Manifest number: 0B74 Signing time: Sat 20 Dec 2025 07:01:49 +0000 Manifest this update: Sat 20 Dec 2025 07:01:49 +0000 Manifest next update: Sun 21 Dec 2025 07:01:49 +0000 Files and hashes: 1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: 3ibHQETDF7LEbEDHqUYpX+EKAjgm8lnHm3sz365OEf0=) 2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:89:c7:42:d6:c7:b8:0a:ff:6c:d5:5a:dc:3d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed Validity Not Before: Dec 20 07:01:49 2025 GMT Not After : Dec 21 07:01:49 2025 GMT Subject: CN=db64cb8a61ba49fe341dccc403fb1049318a8879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:af:56:0c:ae:4d:7c:a1:0a:77:2e:b0:53: 35:c5:91:8c:a5:7a:f6:e7:94:7e:8c:df:31:3d:12: 73:09:db:18:3c:6a:2d:54:63:b7:81:88:ed:e4:ee: 63:c7:5c:2d:8a:86:50:b8:92:b5:f0:3b:8a:3e:bf: cb:12:d5:c7:1e:f6:ef:f8:4d:67:a4:2f:f7:5d:0b: e0:64:82:09:1f:91:ef:4a:a9:56:03:66:fd:38:89: c4:1f:b5:ef:20:7b:dc:71:cc:3b:1d:95:f1:a7:16: 0f:4f:92:16:7e:f2:d5:de:15:6f:95:fa:72:3c:f3: 1e:fe:d1:cd:90:94:bc:d4:bf:8c:e3:21:17:5d:c7: ec:78:8c:9f:eb:97:48:78:41:7e:e0:5e:ee:67:61: f1:46:29:fa:71:06:de:ed:ec:05:e2:bf:93:79:93: db:9e:4f:da:d7:58:cc:3d:e4:7d:7f:fd:24:5e:f2: 91:e5:33:8f:34:9d:d1:c0:67:10:7a:b0:70:c5:9a: 7d:5e:25:a0:ac:e2:7c:0c:7b:5d:0a:3f:3b:42:3f: c9:27:0e:0f:5a:11:d6:42:be:15:1c:22:8e:fc:7d: 56:31:3d:86:e2:db:f3:f8:90:a8:75:1e:20:92:43: 4f:03:fb:9c:e3:c8:60:f0:b4:ca:5b:e1:cc:2b:13: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:CB:8A:61:BA:49:FE:34:1D:CC:C4:03:FB:10:49:31:8A:88:79 X509v3 Authority Key Identifier: keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a1:67:01:b5:50:b0:f2:a4:fa:35:a2:04:47:32:04:30:37: f2:f2:ec:e1:52:48:0f:3e:07:03:27:0f:50:b0:d6:b2:5f:9b: bb:e5:fb:83:e5:c5:f9:45:a7:c5:7d:ac:86:4c:48:44:d2:99: 20:96:67:ee:4d:39:7d:82:c3:5b:90:86:ab:91:2a:59:15:1b: 55:4d:2b:8c:4e:dc:61:4b:6b:0a:1c:75:ce:91:22:ed:2f:90: 0b:7c:d9:71:a8:b6:37:32:7f:6b:ca:d6:d5:15:ac:f1:25:3c: a1:5f:7b:5e:4a:64:f6:54:42:d5:b4:72:84:91:97:0d:44:ca: 27:c2:a0:6c:d1:03:53:39:fd:e4:00:94:a8:34:fe:5c:38:b9: 8a:e1:53:c7:ce:dd:88:57:d9:a1:4d:20:ef:97:e8:e3:8f:b2: f5:11:02:b6:2a:64:35:60:52:d4:5b:7a:b3:c2:34:86:9b:7e: c7:a7:1b:d3:0a:f9:0e:15:2a:41:0d:ae:fd:72:de:01:92:76: 05:5e:88:96:84:9d:9f:e3:e0:73:c7:a1:c0:ab:29:3b:44:71: a9:84:55:66:83:9b:67:51:e5:05:07:9e:55:e2:87:4f:ac:db: 35:c5:98:f0:80:cf:09:8a:5d:6b:64:75:1c:2e:8e:08:26:fd: e3:e0:45:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kInHQtbHuAr/bNVa3D0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjM5NDg0NTMyNTA4NGJiOWVmNzhkNGY3MTdmYzRiNTQ1 ZmE3ZWQwHhcNMjUxMjIwMDcwMTQ5WhcNMjUxMjIxMDcwMTQ5WjAzMTEwLwYDVQQD EyhkYjY0Y2I4YTYxYmE0OWZlMzQxZGNjYzQwM2ZiMTA0OTMxOGE4ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYyvVgyuTXyhCncusFM1xZGMpXr2 55R+jN8xPRJzCdsYPGotVGO3gYjt5O5jx1wtioZQuJK18DuKPr/LEtXHHvbv+E1n pC/3XQvgZIIJH5HvSqlWA2b9OInEH7XvIHvcccw7HZXxpxYPT5IWfvLV3hVvlfpy PPMe/tHNkJS81L+M4yEXXcfseIyf65dIeEF+4F7uZ2HxRin6cQbe7ewF4r+TeZPb nk/a11jMPeR9f/0kXvKR5TOPNJ3RwGcQerBwxZp9XiWgrOJ8DHtdCj87Qj/JJw4P WhHWQr4VHCKO/H1WMT2G4tvz+JCodR4gkkNPA/uc48hg8LTKW+HMKxNhkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtky4phukn+NB3MxAP7EEkxioh5MB8GA1UdIwQY MBaAFAdjlIRTJQhLue941PcX/EtUX6ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQt MzRiN2QxN2ZmNzE1LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQtMzRiN2QxN2ZmNzE1 LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6FnAbVQ sPKk+jWiBEcyBDA38vLs4VJIDz4HAycPULDWsl+bu+X7g+XF+UWnxX2shkxIRNKZ IJZn7k05fYLDW5CGq5EqWRUbVU0rjE7cYUtrChx1zpEi7S+QC3zZcai2NzJ/a8rW 1RWs8SU8oV97Xkpk9lRC1bRyhJGXDUTKJ8KgbNEDUzn95ACUqDT+XDi5iuFTx87d iFfZoU0g75fo44+y9RECtipkNWBS1Ft6s8I0hpt+x6cb0wr5DhUqQQ2u/XLeAZJ2 BV6IloSdn+Pgc8ehwKspO0RxqYRVZoObZ1HlBQeeVeKHT6zbNcWY8IDPCYpda2R1 HC6OCCb94+BFOA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:06 2025 by rpki-client