This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json) Hash identifier: Rmu3TKLDuXAOvKLCmPIsDSeXqVQe45Ys/Xq5DeNs69Y= Subject key identifier: 45:59:78:20:EA:9A:D3:0B:02:09:D3:D1:14:CA:5C:AD:A8:F5:7C:7A Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31 Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31 Certificate serial: 019AF19B3C28FE4CF0E5D7D0E0686A472121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft Manifest number: 0792 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=) 2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: oj4vA/k9QRZrA8vGn1AFDWSinOeU8YQP8o2VL+QrkCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3c:28:fe:4c:f0:e5:d7:d0:e0:68:6a:47:21:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=45597820ea9ad30b0209d3d114ca5cada8f57c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:22:7e:ef:69:27:90:3d:27:fe:5d:50:e9: 01:8b:4c:60:f5:49:92:82:8b:c4:53:49:76:28:9a: 7a:a7:ad:82:9b:fc:2a:a0:4a:28:ce:a4:f5:12:13: 81:b6:8e:40:73:99:02:60:13:fd:d5:bc:ed:48:c4: 99:0f:6e:69:19:49:d3:3e:d9:c3:74:09:ab:23:57: df:9e:fd:22:4a:59:1a:e3:3f:b2:72:8a:57:f5:f1: 07:93:0f:d2:d2:63:3c:11:1d:1d:af:40:13:08:68: ef:e5:a5:11:9c:3b:14:8f:92:9c:ba:34:0b:48:3f: 0c:ed:95:5b:44:cb:32:0f:71:3b:67:1e:05:51:34: a6:89:2a:eb:1b:8d:55:90:79:8c:b9:47:8e:64:59: 3f:f7:8b:22:a3:1e:5b:d1:22:5f:1a:3f:ed:d3:43: 71:0d:d0:42:5f:8d:e8:0d:9e:eb:47:5f:03:9f:e3: e1:f5:f9:38:8b:63:74:3c:b6:dc:6b:62:96:76:18: 75:3b:00:49:19:e1:f7:90:7a:98:4c:01:7e:0b:4c: 7b:e8:a1:5a:57:2f:ce:95:4a:f2:d9:7b:36:db:4c: fe:60:a6:8f:bf:ec:df:b8:38:93:9e:05:40:5a:5b: 45:be:92:38:b7:f9:90:73:09:03:26:82:f3:12:c9: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:78:20:EA:9A:D3:0B:02:09:D3:D1:14:CA:5C:AD:A8:F5:7C:7A X509v3 Authority Key Identifier: keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:16:09:2b:23:fc:f3:7a:f3:a9:aa:0a:75:d5:44:57:60: 05:fa:42:30:fa:28:a1:4e:c1:0e:f3:fc:a2:6f:33:c4:99:43: 78:be:57:56:5b:4e:c2:c5:bb:9d:d2:e7:81:f2:c0:4b:71:c7: 28:49:7c:56:21:37:b1:bb:2c:3e:65:16:a2:57:18:54:81:06: 88:bb:e4:78:0f:15:37:38:32:c1:c0:95:b0:2e:9d:70:db:ba: bb:cc:7b:70:2f:c4:9b:19:a7:0a:23:61:56:3f:34:f7:93:f1: f9:27:fe:13:cc:e8:ae:42:7a:17:98:53:d0:15:79:01:4d:dc: ab:aa:9c:f3:82:f9:38:76:8c:29:3b:38:fa:1d:d6:34:46:3d: ea:92:f8:7d:90:9e:d1:ab:27:ca:7c:b8:92:c3:7e:d5:6a:f4: fc:1e:a8:d9:06:5b:e5:b7:d9:6d:c4:78:84:d2:23:96:12:e8: 84:9e:f2:93:fd:e4:a6:3f:61:ac:f0:ea:5d:f9:a6:b0:5f:9d: 1e:90:f3:1f:0f:a2:e4:0c:38:72:64:b1:42:ef:93:04:ad:a1: c0:9f:a4:c3:84:7c:7b:3d:b5:85:ad:7b:e5:82:ce:e6:f7:c8: 18:88:49:d9:5a:0e:b9:81:d9:a1:f2:72:ea:4c:fe:c0:df:60: 14:33:9d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzwo/kzw5dfQ4GhqRyEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNmEyOGI4NWI5MTc5ODIwNzJiOWY0ZjQwNmQ3ZWIwOTk5 MTNhMzEwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg0NTU5NzgyMGVhOWFkMzBiMDIwOWQzZDExNGNhNWNhZGE4ZjU3YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKsifu9pJ5A9J/5dUOkBi0xg9UmS govEU0l2KJp6p62Cm/wqoEoozqT1EhOBto5Ac5kCYBP91bztSMSZD25pGUnTPtnD dAmrI1ffnv0iSlka4z+ycopX9fEHkw/S0mM8ER0dr0ATCGjv5aURnDsUj5KcujQL SD8M7ZVbRMsyD3E7Zx4FUTSmiSrrG41VkHmMuUeOZFk/94siox5b0SJfGj/t00Nx DdBCX43oDZ7rR18Dn+Ph9fk4i2N0PLbca2KWdhh1OwBJGeH3kHqYTAF+C0x76KFa Vy/OlUry2Xs220z+YKaPv+zfuDiTngVAWltFvpI4t/mQcwkDJoLzEsl6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVZeCDqmtMLAgnT0RTKXK2o9Xx6MB8GA1UdIwQY MBaAFG9qKLhbkXmCByufT0BtfrCZkToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMt NzQxZDA4OThkYTRlLzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMtNzQxZDA4OThkYTRl LzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbEWCSsj /PN686mqCnXVRFdgBfpCMPoooU7BDvP8om8zxJlDeL5XVltOwsW7ndLngfLAS3HH KEl8ViE3sbssPmUWolcYVIEGiLvkeA8VNzgywcCVsC6dcNu6u8x7cC/EmxmnCiNh Vj8095Px+Sf+E8zorkJ6F5hT0BV5AU3cq6qc84L5OHaMKTs4+h3WNEY96pL4fZCe 0asnyny4ksN+1Wr0/B6o2QZb5bfZbcR4hNIjlhLohJ7yk/3kpj9hrPDqXfmmsF+d HpDzHw+i5Aw4cmSxQu+TBK2hwJ+kw4R8ez21ha175YLO5vfIGIhJ2VoOuYHZofJy 6kz+wN9gFDOdUg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:09 2025 by rpki-client