This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft File: B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json) Hash identifier: zz+fIh5/Wyremqqn1FTJdTc9ydOMfq8Yf0Zd6nSjbiA= Subject key identifier: 8F:B8:04:6C:F9:23:09:86:23:7F:98:DD:FF:81:CB:23:BE:E6:B1:6E Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Certificate serial: 019AF2093169B823F26D642DA86077FD2A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft Manifest number: 0DE1 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: 5F8LDCJDD8W94UlxLSMQxsm3FOOawal1amuaBeP8PVo=) 2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:31:69:b8:23:f2:6d:64:2d:a8:60:77:fd:2a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=8fb8046cf9230986237f98ddff81cb23bee6b16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:c8:16:bf:7c:bf:ed:f1:3d:c8:31:eb:ce: 0b:22:30:47:3e:d6:b5:95:14:31:41:34:0e:7b:c4: d3:56:8e:f7:ca:ea:34:a5:76:ff:ba:5f:59:5f:a8: af:df:79:0b:36:10:32:16:44:bc:89:34:96:f9:37: 5b:b7:91:20:85:13:22:c3:e5:e8:ee:3a:e5:ec:39: 42:2b:e0:31:42:bb:e0:ab:d3:c0:55:aa:68:47:b5: 58:9b:d0:10:03:8e:b0:ca:35:9b:11:44:3a:20:31: d8:8b:24:ef:49:1f:82:f4:e7:2d:d3:da:7c:bf:c1: 74:97:2b:d5:6c:6b:28:21:48:8d:df:ce:f6:06:6a: 1a:55:50:3b:6d:2d:bf:f5:c9:29:34:a7:79:58:9e: 2d:72:81:d4:6c:4b:d9:36:e8:de:bf:9c:01:9e:b9: 53:a0:8b:2f:32:39:1c:d4:65:3d:1e:89:91:0f:48: 1c:d2:3e:53:2f:53:39:15:2b:30:1a:29:d4:7d:74: ee:48:ec:d9:bf:19:80:fa:69:ed:51:8f:be:06:ff: e3:c4:7a:ea:b9:ac:57:0e:94:6f:ff:ff:d1:6b:00: 8c:2d:d7:c5:4d:87:6f:5b:c8:0d:68:54:58:83:91: a1:6f:88:95:0f:f9:24:89:0e:0a:35:cf:5e:ba:ac: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:04:6C:F9:23:09:86:23:7F:98:DD:FF:81:CB:23:BE:E6:B1:6E X509v3 Authority Key Identifier: keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7e:e5:ba:fa:44:40:d1:f8:68:66:76:61:b4:b4:2b:e5:7a: a6:9d:37:60:75:ce:79:ad:c6:54:ac:25:a7:c0:62:0d:e1:35: 74:fb:f6:5c:35:5e:91:b7:56:54:a4:36:b2:89:30:fe:21:d4: 7f:31:3f:a2:f4:1a:d8:a8:cc:1e:16:54:98:f3:f0:cd:e1:22: 0f:82:47:a0:47:69:43:2b:ad:ae:03:ac:95:f3:63:d5:38:35: a7:18:e3:c6:59:7c:dc:5d:e9:24:9d:ca:60:83:0c:09:fe:13: f7:f5:a1:8e:76:ce:aa:c5:9e:98:14:39:99:31:e4:d3:19:e7: 1c:5e:e4:95:d8:90:4b:08:66:f8:f2:53:6e:7e:5a:78:6c:86: 33:38:e8:68:0c:fb:3b:9d:53:28:93:40:94:a6:60:83:f3:b9: 2f:00:25:22:f8:7a:fd:7a:df:f8:28:da:0b:e9:46:8c:55:34: 1a:da:88:7f:3d:01:fe:ea:6c:49:cb:43:9c:1b:5a:d6:b9:b6: 23:d4:be:dc:6b:42:83:dc:f1:73:2b:17:ac:c4:27:0d:82:f9: 91:dd:17:43:20:f2:4e:2e:89:c5:91:c9:f6:ad:7e:a7:7b:c5: ba:c2:bc:79:b0:c2:b7:10:25:1b:32:e7:ab:35:bc:3c:96:06: 25:1e:19:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTFpuCPybWQtqGB3/So3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWNkOWE2OWUxYjg0OTg3MDg0NThhYzUyMjA3Y2ZhYzFm MmMzY2IwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD Eyg4ZmI4MDQ2Y2Y5MjMwOTg2MjM3Zjk4ZGRmZjgxY2IyM2JlZTZiMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gzIFr98v+3xPcgx684LIjBHPta1 lRQxQTQOe8TTVo73yuo0pXb/ul9ZX6iv33kLNhAyFkS8iTSW+Tdbt5EghRMiw+Xo 7jrl7DlCK+AxQrvgq9PAVapoR7VYm9AQA46wyjWbEUQ6IDHYiyTvSR+C9Oct09p8 v8F0lyvVbGsoIUiN3872BmoaVVA7bS2/9ckpNKd5WJ4tcoHUbEvZNujev5wBnrlT oIsvMjkc1GU9HomRD0gc0j5TL1M5FSswGinUfXTuSOzZvxmA+mntUY++Bv/jxHrq uaxXDpRv///RawCMLdfFTYdvW8gNaFRYg5Ghb4iVD/kkiQ4KNc9euqwmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+4BGz5IwmGI3+Y3f+ByyO+5rFuMB8GA1UdIwQY MBaAFAes2aaeG4SYcIRYrFIgfPrB8sPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTct YmE4NDk3NzhmZjU4LzEvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTctYmE4NDk3NzhmZjU4 LzEvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArn7luvpE QNH4aGZ2YbS0K+V6pp03YHXOea3GVKwlp8BiDeE1dPv2XDVekbdWVKQ2sokw/iHU fzE/ovQa2KjMHhZUmPPwzeEiD4JHoEdpQyutrgOslfNj1Tg1pxjjxll83F3pJJ3K YIMMCf4T9/WhjnbOqsWemBQ5mTHk0xnnHF7kldiQSwhm+PJTbn5aeGyGMzjoaAz7 O51TKJNAlKZgg/O5LwAlIvh6/Xrf+CjaC+lGjFU0GtqIfz0B/upsSctDnBta1rm2 I9S+3GtCg9zxcysXrMQnDYL5kd0XQyDyTi6JxZHJ9q1+p3vFusK8ebDCtxAlGzLn qzW8PJYGJR4Zfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:04 2025 by rpki-client