This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json) Hash identifier: e+59VavyhDHXQEVwRQAf/u5RdOEmLthrTp2AbzkRPoc= Subject key identifier: CC:6F:56:80:0F:3C:05:D0:56:06:7B:50:BD:3B:AC:3B:C7:BE:EE:AC Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Certificate serial: 019AF2090A416B0144368B2011D9E9BBD30D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft Manifest number: FF Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: RF6fC3SHNzyUThuudKUdIM1sm6sOyblmYeJYN+tHgao=) 2: dO5qe6cxV0dMzJ8102AvpINSdMo.roa (hash: C4Rut7Vvkpw4iE7xeScMUUVHRIaOgC0yzl/9M7TJh5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0a:41:6b:01:44:36:8b:20:11:d9:e9:bb:d3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=cc6f56800f3c05d056067b50bd3bac3bc7beeeac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:14:12:2b:72:d2:44:39:13:de:47:3d:0b: 93:32:14:e8:11:0e:d8:c8:c4:62:99:2b:4c:5c:a1: a0:c2:ff:ce:48:87:ab:b8:a5:4e:ed:f2:7e:49:c9: 4b:98:f2:11:5f:80:27:ab:1c:09:f2:5c:f6:bd:65: ab:bd:dc:91:c8:f3:59:80:b0:58:54:43:fd:c4:7c: 29:c1:11:75:1c:69:47:ed:53:61:c6:d8:e1:12:e5: e7:61:34:00:cd:1b:82:85:6e:9f:b2:cc:7d:f8:d6: 50:06:83:b5:90:04:ed:b7:e9:c6:e1:77:14:d8:8a: 5a:53:a8:f4:a6:18:62:d0:b3:e4:43:e6:77:fd:8f: 47:6e:9a:4d:63:c0:1b:e0:14:bf:be:a0:63:5b:d2: 55:7a:4d:55:2c:f0:36:79:e7:88:90:2e:b9:f6:c7: 10:74:3c:de:43:55:77:31:04:6f:f8:b4:0e:bf:29: 35:99:5e:88:73:b6:b5:92:c7:a5:44:82:e7:da:8b: 7f:fa:23:aa:8f:93:4b:7a:88:9b:89:4b:27:cb:97: b4:70:40:5e:fd:66:19:94:39:b6:a6:11:ce:5b:5f: 5c:c2:1f:9a:87:78:3f:52:59:5b:11:50:a0:9c:b3: 3d:a2:1e:6c:c5:84:01:a9:93:02:7b:bd:39:0f:09: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:56:80:0F:3C:05:D0:56:06:7B:50:BD:3B:AC:3B:C7:BE:EE:AC X509v3 Authority Key Identifier: keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bd:8d:13:58:27:f9:a3:8f:a8:75:f7:08:62:16:66:71:1c: ba:e0:a3:df:cd:d6:c5:ae:2c:77:ea:92:dc:df:34:a9:fb:dc: 5f:15:24:80:66:a5:ba:29:e1:56:f2:60:32:74:04:41:e2:44: 6f:6e:2a:34:cd:fd:be:27:e5:42:e3:27:4c:6f:13:9f:fc:f3: 2a:75:21:ab:4f:d1:a0:1a:7e:79:ce:08:81:da:80:b3:85:f1: 8b:34:7e:9c:8e:e4:93:25:0a:b4:b9:6a:76:da:29:1d:53:b5: 07:88:30:42:9d:aa:63:20:61:1f:cf:14:6b:17:77:6b:39:4a: 95:16:7a:7c:c7:85:be:8c:58:a3:3f:2c:8c:03:cb:56:8a:ea: 8f:6c:1a:7e:a1:ec:20:53:df:a4:d3:09:7f:a6:3a:db:d9:dd: c1:c7:2a:d6:87:01:47:ba:9b:63:c4:fb:af:50:76:52:da:0d: f4:bb:d6:0a:8f:df:78:63:6c:c9:f0:48:cd:32:af:e0:4d:37: e7:09:3b:40:6a:32:95:bb:31:3b:99:6a:b3:3f:01:e5:5a:01: 21:68:d5:4b:29:16:7a:bd:d0:9c:d2:68:13:1b:28:33:86:ff: 13:59:60:82:0c:5e:83:d7:40:8a:de:42:dc:33:6c:87:fc:07: 76:c1:7a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQpBawFENosgEdnpu9MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMjEzZGI2ZDJiMWU0ZjMwYjYyZWQxMTY3ZTI1MjIzNjI2 MzYwYjkwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EyhjYzZmNTY4MDBmM2MwNWQwNTYwNjdiNTBiZDNiYWMzYmM3YmVlZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqikUEity0kQ5E95HPQuTMhToEQ7Y yMRimStMXKGgwv/OSIeruKVO7fJ+SclLmPIRX4AnqxwJ8lz2vWWrvdyRyPNZgLBY VEP9xHwpwRF1HGlH7VNhxtjhEuXnYTQAzRuChW6fssx9+NZQBoO1kATtt+nG4XcU 2IpaU6j0phhi0LPkQ+Z3/Y9HbppNY8Ab4BS/vqBjW9JVek1VLPA2eeeIkC659scQ dDzeQ1V3MQRv+LQOvyk1mV6Ic7a1kselRILn2ot/+iOqj5NLeoibiUsny5e0cEBe /WYZlDm2phHOW19cwh+ah3g/UllbEVCgnLM9oh5sxYQBqZMCe705DwlERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxvVoAPPAXQVgZ7UL07rDvHvu6sMB8GA1UdIwQY MBaAFG4hPbbSseTzC2LtEWfiUiNiY2C5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYt Y2M0NDc0YzMyMTFhLzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYtY2M0NDc0YzMyMTFh LzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr2NE1gn +aOPqHX3CGIWZnEcuuCj383Wxa4sd+qS3N80qfvcXxUkgGaluinhVvJgMnQEQeJE b24qNM39viflQuMnTG8Tn/zzKnUhq0/RoBp+ec4IgdqAs4XxizR+nI7kkyUKtLlq dtopHVO1B4gwQp2qYyBhH88Uaxd3azlKlRZ6fMeFvoxYoz8sjAPLVorqj2wafqHs IFPfpNMJf6Y629ndwccq1ocBR7qbY8T7r1B2UtoN9LvWCo/feGNsyfBIzTKv4E03 5wk7QGoylbsxO5lqsz8B5VoBIWjVSykWer3QnNJoExsoM4b/E1lgggxeg9dAit5C 3DNsh/wHdsF6Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:01 2025 by rpki-client