This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json) Hash identifier: DT5FqQ4HpWC1ttQAFzal1OarVEDkwvjpjZRl2EPnozU= Subject key identifier: 8F:FB:46:3B:D4:07:36:05:28:E1:C5:6F:BC:69:5B:BF:57:F8:D3:A1 Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019AF653794ECA39AE22FA5CC739B382B821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft Manifest number: 0E48 Signing time: Sun 07 Dec 2025 01:00:56 +0000 Manifest this update: Sun 07 Dec 2025 01:00:56 +0000 Manifest next update: Mon 08 Dec 2025 01:00:56 +0000 Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=) 2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=) 3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=) 4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: QYeJ1C83Xo+HB07f/70ak8SWkTZvwsPoQuQUItOsWCo=) 5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=) 6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=) 7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=) 8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=) 9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:79:4e:ca:39:ae:22:fa:5c:c7:39:b3:82:b8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Dec 7 01:00:56 2025 GMT Not After : Dec 8 01:00:56 2025 GMT Subject: CN=8ffb463bd407360528e1c56fbc695bbf57f8d3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:0d:c6:c5:9c:f2:c7:be:0f:83:86:90:f7: e0:65:54:4d:45:ed:51:45:dc:ae:68:88:31:7f:71: 3b:60:cd:8a:91:19:a0:b5:2e:7a:05:19:86:f7:c5: 51:13:c0:56:76:b5:87:20:59:a4:c9:f6:a0:34:a0: 75:ba:ea:79:b2:11:5a:65:69:14:5d:ae:a8:ba:c1: f1:1f:3f:7a:d6:b8:cb:d7:f3:af:74:29:59:f0:8e: 65:48:a4:a5:5f:98:ad:45:20:1a:9f:a7:6c:a7:52: b6:dd:4c:ea:18:69:08:2f:26:ab:d0:05:e1:84:89: 06:44:62:d3:a3:b6:68:28:26:5e:d3:05:34:da:7e: 0d:c4:9a:ba:6a:f4:a0:5d:88:0e:72:50:22:51:18: 97:0a:d7:0a:a5:2d:89:f6:6c:78:e3:e7:9a:c9:b3: 25:fd:37:0c:18:7d:4b:ed:03:cb:21:6c:b9:8f:ad: 5e:b4:ba:63:04:09:52:f8:be:bc:b6:a6:54:ca:5d: a2:2d:40:e9:2e:09:9c:1d:6b:1c:18:f8:13:dc:fc: be:20:41:0b:44:51:dc:22:b3:d3:c2:7d:95:7e:4c: ef:68:eb:02:08:cd:bf:ab:73:94:07:b4:f3:f8:14: 00:6e:22:44:c3:d5:88:a3:32:b8:bc:26:ee:be:a8: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FB:46:3B:D4:07:36:05:28:E1:C5:6F:BC:69:5B:BF:57:F8:D3:A1 X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5a:b1:57:15:8b:77:9d:1d:87:b7:b1:5f:91:fc:e4:29:e9: 46:08:6c:1b:f9:86:dd:4d:cd:cb:cb:c8:4f:e2:43:b2:c8:e4: ef:b4:7d:83:b7:1e:ae:fc:8a:be:81:48:51:ae:10:09:5b:2f: 0d:49:92:91:14:6a:26:e6:ae:7a:1d:8f:1f:76:73:22:00:6c: b9:29:10:9d:16:23:e5:de:ea:ef:b4:45:80:de:e4:e1:66:88: 0d:68:48:f6:59:57:92:ab:2f:81:65:61:e8:12:af:2c:d1:72: 69:88:8b:33:64:b6:84:83:c2:6f:5b:69:1c:bd:be:34:e0:78: 5f:0b:ba:90:25:bc:bb:c8:ff:e5:b6:c3:d2:c6:34:57:42:79: 95:cb:47:f2:42:3f:e8:4f:24:80:1a:ad:46:d1:0f:4f:f0:43: c6:53:8c:a4:ba:c0:02:1c:95:20:7f:b3:ee:b4:0e:d6:2e:02: d5:d4:b5:c3:52:2e:fc:d8:f2:16:16:5b:e4:c3:ac:4a:22:64: c4:d8:25:87:fe:63:0d:30:24:3e:3b:de:ae:34:21:4a:09:1f: e9:5d:21:6c:06:72:90:07:7c:13:57:0d:0b:a4:6e:94:58:60: 94:f3:64:ce:dd:fb:ed:ac:75:ef:44:98:22:97:06:c3:75:68: 21:2c:4d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U3lOyjmuIvpcxzmzgrghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjUxMjA3MDEwMDU2WhcNMjUxMjA4MDEwMDU2WjAzMTEwLwYDVQQD Eyg4ZmZiNDYzYmQ0MDczNjA1MjhlMWM1NmZiYzY5NWJiZjU3ZjhkM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiINxsWc8se+D4OGkPfgZVRNRe1R RdyuaIgxf3E7YM2KkRmgtS56BRmG98VRE8BWdrWHIFmkyfagNKB1uup5shFaZWkU Xa6ousHxHz961rjL1/OvdClZ8I5lSKSlX5itRSAan6dsp1K23UzqGGkILyar0AXh hIkGRGLTo7ZoKCZe0wU02n4NxJq6avSgXYgOclAiURiXCtcKpS2J9mx44+eaybMl /TcMGH1L7QPLIWy5j61etLpjBAlS+L68tqZUyl2iLUDpLgmcHWscGPgT3Py+IEEL RFHcIrPTwn2VfkzvaOsCCM2/q3OUB7Tz+BQAbiJEw9WIozK4vCbuvqjgUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/7RjvUBzYFKOHFb7xpW79X+NOhMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1qxVxWL d50dh7exX5H85CnpRghsG/mG3U3Ny8vIT+JDssjk77R9g7cervyKvoFIUa4QCVsv DUmSkRRqJuaueh2PH3ZzIgBsuSkQnRYj5d7q77RFgN7k4WaIDWhI9llXkqsvgWVh 6BKvLNFyaYiLM2S2hIPCb1tpHL2+NOB4Xwu6kCW8u8j/5bbD0sY0V0J5lctH8kI/ 6E8kgBqtRtEPT/BDxlOMpLrAAhyVIH+z7rQO1i4C1dS1w1Iu/NjyFhZb5MOsSiJk xNglh/5jDTAkPjverjQhSgkf6V0hbAZykAd8E1cNC6RulFhglPNkzt377ax170SY IpcGw3VoISxNjw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:14 2025 by rpki-client