This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json) Hash identifier: r4QSqktqNlAqdMFOHE4kMso92XCX/0HUyD9Q19c9BbI= Subject key identifier: 13:BF:FC:40:2A:DB:39:FC:B7:A0:B8:64:AA:55:C7:3D:0A:05:69:70 Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad Certificate serial: 019AF2092D1583910A9A7680B8B7A4C4D314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft Manifest number: 0E83 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: /1Zr3YR9wX3EKDl+ViuwIQBPgyqrHdmLGDhtzwaZW0A=) 2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2d:15:83:91:0a:9a:76:80:b8:b7:a4:c4:d3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=13bffc402adb39fcb7a0b864aa55c73d0a056970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:04:42:0f:7b:4c:82:09:f8:87:1d:5e:7c: e3:30:9a:87:26:ef:a2:19:79:d9:63:30:c5:a6:41: 11:16:cc:f0:cb:78:9e:8b:d9:73:6b:ea:b6:5d:42: f8:1e:8c:d9:08:fb:86:d0:d8:31:64:e0:9d:c5:ca: b4:2e:58:6c:58:fa:c6:dc:95:8b:b9:48:49:98:96: 67:0c:f6:20:8f:49:14:09:0a:65:44:2d:12:a5:68: e7:fd:87:f7:56:ce:f8:1d:73:81:c0:ca:87:b9:0c: 9e:e1:bd:52:88:86:28:cd:9b:b5:0c:05:b3:be:59: 4d:b9:9e:7d:af:2a:c2:48:2c:66:97:11:80:1b:2a: fd:8a:de:a9:3c:e4:ef:30:b6:39:06:00:33:3d:fa: 86:8f:f0:0e:2f:09:69:bc:69:28:ed:69:f8:9d:d8: 5b:d0:d3:46:82:7e:67:d8:d7:90:69:cd:97:d4:23: 6a:b5:b3:42:6e:60:5e:6f:97:a2:aa:b7:34:73:bc: 3e:7c:e7:ba:8c:98:85:63:73:68:05:ee:2b:91:c7: 69:e1:04:e9:48:d1:9a:ca:3b:3a:d0:55:9e:04:14: 43:d4:b7:8c:95:8c:c9:50:63:6b:01:20:e3:d5:72: fe:ab:11:d7:1c:01:9e:4d:ef:09:b8:f9:ec:e0:16: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BF:FC:40:2A:DB:39:FC:B7:A0:B8:64:AA:55:C7:3D:0A:05:69:70 X509v3 Authority Key Identifier: keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ce:a7:30:d7:ee:7e:70:9d:4f:c3:3d:bf:4b:ea:69:ce:68: ef:44:70:98:45:1f:b6:87:9f:74:92:14:49:52:d4:57:33:d0: 59:79:ca:e6:8c:34:12:c1:bd:79:59:10:9b:ec:65:99:e9:9d: 95:36:0b:58:ed:59:54:e2:56:d5:79:af:a7:20:16:aa:79:6e: a1:98:07:65:9b:29:ca:70:7c:ae:87:c9:a9:c2:5b:d6:f8:8e: ab:2f:7e:61:a2:1a:54:7c:14:95:fa:bb:91:dc:d5:d3:90:fa: 81:1d:27:80:bc:a0:9a:06:2e:b0:91:8a:2f:8d:e1:b9:e7:02: 0e:28:44:75:ed:cb:ba:34:db:1a:8d:90:0d:7a:cf:65:85:6f: a2:58:99:c0:fc:ed:a0:fc:42:20:4a:6a:14:b7:b7:9e:91:d5: 58:2b:f1:fb:52:fb:bd:e2:2f:c7:c2:0f:e4:a4:c7:b7:27:fb: f2:97:e1:e9:19:ab:05:f4:f7:c8:79:de:9c:ad:88:b1:27:1e: 19:8e:f3:f7:ce:76:1e:5c:1f:62:5f:c5:e2:82:8c:1e:1d:ed: fb:72:04:8f:82:fe:7f:e5:1a:aa:8c:af:4a:01:27:46:80:1a: 55:de:9d:53:5d:e1:ad:d2:f8:cd:e4:2f:64:ed:ba:1b:59:a2: 07:5c:f8:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS0Vg5EKmnaAuLekxNMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NmIwMTg1Y2FiYjY2ODQzZDY3Zjg4NjAxYmMwYTc5YTJl ZWJjYWQwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EygxM2JmZmM0MDJhZGIzOWZjYjdhMGI4NjRhYTU1YzczZDBhMDU2OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kAEQg97TIIJ+IcdXnzjMJqHJu+i GXnZYzDFpkERFszwy3iei9lza+q2XUL4HozZCPuG0NgxZOCdxcq0LlhsWPrG3JWL uUhJmJZnDPYgj0kUCQplRC0SpWjn/Yf3Vs74HXOBwMqHuQye4b1SiIYozZu1DAWz vllNuZ59ryrCSCxmlxGAGyr9it6pPOTvMLY5BgAzPfqGj/AOLwlpvGko7Wn4ndhb 0NNGgn5n2NeQac2X1CNqtbNCbmBeb5eiqrc0c7w+fOe6jJiFY3NoBe4rkcdp4QTp SNGayjs60FWeBBRD1LeMlYzJUGNrASDj1XL+qxHXHAGeTe8JuPns4BZbCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBO//EAq2zn8t6C4ZKpVxz0KBWlwMB8GA1UdIwQY MBaAFAdrAYXKu2aEPWf4hgG8Cnmi7rytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYt N2I0NWJlMDQ2NWFhLzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYtN2I0NWJlMDQ2NWFh LzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs6nMNfu fnCdT8M9v0vqac5o70RwmEUftoefdJIUSVLUVzPQWXnK5ow0EsG9eVkQm+xlmemd lTYLWO1ZVOJW1XmvpyAWqnluoZgHZZspynB8rofJqcJb1viOqy9+YaIaVHwUlfq7 kdzV05D6gR0ngLygmgYusJGKL43huecCDihEde3LujTbGo2QDXrPZYVvoliZwPzt oPxCIEpqFLe3npHVWCvx+1L7veIvx8IP5KTHtyf78pfh6RmrBfT3yHnenK2IsSce GY7z9852HlwfYl/F4oKMHh3t+3IEj4L+f+UaqoyvSgEnRoAaVd6dU13hrdL4zeQv ZO26G1miB1z4Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:27 2025 by rpki-client