This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json) Hash identifier: IthNz2zrUx8NxY3PXZwLranHtThhUdq6do96l99u2mI= Subject key identifier: BD:F6:18:3F:5A:FA:A7:C9:3F:8C:9F:8D:C1:C1:F8:2E:EB:2C:35:0C Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad Certificate serial: 019B2250B06087A58EFD028E751CCDCA26D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft Manifest number: 0E9C Signing time: Mon 15 Dec 2025 14:01:11 +0000 Manifest this update: Mon 15 Dec 2025 14:01:11 +0000 Manifest next update: Tue 16 Dec 2025 14:01:11 +0000 Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: piDj+eiESHA8vTrtyvoFkNYygdZgmG603OJpUbFmPE0=) 2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:b0:60:87:a5:8e:fd:02:8e:75:1c:cd:ca:26:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad Validity Not Before: Dec 15 14:01:11 2025 GMT Not After : Dec 16 14:01:11 2025 GMT Subject: CN=bdf6183f5afaa7c93f8c9f8dc1c1f82eeb2c350c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:08:66:e7:6a:f2:96:ef:6d:27:81:b5:88: ae:f3:0f:8c:36:ad:c3:fd:41:36:97:4d:8c:17:4a: 34:f1:09:5d:5c:34:56:4f:29:b6:e8:96:0e:a9:8f: f8:39:95:00:09:1e:a6:8c:bb:f2:57:2a:b0:12:5f: 62:04:f1:63:4c:56:41:0a:0f:50:76:63:db:ee:10: fc:9f:95:8a:c6:d4:3a:69:aa:12:eb:5c:b5:10:14: f3:96:93:2f:fc:3e:17:f5:e9:18:41:15:d5:e8:cc: c1:db:47:51:c0:80:2e:8c:35:29:7e:7b:b9:74:99: a7:e3:61:74:2c:d7:d4:38:1c:a2:87:81:2e:3c:5d: 88:76:7a:33:60:0f:fd:be:06:63:48:08:a2:e1:7d: 7c:82:38:ce:de:97:88:ca:ab:a2:b2:f4:f6:d7:60: 87:e6:35:2e:0c:52:f4:29:ce:2d:d4:cb:d2:d9:a1: 6d:6c:be:c9:ae:65:8f:9f:dc:4c:06:28:1c:82:54: 81:e3:c5:bd:71:df:97:4f:aa:09:ae:79:80:33:b6: 2d:7b:63:ce:11:80:91:49:c4:18:47:4c:6b:5c:ea: 0b:9e:3d:2f:71:28:f4:0f:52:f4:e2:06:51:e1:1b: 56:f9:26:31:d9:f5:2e:47:4a:48:0d:3b:87:6d:8c: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:18:3F:5A:FA:A7:C9:3F:8C:9F:8D:C1:C1:F8:2E:EB:2C:35:0C X509v3 Authority Key Identifier: keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ea:7c:06:e0:8e:30:f2:12:19:39:66:0c:41:6e:95:62:e2: 0f:ca:98:4d:e1:aa:00:69:47:ab:27:5d:e2:aa:1b:fc:cf:ba: d8:60:32:ea:b9:ef:83:43:16:6e:ea:b0:a6:00:af:90:ec:d2: 22:cc:71:ee:e4:f9:36:79:f1:11:e6:34:eb:a0:25:5f:02:cb: 1a:82:6d:b6:32:6e:3c:ce:70:8b:94:9a:5a:66:71:11:b8:6b: bb:a1:d1:84:6e:87:5a:76:d9:4b:94:f5:40:19:26:a4:c3:b9: d6:1c:88:15:f8:a5:b3:1f:29:59:a4:ab:0a:08:15:67:6d:47: 37:e7:cd:78:a7:d7:a1:9f:0c:34:c5:05:b8:37:bf:cb:c3:14: 4f:52:c6:66:65:96:31:30:cf:70:1f:9e:72:ac:86:cf:c1:49: 10:c8:ae:fb:2b:ab:60:b3:1c:b7:6a:07:51:b8:ea:5f:0f:da: 80:a5:31:da:f5:3f:c6:25:9c:b3:70:0e:3b:45:77:65:aa:b9: de:39:92:83:3a:ba:2f:f5:2c:24:c7:3c:29:86:13:3d:12:64: 83:ff:09:de:9d:ff:4a:2f:de:e1:e8:80:23:33:4a:9c:53:97: 3b:02:0d:05:f9:38:7b:98:50:ce:d9:53:d9:d5:ca:0d:0c:d2: 59:02:47:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiULBgh6WO/QKOdRzNyibXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NmIwMTg1Y2FiYjY2ODQzZDY3Zjg4NjAxYmMwYTc5YTJl ZWJjYWQwHhcNMjUxMjE1MTQwMTExWhcNMjUxMjE2MTQwMTExWjAzMTEwLwYDVQQD EyhiZGY2MTgzZjVhZmFhN2M5M2Y4YzlmOGRjMWMxZjgyZWViMmMzNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3msIZudq8pbvbSeBtYiu8w+MNq3D /UE2l02MF0o08QldXDRWTym26JYOqY/4OZUACR6mjLvyVyqwEl9iBPFjTFZBCg9Q dmPb7hD8n5WKxtQ6aaoS61y1EBTzlpMv/D4X9ekYQRXV6MzB20dRwIAujDUpfnu5 dJmn42F0LNfUOByih4EuPF2IdnozYA/9vgZjSAii4X18gjjO3peIyquisvT212CH 5jUuDFL0Kc4t1MvS2aFtbL7JrmWPn9xMBigcglSB48W9cd+XT6oJrnmAM7Yte2PO EYCRScQYR0xrXOoLnj0vcSj0D1L04gZR4RtW+SYx2fUuR0pIDTuHbYwOOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL32GD9a+qfJP4yfjcHB+C7rLDUMMB8GA1UdIwQY MBaAFAdrAYXKu2aEPWf4hgG8Cnmi7rytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYt N2I0NWJlMDQ2NWFhLzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9mMTRiYzMtMWY5Ni00ZGE4LWExNmYtN2I0NWJlMDQ2NWFh LzEvQjJzQmhjcTdab1E5Wl9pR0Fid0tlYUx1dkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATep8BuCO MPISGTlmDEFulWLiD8qYTeGqAGlHqydd4qob/M+62GAy6rnvg0MWbuqwpgCvkOzS Isxx7uT5NnnxEeY066AlXwLLGoJttjJuPM5wi5SaWmZxEbhru6HRhG6HWnbZS5T1 QBkmpMO51hyIFfilsx8pWaSrCggVZ21HN+fNeKfXoZ8MNMUFuDe/y8MUT1LGZmWW MTDPcB+ecqyGz8FJEMiu+yurYLMct2oHUbjqXw/agKUx2vU/xiWcs3AOO0V3Zaq5 3jmSgzq6L/UsJMc8KYYTPRJkg/8J3p3/Si/e4eiAIzNKnFOXOwINBfk4e5hQztlT 2dXKDQzSWQJHjQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:20:32 2025 by rpki-client