This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json) Hash identifier: bAgLoDBHX3ZrkPwdDFJ4jE4X8vBM2ApnMaOyRNueWV0= Subject key identifier: E8:40:34:3B:8F:20:D6:AC:00:EA:34:AF:87:B9:A0:0B:3B:6F:DC:B6 Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Certificate serial: 019AF577CBC2B5ABD5A6E0EB7EB6D859B8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft Manifest number: 0FCB Signing time: Sat 06 Dec 2025 21:00:59 +0000 Manifest this update: Sat 06 Dec 2025 21:00:59 +0000 Manifest next update: Sun 07 Dec 2025 21:00:59 +0000 Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: WKlko0BPTOj3i/RwtahiztpDblG0/xmbxmHkJRAf3Ig=) 2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:cb:c2:b5:ab:d5:a6:e0:eb:7e:b6:d8:59:b8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Validity Not Before: Dec 6 21:00:59 2025 GMT Not After : Dec 7 21:00:59 2025 GMT Subject: CN=e840343b8f20d6ac00ea34af87b9a00b3b6fdcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:68:94:7e:5b:8e:66:8e:e1:02:38:e8:24: 48:ca:47:34:a9:68:7b:33:03:9e:a5:1e:b9:1e:6f: b8:4d:ac:24:31:bb:e6:6f:20:2b:c5:78:d1:bb:43: 15:8c:e9:3d:35:d7:14:7a:50:39:66:9f:39:30:5e: 85:11:db:fd:01:dc:d7:03:bc:87:69:ec:95:19:9e: df:c3:07:06:68:71:11:4e:7c:14:41:87:04:72:f0: dd:d6:b8:06:fc:1a:2b:73:2f:f1:ac:1c:d9:e3:4d: c3:26:84:11:f9:bb:3b:d9:f4:ea:cb:9e:ce:e2:1f: c8:6d:5b:8c:14:d0:ec:9b:1b:96:65:84:c6:01:13: 24:cb:9e:7c:72:0f:42:0b:ce:fd:7f:4d:d3:78:63: e4:35:f6:4f:d8:b6:7c:85:f7:0b:f4:b5:08:cc:12: 3a:21:83:b8:a7:9e:03:10:a2:97:d8:8b:1a:7f:50: 4b:61:cd:1d:d8:a9:9b:d9:dd:ab:db:eb:71:1c:4c: a0:6a:06:a0:86:d9:17:cb:24:3f:9d:66:51:78:48: 78:e1:f8:58:a7:f0:0d:f5:26:28:5d:e8:14:e2:3d: 8f:6e:2c:ec:a3:a2:7e:b6:59:4c:7c:66:aa:40:16: 1c:b7:ef:33:8d:67:25:49:ce:00:eb:06:a5:f2:85: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:34:3B:8F:20:D6:AC:00:EA:34:AF:87:B9:A0:0B:3B:6F:DC:B6 X509v3 Authority Key Identifier: keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:21:6b:a4:e6:ed:0d:9a:39:94:85:83:60:a1:c7:45:5f:e4: 6d:c5:8b:aa:53:84:3d:9c:05:b8:17:27:b5:a2:9b:a1:8d:d9: 19:b9:5b:63:69:3d:9f:c4:c0:9b:6f:33:63:9c:dc:49:b3:56: 21:3b:48:73:51:16:28:d5:2d:f5:0b:2a:ee:b8:b5:05:93:bf: 73:04:2e:7f:6d:e4:7c:dc:23:10:06:39:3b:ab:ba:f5:37:76: 1d:19:db:70:1a:0d:9b:ac:e1:33:39:fc:9f:f5:a4:af:7b:c7: 57:81:0d:68:aa:49:4c:10:f9:3d:aa:31:3e:2f:a2:88:64:03: 06:4b:d7:8e:d6:cc:a2:04:65:4d:bb:71:6b:c6:bb:1e:5f:1e: f3:ad:9d:c2:e9:c4:c5:33:7e:dc:5f:b4:f0:a9:04:de:aa:02: fe:5b:07:3f:74:cc:45:d6:72:69:15:b1:a4:71:b0:98:fb:bf: 8c:85:2e:6e:39:0c:7c:5b:59:4f:0b:50:76:7d:c7:dc:dc:b8: c2:d7:7d:c3:4c:2f:c3:61:dc:98:1a:52:6a:42:ad:bf:7f:ec: 59:43:91:b1:53:0c:cf:7f:14:1b:ef:ce:58:6d:20:57:da:a8: 0d:22:b2:9f:1d:9e:52:93:23:5c:ca:c2:ef:03:2c:3c:6a:bc: a8:c7:99:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8vCtavVpuDrfrbYWbjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw YjU0N2IwHhcNMjUxMjA2MjEwMDU5WhcNMjUxMjA3MjEwMDU5WjAzMTEwLwYDVQQD EyhlODQwMzQzYjhmMjBkNmFjMDBlYTM0YWY4N2I5YTAwYjNiNmZkY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQRolH5bjmaO4QI46CRIykc0qWh7 MwOepR65Hm+4TawkMbvmbyArxXjRu0MVjOk9NdcUelA5Zp85MF6FEdv9AdzXA7yH aeyVGZ7fwwcGaHERTnwUQYcEcvDd1rgG/Borcy/xrBzZ403DJoQR+bs72fTqy57O 4h/IbVuMFNDsmxuWZYTGARMky558cg9CC879f03TeGPkNfZP2LZ8hfcL9LUIzBI6 IYO4p54DEKKX2Isaf1BLYc0d2Kmb2d2r2+txHEygagaghtkXyyQ/nWZReEh44fhY p/AN9SYoXegU4j2Pbizso6J+tllMfGaqQBYct+8zjWclSc4A6wal8oVw1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhANDuPINasAOo0r4e5oAs7b9y2MB8GA1UdIwQY MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2 LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyFrpObt DZo5lIWDYKHHRV/kbcWLqlOEPZwFuBcntaKboY3ZGblbY2k9n8TAm28zY5zcSbNW ITtIc1EWKNUt9Qsq7ri1BZO/cwQuf23kfNwjEAY5O6u69Td2HRnbcBoNm6zhMzn8 n/Wkr3vHV4ENaKpJTBD5PaoxPi+iiGQDBkvXjtbMogRlTbtxa8a7Hl8e862dwunE xTN+3F+08KkE3qoC/lsHP3TMRdZyaRWxpHGwmPu/jIUubjkMfFtZTwtQdn3H3Ny4 wtd9w0wvw2HcmBpSakKtv3/sWUORsVMMz38UG+/OWG0gV9qoDSKynx2eUpMjXMrC 7wMsPGq8qMeZpw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:45 2025 by rpki-client