This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json) Hash identifier: SCUW0FiRRxrba2VPwuYpyhnqV2d2wZ6KrEdjyJlxGCU= Subject key identifier: 1B:3C:B3:D9:E5:5A:F7:63:E9:5B:DA:68:98:7C:47:F8:C9:24:E7:3B Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20 Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520 Certificate serial: 019AF12D7D9271B48EA66EF6C5E167D0EF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft Manifest number: 099F Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=) 2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: MyNJU9yNeGEULYPjybTgmlzf9Vltnib1u8SkRdyRUgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7d:92:71:b4:8e:a6:6e:f6:c5:e1:67:d0:ef:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=1b3cb3d9e55af763e95bda68987c47f8c924e73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:d4:cf:01:97:f1:30:f8:6c:78:d6:35:55: 03:82:f4:97:b5:2e:5d:17:b4:55:ed:c9:a9:ff:a9: d0:76:bc:81:49:08:14:e5:7d:c2:fb:dc:f6:d7:3a: 56:2e:21:38:cf:63:44:5f:9b:ae:51:3d:16:fc:37: f2:00:fd:7a:91:50:48:b2:4e:95:2b:e6:e1:8c:0f: 82:52:7f:12:2c:94:08:29:21:60:78:a1:fc:90:04: 0b:f6:d0:2f:e3:c6:27:df:20:09:9e:6d:5d:76:a6: fe:ac:80:48:60:bb:34:22:66:bd:fd:59:05:48:b9: ba:9e:15:f9:7d:51:45:df:0b:1b:24:45:f6:f3:2d: 70:d6:f9:43:c4:71:ab:d9:88:4e:85:3a:e0:bf:40: 70:1a:da:9f:c7:85:9c:bc:03:36:f8:39:06:1e:97: bb:d9:33:bd:a3:7b:ce:1d:b9:35:71:91:c7:b0:cd: 95:87:ac:df:f8:7d:a0:02:09:9e:cc:68:5f:1b:3e: 21:24:0b:a4:35:e4:4e:ed:9f:86:5f:cc:73:da:cd: 04:bd:93:17:10:6d:83:3b:23:0c:64:e4:25:8b:d4: d0:c1:5f:75:56:15:00:7e:30:a2:b9:04:1a:c3:4c: f2:5f:71:a5:6b:d0:70:af:c2:a5:f7:c1:0b:d4:de: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:B3:D9:E5:5A:F7:63:E9:5B:DA:68:98:7C:47:F8:C9:24:E7:3B X509v3 Authority Key Identifier: keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:de:a9:ed:fa:12:e2:c8:61:ee:2a:a7:a5:ed:78:bf:4f:bb: 45:99:4f:6a:6f:64:c6:52:b6:5f:d0:6d:ff:f8:df:ee:49:fe: b6:11:2d:a6:fd:5f:da:7a:0f:25:96:50:37:fc:65:d9:9c:93: d8:69:bf:e0:99:3a:7b:0b:cf:05:d8:1e:95:49:79:ab:24:68: bb:eb:b5:8f:6d:81:db:10:e6:61:c7:be:d1:2e:cc:9b:ee:71: 71:a1:b2:3e:38:dc:36:36:b5:83:d6:3c:d8:82:f8:da:27:2a: d7:5d:52:0a:72:4e:89:12:8d:aa:30:1f:23:67:c4:51:c2:66: f3:a1:58:0d:bf:78:a1:38:11:36:5e:c2:0a:d2:31:92:ff:53: 3d:55:4c:b0:80:2d:0b:93:22:5c:b7:2e:17:a4:79:b6:3c:c0: bd:ec:b2:85:d3:5e:0a:62:ae:06:64:5c:a0:1f:64:40:ee:7d: 98:40:39:75:fa:1f:c6:34:b2:31:f7:d3:7f:84:4c:a1:26:9f: c3:31:3d:67:cf:09:89:b6:c6:54:77:2e:26:47:e8:6f:3d:ea: e6:59:36:bd:ae:6a:b3:a5:1d:2b:b0:50:27:cc:42:34:d4:f2: da:c4:ff:81:3c:53:f8:82:07:53:96:e8:47:ce:7e:ba:26:e7: e7:20:08:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX2ScbSOpm72xeFn0O98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1 MzA1MjAwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EygxYjNjYjNkOWU1NWFmNzYzZTk1YmRhNjg5ODdjNDdmOGM5MjRlNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspLUzwGX8TD4bHjWNVUDgvSXtS5d F7RV7cmp/6nQdryBSQgU5X3C+9z21zpWLiE4z2NEX5uuUT0W/DfyAP16kVBIsk6V K+bhjA+CUn8SLJQIKSFgeKH8kAQL9tAv48Yn3yAJnm1ddqb+rIBIYLs0Ima9/VkF SLm6nhX5fVFF3wsbJEX28y1w1vlDxHGr2YhOhTrgv0BwGtqfx4WcvAM2+DkGHpe7 2TO9o3vOHbk1cZHHsM2Vh6zf+H2gAgmezGhfGz4hJAukNeRO7Z+GX8xz2s0EvZMX EG2DOyMMZOQli9TQwV91VhUAfjCiuQQaw0zyX3Gla9Bwr8Kl98EL1N6EEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs8s9nlWvdj6VvaaJh8R/jJJOc7MB8GA1UdIwQY MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt ZjE0NTFiYTg4NGI4LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4 LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt6p7foS 4shh7iqnpe14v0+7RZlPam9kxlK2X9Bt//jf7kn+thEtpv1f2noPJZZQN/xl2ZyT 2Gm/4Jk6ewvPBdgelUl5qyRou+u1j22B2xDmYce+0S7Mm+5xcaGyPjjcNja1g9Y8 2IL42icq111SCnJOiRKNqjAfI2fEUcJm86FYDb94oTgRNl7CCtIxkv9TPVVMsIAt C5MiXLcuF6R5tjzAveyyhdNeCmKuBmRcoB9kQO59mEA5dfofxjSyMffTf4RMoSaf wzE9Z88JibbGVHcuJkfobz3q5lk2va5qs6UdK7BQJ8xCNNTy2sT/gTxT+IIHU5bo R85+uibn5yAI8g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:11 2025 by rpki-client