This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json) Hash identifier: UjdKAflY6hyW3uNzEdWbCrJ06w1YSqcR8T4SZiJSpZo= Subject key identifier: 58:D7:38:95:3E:84:8C:76:AC:92:54:65:0A:A7:42:0A:0A:87:AF:CB Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66 Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66 Certificate serial: 019AF31BA1D8534197B94996FAF0D6AF0406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft Manifest number: 0E45 Signing time: Sat 06 Dec 2025 10:01:05 +0000 Manifest this update: Sat 06 Dec 2025 10:01:05 +0000 Manifest next update: Sun 07 Dec 2025 10:01:05 +0000 Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: XNUuKghQZKWv5RuLxb1VE3TXtwVBnYWSNQgEvFLui9w=) 2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a1:d8:53:41:97:b9:49:96:fa:f0:d6:af:04:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66 Validity Not Before: Dec 6 10:01:05 2025 GMT Not After : Dec 7 10:01:05 2025 GMT Subject: CN=58d738953e848c76ac9254650aa7420a0a87afcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:18:9c:81:66:fe:4c:05:3c:e5:62:91:5a: 08:33:71:54:ee:18:e6:c2:b0:8c:49:36:60:8a:9a: 64:b8:79:33:8d:de:ec:e3:3f:c9:77:ad:cd:e9:45: f5:b7:17:ba:4a:ce:cc:0d:89:cd:8d:e2:93:33:df: e9:91:e5:e4:50:2a:3b:c5:e9:1b:ce:9c:6c:a9:15: 16:89:fb:20:59:f3:2a:f2:72:e9:03:73:bd:77:d8: 88:92:31:c5:6a:bc:55:e7:65:43:fb:6f:ef:9f:00: 94:13:02:9e:06:57:7a:ed:5b:27:79:b3:a8:99:5e: 27:6e:b4:0c:76:f2:29:f0:0c:cd:6f:73:05:ee:f7: 0e:04:cc:58:89:e3:4d:86:a2:ce:fb:bf:a3:0c:c7: ed:33:bc:4f:56:dc:a6:51:19:ec:b9:8b:1e:09:fb: b2:86:4d:30:ba:53:ca:2c:42:c4:60:69:9b:65:cb: b8:ac:ad:8b:9b:63:c5:94:40:90:e4:43:2d:94:78: 50:f7:b3:c9:89:01:74:1a:bd:f5:b5:63:44:a2:17: 1a:1b:10:b2:d1:9d:ae:3b:13:20:be:67:a1:02:63: 2e:5d:96:85:eb:21:a9:ee:54:9a:27:5f:39:41:72: 72:35:66:b1:37:bb:00:58:42:57:fc:68:4e:2f:fe: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:38:95:3E:84:8C:76:AC:92:54:65:0A:A7:42:0A:0A:87:AF:CB X509v3 Authority Key Identifier: keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d7:f3:de:50:e5:e1:6b:cf:e9:af:e8:50:55:f1:a7:89:87: 7e:79:c8:69:80:c5:68:4b:b0:88:39:75:42:37:d9:82:73:17: c6:f0:b5:a4:0e:1c:6d:9a:62:51:52:44:68:10:19:92:8e:65: ac:73:b5:f4:20:39:30:a5:36:1f:3b:68:8e:ea:4e:28:4b:d8: fe:93:ec:e3:b9:23:30:a6:e2:7b:15:6a:c7:32:b5:74:ba:71: 40:03:58:90:2a:1f:04:3c:48:31:83:d1:4e:97:44:f1:66:ff: 3e:95:e7:43:4c:20:69:bf:6b:7c:b2:2a:17:d8:40:09:e0:e4: 71:c0:5c:61:f1:c6:7e:1d:d3:ad:7a:98:a4:54:2c:6c:22:52: 57:8f:e2:47:70:ec:e0:1b:90:15:10:39:8d:42:6a:7c:f4:b2: c9:e4:0a:65:88:ff:4b:08:ff:d7:e7:c3:bd:7a:4c:cd:8e:8f: 28:67:ec:58:82:96:cf:40:3c:2e:84:a8:c1:2c:0f:65:0a:a6: 78:22:0e:90:59:6d:f3:17:b4:12:a9:91:9b:ef:aa:f8:53:eb: 79:07:aa:1b:77:3f:d2:ff:43:63:5a:84:fb:f1:b0:9b:66:7b: 23:0c:ae:c1:9b:5b:e7:fe:6b:4b:7a:c1:bb:95:e0:57:d4:61: 96:0b:af:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6HYU0GXuUmW+vDWrwQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDY0ZGFlZjMzOWU2ZmRhZTY0NGRiMWIyMGJiZjU0ZTY3 ZTVkNjYwHhcNMjUxMjA2MTAwMTA1WhcNMjUxMjA3MTAwMTA1WjAzMTEwLwYDVQQD Eyg1OGQ3Mzg5NTNlODQ4Yzc2YWM5MjU0NjUwYWE3NDIwYTBhODdhZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAUYnIFm/kwFPOVikVoIM3FU7hjm wrCMSTZgippkuHkzjd7s4z/Jd63N6UX1txe6Ss7MDYnNjeKTM9/pkeXkUCo7xekb zpxsqRUWifsgWfMq8nLpA3O9d9iIkjHFarxV52VD+2/vnwCUEwKeBld67VsnebOo mV4nbrQMdvIp8AzNb3MF7vcOBMxYieNNhqLO+7+jDMftM7xPVtymURnsuYseCfuy hk0wulPKLELEYGmbZcu4rK2Lm2PFlECQ5EMtlHhQ97PJiQF0Gr31tWNEohcaGxCy 0Z2uOxMgvmehAmMuXZaF6yGp7lSaJ185QXJyNWaxN7sAWEJX/GhOL/4kUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjXOJU+hIx2rJJUZQqnQgoKh6/LMB8GA1UdIwQY MBaAFAfWTa7zOeb9rmRNsbILv1Tmfl1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDct ODI3Zjk2NDhjMDIyLzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDctODI3Zjk2NDhjMDIy LzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9fz3lDl 4WvP6a/oUFXxp4mHfnnIaYDFaEuwiDl1QjfZgnMXxvC1pA4cbZpiUVJEaBAZko5l rHO19CA5MKU2HztojupOKEvY/pPs47kjMKbiexVqxzK1dLpxQANYkCofBDxIMYPR TpdE8Wb/PpXnQ0wgab9rfLIqF9hACeDkccBcYfHGfh3TrXqYpFQsbCJSV4/iR3Ds 4BuQFRA5jUJqfPSyyeQKZYj/Swj/1+fDvXpMzY6PKGfsWIKWz0A8LoSowSwPZQqm eCIOkFlt8xe0EqmRm++q+FPreQeqG3c/0v9DY1qE+/Gwm2Z7IwyuwZtb5/5rS3rB u5XgV9RhlguvQw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:00 2025 by rpki-client