This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json) Hash identifier: aoVqfaCeBj0xbeWI3MzlzUxDIi3W8fupooFxtHzMOac= Subject key identifier: 21:5A:7A:2A:C6:1A:DF:D1:2C:4A:15:03:1B:73:E7:92:5F:7D:61:02 Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b Certificate serial: 019AF276B283D3DEF0F0082B29AC2976317E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft Manifest number: 0195 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: +yYAxAxuIPsK+Xo8oUHWvtF4XC1MrGc78AJYGyF8zYc=) 2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b2:83:d3:de:f0:f0:08:2b:29:ac:29:76:31:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=215a7a2ac61adfd12c4a15031b73e7925f7d6102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:d6:c5:54:5f:2a:e8:04:ce:3e:a3:82:3a: 6d:a8:da:69:b2:21:06:c7:cb:9f:c5:4c:ee:e9:52: 7c:7a:37:ab:1a:af:50:b0:ff:0b:fa:fd:4e:dd:15: d8:91:c0:fa:ad:8d:32:2e:e3:26:0a:32:87:71:81: ee:35:84:39:11:07:f7:3c:be:bc:4a:8f:8c:d0:35: 6b:ab:70:79:c1:b7:f7:70:5f:a2:cd:d4:fb:74:4f: 01:2b:ac:65:3a:97:44:1c:71:e5:34:02:c0:f4:2d: bf:5d:d9:3f:93:12:6f:b1:bd:c4:c2:66:93:18:32: 50:12:08:fe:6e:70:19:0b:de:23:4d:14:17:03:a1: c5:34:1f:d0:66:f8:3c:65:7f:10:1c:43:2f:14:57: 6f:d6:36:93:da:9f:be:be:ff:e1:bc:56:b2:67:13: 73:53:38:37:36:f6:cc:5c:83:dd:49:5f:c3:6f:07: 5b:ef:89:8a:0a:7c:98:fa:47:19:87:30:b0:ac:4c: cf:6d:9c:25:e0:c5:1d:dd:69:06:46:9a:c0:d0:7c: ed:a0:74:d8:b2:5c:67:ad:69:e2:a7:d2:7d:00:5e: 9f:7a:38:5f:4f:41:68:10:c3:9b:34:21:4a:4a:be: 15:c6:59:60:9e:ca:0b:f5:00:78:9c:de:a9:10:40: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:7A:2A:C6:1A:DF:D1:2C:4A:15:03:1B:73:E7:92:5F:7D:61:02 X509v3 Authority Key Identifier: keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:1d:09:f4:f1:ba:ee:fe:50:e3:ae:b3:8e:4f:89:cf:01: 57:1d:7a:fa:ab:9d:de:c9:61:37:3d:01:41:de:aa:e5:4f:13: 90:b7:65:e9:8b:1f:3c:8a:ab:21:64:b3:a4:fb:30:e3:00:c7: 30:87:58:e1:97:5e:cc:35:83:34:67:de:83:7c:98:26:8d:6c: a4:15:d3:f6:6f:75:55:ec:00:d0:d7:53:8d:c4:df:49:d8:fb: ee:04:22:56:d7:6b:59:d9:f9:1c:8e:93:78:be:d7:97:fa:4c: b5:34:6e:21:8d:52:77:31:6b:a8:25:08:b3:e1:08:9f:b8:ee: 99:1f:1f:7e:f5:64:75:c7:6a:2f:8b:c0:18:62:13:aa:91:43: a0:da:6a:12:70:2e:11:43:f2:3c:89:da:d1:84:0b:87:d7:7b: b4:86:74:18:bc:73:1e:93:e1:d4:b4:4d:26:de:9f:25:03:90: c1:6a:0c:6c:44:62:7a:d1:a1:3c:a8:1c:a1:29:07:40:f4:df: 78:b8:68:06:9a:94:b0:ad:e4:b4:22:82:8e:dc:e7:98:8e:93: 17:16:36:27:93:e4:51:3d:a1:c8:e2:cd:9c:12:12:a3:25:5f: 24:e0:49:f0:7f:f0:06:36:1b:74:c7:51:fc:f4:65:1c:c2:4f: d4:62:6f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrKD097w8AgrKawpdjF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj ODIzN2IwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EygyMTVhN2EyYWM2MWFkZmQxMmM0YTE1MDMxYjczZTc5MjVmN2Q2MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFrWxVRfKugEzj6jgjptqNppsiEG x8ufxUzu6VJ8ejerGq9QsP8L+v1O3RXYkcD6rY0yLuMmCjKHcYHuNYQ5EQf3PL68 So+M0DVrq3B5wbf3cF+izdT7dE8BK6xlOpdEHHHlNALA9C2/Xdk/kxJvsb3EwmaT GDJQEgj+bnAZC94jTRQXA6HFNB/QZvg8ZX8QHEMvFFdv1jaT2p++vv/hvFayZxNz Uzg3NvbMXIPdSV/Dbwdb74mKCnyY+kcZhzCwrEzPbZwl4MUd3WkGRprA0HztoHTY slxnrWnip9J9AF6fejhfT0FoEMObNCFKSr4VxllgnsoL9QB4nN6pEEAklwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFaeirGGt/RLEoVAxtz55JffWECMB8GA1UdIwQY MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5 LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQusdCfTx uu7+UOOus45Pic8BVx16+qud3slhNz0BQd6q5U8TkLdl6YsfPIqrIWSzpPsw4wDH MIdY4ZdezDWDNGfeg3yYJo1spBXT9m91VewA0NdTjcTfSdj77gQiVtdrWdn5HI6T eL7Xl/pMtTRuIY1SdzFrqCUIs+EIn7jumR8ffvVkdcdqL4vAGGITqpFDoNpqEnAu EUPyPIna0YQLh9d7tIZ0GLxzHpPh1LRNJt6fJQOQwWoMbERietGhPKgcoSkHQPTf eLhoBpqUsK3ktCKCjtznmI6TFxY2J5PkUT2hyOLNnBISoyVfJOBJ8H/wBjYbdMdR /PRlHMJP1GJvcw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:05 2025 by rpki-client