This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json) Hash identifier: 93Q0JLFgKHhbHwq1LlzXzeIBfbINKz5FGcS/y2KQHkA= Subject key identifier: E4:E4:20:85:27:4D:87:C9:6F:A3:84:33:DE:52:02:8F:9B:C4:16:E9 Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Certificate serial: 019AF49BC0654F9F2433B30DFCE44543103D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 17:00:39 +0000 Manifest this update: Sat 06 Dec 2025 17:00:39 +0000 Manifest next update: Sun 07 Dec 2025 17:00:39 +0000 Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=) 2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: cgmxzQOJTtGZENINghblBSQwPJ20Lis6naLVeaVsfbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c0:65:4f:9f:24:33:b3:0d:fc:e4:45:43:10:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Validity Not Before: Dec 6 17:00:39 2025 GMT Not After : Dec 7 17:00:39 2025 GMT Subject: CN=e4e42085274d87c96fa38433de52028f9bc416e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:c7:8a:ae:24:81:10:91:49:e7:72:97:ed: f5:96:69:3a:26:8b:a2:72:8c:c0:5a:b4:85:3a:dd: f8:16:b0:6d:9e:b9:a5:04:18:75:01:db:c3:48:d1: dc:43:f0:6d:8b:ed:1a:9b:5d:9c:5a:b7:22:c4:9a: 1e:a7:46:f8:d6:1c:e8:b9:03:70:4f:4f:18:9e:6e: ac:47:c7:12:0c:fc:d7:22:71:b1:b7:1c:6e:72:17: 4f:13:db:3f:71:6c:52:94:38:56:95:d8:14:12:e7: 13:12:f9:ea:c1:6b:bc:36:a8:ef:74:04:f5:81:5d: cf:e9:ae:ec:e8:3d:3d:b5:e7:b7:cf:3f:d1:2b:82: d0:56:17:a5:97:c4:fc:45:5e:7a:1a:f0:d3:43:35: 38:d5:60:4a:b2:95:5a:24:d1:50:15:a5:04:18:8c: e3:70:45:de:2f:ea:a5:e7:08:1a:61:cd:6a:12:60: 79:0a:27:7d:87:0c:dd:3f:fc:3e:c5:e2:0e:00:fb: f0:f7:87:82:dd:a1:02:d8:14:ef:34:1e:bc:c6:46: da:8c:18:54:3e:ba:9e:ed:2c:3e:35:31:e1:86:60: b9:16:d8:49:b1:a5:aa:c0:ce:06:5a:5e:a8:0e:39: 33:37:6a:b5:d2:8b:cb:9a:41:89:3b:6d:c3:db:6b: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E4:20:85:27:4D:87:C9:6F:A3:84:33:DE:52:02:8F:9B:C4:16:E9 X509v3 Authority Key Identifier: keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:b3:78:e1:fb:48:c8:f7:b0:01:ad:fd:a8:7d:d6:38:6a: 12:3d:b4:bd:e3:f3:6f:d0:f6:5e:c1:5a:68:ef:29:58:ea:62: db:79:c3:60:8c:3e:a6:e3:43:dd:d4:56:d2:3d:22:cd:c7:dd: a7:b6:f8:27:a7:02:ae:d3:15:aa:4d:74:99:96:fd:07:97:bf: fb:06:df:81:81:ec:30:f5:b3:6f:be:5d:31:a7:b3:1d:79:32: 20:e7:49:0e:09:17:d3:bc:e4:88:ed:f8:fd:02:8f:87:b4:fe: ae:7c:0d:e2:d6:3e:b3:e0:96:bc:db:fd:07:5d:f6:ae:df:59: eb:bb:62:3c:32:a4:0d:fa:d3:2b:28:1d:9e:10:53:fb:0f:29: 2a:04:dd:09:7e:c1:24:e8:06:e7:41:3f:ff:b8:ed:49:0b:2a: 19:bf:81:40:ea:36:d8:82:32:8e:82:ef:3d:e5:ef:f9:f1:70: 7d:27:6c:c4:07:05:bd:1c:aa:08:dc:6c:47:08:44:43:c1:ed: d8:4a:39:75:88:b3:3b:39:20:b8:fc:b4:48:d7:4e:58:1d:24: 87:43:2c:6a:50:ba:f6:8d:e1:bf:e1:89:14:c2:17:2b:a5:a2: 31:76:cf:9d:dd:cf:05:b1:b1:c1:30:75:87:3d:16:f8:bb:8b: 75:af:28:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8BlT58kM7MN/ORFQxA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz ZmIyOGIwHhcNMjUxMjA2MTcwMDM5WhcNMjUxMjA3MTcwMDM5WjAzMTEwLwYDVQQD EyhlNGU0MjA4NTI3NGQ4N2M5NmZhMzg0MzNkZTUyMDI4ZjliYzQxNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhTHiq4kgRCRSedyl+31lmk6Joui cozAWrSFOt34FrBtnrmlBBh1AdvDSNHcQ/Bti+0am12cWrcixJoep0b41hzouQNw T08Ynm6sR8cSDPzXInGxtxxuchdPE9s/cWxSlDhWldgUEucTEvnqwWu8NqjvdAT1 gV3P6a7s6D09tee3zz/RK4LQVhell8T8RV56GvDTQzU41WBKspVaJNFQFaUEGIzj cEXeL+ql5wgaYc1qEmB5Cid9hwzdP/w+xeIOAPvw94eC3aEC2BTvNB68xkbajBhU Prqe7Sw+NTHhhmC5FthJsaWqwM4GWl6oDjkzN2q10ovLmkGJO23D22sLRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTkIIUnTYfJb6OEM95SAo+bxBbpMB8GA1UdIwQY MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt N2Y2NzQ0MmY5ZjMyLzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB6zeOH7 SMj3sAGt/ah91jhqEj20vePzb9D2XsFaaO8pWOpi23nDYIw+puND3dRW0j0izcfd p7b4J6cCrtMVqk10mZb9B5e/+wbfgYHsMPWzb75dMaezHXkyIOdJDgkX07zkiO34 /QKPh7T+rnwN4tY+s+CWvNv9B132rt9Z67tiPDKkDfrTKygdnhBT+w8pKgTdCX7B JOgG50E//7jtSQsqGb+BQOo22IIyjoLvPeXv+fFwfSdsxAcFvRyqCNxsRwhEQ8Ht 2Eo5dYizOzkguPy0SNdOWB0kh0MsalC69o3hv+GJFMIXK6WiMXbPnd3PBbGxwTB1 hz0W+LuLda8ouA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:08 2025 by rpki-client