This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json) Hash identifier: esAOssymSA7b9zsGca3sYw35yMksNF/giUONNP6uArA= Subject key identifier: 41:D0:AD:B0:13:8F:A0:C0:77:20:FE:FB:50:71:74:AD:56:34:24:4C Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b Certificate serial: 019AF16474AAABDAD6804E709ED61AA38872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: LWItJgW5nA20MM4EcrTLrOjEo8ek++kvK3RCNbl3r8I=) 2: S-uH2YCKKsWBJelfJrxohaQfZ4s.roa (hash: 7xEZvOLMz8mmv0R7hpmF8/cEimpEVrW14AuQipAjIzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:74:aa:ab:da:d6:80:4e:70:9e:d6:1a:a3:88:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=41d0adb0138fa0c07720fefb507174ad5634244c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:b7:63:6a:8a:52:b3:63:d2:79:c9:5e:55: 3b:e0:a5:b5:f0:3f:56:14:61:01:ec:7e:03:81:2f: 2d:07:4a:be:c9:63:73:63:e4:82:d7:b1:7a:35:b3: 09:7f:49:2b:fe:8e:f9:d1:37:72:1c:d0:6d:dc:14: 70:3a:c1:01:82:fc:eb:da:7f:5f:e5:bd:00:5a:85: 69:59:a3:60:8c:46:ea:71:12:db:6b:70:83:db:f7: 6f:39:96:e0:bf:94:46:c2:b0:48:94:fe:37:24:ef: de:6e:0e:ff:eb:05:23:33:90:b6:98:f5:f3:37:84: 61:6e:7e:3b:93:02:43:a5:20:58:ac:73:b1:eb:0f: 9f:9f:79:ed:40:e8:d2:e3:31:60:fd:5a:f4:42:3e: fa:7c:b1:a4:9b:bf:60:d0:c0:ec:4b:04:16:8d:17: c6:58:6a:8b:b7:b8:9f:d2:8c:97:ce:dd:21:13:93: 39:4a:6f:a2:64:11:73:d4:b9:df:55:32:3d:1f:4d: d7:3e:65:af:37:a5:35:74:fa:99:c1:84:7b:d1:6f: ca:44:84:b4:75:11:ce:8b:6e:9b:4e:9d:ee:63:68: 3b:d8:74:1e:85:91:22:1f:dc:26:62:c0:9c:fa:65: 11:dc:c9:71:4c:bb:24:56:fe:1e:ba:30:31:18:e9: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:AD:B0:13:8F:A0:C0:77:20:FE:FB:50:71:74:AD:56:34:24:4C X509v3 Authority Key Identifier: keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:82:88:14:5a:f0:10:77:b1:0d:4a:b6:b8:ab:be:49:b5:d4: 31:31:7f:2c:94:3b:ea:66:fc:71:cb:d8:c6:3a:7a:69:cf:37: 75:0d:89:c8:49:f3:05:da:98:b8:47:b6:6a:ef:fd:a3:c8:87: 52:d8:24:d9:a9:2f:f7:76:ce:dc:7a:77:ad:29:f1:8a:c7:31: c1:61:2b:b3:1b:4d:e4:ff:c6:d9:17:23:3e:d9:1b:56:bc:e4: 26:09:89:e0:84:61:ac:6b:ee:03:64:d2:1b:c3:5a:b5:1d:ef: a8:5b:5d:72:8e:82:17:57:af:2d:55:30:d1:c8:7f:16:27:f0: 09:34:30:57:84:18:2b:b2:8d:15:b7:88:fd:53:83:3b:cf:89: 1d:d4:28:71:40:ca:05:54:6f:25:d4:6d:c4:01:d2:a4:50:25: 39:4c:40:09:ab:56:76:78:9f:fd:11:ab:9f:c9:62:22:e9:3e: ae:36:27:08:1b:b6:f0:24:60:11:73:d2:7d:4c:f7:ea:79:9d: 17:67:84:40:9d:38:c4:30:77:bb:d4:ec:01:9c:85:70:92:51: bd:8f:dd:e7:9a:da:2f:67:a7:f9:ea:99:b0:ee:9c:0e:89:11: e3:9e:0b:16:85:19:a7:27:5d:35:27:ea:8c:f9:cd:f4:9f:f1: a7:97:81:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHSqq9rWgE5wntYao4hyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEwM2M5YzgyNjg1YWU2ZDZiM2QyMWQ2ODRiYmNmNDY4 YmY3NWIwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg0MWQwYWRiMDEzOGZhMGMwNzcyMGZlZmI1MDcxNzRhZDU2MzQyNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlO3Y2qKUrNj0nnJXlU74KW18D9W FGEB7H4DgS8tB0q+yWNzY+SC17F6NbMJf0kr/o750TdyHNBt3BRwOsEBgvzr2n9f 5b0AWoVpWaNgjEbqcRLba3CD2/dvOZbgv5RGwrBIlP43JO/ebg7/6wUjM5C2mPXz N4Rhbn47kwJDpSBYrHOx6w+fn3ntQOjS4zFg/Vr0Qj76fLGkm79g0MDsSwQWjRfG WGqLt7if0oyXzt0hE5M5Sm+iZBFz1LnfVTI9H03XPmWvN6U1dPqZwYR70W/KRIS0 dRHOi26bTp3uY2g72HQehZEiH9wmYsCc+mUR3MlxTLskVv4eujAxGOmaEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHQrbATj6DAdyD++1BxdK1WNCRMMB8GA1UdIwQY MBaAFAfaA8nIJoWubWs9IdaEu89Gi/dbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2It YWEwMWRjZDNkZmE3LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2ItYWEwMWRjZDNkZmE3 LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYKIFFrw EHexDUq2uKu+SbXUMTF/LJQ76mb8ccvYxjp6ac83dQ2JyEnzBdqYuEe2au/9o8iH Utgk2akv93bO3Hp3rSnxiscxwWErsxtN5P/G2RcjPtkbVrzkJgmJ4IRhrGvuA2TS G8NatR3vqFtdco6CF1evLVUw0ch/FifwCTQwV4QYK7KNFbeI/VODO8+JHdQocUDK BVRvJdRtxAHSpFAlOUxACatWdnif/RGrn8liIuk+rjYnCBu28CRgEXPSfUz36nmd F2eEQJ04xDB3u9TsAZyFcJJRvY/d55raL2en+eqZsO6cDokR454LFoUZpyddNSfq jPnN9J/xp5eBMA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:24 2025 by rpki-client