This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json) Hash identifier: K0YbUenQiYEBFRWi+j1KsHRH1GB4CJdOsVskRhMMtEA= Subject key identifier: 0D:4D:C9:22:2C:76:E9:3B:95:CE:D1:35:7E:2B:95:48:79:2F:08:DD Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Certificate serial: 019AF23F930E6BACCF009E6D5EC788137B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft Manifest number: 05B8 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=) 2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: ot9IAgsjHqWGwlUr0EDt9p1Us7HoC+po8WyxxE/b0o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:0e:6b:ac:cf:00:9e:6d:5e:c7:88:13:7b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=0d4dc9222c76e93b95ced1357e2b9548792f08dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:82:77:1b:a5:cc:e6:31:2f:24:5e:af:0e: d0:80:97:79:82:73:21:78:51:9f:e7:73:f0:6f:05: f7:1c:0c:ea:41:cc:18:2d:46:6d:04:1a:42:d7:21: 93:66:4f:92:53:7b:3e:62:f4:45:f9:0f:69:6b:91: e4:44:bd:d4:85:e6:4b:17:65:41:f4:cb:bf:65:0d: c3:02:0a:8b:1a:e5:56:56:bd:6d:3b:7d:f1:30:6d: cc:66:e3:27:d4:0c:83:d5:95:25:26:bc:ce:5e:ea: 53:48:4e:b8:49:60:c1:5a:bc:d1:99:ca:d5:33:ea: 50:57:60:81:d1:46:46:b0:3e:57:3d:03:cf:59:fe: 33:6b:6a:60:20:6d:ee:26:e4:a2:08:32:6c:a8:8d: d0:96:83:78:77:ed:de:01:1d:53:0e:74:58:19:01: 4f:1b:05:4c:2e:76:e9:09:9b:e3:18:bf:8d:48:b4: b5:11:75:e9:8a:14:ab:5b:3d:42:e1:2b:83:56:88: ab:4d:d9:48:ce:ac:35:4b:73:5c:9d:53:e8:50:4f: ea:90:5a:35:e6:da:55:45:d9:42:52:6a:e0:5a:e8: 96:ef:6e:b5:c4:bd:51:bf:5d:99:cf:81:8e:17:b1: 6c:0b:71:fe:fb:b9:a3:47:a3:ff:68:85:9b:da:3e: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:C9:22:2C:76:E9:3B:95:CE:D1:35:7E:2B:95:48:79:2F:08:DD X509v3 Authority Key Identifier: keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:58:55:62:1d:6f:6e:fe:37:a2:74:bc:6c:55:d8:39:23:4d: ff:8a:a8:da:d8:41:98:1c:c4:3b:47:6d:be:4d:36:9f:c7:30: 9e:27:9e:fe:e5:fc:ff:28:fa:03:4d:b3:77:ec:da:c6:b7:5b: 33:af:94:6b:97:c0:3e:75:c8:7d:22:05:93:96:ce:c4:25:e4: be:99:f6:95:49:34:a4:10:41:79:90:a5:06:92:62:0c:1f:a0: bd:a4:16:84:82:ec:79:ab:0c:da:49:b1:a1:74:b0:22:b3:25: 77:09:04:a4:aa:b3:db:44:06:c2:c8:82:fe:af:e3:cd:f2:a4: f8:fe:7b:57:0f:ea:d6:19:4b:e0:b3:f4:26:07:73:2a:3e:79: 79:ca:15:58:d1:26:13:e4:df:10:12:58:8f:f8:cd:f4:c0:9f: 64:b1:4c:22:a0:31:f6:22:66:ec:8e:c5:10:e4:d1:b8:19:ac: 0f:7d:f1:95:24:4a:6b:11:ad:31:0a:a8:20:a2:8f:69:d9:c3: 25:ba:9d:58:61:17:5e:d6:ec:b0:24:63:bf:50:86:1e:83:81: b9:f2:5b:3c:64:be:4d:61:d0:36:f0:63:eb:64:4f:8f:3f:81: 5f:73:f2:47:52:c9:14:b6:18:05:cf:57:38:e0:db:58:89:fa: 85:dd:14:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5MOa6zPAJ5tXseIE3uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2 YzExN2UwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EygwZDRkYzkyMjJjNzZlOTNiOTVjZWQxMzU3ZTJiOTU0ODc5MmYwOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2GCdxulzOYxLyRerw7QgJd5gnMh eFGf53PwbwX3HAzqQcwYLUZtBBpC1yGTZk+SU3s+YvRF+Q9pa5HkRL3UheZLF2VB 9Mu/ZQ3DAgqLGuVWVr1tO33xMG3MZuMn1AyD1ZUlJrzOXupTSE64SWDBWrzRmcrV M+pQV2CB0UZGsD5XPQPPWf4za2pgIG3uJuSiCDJsqI3QloN4d+3eAR1TDnRYGQFP GwVMLnbpCZvjGL+NSLS1EXXpihSrWz1C4SuDVoirTdlIzqw1S3NcnVPoUE/qkFo1 5tpVRdlCUmrgWuiW7261xL1Rv12Zz4GOF7FsC3H++7mjR6P/aIWb2j4eKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1NySIsduk7lc7RNX4rlUh5LwjdMB8GA1UdIwQY MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1hVYh1v bv43onS8bFXYOSNN/4qo2thBmBzEO0dtvk02n8cwniee/uX8/yj6A02zd+zaxrdb M6+Ua5fAPnXIfSIFk5bOxCXkvpn2lUk0pBBBeZClBpJiDB+gvaQWhILseasM2kmx oXSwIrMldwkEpKqz20QGwsiC/q/jzfKk+P57Vw/q1hlL4LP0JgdzKj55ecoVWNEm E+TfEBJYj/jN9MCfZLFMIqAx9iJm7I7FEOTRuBmsD33xlSRKaxGtMQqoIKKPadnD JbqdWGEXXtbssCRjv1CGHoOBufJbPGS+TWHQNvBj62RPjz+BX3PyR1LJFLYYBc9X OODbWIn6hd0UKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:57 2025 by rpki-client