This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft File: B2yh-gAAa6SP7plAIRY6koqhgE4.mft (raw, json) Hash identifier: QRpZM9oMzPqQTd6haBH/nJUQBWjkaJl8xWUClK6DZm4= Subject key identifier: 25:00:CB:90:88:A9:F3:83:A5:22:A1:1A:D6:5B:11:AA:DD:F8:DE:A2 Authority key identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E Certificate issuer: /CN=076ca1fa00006ba48fee994021163a928aa1804e Certificate serial: 019AF12EA18F2CAAD30FACA5FCA4D7473474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft Manifest number: 22 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: B2yh-gAAa6SP7plAIRY6koqhgE4.crl (hash: 7g9QkUpLwm7QocMPEaRg/iDBeXR2JS1MYI/P619d4lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a1:8f:2c:aa:d3:0f:ac:a5:fc:a4:d7:47:34:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076ca1fa00006ba48fee994021163a928aa1804e Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=2500cb9088a9f383a522a11ad65b11aaddf8dea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:b5:0b:65:6f:68:53:d4:92:d2:52:2e:ff: 8a:f2:72:37:97:6b:c2:f2:e8:34:bf:62:0a:11:44: e0:5f:04:ff:1f:55:a0:24:db:dc:ab:fb:fa:bf:f7: a4:00:6f:d1:4d:91:0c:86:90:86:50:d5:d1:27:aa: 31:78:83:9b:a5:ba:57:8e:3f:39:20:b2:fc:c3:6c: be:b4:dd:ef:53:41:f7:fe:12:24:f0:e4:a5:0e:da: 0c:7c:87:65:56:4a:6b:ee:5a:d4:ce:24:77:75:f1: b2:0f:a5:cf:53:f0:2c:ec:b2:d0:b7:d6:17:38:02: 63:e9:71:30:b5:ca:1a:85:f5:20:73:56:18:32:4e: 4d:e5:bd:7e:6d:e9:f3:77:ae:d1:2f:03:1c:76:cd: 67:c0:cc:a5:f8:0e:c3:72:3b:92:a2:1c:c7:1c:40: b2:34:bd:e9:a5:22:89:ff:ce:7b:b3:1b:ce:af:ee: d9:c5:79:5e:f6:7f:fb:15:7d:da:12:a7:8d:92:16: c8:e9:12:13:70:eb:3f:b0:fb:b7:5f:9a:a2:d2:9a: 18:b3:f8:c9:ad:bc:de:6f:66:44:24:be:04:15:3d: 0d:53:52:af:82:6f:8d:d8:b5:33:4d:55:20:33:aa: 8d:de:50:60:7f:dd:de:42:5a:2e:d4:c3:5e:04:16: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:00:CB:90:88:A9:F3:83:A5:22:A1:1A:D6:5B:11:AA:DD:F8:DE:A2 X509v3 Authority Key Identifier: keyid:07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:3d:cd:8a:a6:c2:a7:00:e4:cd:e8:1a:a6:0a:b8:57:72: 81:e8:fd:81:f1:5a:f9:e1:92:6d:4a:e4:85:b3:21:37:dd:8a: 6f:41:a9:4f:88:39:ce:b1:c8:8e:04:a9:dd:57:c3:79:03:0a: 44:d4:b2:79:ef:be:7d:a5:11:7d:95:2a:a7:7f:42:c1:96:5b: 6d:02:17:41:92:b8:2e:98:11:0b:ac:fe:b1:92:71:fb:33:69: 29:08:cf:a8:ac:7d:ba:c9:e6:ea:f4:05:01:8f:64:43:42:bb: 88:f1:c4:19:48:5e:c1:59:7c:35:e7:53:24:96:e4:c0:25:a5: 39:22:0e:6b:51:77:03:cd:22:83:d6:8b:39:1f:1f:7a:cd:da: 6d:25:75:93:bb:69:a6:fc:06:04:7e:24:07:8f:12:60:36:19: 76:75:a4:c2:28:2c:4f:4b:37:d0:3f:02:48:e9:4a:95:92:54: 84:2c:82:b6:6b:b1:a4:4f:35:cb:22:da:c1:a4:f6:3d:f9:7f: e4:09:40:2a:a1:ee:c4:f6:3b:e1:35:8b:50:14:ba:ae:3e:8c: 83:91:0d:ac:ab:c5:bc:ed:ab:8a:5d:de:02:08:db:c3:90:e2: 18:b8:4b:bf:d5:45:31:bc:40:8c:2a:d5:a3:d8:00:b2:50:17: ac:7e:a0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqGPLKrTD6yl/KTXRzR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NmNhMWZhMDAwMDZiYTQ4ZmVlOTk0MDIxMTYzYTkyOGFh MTgwNGUwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD EygyNTAwY2I5MDg4YTlmMzgzYTUyMmExMWFkNjViMTFhYWRkZjhkZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fK1C2VvaFPUktJSLv+K8nI3l2vC 8ug0v2IKEUTgXwT/H1WgJNvcq/v6v/ekAG/RTZEMhpCGUNXRJ6oxeIObpbpXjj85 ILL8w2y+tN3vU0H3/hIk8OSlDtoMfIdlVkpr7lrUziR3dfGyD6XPU/As7LLQt9YX OAJj6XEwtcoahfUgc1YYMk5N5b1+benzd67RLwMcds1nwMyl+A7DcjuSohzHHECy NL3ppSKJ/857sxvOr+7ZxXle9n/7FX3aEqeNkhbI6RITcOs/sPu3X5qi0poYs/jJ rbzeb2ZEJL4EFT0NU1Kvgm+N2LUzTVUgM6qN3lBgf93eQlou1MNeBBaB0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUAy5CIqfODpSKhGtZbEard+N6iMB8GA1UdIwQY MBaAFAdsofoAAGukj+6ZQCEWOpKKoYBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJ5aC1nQUFhNlNQN3BsQUlSWTZrb3FoZ0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzBlYTEtNWJmZi00NTc1LTg0ZTMt MTRmYjQ4ZWQ0NTRkLzEvQjJ5aC1nQUFhNlNQN3BsQUlSWTZrb3FoZ0U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iMzBlYTEtNWJmZi00NTc1LTg0ZTMtMTRmYjQ4ZWQ0NTRk LzEvQjJ5aC1nQUFhNlNQN3BsQUlSWTZrb3FoZ0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxk9zYqm wqcA5M3oGqYKuFdygej9gfFa+eGSbUrkhbMhN92Kb0GpT4g5zrHIjgSp3VfDeQMK RNSyee++faURfZUqp39CwZZbbQIXQZK4LpgRC6z+sZJx+zNpKQjPqKx9usnm6vQF AY9kQ0K7iPHEGUhewVl8NedTJJbkwCWlOSIOa1F3A80ig9aLOR8fes3abSV1k7tp pvwGBH4kB48SYDYZdnWkwigsT0s30D8CSOlKlZJUhCyCtmuxpE81yyLawaT2Pfl/ 5AlAKqHuxPY74TWLUBS6rj6Mg5ENrKvFvO2ril3eAgjbw5DiGLhLv9VFMbxAjCrV o9gAslAXrH6geA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:01 2025 by rpki-client