This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json) Hash identifier: DaQfL1q0fU2LNCpCBnP3i01+I1IMdpq2SqHzbrvyFc0= Subject key identifier: 88:F7:1A:31:6C:8A:BF:54:C2:70:65:A9:B5:4F:AE:F7:7C:04:57:AF Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Certificate serial: 019AF5E5CFD6078CEE84CF51F49C0126C7B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft Manifest number: 07D6 Signing time: Sat 06 Dec 2025 23:01:10 +0000 Manifest this update: Sat 06 Dec 2025 23:01:10 +0000 Manifest next update: Sun 07 Dec 2025 23:01:10 +0000 Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: ZPnW5wRWIGqaX9cpPQtkbokAMd0uNqP9T6oYtQyiIFI=) 2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:cf:d6:07:8c:ee:84:cf:51:f4:9c:01:26:c7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Validity Not Before: Dec 6 23:01:10 2025 GMT Not After : Dec 7 23:01:10 2025 GMT Subject: CN=88f71a316c8abf54c27065a9b54faef77c0457af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:a3:b5:ff:a6:08:4a:d0:8e:0a:75:ad:31: bc:cb:b3:4d:3f:1e:0e:31:04:cf:f9:3d:87:8b:dc: 58:54:39:26:90:bc:18:f2:ce:7c:8a:00:e6:16:e1: 1c:a3:f7:3a:8d:dc:5e:5c:95:dc:b9:84:86:91:33: fa:72:f0:fc:c7:3e:d5:e6:0c:7e:dd:3b:21:73:f1: 35:b7:32:66:be:fc:b3:e5:92:02:0a:2b:af:64:7e: fb:87:b1:c8:e4:55:43:94:a6:70:62:fe:ba:79:72: 94:50:e1:ff:34:0b:1c:d3:e0:eb:7f:84:9f:c7:48: 2c:e5:06:26:11:93:9f:e7:0c:02:b6:4d:53:83:ff: 04:c1:9c:c9:59:27:0f:48:ab:70:af:e5:45:41:c3: 4f:33:08:0b:0f:41:b1:41:23:75:2a:69:1d:b3:e4: a1:ce:bc:8f:e5:06:c9:f8:4f:b2:42:03:03:2e:70: d2:75:80:c9:19:b5:03:b5:c2:7f:1b:04:c4:ea:42: 69:5b:23:bd:60:63:31:a7:04:72:df:7d:20:89:95: cf:30:e7:19:ce:c8:3a:bb:e6:52:fb:fb:3f:31:63: 53:3b:f9:5e:80:7f:0f:e5:e1:22:c6:08:3c:51:52: 2d:c8:2c:2d:18:e1:45:be:1a:7f:92:aa:62:3c:8b: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:1A:31:6C:8A:BF:54:C2:70:65:A9:B5:4F:AE:F7:7C:04:57:AF X509v3 Authority Key Identifier: keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:fc:51:cf:b5:de:0e:10:6d:6a:7c:03:da:8d:fb:9c:d2:c5: 12:0e:23:cd:1b:d7:a9:4f:e2:cb:57:e9:9a:e1:d3:82:da:b8: 9b:e2:c4:14:c4:57:6a:48:4f:1b:6d:59:bc:bc:11:67:cf:d0: 6a:95:e2:8d:94:d5:a4:7a:bd:1a:00:b7:53:50:b5:b7:06:28: ec:93:3a:04:24:19:87:98:87:de:d8:1f:d7:3c:3b:32:98:d5: a8:d2:2d:d9:4d:4e:1d:76:d7:bd:19:db:9c:16:cf:56:41:56: 2f:b5:47:8e:39:07:40:19:f2:67:3f:2a:31:57:84:95:20:be: 6e:ec:4c:99:96:a7:b3:fe:a9:9b:29:7a:e0:35:d1:bc:6f:78: 2f:ce:5a:eb:46:08:ef:48:e0:ee:3f:40:27:99:7d:71:05:81: 32:0a:29:c8:0c:6e:3f:4d:ba:1e:9a:58:6e:9b:c9:43:b1:2a: 4d:07:e3:b2:f5:69:9f:45:1b:02:15:26:8c:21:d8:68:f4:67: 6b:3f:20:00:61:b5:1a:f4:ae:77:b3:28:bf:dd:97:21:f3:3a: ea:65:ae:0e:1e:84:a7:2d:da:36:c0:a9:47:50:db:ca:42:dc: a3:3e:e8:f1:09:ca:ac:ab:53:bc:3d:ee:42:fd:85:6e:80:84: 04:21:3e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15c/WB4zuhM9R9JwBJse0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGFiMzJkZmQ2ZTViYzY5OWU3YmYzNmU4MTgyOThkYzdm YmIyNDYwHhcNMjUxMjA2MjMwMTEwWhcNMjUxMjA3MjMwMTEwWjAzMTEwLwYDVQQD Eyg4OGY3MWEzMTZjOGFiZjU0YzI3MDY1YTliNTRmYWVmNzdjMDQ1N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznijtf+mCErQjgp1rTG8y7NNPx4O MQTP+T2Hi9xYVDkmkLwY8s58igDmFuEco/c6jdxeXJXcuYSGkTP6cvD8xz7V5gx+ 3Tshc/E1tzJmvvyz5ZICCiuvZH77h7HI5FVDlKZwYv66eXKUUOH/NAsc0+Drf4Sf x0gs5QYmEZOf5wwCtk1Tg/8EwZzJWScPSKtwr+VFQcNPMwgLD0GxQSN1Kmkds+Sh zryP5QbJ+E+yQgMDLnDSdYDJGbUDtcJ/GwTE6kJpWyO9YGMxpwRy330giZXPMOcZ zsg6u+ZS+/s/MWNTO/legH8P5eEixgg8UVItyCwtGOFFvhp/kqpiPIuQFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj3GjFsir9UwnBlqbVPrvd8BFevMB8GA1UdIwQY MBaAFG/asy39blvGmee/NugYKY3H+7JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQt ZjFlNTVmNTM3Yzg3LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQtZjFlNTVmNTM3Yzg3 LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfxRz7Xe DhBtanwD2o37nNLFEg4jzRvXqU/iy1fpmuHTgtq4m+LEFMRXakhPG21ZvLwRZ8/Q apXijZTVpHq9GgC3U1C1twYo7JM6BCQZh5iH3tgf1zw7MpjVqNIt2U1OHXbXvRnb nBbPVkFWL7VHjjkHQBnyZz8qMVeElSC+buxMmZans/6pmyl64DXRvG94L85a60YI 70jg7j9AJ5l9cQWBMgopyAxuP026HppYbpvJQ7EqTQfjsvVpn0UbAhUmjCHYaPRn az8gAGG1GvSud7Mov92XIfM66mWuDh6Epy3aNsCpR1DbykLcoz7o8QnKrKtTvD3u Qv2FboCEBCE+dw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:26 2025 by rpki-client