This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json) Hash identifier: 6qd+omjeX0CuHAI2nzobsC19E2YaSec48nmKfLz4krs= Subject key identifier: 57:42:C1:36:FD:F6:0D:C7:C6:7F:FC:17:4E:AA:11:6A:C2:B3:1F:FE Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Certificate serial: 019AF1D20E4B0F50FBA8705313F2F0392EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft Manifest number: 1638 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: 1-uN15WooRn1ILKR5q1XNAneYJkk.roa (hash: ceG95NNBWipckiQC0zFJWFVKiWVKgIWhdLvt9vkMIUA=) 2: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: MS/9bmD8JpAmow0BnFZjENfCiQUMb+p+LS08p2fbVZE=) 3: rNO8o619Q5SFsmTVHI_QY1wyUDE.roa (hash: Hb7rXVkAK9PEfMPmQwPGTYXFwRIopAaJ4bo+hnJHqKU=) 4: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0e:4b:0f:50:fb:a8:70:53:13:f2:f0:39:2e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=5742c136fdf60dc7c67ffc174eaa116ac2b31ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:75:4c:1c:95:73:96:4c:17:17:4c:8d:f4: 13:b4:8f:16:55:0e:b9:f3:36:a7:1b:47:f3:61:64: 1c:28:b1:43:14:77:98:a8:b4:2a:98:e2:4b:87:ab: c7:0c:84:ad:51:09:54:3d:8e:07:5c:49:04:3b:9d: 1d:93:ea:bd:28:45:80:28:c7:47:1f:b2:30:30:74: cc:bb:c9:0e:3f:5a:e2:63:8f:66:d7:73:cb:57:d6: 9e:dd:11:c6:05:26:be:06:df:c5:83:d4:1a:da:b1: f8:ac:dd:99:63:aa:7e:2e:1c:cb:f2:3f:7b:c7:06: f4:f0:f9:78:79:ae:90:d4:48:96:30:c4:96:11:1d: 81:e3:7f:9b:e2:ca:5e:ff:20:44:db:5d:1b:5f:fe: b5:01:19:7c:82:00:cf:ef:53:6d:10:5e:1b:59:0c: 01:da:e1:89:4a:fa:88:d2:cf:9a:45:f5:13:f7:79: f8:d9:df:4a:82:ec:8b:ef:d6:81:76:df:4c:f1:2b: 2d:20:49:52:59:eb:f9:eb:b9:73:6a:d1:0b:f4:72: cb:59:d3:a8:7e:f9:12:12:ed:7d:18:ed:c5:0e:66: 5b:bf:a4:b1:3d:be:f6:cb:12:97:d7:cd:6f:2a:56: 99:ff:d1:8a:79:ae:60:1e:42:47:70:80:bd:7e:c4: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:42:C1:36:FD:F6:0D:C7:C6:7F:FC:17:4E:AA:11:6A:C2:B3:1F:FE X509v3 Authority Key Identifier: keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:33:66:0a:aa:bc:a9:5f:ee:34:c3:17:aa:0b:af:98:bb:1f: b1:44:3c:b5:66:e0:52:d5:02:e9:6c:a5:32:51:b1:cd:59:1e: 08:24:5c:99:00:ab:45:dc:91:64:6d:f4:36:f9:28:f2:dd:76: b1:9d:93:e8:28:a3:a8:1b:b1:f8:db:de:ef:18:74:23:a0:4e: e5:89:f6:53:eb:80:3e:01:69:4b:b6:6e:1c:ce:bb:0b:b7:1e: 95:6f:29:6f:87:2d:e7:1d:a3:ae:14:e5:9f:a4:a4:80:9f:a0: b3:d4:6b:38:94:30:50:85:99:31:ae:d9:f8:e0:1d:2e:e2:b5: 18:db:33:df:50:61:a7:0d:04:dc:18:25:05:50:8e:a9:87:83: 40:30:81:e3:ad:e0:01:48:fc:aa:54:fd:a4:3f:46:43:0c:90: 8a:af:b0:42:ee:5c:14:c9:ce:79:5b:b5:a7:f6:3a:68:e8:5c: 13:66:82:9d:3d:10:6c:22:66:91:d7:c3:ee:24:62:15:c5:6e: 55:e7:0f:4e:10:96:88:37:bb:fd:f7:86:9b:77:9f:e4:c0:ee: c2:3f:68:94:2b:18:c1:0f:b6:29:99:1c:e1:a7:0c:45:14:c6: 05:6a:55:ef:b9:08:62:4a:6a:bc:08:d6:ce:aa:aa:50:78:67: 0d:9c:7b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g5LD1D7qHBTE/LwOS6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk NDIxNWUwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg1NzQyYzEzNmZkZjYwZGM3YzY3ZmZjMTc0ZWFhMTE2YWMyYjMxZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL51TByVc5ZMFxdMjfQTtI8WVQ65 8zanG0fzYWQcKLFDFHeYqLQqmOJLh6vHDIStUQlUPY4HXEkEO50dk+q9KEWAKMdH H7IwMHTMu8kOP1riY49m13PLV9ae3RHGBSa+Bt/Fg9Qa2rH4rN2ZY6p+LhzL8j97 xwb08Pl4ea6Q1EiWMMSWER2B43+b4spe/yBE210bX/61ARl8ggDP71NtEF4bWQwB 2uGJSvqI0s+aRfUT93n42d9KguyL79aBdt9M8SstIElSWev567lzatEL9HLLWdOo fvkSEu19GO3FDmZbv6SxPb72yxKX181vKlaZ/9GKea5gHkJHcIC9fsQNeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdCwTb99g3Hxn/8F06qEWrCsx/+MB8GA1UdIwQY MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3 LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTNmCqq8 qV/uNMMXqguvmLsfsUQ8tWbgUtUC6WylMlGxzVkeCCRcmQCrRdyRZG30Nvko8t12 sZ2T6CijqBux+Nve7xh0I6BO5Yn2U+uAPgFpS7ZuHM67C7celW8pb4ct5x2jrhTl n6SkgJ+gs9RrOJQwUIWZMa7Z+OAdLuK1GNsz31Bhpw0E3BglBVCOqYeDQDCB463g AUj8qlT9pD9GQwyQiq+wQu5cFMnOeVu1p/Y6aOhcE2aCnT0QbCJmkdfD7iRiFcVu VecPThCWiDe7/feGm3ef5MDuwj9olCsYwQ+2KZkc4acMRRTGBWpV77kIYkpqvAjW zqqqUHhnDZx7SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:33 2025 by rpki-client