This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json) Hash identifier: IAFy5KHZEsSj+d8CgbmYl4XkLkKVu4651ZvAbH2jwSA= Subject key identifier: 76:8E:8F:1B:21:0A:BF:B4:90:CA:68:DE:14:8F:4A:B7:DF:66:FD:47 Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Certificate serial: 019B4ADF0D1D0154AF39DCE324F81BC6F9EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft Manifest number: 1224 Signing time: Tue 23 Dec 2025 11:01:30 +0000 Manifest this update: Tue 23 Dec 2025 11:01:30 +0000 Manifest next update: Wed 24 Dec 2025 11:01:30 +0000 Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: K8Aigd4WN0wTtpl4cUhfzytJJEyvU7AsiIzGpDiwZ/M=) 2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:0d:1d:01:54:af:39:dc:e3:24:f8:1b:c6:f9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad Validity Not Before: Dec 23 11:01:30 2025 GMT Not After : Dec 24 11:01:30 2025 GMT Subject: CN=768e8f1b210abfb490ca68de148f4ab7df66fd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:70:61:c7:df:e3:ec:f0:1e:a3:e2:95:0e: c5:fd:d2:b0:94:c0:d8:2e:ec:82:32:ea:ce:8a:8d: ca:7e:43:6c:77:88:6f:77:ad:29:8a:a1:d1:1d:ee: 21:df:4c:73:20:07:b6:46:af:a0:68:66:58:8c:68: e3:b6:9e:b5:cc:4d:e8:21:a4:cb:8c:be:25:f4:db: d2:70:72:f2:ef:42:28:ce:13:a9:ec:33:ec:1c:ef: 67:8f:d9:f4:4a:ec:3a:93:db:85:a1:a0:79:1f:de: 29:ae:21:12:af:69:23:89:da:65:66:dc:84:4f:97: a6:f1:91:ff:37:87:2c:16:5d:38:18:00:be:65:46: 8b:67:53:10:6b:de:9d:d2:73:88:02:db:d3:08:45: 59:e7:66:c0:21:10:74:cd:f7:d2:36:02:47:32:59: 82:09:3b:40:78:25:8c:d7:c6:1b:15:dc:e2:13:da: ef:27:6d:04:99:b3:fe:6f:46:1e:45:2f:af:0e:d6: 97:3a:14:3e:15:a1:0e:0a:f7:eb:a3:7e:95:20:02: 07:20:72:41:17:07:c6:1e:96:89:81:d6:fc:0c:99: 84:78:66:d8:b5:91:b6:a6:fc:07:8a:20:7d:6b:5e: 43:f3:c0:13:54:08:d9:29:40:8b:97:58:d1:a2:90: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:8F:1B:21:0A:BF:B4:90:CA:68:DE:14:8F:4A:B7:DF:66:FD:47 X509v3 Authority Key Identifier: keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c9:a4:a2:9b:35:ed:49:20:85:a6:94:11:67:4b:bd:37:f1: b5:4c:80:0d:fa:fb:cd:3e:85:f8:3d:02:7e:6f:1c:35:c8:70: d5:fd:32:3f:e6:10:88:de:ca:fe:b1:ef:b4:34:4c:15:54:90: 05:0d:c1:4e:e5:77:73:7b:26:7c:74:3a:63:5e:30:ed:f9:50: c1:43:c1:9b:27:63:e2:12:f4:31:b4:ce:f7:a2:7c:46:74:89: b7:be:51:28:be:32:10:b2:35:48:2b:44:ce:49:ca:00:86:7f: 1c:5a:45:80:a6:da:7f:5c:9a:0f:f5:2d:ab:15:69:4f:c6:99: 55:11:2b:23:4f:6a:b2:12:4c:67:72:38:64:43:89:b4:ce:4e: d9:21:50:68:fb:fe:02:29:01:38:ad:52:9f:62:e5:4c:bf:12: 94:70:4d:0b:9a:e5:f5:e9:42:d2:e8:32:1f:2d:02:00:d0:5f: 41:09:58:41:24:e5:c1:80:80:60:f6:01:85:70:4b:ad:ed:14: 3a:f9:91:5c:e5:09:1f:0a:13:21:68:c4:ae:4a:54:17:a8:77: ce:e2:72:ef:1c:0b:70:8e:b1:a0:b9:2a:b6:fd:41:b7:88:92: 60:36:32:52:8d:72:38:a6:7a:ae:e6:9c:5b:1b:e8:f5:c7:bb: d0:40:2a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3w0dAVSvOdzjJPgbxvnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi YTZjYWQwHhcNMjUxMjIzMTEwMTMwWhcNMjUxMjI0MTEwMTMwWjAzMTEwLwYDVQQD Eyg3NjhlOGYxYjIxMGFiZmI0OTBjYTY4ZGUxNDhmNGFiN2RmNjZmZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51wYcff4+zwHqPilQ7F/dKwlMDY LuyCMurOio3KfkNsd4hvd60piqHRHe4h30xzIAe2Rq+gaGZYjGjjtp61zE3oIaTL jL4l9NvScHLy70IozhOp7DPsHO9nj9n0Suw6k9uFoaB5H94priESr2kjidplZtyE T5em8ZH/N4csFl04GAC+ZUaLZ1MQa96d0nOIAtvTCEVZ52bAIRB0zffSNgJHMlmC CTtAeCWM18YbFdziE9rvJ20EmbP+b0YeRS+vDtaXOhQ+FaEOCvfro36VIAIHIHJB FwfGHpaJgdb8DJmEeGbYtZG2pvwHiiB9a15D88ATVAjZKUCLl1jRopBsgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaOjxshCr+0kMpo3hSPSrffZv1HMB8GA1UdIwQY MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1 LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMmkops1 7UkghaaUEWdLvTfxtUyADfr7zT6F+D0Cfm8cNchw1f0yP+YQiN7K/rHvtDRMFVSQ BQ3BTuV3c3smfHQ6Y14w7flQwUPBmydj4hL0MbTO96J8RnSJt75RKL4yELI1SCtE zknKAIZ/HFpFgKbaf1yaD/UtqxVpT8aZVRErI09qshJMZ3I4ZEOJtM5O2SFQaPv+ AikBOK1Sn2LlTL8SlHBNC5rl9elC0ugyHy0CANBfQQlYQSTlwYCAYPYBhXBLre0U OvmRXOUJHwoTIWjErkpUF6h3zuJy7xwLcI6xoLkqtv1Bt4iSYDYyUo1yOKZ6ruac Wxvo9ce70EAqNw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:36:54 2025 by rpki-client