This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json) Hash identifier: K8FBAiPcMHFn27Hb3VJa5hDQ7iC0i0o6apAlYp3Wkt8= Subject key identifier: 2F:5F:40:F0:A4:22:9D:A4:5A:75:16:56:CF:62:F0:F1:2F:06:92:7A Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Certificate serial: 019B443943868603DE02C90CF7E6CBD6DBF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:02:42 +0000 Manifest this update: Mon 22 Dec 2025 04:02:42 +0000 Manifest next update: Tue 23 Dec 2025 04:02:42 +0000 Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: daYIMb4yLcLda+nEj3np8elNMm8akwf5hDdgM5+z8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:43:86:86:03:de:02:c9:0c:f7:e6:cb:d6:db:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Validity Not Before: Dec 22 04:02:42 2025 GMT Not After : Dec 23 04:02:42 2025 GMT Subject: CN=2f5f40f0a4229da45a751656cf62f0f12f06927a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:2e:9d:95:ba:3b:ab:75:5e:91:ba:c7:3c: 0d:3d:96:1b:21:64:d7:87:41:7e:33:1f:e0:ca:8a: 21:19:24:69:fe:4d:2d:36:4f:70:48:66:1a:05:ba: 2b:80:a1:ce:5e:e5:06:fd:25:4e:75:b8:08:2c:84: ec:c6:4e:9f:bb:44:de:2a:ef:e9:a0:68:5a:70:cc: 7c:a6:96:d0:43:be:a9:aa:7b:3d:b2:c1:ac:c1:80: 16:a1:76:bd:d3:ec:0f:4a:d4:2f:27:c2:ca:74:88: 14:2e:2b:ef:be:3e:86:57:d0:fa:09:cc:56:ba:72: b4:bd:3c:11:bf:cd:6d:cd:8a:42:e4:3c:0f:4b:64: c1:ed:7b:67:e9:b1:5f:a7:1c:91:59:ba:2f:da:e9: 33:a6:97:bf:dd:4e:c2:40:d0:8a:1a:0e:0e:d1:3c: df:6b:75:ff:56:d2:82:16:ff:ed:cb:f2:da:59:34: 3f:f4:73:29:a4:b8:1a:8b:d6:dd:34:ad:80:a6:21: 11:7a:ea:c3:f6:85:f7:4d:4c:84:90:24:51:b1:ec: 79:97:e9:49:cd:76:75:42:53:09:7b:9e:a2:21:0c: 15:37:1a:a7:49:c1:33:71:6d:84:11:4c:2f:36:96: 05:9e:89:d3:10:a9:18:4e:14:ca:c8:48:d1:20:9f: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:40:F0:A4:22:9D:A4:5A:75:16:56:CF:62:F0:F1:2F:06:92:7A X509v3 Authority Key Identifier: keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0d:80:9f:fe:25:e1:30:4e:7a:21:b1:c8:1b:84:db:9e:62: 1b:48:ab:f7:fe:f6:55:a7:34:40:9a:fd:9a:94:d7:59:5e:87: 4a:5c:81:02:7a:4b:05:e1:9a:a9:4e:07:9d:fe:9f:74:cf:9a: 00:e5:f5:87:8d:6f:3f:83:24:b0:c3:56:9f:b5:7b:5f:29:2c: f0:12:44:24:c9:de:7d:6f:16:5a:7b:4e:66:a5:7b:36:29:6f: 11:7f:69:4d:2d:da:69:c8:b9:ad:d5:9f:ad:00:c8:1f:f5:40: 3c:03:81:da:a6:47:ee:a8:1e:aa:2b:8b:f0:be:ae:be:0a:23: bb:bb:5c:bf:6d:61:bd:05:ed:9b:26:04:d0:b2:76:ba:89:82: 32:41:07:a4:f2:45:7e:ae:00:4e:72:fb:ba:71:c9:c9:49:06: 1a:25:85:88:a0:c8:ef:36:f7:04:cb:86:7f:4d:95:37:38:67: ef:bd:71:4d:06:d2:a5:30:de:4b:89:52:50:ac:55:4e:cf:9f: 92:88:68:d9:3f:1e:df:2f:16:d8:99:4d:3a:85:6f:1d:5d:85: 0f:c2:03:df:14:38:b2:87:d9:38:50:9d:71:94:dc:c0:d0:40: f8:98:9c:43:9e:9c:70:88:a1:ea:ea:e5:de:02:38:39:86:c4: fe:20:dc:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOUOGhgPeAskM9+bL1tvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk Y2YwMjgwHhcNMjUxMjIyMDQwMjQyWhcNMjUxMjIzMDQwMjQyWjAzMTEwLwYDVQQD EygyZjVmNDBmMGE0MjI5ZGE0NWE3NTE2NTZjZjYyZjBmMTJmMDY5MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA4unZW6O6t1XpG6xzwNPZYbIWTX h0F+Mx/gyoohGSRp/k0tNk9wSGYaBborgKHOXuUG/SVOdbgILITsxk6fu0TeKu/p oGhacMx8ppbQQ76pqns9ssGswYAWoXa90+wPStQvJ8LKdIgULivvvj6GV9D6CcxW unK0vTwRv81tzYpC5DwPS2TB7Xtn6bFfpxyRWbov2ukzppe/3U7CQNCKGg4O0Tzf a3X/VtKCFv/ty/LaWTQ/9HMppLgai9bdNK2ApiEReurD9oX3TUyEkCRRsex5l+lJ zXZ1QlMJe56iIQwVNxqnScEzcW2EEUwvNpYFnonTEKkYThTKyEjRIJ/UewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9fQPCkIp2kWnUWVs9i8PEvBpJ6MB8GA1UdIwQY MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1 LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqw2An/4l 4TBOeiGxyBuE255iG0ir9/72Vac0QJr9mpTXWV6HSlyBAnpLBeGaqU4Hnf6fdM+a AOX1h41vP4MksMNWn7V7Xyks8BJEJMnefW8WWntOZqV7NilvEX9pTS3aaci5rdWf rQDIH/VAPAOB2qZH7qgeqiuL8L6uvgoju7tcv21hvQXtmyYE0LJ2uomCMkEHpPJF fq4ATnL7unHJyUkGGiWFiKDI7zb3BMuGf02VNzhn771xTQbSpTDeS4lSUKxVTs+f koho2T8e3y8W2JlNOoVvHV2FD8ID3xQ4sofZOFCdcZTcwNBA+JicQ56ccIih6url 3gI4OYbE/iDcoA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:16:19 2025 by rpki-client