This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json) Hash identifier: D1xmXEUJbENOGxm8Z8Nh4h0dKoATO50wK7jOY+yDKLY= Subject key identifier: 97:08:CD:5E:01:79:DF:84:71:F0:85:C2:30:DD:81:BD:A1:5B:1C:D6 Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019B3D22D27575D3E68633470ED4BECF783D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft Manifest number: 0E43 Signing time: Sat 20 Dec 2025 19:00:50 +0000 Manifest this update: Sat 20 Dec 2025 19:00:50 +0000 Manifest next update: Sun 21 Dec 2025 19:00:50 +0000 Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=) 2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=) 3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: /MTpsfDwEXd9ZuFWnJKPH5rl1ayqQ+nwhLSrDD/7eio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:d2:75:75:d3:e6:86:33:47:0e:d4:be:cf:78:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Dec 20 19:00:50 2025 GMT Not After : Dec 21 19:00:50 2025 GMT Subject: CN=9708cd5e0179df8471f085c230dd81bda15b1cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:4e:20:91:db:94:09:32:fe:2a:1a:5f:01: 44:80:a1:61:4a:33:a5:9a:94:0f:92:bc:ec:68:fb: 3c:79:e9:19:a4:d1:0a:6e:3f:03:20:5e:fd:73:ec: 0b:e8:f2:61:7c:03:6f:03:73:75:0b:a0:13:d8:a7: 4a:7b:93:c6:56:e2:da:69:d2:be:f3:43:f2:68:e4: 2d:83:53:44:c0:f5:0e:e9:86:93:bb:c4:06:0c:cc: 9a:cc:88:5e:cf:04:a9:58:96:85:3b:65:c7:52:af: 03:46:62:73:7f:f7:e1:aa:9c:60:f3:cc:44:30:55: 33:bb:66:26:a9:cc:d4:cc:3d:d0:ae:c0:91:a2:c6: 50:ce:3a:a7:11:f0:10:7b:37:c8:a8:55:1f:c4:78: b8:be:09:fa:37:95:ea:59:97:96:58:a5:96:5d:dc: 4d:24:cf:7c:05:b9:8e:98:35:55:96:e9:ba:5e:5a: 78:b3:fd:2b:ff:b4:54:b0:a5:94:7e:d4:64:ff:28: ec:93:5d:f5:ac:e9:ec:e2:86:a9:f8:74:d8:b0:65: b3:bc:dc:b3:f9:8f:67:a8:0c:f2:bb:37:55:b7:03: ee:13:a3:13:7e:dc:45:82:d8:3b:1e:71:a0:93:b2: 9c:e1:e0:4a:51:e6:e9:4e:c7:0c:d0:21:7d:e5:87: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:CD:5E:01:79:DF:84:71:F0:85:C2:30:DD:81:BD:A1:5B:1C:D6 X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:80:c5:ce:48:2a:1c:f0:6a:36:8f:c3:3f:84:00:97:39:6b: fd:4c:a4:bf:f4:5d:52:04:3a:86:95:86:4d:08:8b:ab:b6:06: 4d:40:53:64:84:d3:6c:3c:aa:2e:5b:6f:85:aa:b3:40:51:bc: fc:79:3d:c2:9d:7d:82:9c:60:27:03:33:cf:6a:0b:e2:44:55: d4:cb:82:4a:56:d0:1f:b5:0c:71:df:c9:d1:db:3a:f9:a1:fb: 8a:88:f7:4d:e2:41:c4:4b:f5:61:f3:75:e1:db:64:89:72:c2: a9:3a:eb:ad:81:69:1c:de:87:67:28:f4:59:91:dd:54:2f:c4: 26:67:91:51:3f:c1:9c:af:3e:9e:6f:61:22:ea:1d:1e:29:a1: c4:ec:57:63:cb:e6:42:27:9b:03:d4:1d:ad:e6:c0:21:2d:6b: 9d:38:6e:a7:86:54:75:93:3d:f8:ae:5f:08:89:34:5b:08:ae: b3:ce:da:85:b4:6d:a3:d2:aa:85:84:ae:d2:2c:f4:e1:7e:86: 73:c1:42:0a:c3:d7:c1:f5:b9:8d:67:69:e5:84:01:54:bd:51: d7:b9:d0:37:01:9b:a8:fe:20:0f:ab:6a:cb:dc:ea:d9:11:d0: cb:3a:58:b5:73:b1:25:f3:f0:ef:f2:d2:df:ad:69:43:14:13: 07:32:d7:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9ItJ1ddPmhjNHDtS+z3g9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjUxMjIwMTkwMDUwWhcNMjUxMjIxMTkwMDUwWjAzMTEwLwYDVQQD Eyg5NzA4Y2Q1ZTAxNzlkZjg0NzFmMDg1YzIzMGRkODFiZGExNWIxY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oVOIJHblAky/ioaXwFEgKFhSjOl mpQPkrzsaPs8eekZpNEKbj8DIF79c+wL6PJhfANvA3N1C6AT2KdKe5PGVuLaadK+ 80PyaOQtg1NEwPUO6YaTu8QGDMyazIhezwSpWJaFO2XHUq8DRmJzf/fhqpxg88xE MFUzu2YmqczUzD3QrsCRosZQzjqnEfAQezfIqFUfxHi4vgn6N5XqWZeWWKWWXdxN JM98BbmOmDVVlum6Xlp4s/0r/7RUsKWUftRk/yjsk131rOns4oap+HTYsGWzvNyz +Y9nqAzyuzdVtwPuE6MTftxFgtg7HnGgk7Kc4eBKUebpTscM0CF95YeAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcIzV4Bed+EcfCFwjDdgb2hWxzWMB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4DFzkgq HPBqNo/DP4QAlzlr/Uykv/RdUgQ6hpWGTQiLq7YGTUBTZITTbDyqLltvhaqzQFG8 /Hk9wp19gpxgJwMzz2oL4kRV1MuCSlbQH7UMcd/J0ds6+aH7ioj3TeJBxEv1YfN1 4dtkiXLCqTrrrYFpHN6HZyj0WZHdVC/EJmeRUT/BnK8+nm9hIuodHimhxOxXY8vm QiebA9QdrebAIS1rnThup4ZUdZM9+K5fCIk0Wwius87ahbRto9KqhYSu0iz04X6G c8FCCsPXwfW5jWdp5YQBVL1R17nQNwGbqP4gD6tqy9zq2RHQyzpYtXOxJfPw7/LS 361pQxQTBzLX0w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:55 2025 by rpki-client