This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json) Hash identifier: sNkG8THDZei4hrilh9w5c1F5ZscfbNAbIt9PUfWRoKc= Subject key identifier: BF:69:D2:54:51:A3:BB:1A:65:DC:E8:9C:A2:19:6A:5B:39:14:C0:22 Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Certificate serial: 019B4513EDFA9E5383D5AB369CDD3C0CA418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft Manifest number: 1652 Signing time: Mon 22 Dec 2025 08:01:32 +0000 Manifest this update: Mon 22 Dec 2025 08:01:32 +0000 Manifest next update: Tue 23 Dec 2025 08:01:32 +0000 Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: zkBC85Bfb9HL2slSSq3TldElmz/tHxn4UTsvhuompPE=) 2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=) 3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:ed:fa:9e:53:83:d5:ab:36:9c:dd:3c:0c:a4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Validity Not Before: Dec 22 08:01:32 2025 GMT Not After : Dec 23 08:01:32 2025 GMT Subject: CN=bf69d25451a3bb1a65dce89ca2196a5b3914c022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:23:01:57:1d:f9:19:31:b0:3a:c7:ef:70: 16:cd:77:56:04:b2:8b:a7:16:f5:0c:01:bd:4f:09: f2:44:de:e8:22:7b:17:2d:08:58:10:ba:53:74:13: 14:b5:d6:ff:71:97:f8:fc:e4:8e:62:20:3c:3d:2d: 9c:ec:7d:ba:34:f9:a2:d4:ab:fb:b1:dd:d6:0a:92: 1d:c1:83:ab:79:8a:9a:7f:0b:e2:a7:f3:6e:d1:ac: b7:20:6f:a9:61:40:a0:84:9f:4b:0e:96:9d:03:ed: fa:ed:42:dd:00:c8:4b:8b:2c:70:08:6f:5d:ad:af: 7e:73:82:bd:e1:2c:77:17:bf:d8:07:88:0b:35:bb: bc:ae:ae:5c:d1:92:17:22:46:a5:46:98:fd:ed:87: d8:f3:ab:91:48:2c:f5:b1:b7:93:eb:c8:2b:74:42: 21:30:8b:d9:7b:87:4d:d5:ff:78:3f:e2:69:07:e9: cb:c9:3f:8c:89:b3:86:1d:14:e6:a0:11:4f:3b:3d: 8f:63:4c:6f:c6:3e:07:46:72:d0:29:8a:10:d6:f3: b7:30:ea:b2:66:f9:b3:09:fa:a8:9c:b6:b6:49:42: 5a:44:6f:3f:6a:48:44:f4:1a:9d:1e:1c:5f:f9:ff: 25:f0:4a:4a:85:94:d6:6d:c9:37:5f:4e:0d:a7:54: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:69:D2:54:51:A3:BB:1A:65:DC:E8:9C:A2:19:6A:5B:39:14:C0:22 X509v3 Authority Key Identifier: keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:0c:df:90:55:b6:4e:92:04:1c:e0:4a:e9:70:c6:8a:86:79: 31:4d:53:b7:dd:98:85:f0:c6:9b:88:c2:fb:05:c0:ed:22:be: 90:93:34:70:1f:6d:3f:9f:bf:6a:e7:8a:06:9f:f2:55:8f:cc: e8:35:2c:9b:17:5d:d3:df:c9:a0:bb:23:55:db:0e:4b:2b:47: ea:3a:79:bc:fc:3d:93:48:9a:8b:dc:94:2b:8d:ba:9a:9a:76: cc:51:85:d2:c3:94:a3:03:eb:4a:b3:90:0d:b1:aa:d5:f9:62: c8:7f:2f:61:e8:75:21:ed:a3:bb:fd:41:b2:7f:80:c0:48:6d: 66:81:a6:96:8d:9d:cf:30:e6:e9:8a:56:56:de:8b:3d:96:a8: de:23:04:0d:b0:2b:07:ce:d2:5c:25:bb:4e:ff:c8:2f:5c:6c: 4c:a2:1f:b1:8f:e8:d4:f1:e2:da:7b:c3:75:5e:23:94:d4:f4: 14:5a:66:b6:03:76:06:b9:ef:59:ed:9f:08:0b:07:19:05:a2: e1:f1:89:ec:2f:43:1f:b4:15:95:31:8a:14:24:b7:87:22:67: e4:b2:c7:39:63:64:59:b6:0d:9c:08:70:73:74:26:ef:36:20: d7:0d:5c:8b:c2:d3:7e:a1:8f:4b:ff:ea:d0:82:50:f1:d6:3f: 07:56:68:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE+36nlOD1as2nN08DKQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl NTI2ZGIwHhcNMjUxMjIyMDgwMTMyWhcNMjUxMjIzMDgwMTMyWjAzMTEwLwYDVQQD EyhiZjY5ZDI1NDUxYTNiYjFhNjVkY2U4OWNhMjE5NmE1YjM5MTRjMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml4jAVcd+RkxsDrH73AWzXdWBLKL pxb1DAG9TwnyRN7oInsXLQhYELpTdBMUtdb/cZf4/OSOYiA8PS2c7H26NPmi1Kv7 sd3WCpIdwYOreYqafwvip/Nu0ay3IG+pYUCghJ9LDpadA+367ULdAMhLiyxwCG9d ra9+c4K94Sx3F7/YB4gLNbu8rq5c0ZIXIkalRpj97YfY86uRSCz1sbeT68grdEIh MIvZe4dN1f94P+JpB+nLyT+MibOGHRTmoBFPOz2PY0xvxj4HRnLQKYoQ1vO3MOqy ZvmzCfqonLa2SUJaRG8/akhE9BqdHhxf+f8l8EpKhZTWbck3X04Np1QHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9p0lRRo7saZdzonKIZals5FMAiMB8GA1UdIwQY MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4 LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQzfkFW2 TpIEHOBK6XDGioZ5MU1Tt92YhfDGm4jC+wXA7SK+kJM0cB9tP5+/aueKBp/yVY/M 6DUsmxdd09/JoLsjVdsOSytH6jp5vPw9k0iai9yUK426mpp2zFGF0sOUowPrSrOQ DbGq1fliyH8vYeh1Ie2ju/1Bsn+AwEhtZoGmlo2dzzDm6YpWVt6LPZao3iMEDbAr B87SXCW7Tv/IL1xsTKIfsY/o1PHi2nvDdV4jlNT0FFpmtgN2BrnvWe2fCAsHGQWi 4fGJ7C9DH7QVlTGKFCS3hyJn5LLHOWNkWbYNnAhwc3Qm7zYg1w1ci8LTfqGPS//q 0IJQ8dY/B1ZoQA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:10:17 2025 by rpki-client