This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft File: b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json) Hash identifier: pxOLXGGqUyC30fSFcrRAWbYJ2DZYYobfddSjg5tBrSk= Subject key identifier: 5E:3C:8A:AD:3D:60:BD:BB:14:CE:80:1C:62:BC:BA:A5:DB:C3:67:EB Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019B3DC7CF153BF5D1A871D9F7D08AA2F234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft Manifest number: 1157 Signing time: Sat 20 Dec 2025 22:01:03 +0000 Manifest this update: Sat 20 Dec 2025 22:01:03 +0000 Manifest next update: Sun 21 Dec 2025 22:01:03 +0000 Files and hashes: 1: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: qATZ4CGUk1rjdE8EPbf2YmoCE9LeFSSXcWRa11vOW1k=) 2: exWn383Me8YqefkEkqOEr7GA0lc.roa (hash: 8G5LjurjltQVZ/Cei3JUqckWZBdyjOdLypvjmgHtD9Q=) 3: j8hnOgwPyOJJER9yhbqnSy6j-6E.roa (hash: OSveZybS9oVkY+wpn3hX+0Fo2xDMcVDw4ufaSD54UIM=) 4: phl5ADT4JOxw9LjD_howBB9yfb0.roa (hash: 82y/mhEJRV2o/QC0q9OGEvAp2yixVnuDKDU0FyYM5oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:cf:15:3b:f5:d1:a8:71:d9:f7:d0:8a:a2:f2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Dec 20 22:01:03 2025 GMT Not After : Dec 21 22:01:03 2025 GMT Subject: CN=5e3c8aad3d60bdbb14ce801c62bcbaa5dbc367eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:5b:21:cf:84:9a:fc:a0:b6:bb:35:2e:15: b4:a1:09:e9:99:09:44:0b:c8:d5:e8:72:6c:a7:cf: a4:76:c9:bf:9e:88:5b:fe:70:09:cc:75:7a:d8:85: be:7c:ef:06:7e:02:4a:3c:f9:20:64:55:2b:01:38: a2:26:31:88:0d:83:59:74:53:1c:11:33:49:03:18: 97:af:3f:e5:d4:cc:6a:2b:fd:b8:3f:d5:db:f1:3f: 25:b4:d7:6f:0a:66:7d:68:3d:3c:09:90:10:70:a7: c2:a7:ad:ec:d3:71:b4:5c:95:7f:6d:d9:f0:0b:16: 5f:20:8b:99:32:82:da:cf:9a:f7:34:8a:35:86:2f: 55:23:8f:f2:66:b9:5c:6c:6b:3f:1c:a3:38:8c:e4: 96:73:be:e5:fd:58:81:bf:50:85:7f:01:d1:1c:23: 0e:37:8f:b4:0e:35:1e:b6:d0:8f:89:6c:57:cc:b0: fb:b0:f7:47:c7:2f:a2:6c:92:09:3b:44:11:14:d1: 79:3f:62:1f:49:01:fe:2e:c3:6e:c9:25:dd:a9:ce: 97:c0:8d:44:e5:9a:c4:bc:04:6d:95:c5:23:b9:c9: 8a:13:83:73:90:5a:af:0f:cf:dc:26:4a:a7:8f:88: 6a:d4:c3:91:e1:2f:81:a0:9c:9b:ca:18:27:e2:c3: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3C:8A:AD:3D:60:BD:BB:14:CE:80:1C:62:BC:BA:A5:DB:C3:67:EB X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3a:a2:d1:5a:53:89:30:08:25:96:89:f7:1d:3f:70:9b:cb: c3:a4:b9:7f:90:05:dd:be:09:9d:44:23:38:84:5b:0d:7d:a4: 45:25:3f:96:40:f7:f8:ee:d0:3b:06:8c:d3:54:44:ab:31:ee: 54:e8:7e:ed:cc:5d:5d:50:32:85:ea:71:e3:b6:9e:41:76:1d: 65:71:55:45:3e:c7:91:ec:8b:cf:b2:96:ee:48:6a:ec:56:f1: 13:0b:89:c8:e1:eb:9e:8d:34:8e:c3:4a:72:64:59:0e:c7:27: 10:bc:8a:62:c6:34:71:44:10:87:e3:e4:19:cf:28:bb:ed:00: 31:a1:5e:83:6f:d8:e9:42:63:71:8f:88:2b:8f:99:d4:f3:cd: 94:a1:62:3a:2b:6b:2c:24:19:a3:4d:82:52:5d:43:3e:a7:f7: 98:d1:a7:c8:2d:2a:ac:ea:f1:8d:ae:82:da:82:15:2d:f8:79: c6:b7:1e:45:4c:3a:48:b9:f8:2a:62:e8:2c:4d:28:64:a1:7b: d0:b5:a3:65:bc:31:0e:28:c8:0e:e7:bd:e7:11:6d:28:48:cc: 5e:b4:d8:43:02:32:e4:90:57:cf:20:53:dc:5d:38:29:ac:f6: 45:3e:15:99:34:64:73:39:ab:b3:1d:37:b7:60:1e:fd:19:8a: 0b:2d:61:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x88VO/XRqHHZ99CKovI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjUxMjIwMjIwMTAzWhcNMjUxMjIxMjIwMTAzWjAzMTEwLwYDVQQD Eyg1ZTNjOGFhZDNkNjBiZGJiMTRjZTgwMWM2MmJjYmFhNWRiYzM2N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucVbIc+Emvygtrs1LhW0oQnpmQlE C8jV6HJsp8+kdsm/nohb/nAJzHV62IW+fO8GfgJKPPkgZFUrATiiJjGIDYNZdFMc ETNJAxiXrz/l1MxqK/24P9Xb8T8ltNdvCmZ9aD08CZAQcKfCp63s03G0XJV/bdnw CxZfIIuZMoLaz5r3NIo1hi9VI4/yZrlcbGs/HKM4jOSWc77l/ViBv1CFfwHRHCMO N4+0DjUettCPiWxXzLD7sPdHxy+ibJIJO0QRFNF5P2IfSQH+LsNuySXdqc6XwI1E 5ZrEvARtlcUjucmKE4NzkFqvD8/cJkqnj4hq1MOR4S+BoJybyhgn4sNwFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF48iq09YL27FM6AHGK8uqXbw2frMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzqi0VpT iTAIJZaJ9x0/cJvLw6S5f5AF3b4JnUQjOIRbDX2kRSU/lkD3+O7QOwaM01REqzHu VOh+7cxdXVAyhepx47aeQXYdZXFVRT7HkeyLz7KW7khq7FbxEwuJyOHrno00jsNK cmRZDscnELyKYsY0cUQQh+PkGc8ou+0AMaFeg2/Y6UJjcY+IK4+Z1PPNlKFiOitr LCQZo02CUl1DPqf3mNGnyC0qrOrxja6C2oIVLfh5xrceRUw6SLn4KmLoLE0oZKF7 0LWjZbwxDijIDue95xFtKEjMXrTYQwIy5JBXzyBT3F04Kaz2RT4VmTRkczmrsx03 t2Ae/RmKCy1hAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:53 2025 by rpki-client