This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json) Hash identifier: uyFr9Fqsqqjjcz+a0HsPKKWw5cthLitH6LRmDKxVQSo= Subject key identifier: C0:E9:AA:9B:60:5A:52:29:D0:DC:BC:FD:43:83:5B:96:62:39:96:4E Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Certificate serial: 019B6E45CE19812B009D3349D6BF4B1ABF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 08:00:27 +0000 Manifest this update: Tue 30 Dec 2025 08:00:27 +0000 Manifest next update: Wed 31 Dec 2025 08:00:27 +0000 Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: NTnFmNB8C92bZ5LymJKB1VPLGbyIfwtmPMpQRPUSnDY=) 2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:ce:19:81:2b:00:9d:33:49:d6:bf:4b:1a:bf:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Validity Not Before: Dec 30 08:00:27 2025 GMT Not After : Dec 31 08:00:27 2025 GMT Subject: CN=c0e9aa9b605a5229d0dcbcfd43835b966239964e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:3f:ad:89:a3:57:6e:d9:11:55:00:4a:48: 79:a8:ac:87:18:8d:7d:2f:39:d5:b3:a5:11:67:d0: b5:aa:f3:b9:e2:9e:7a:d8:c4:0f:f3:f3:af:c4:a5: c3:73:af:74:04:41:da:ec:a8:7a:49:e2:85:7a:15: 74:02:fc:64:4a:38:4e:d8:a3:b7:3f:0b:19:c0:82: 14:3c:36:1d:8b:c5:0f:c6:ed:13:d7:87:31:e9:40: 0e:75:a2:46:cd:c2:e3:a7:d6:ea:be:d4:d9:3d:d0: 91:86:3e:b0:5f:c9:67:a3:82:74:9f:8d:f2:6e:cb: 07:6b:42:ba:f1:ff:31:42:5c:58:b2:4b:8c:b5:0b: cf:05:67:79:21:28:8c:a0:3a:70:02:ac:6e:5f:e0: 71:de:59:69:13:88:e9:2f:4b:41:bb:c2:34:be:94: e4:bf:a4:e6:67:9e:bf:80:9e:94:40:0e:e8:c8:d8: 8b:69:f2:f4:7b:aa:8b:1f:aa:98:1c:96:cb:0b:3a: 55:1a:8a:87:92:f5:2e:cd:9e:c3:b0:fd:65:9a:32: c0:68:a0:e9:4f:45:f3:6d:93:34:86:28:8c:53:3b: 63:fa:b5:25:60:24:aa:95:04:b8:73:d3:62:3c:c6: 88:fc:84:10:b9:88:c4:19:95:e0:66:3b:d2:04:33: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:AA:9B:60:5A:52:29:D0:DC:BC:FD:43:83:5B:96:62:39:96:4E X509v3 Authority Key Identifier: keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:06:b3:74:9a:17:ec:d4:ae:64:68:b0:44:ae:a7:39:e7:af: 34:72:e1:ad:e5:8e:90:de:63:8b:b8:73:18:07:6c:eb:0d:85: 9e:81:9f:e0:3f:6a:e8:b3:19:a4:c4:4b:23:23:32:f7:80:c5: dc:b6:d3:dd:76:71:db:d5:d2:8d:62:9f:57:20:24:a9:5f:20: 91:2a:22:28:a6:5c:72:d2:05:ff:f8:38:5e:31:0a:97:37:89: 99:e4:63:30:ee:27:9e:58:bf:fc:98:e6:a2:f8:61:48:f2:b6: 48:ca:41:e3:20:39:b1:dc:e6:47:10:30:fd:32:c6:45:61:84: 2d:11:27:8b:07:01:10:68:c9:90:11:ac:6e:4e:90:3e:69:5e: 4c:78:5d:b4:4b:1d:e0:1e:98:36:c5:97:e1:59:eb:99:cc:c2: 73:83:5f:a5:39:09:c6:e6:1d:aa:f8:e4:76:fe:15:88:74:60: 82:23:04:b4:ef:27:a4:75:67:bf:15:0e:14:ab:98:8e:36:a6: 67:87:94:e3:d1:15:1e:cc:a2:46:25:ee:38:b3:b2:5d:52:04: fe:8d:48:06:c0:0b:89:9d:43:08:e1:12:64:57:68:8b:ad:e7: 62:49:05:c3:c7:d3:ea:73:76:60:75:b8:23:de:df:89:7c:c1: c4:43:ab:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRc4ZgSsAnTNJ1r9LGr8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk Nzg2ZTcwHhcNMjUxMjMwMDgwMDI3WhcNMjUxMjMxMDgwMDI3WjAzMTEwLwYDVQQD EyhjMGU5YWE5YjYwNWE1MjI5ZDBkY2JjZmQ0MzgzNWI5NjYyMzk5NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm8/rYmjV27ZEVUASkh5qKyHGI19 LznVs6URZ9C1qvO54p562MQP8/OvxKXDc690BEHa7Kh6SeKFehV0AvxkSjhO2KO3 PwsZwIIUPDYdi8UPxu0T14cx6UAOdaJGzcLjp9bqvtTZPdCRhj6wX8lno4J0n43y bssHa0K68f8xQlxYskuMtQvPBWd5ISiMoDpwAqxuX+Bx3llpE4jpL0tBu8I0vpTk v6TmZ56/gJ6UQA7oyNiLafL0e6qLH6qYHJbLCzpVGoqHkvUuzZ7DsP1lmjLAaKDp T0XzbZM0hiiMUztj+rUlYCSqlQS4c9NiPMaI/IQQuYjEGZXgZjvSBDMJvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDpqptgWlIp0Ny8/UODW5ZiOZZOMB8GA1UdIwQY MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwazdJoX 7NSuZGiwRK6nOeevNHLhreWOkN5ji7hzGAds6w2FnoGf4D9q6LMZpMRLIyMy94DF 3LbT3XZx29XSjWKfVyAkqV8gkSoiKKZcctIF//g4XjEKlzeJmeRjMO4nnli//Jjm ovhhSPK2SMpB4yA5sdzmRxAw/TLGRWGELREniwcBEGjJkBGsbk6QPmleTHhdtEsd 4B6YNsWX4VnrmczCc4NfpTkJxuYdqvjkdv4ViHRggiMEtO8npHVnvxUOFKuYjjam Z4eU49EVHsyiRiXuOLOyXVIE/o1IBsALiZ1DCOESZFdoi63nYkkFw8fT6nN2YHW4 I97fiXzBxEOr8g== -----END CERTIFICATE-----Generated at Tue Dec 30 09:07:43 2025 by rpki-client