This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json) Hash identifier: H4Mq56Ffx5V6MSNkz/JOYqdUYkCKDM+udVacg/qrkoM= Subject key identifier: B0:5B:16:34:62:FF:52:1B:D6:4A:85:D1:27:71:1B:F9:7F:61:5C:6F Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Certificate serial: 019B42B6E231166B835C36623EFE6D38F1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 21:00:40 +0000 Manifest this update: Sun 21 Dec 2025 21:00:40 +0000 Manifest next update: Mon 22 Dec 2025 21:00:40 +0000 Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: bSZ+rU6zSyREWIvDbROOlShUNwR3g1sgc+q2wdAOHh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:e2:31:16:6b:83:5c:36:62:3e:fe:6d:38:f1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Validity Not Before: Dec 21 21:00:40 2025 GMT Not After : Dec 22 21:00:40 2025 GMT Subject: CN=b05b163462ff521bd64a85d127711bf97f615c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:26:90:44:77:29:d3:b9:42:5b:0d:de:aa: b6:69:8c:73:73:e7:bc:37:a8:e2:14:e2:b4:49:5f: 20:31:40:09:9e:ec:5d:17:53:b5:e2:f6:9a:ac:9f: 6f:71:8f:1c:c5:1c:61:10:86:e0:0d:9a:6e:33:e5: d4:bd:ad:e8:0c:6c:a4:21:90:f3:00:ef:14:66:e5: dd:f4:2e:49:dd:2a:d2:97:25:27:a5:e8:15:f8:24: 68:45:b6:d0:ef:56:cc:d4:ca:91:b4:2a:0b:70:d5: e2:cb:64:4d:7c:ed:17:6f:c0:a7:31:13:a2:7a:f9: 2b:29:cb:4a:3d:3f:e0:1a:64:44:1e:28:7c:78:10: 18:29:04:dd:f5:9b:ed:89:a4:e0:db:cc:e0:d5:59: 8d:a5:5e:03:4b:bc:f2:60:8e:f3:a5:53:1d:fb:b9: 90:6d:fe:95:ad:87:91:75:d0:a2:ce:03:bb:b1:78: e4:a3:37:0e:70:c7:d3:5d:5e:e6:47:6e:27:e3:5d: 6f:1a:bd:39:9f:cd:0b:27:3a:97:22:35:7a:fb:a9: ce:6f:55:65:20:90:79:d5:af:94:64:87:70:ce:fc: 12:e5:e4:48:7a:de:cd:9b:40:49:ad:19:87:96:e1: 6e:8e:90:d6:13:27:ab:6e:d2:47:7c:6b:a7:f3:ad: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5B:16:34:62:FF:52:1B:D6:4A:85:D1:27:71:1B:F9:7F:61:5C:6F X509v3 Authority Key Identifier: keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b9:ba:dd:dc:7f:04:e0:08:09:f2:89:ab:b1:52:47:81:05: cb:a9:fe:9c:eb:ab:ea:cb:af:fd:2f:f5:a2:0e:53:99:a9:21: b4:4d:f1:c2:bb:3a:bb:53:bb:54:a7:cf:da:50:96:e8:5c:1c: 81:6d:c9:5b:d9:8d:4c:24:d5:e1:7c:eb:5e:61:ae:20:36:61: ee:2f:b9:77:61:65:0f:78:3a:9d:79:c5:03:67:cb:2e:27:2e: af:40:f7:57:b4:fe:d3:61:9a:a1:71:ba:80:ef:4d:c8:de:07: be:84:eb:65:c4:00:ed:3e:14:92:42:5f:7d:31:c3:69:b7:e4: 69:c6:4f:7e:e4:f4:e6:05:60:cd:f2:84:0f:44:3b:b1:7c:d9: dd:c0:8b:80:bc:ce:5b:d3:ab:e6:dc:54:94:06:ee:0a:fd:49: f9:fc:bc:05:11:96:5b:fd:9a:7c:a2:7d:6b:0b:f0:e4:ac:d9: 07:67:a1:c4:a0:74:0a:83:2f:dd:c6:92:26:20:d8:8f:af:a1: 01:92:8f:8b:23:fd:7f:ee:5f:f7:5a:14:8c:2b:bc:7f:63:ab: 55:f8:44:79:ae:3c:dd:c2:c1:fe:58:99:8c:17:57:45:4e:f0: 6f:39:8c:0c:b9:b6:2d:4c:69:ad:9d:fb:68:21:3a:e0:1b:2d: 9b:05:c7:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtuIxFmuDXDZiPv5tOPGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl Y2I2ZDkwHhcNMjUxMjIxMjEwMDQwWhcNMjUxMjIyMjEwMDQwWjAzMTEwLwYDVQQD EyhiMDViMTYzNDYyZmY1MjFiZDY0YTg1ZDEyNzcxMWJmOTdmNjE1YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfImkER3KdO5QlsN3qq2aYxzc+e8 N6jiFOK0SV8gMUAJnuxdF1O14vaarJ9vcY8cxRxhEIbgDZpuM+XUva3oDGykIZDz AO8UZuXd9C5J3SrSlyUnpegV+CRoRbbQ71bM1MqRtCoLcNXiy2RNfO0Xb8CnMROi evkrKctKPT/gGmREHih8eBAYKQTd9ZvtiaTg28zg1VmNpV4DS7zyYI7zpVMd+7mQ bf6VrYeRddCizgO7sXjkozcOcMfTXV7mR24n411vGr05n80LJzqXIjV6+6nOb1Vl IJB51a+UZIdwzvwS5eRIet7Nm0BJrRmHluFujpDWEyerbtJHfGun860P5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBbFjRi/1Ib1kqF0SdxG/l/YVxvMB8GA1UdIwQY MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLm63dx/ BOAICfKJq7FSR4EFy6n+nOur6suv/S/1og5TmakhtE3xwrs6u1O7VKfP2lCW6Fwc gW3JW9mNTCTV4XzrXmGuIDZh7i+5d2FlD3g6nXnFA2fLLicur0D3V7T+02GaoXG6 gO9NyN4HvoTrZcQA7T4UkkJffTHDabfkacZPfuT05gVgzfKED0Q7sXzZ3cCLgLzO W9Or5txUlAbuCv1J+fy8BRGWW/2afKJ9awvw5KzZB2ehxKB0CoMv3caSJiDYj6+h AZKPiyP9f+5f91oUjCu8f2OrVfhEea483cLB/liZjBdXRU7wbzmMDLm2LUxprZ37 aCE64BstmwXHUw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:42 2025 by rpki-client