This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: nt8RwXhK9/zdknYAeRs/CY59lZK+VgsWI+7bqMTJaC4= Subject key identifier: 7A:B0:D7:69:E4:A9:C7:D5:74:47:8A:FA:E9:2A:0C:0E:F2:BB:70:C8 Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019B3F7F67CA694A7FE629BEB725B49131C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 08E4 Signing time: Sun 21 Dec 2025 06:01:12 +0000 Manifest this update: Sun 21 Dec 2025 06:01:12 +0000 Manifest next update: Mon 22 Dec 2025 06:01:12 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: 36yNXIUC/LSK4j59M056xWmqB0VO+W/9Pz1M+1Xq0og=) 2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:67:ca:69:4a:7f:e6:29:be:b7:25:b4:91:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Dec 21 06:01:12 2025 GMT Not After : Dec 22 06:01:12 2025 GMT Subject: CN=7ab0d769e4a9c7d574478afae92a0c0ef2bb70c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:09:f9:cd:a5:f3:06:8e:7a:9c:d4:1d:9f: 3c:dc:44:51:53:02:79:fc:87:a7:57:cd:72:20:9b: 5b:ce:17:1b:58:33:31:81:a2:bc:8b:8f:55:f9:ed: 03:79:01:8e:62:98:fa:3a:37:c0:6c:dd:ac:c2:a8: ac:48:f4:00:5d:d7:a0:d5:22:7f:ce:96:63:97:d1: 8b:42:3e:24:f1:f0:b1:b3:98:43:f8:c5:12:eb:7d: 36:69:65:9e:bc:6e:5d:5d:a9:b9:7a:1d:79:1c:9f: 16:70:4f:d2:0d:b6:45:0d:8c:76:d0:5a:17:99:f3: 7a:fa:d6:87:fe:c7:90:fa:35:e0:8d:e7:43:ef:45: c0:5c:fb:51:0b:fa:a1:b8:c2:bd:5b:e1:7b:bc:17: b7:89:9f:8c:01:66:82:ac:d9:71:d7:4b:48:8a:a5: 2e:86:cc:5b:af:ab:e3:c8:30:d4:65:05:09:98:a5: 06:b3:75:8c:c5:55:ca:80:e2:fe:21:2a:ad:4e:fd: 61:38:4f:1b:57:21:bf:6d:ec:19:9b:8b:20:e3:48: fe:2b:42:9c:de:19:c3:3f:79:f0:55:70:ce:e9:14: b5:2e:6b:0c:bf:2e:f6:7a:17:01:a9:51:2b:16:7e: 8b:58:04:ba:d1:e9:1f:e7:fd:63:2b:57:bd:8b:b9: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B0:D7:69:E4:A9:C7:D5:74:47:8A:FA:E9:2A:0C:0E:F2:BB:70:C8 X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a9:76:69:6f:65:cc:fd:e0:46:17:7e:7f:62:46:e1:7e:c2: 70:51:c8:eb:14:7b:1e:c4:41:36:49:b4:26:54:36:a4:4a:37: 82:cd:f2:77:d5:df:f5:11:2c:78:cc:63:e5:78:ce:dc:e1:30: af:5f:bf:90:f6:1d:48:ed:47:54:13:d8:33:0f:b6:01:68:28: 42:aa:29:57:a2:d2:5c:1b:0f:f2:bc:cf:98:e0:99:46:1a:ca: 56:d5:b2:e5:d9:97:3b:d4:98:4f:f5:f9:61:0d:5a:5b:ad:f1: d4:c2:02:53:2c:4f:cd:c7:cf:74:ae:57:ed:2f:39:3c:bd:00: 03:54:4f:b7:d3:0a:96:be:3e:50:8d:a6:48:32:7e:f8:36:cd: 7b:78:0c:32:0e:af:13:d9:3e:c0:94:5d:9e:af:f1:68:54:4d: ba:2a:37:df:85:39:fe:7b:94:cb:b0:97:9f:28:ec:d4:2d:8e: 4e:f1:41:6c:4e:69:4e:d9:dc:7c:29:b3:9b:de:29:59:06:4b: f8:2c:34:7a:7e:c2:20:2a:97:ee:44:cf:ec:26:0c:16:d1:4d: a0:28:0c:51:78:59:c4:ac:fa:34:36:05:c3:8c:6c:f9:1f:bf: 60:6d:dc:1f:d1:fd:06:a1:60:55:98:95:bc:f9:89:83:f6:7e: 49:0c:6e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f2fKaUp/5im+tyW0kTHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjUxMjIxMDYwMTEyWhcNMjUxMjIyMDYwMTEyWjAzMTEwLwYDVQQD Eyg3YWIwZDc2OWU0YTljN2Q1NzQ0NzhhZmFlOTJhMGMwZWYyYmI3MGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtAJ+c2l8waOepzUHZ883ERRUwJ5 /IenV81yIJtbzhcbWDMxgaK8i49V+e0DeQGOYpj6OjfAbN2swqisSPQAXdeg1SJ/ zpZjl9GLQj4k8fCxs5hD+MUS6302aWWevG5dXam5eh15HJ8WcE/SDbZFDYx20FoX mfN6+taH/seQ+jXgjedD70XAXPtRC/qhuMK9W+F7vBe3iZ+MAWaCrNlx10tIiqUu hsxbr6vjyDDUZQUJmKUGs3WMxVXKgOL+ISqtTv1hOE8bVyG/bewZm4sg40j+K0Kc 3hnDP3nwVXDO6RS1LmsMvy72ehcBqVErFn6LWAS60ekf5/1jK1e9i7k+mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqw12nkqcfVdEeK+ukqDA7yu3DIMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfql2aW9l zP3gRhd+f2JG4X7CcFHI6xR7HsRBNkm0JlQ2pEo3gs3yd9Xf9REseMxj5XjO3OEw r1+/kPYdSO1HVBPYMw+2AWgoQqopV6LSXBsP8rzPmOCZRhrKVtWy5dmXO9SYT/X5 YQ1aW63x1MICUyxPzcfPdK5X7S85PL0AA1RPt9MKlr4+UI2mSDJ++DbNe3gMMg6v E9k+wJRdnq/xaFRNuio334U5/nuUy7CXnyjs1C2OTvFBbE5pTtncfCmzm94pWQZL +Cw0en7CICqX7kTP7CYMFtFNoCgMUXhZxKz6NDYFw4xs+R+/YG3cH9H9BqFgVZiV vPmJg/Z+SQxuNg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:38:23 2025 by rpki-client