This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: W1i/mfQ3IDQA5Rt+RrJBFjj1TKEESyOAlp0YzkB2uG4= Subject key identifier: 09:91:C8:B9:92:5E:01:19:F0:0C:9C:47:C9:8C:BD:EF:E2:CB:A1:D6 Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019B416DEF6FF19051840628250124FDEAC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 08E5 Signing time: Sun 21 Dec 2025 15:01:22 +0000 Manifest this update: Sun 21 Dec 2025 15:01:22 +0000 Manifest next update: Mon 22 Dec 2025 15:01:22 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: +3jXYxu923WaGRXbnLNm4ZwUqzh0WpWB9JVa3kfShN8=) 2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:ef:6f:f1:90:51:84:06:28:25:01:24:fd:ea:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Dec 21 15:01:22 2025 GMT Not After : Dec 22 15:01:22 2025 GMT Subject: CN=0991c8b9925e0119f00c9c47c98cbdefe2cba1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:10:ec:62:52:28:f2:84:2f:2c:65:c1:32: c3:18:3e:86:b5:05:f5:19:45:14:04:e5:07:f5:36: 4e:f8:f9:bc:d7:ea:33:ec:59:c1:f9:7b:ec:22:e9: 1b:0b:8b:f0:b5:4a:4e:2b:cf:2d:25:ae:d9:88:bc: 21:84:53:44:9d:d4:06:fb:83:23:09:17:a8:ff:6b: 55:47:28:29:74:97:9e:f4:2a:37:53:0f:b2:1f:1f: 41:38:c2:c5:ab:0b:4a:f8:28:f9:fb:53:c6:5d:8a: 0b:0d:97:d2:de:2f:b0:bc:b4:a5:a2:e0:7d:b3:c1: 28:16:7e:07:50:c7:06:dd:ab:bb:2e:ee:e5:8f:2f: 6b:d5:c4:97:1d:dc:fc:c9:6f:44:a3:3b:52:04:2f: a8:ef:c6:1c:7c:0a:6f:cd:ad:4b:b8:db:33:ff:15: 46:42:35:76:c5:91:11:c8:2f:d2:7d:15:14:b1:01: 9d:ad:03:a6:1b:60:79:74:88:c8:ef:dd:78:c8:2a: bc:4c:70:a4:f9:9b:d4:c3:04:32:33:4a:db:90:d7: 9f:2b:31:7f:3c:00:1c:35:1e:6c:03:bd:d4:22:ec: 7e:cf:6b:b1:ad:39:28:1a:9f:84:28:8a:c4:94:c8: 9a:7d:cc:fd:fb:dd:17:20:9d:70:84:7a:e1:c5:0e: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:C8:B9:92:5E:01:19:F0:0C:9C:47:C9:8C:BD:EF:E2:CB:A1:D6 X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:14:c2:8f:d9:7c:d1:c6:08:11:ea:a3:7b:6b:a4:62:b5: 1f:93:83:9f:dc:a3:ad:e4:82:9e:cc:e5:d3:c1:a9:13:b8:50: 77:21:85:b5:e1:82:3b:b2:3f:af:1f:8e:ad:ef:30:ce:d9:02: 73:de:ab:83:f9:73:73:6d:c2:e2:9d:37:b9:79:12:31:aa:2c: a6:45:52:55:a8:1d:fc:f3:42:c2:ad:75:8c:b7:55:e3:f6:d7: 5f:e8:51:32:a1:a7:9d:0c:da:d7:63:f4:e3:23:7f:e9:a9:ff: 0a:44:0c:2a:29:83:a3:7a:b0:ff:95:21:b1:62:7c:a4:29:96: 8f:88:0b:77:3e:db:df:89:29:a8:fe:b9:d9:aa:96:07:4f:2d: b1:16:a8:5a:31:cf:08:16:82:08:e0:5c:94:64:93:75:94:d9: f8:88:5a:dc:c1:7d:be:6f:24:b3:00:05:a9:4d:5c:1f:fc:80: 80:5d:e8:59:56:8a:c8:2a:1c:0f:ca:d0:30:4a:66:18:78:6c: d9:16:15:8b:f0:d1:45:f5:17:df:24:de:05:94:ec:e1:a9:20: 62:2d:ba:3d:1b:25:80:cc:be:af:80:3c:c2:f9:41:6f:19:d9: 6d:ad:be:bc:17:cb:d8:4e:c0:1e:d9:f5:03:b8:5f:19:9f:6c: c0:2b:3c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbe9v8ZBRhAYoJQEk/erDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjUxMjIxMTUwMTIyWhcNMjUxMjIyMTUwMTIyWjAzMTEwLwYDVQQD EygwOTkxYzhiOTkyNWUwMTE5ZjAwYzljNDdjOThjYmRlZmUyY2JhMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVEQ7GJSKPKELyxlwTLDGD6GtQX1 GUUUBOUH9TZO+Pm81+oz7FnB+XvsIukbC4vwtUpOK88tJa7ZiLwhhFNEndQG+4Mj CReo/2tVRygpdJee9Co3Uw+yHx9BOMLFqwtK+Cj5+1PGXYoLDZfS3i+wvLSlouB9 s8EoFn4HUMcG3au7Lu7ljy9r1cSXHdz8yW9EoztSBC+o78YcfApvza1LuNsz/xVG QjV2xZERyC/SfRUUsQGdrQOmG2B5dIjI7914yCq8THCk+ZvUwwQyM0rbkNefKzF/ PAAcNR5sA73UIux+z2uxrTkoGp+EKIrElMiafcz9+90XIJ1whHrhxQ4sbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmRyLmSXgEZ8AycR8mMve/iy6HWMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8EUwo/Z fNHGCBHqo3trpGK1H5ODn9yjreSCnszl08GpE7hQdyGFteGCO7I/rx+Ore8wztkC c96rg/lzc23C4p03uXkSMaospkVSVagd/PNCwq11jLdV4/bXX+hRMqGnnQza12P0 4yN/6an/CkQMKimDo3qw/5UhsWJ8pCmWj4gLdz7b34kpqP652aqWB08tsRaoWjHP CBaCCOBclGSTdZTZ+Iha3MF9vm8kswAFqU1cH/yAgF3oWVaKyCocD8rQMEpmGHhs 2RYVi/DRRfUX3yTeBZTs4akgYi26PRslgMy+r4A8wvlBbxnZba2+vBfL2E7AHtn1 A7hfGZ9swCs8wg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:27 2025 by rpki-client