This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json) Hash identifier: GoIRG6lXqPPj3dlqLKb4yPTr59cGqCTIIVHAifWXrtI= Subject key identifier: 5F:ED:05:BB:73:71:7B:B1:99:DB:A1:7B:61:AB:1B:43:C1:81:D5:DE Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Certificate serial: 019B52CF523EA0D82E0F629FF040590E6DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft Manifest number: 02E1 Signing time: Thu 25 Dec 2025 00:01:17 +0000 Manifest this update: Thu 25 Dec 2025 00:01:17 +0000 Manifest next update: Fri 26 Dec 2025 00:01:17 +0000 Files and hashes: 1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=) 2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: BnIS2U28jw0oD/L1Zrjj96oNIIL0AftIWbaipjxlvLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:52:3e:a0:d8:2e:0f:62:9f:f0:40:59:0e:6d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Validity Not Before: Dec 25 00:01:17 2025 GMT Not After : Dec 26 00:01:17 2025 GMT Subject: CN=5fed05bb73717bb199dba17b61ab1b43c181d5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:f4:4b:6d:21:a9:14:ee:4c:24:2f:e5:b2: 14:81:3a:b4:9c:5e:4d:7a:72:60:bf:27:09:a2:57: d3:6d:4c:ca:6e:63:64:07:2c:dc:22:12:eb:d7:80: 5a:4b:fd:74:93:b0:b1:03:e4:e3:0b:d9:65:75:77: 5d:95:4c:7a:83:7a:40:b1:73:5c:97:a8:cc:a6:24: 28:20:15:c8:d7:b5:b0:6a:93:26:9d:99:f0:b5:27: d2:5a:20:0e:97:de:a0:06:bb:66:f7:ff:05:05:b4: 69:dc:ae:26:a5:51:55:13:6a:9b:44:94:40:9f:53: e2:a8:99:28:18:2f:23:e6:e9:3c:a6:4f:93:dc:40: 71:b7:a0:a5:c7:5a:8b:35:c1:d8:6e:bf:be:ef:84: a1:4b:4f:09:19:cb:10:b7:1f:6b:c9:64:8d:85:03: 08:54:0b:9b:df:bd:31:2b:9f:d6:ec:e1:81:e1:76: 91:72:02:9f:44:1e:7f:78:e9:73:05:26:d1:fb:d5: 97:05:bc:23:e3:30:c0:c3:c3:d1:b7:dd:cc:4e:0c: f9:62:a4:07:b3:a4:ae:a5:4f:54:35:a7:a2:76:8f: 35:90:ff:e6:47:32:7c:65:cd:fe:4e:65:b1:6c:46: 6f:dc:cf:37:f0:ac:35:68:35:6b:af:6a:04:eb:88: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:05:BB:73:71:7B:B1:99:DB:A1:7B:61:AB:1B:43:C1:81:D5:DE X509v3 Authority Key Identifier: keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b6:ac:6c:a0:07:71:3c:b5:83:f4:4e:f5:58:38:dd:aa:20: 6a:36:f3:3a:a1:66:b8:e1:4f:f9:8f:81:13:19:e0:ed:05:9e: 94:ed:c5:95:4a:9a:68:a9:20:93:05:4b:95:40:11:01:40:f4: 1f:ce:9e:c1:48:1f:5b:19:7e:a2:08:94:3b:5b:b1:89:c1:fc: 49:dd:6f:75:ca:9b:85:9c:b0:44:71:60:39:39:0a:2c:5e:34: 32:59:6b:a4:8e:9c:67:78:60:a3:b3:54:0f:bd:96:9f:79:9c: c4:3b:77:e1:d1:fa:d6:b2:bd:6e:da:3d:16:6c:ad:a8:a3:71: 48:06:28:7f:93:9d:55:6c:29:c8:02:c6:42:14:80:43:35:c7: 7a:ce:ee:80:b1:fa:ae:09:5d:4e:0a:3d:81:a1:58:42:e2:53: 44:e2:06:20:a7:5c:b6:12:7a:0f:6b:f2:1d:74:1b:a4:c1:ec: ff:86:28:a6:ca:ee:84:48:b2:21:09:a5:ed:f6:7e:57:f2:7d: e6:27:0b:8b:fe:c0:f7:1d:e7:66:0e:18:76:e8:55:91:b9:ac: 1c:3b:00:91:79:8b:79:89:76:7d:5a:de:ef:5a:cb:ac:a6:ee: b0:53:a2:13:c4:30:f8:1a:b5:5e:e4:0a:32:03:61:4f:4e:3a: ac:5a:b1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSz1I+oNguD2Kf8EBZDm2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx MDQ4YTUwHhcNMjUxMjI1MDAwMTE3WhcNMjUxMjI2MDAwMTE3WjAzMTEwLwYDVQQD Eyg1ZmVkMDViYjczNzE3YmIxOTlkYmExN2I2MWFiMWI0M2MxODFkNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcD0S20hqRTuTCQv5bIUgTq0nF5N enJgvycJolfTbUzKbmNkByzcIhLr14BaS/10k7CxA+TjC9lldXddlUx6g3pAsXNc l6jMpiQoIBXI17WwapMmnZnwtSfSWiAOl96gBrtm9/8FBbRp3K4mpVFVE2qbRJRA n1PiqJkoGC8j5uk8pk+T3EBxt6Clx1qLNcHYbr++74ShS08JGcsQtx9ryWSNhQMI VAub370xK5/W7OGB4XaRcgKfRB5/eOlzBSbR+9WXBbwj4zDAw8PRt93MTgz5YqQH s6SupU9UNaeido81kP/mRzJ8Zc3+TmWxbEZv3M838Kw1aDVrr2oE64h/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/tBbtzcXuxmduhe2GrG0PBgdXeMB8GA1UdIwQY MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7asbKAH cTy1g/RO9Vg43aogajbzOqFmuOFP+Y+BExng7QWelO3FlUqaaKkgkwVLlUARAUD0 H86ewUgfWxl+ogiUO1uxicH8Sd1vdcqbhZywRHFgOTkKLF40MllrpI6cZ3hgo7NU D72Wn3mcxDt34dH61rK9bto9FmytqKNxSAYof5OdVWwpyALGQhSAQzXHes7ugLH6 rgldTgo9gaFYQuJTROIGIKdcthJ6D2vyHXQbpMHs/4YopsruhEiyIQml7fZ+V/J9 5icLi/7A9x3nZg4YduhVkbmsHDsAkXmLeYl2fVre71rLrKbusFOiE8Qw+Bq1XuQK MgNhT046rFqxuw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:17:52 2025 by rpki-client