This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft File: B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json) Hash identifier: HekF0dDvnhIiRcr3NZr4axAwanCfXjF5YDFowhO2Jng= Subject key identifier: C2:E8:99:BB:80:60:C9:1C:0E:6F:B9:8C:44:A2:D3:8F:7F:1C:50:8D Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA Certificate issuer: /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba Certificate serial: 019B52987B2C173A9677841EA43EE10E903B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 23:01:23 +0000 Manifest this update: Wed 24 Dec 2025 23:01:23 +0000 Manifest next update: Thu 25 Dec 2025 23:01:23 +0000 Files and hashes: 1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: E6H0fgOAsX0nHkARDYZNM3AmKGNjMnY8he1P6HvXRpc=) 2: LDJYdCgEn8OHisMoTT81wCOejnM.roa (hash: eRVNCz8Pk6p2554eo6icsKHVU7mmhCMFdPhBfpeYBU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:7b:2c:17:3a:96:77:84:1e:a4:3e:e1:0e:90:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba Validity Not Before: Dec 24 23:01:23 2025 GMT Not After : Dec 25 23:01:23 2025 GMT Subject: CN=c2e899bb8060c91c0e6fb98c44a2d38f7f1c508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:a4:ee:45:7a:95:bc:08:61:5b:56:a1:5f: 55:52:6a:c1:1b:26:84:2a:7f:ed:c4:b6:88:58:2a: 4e:9e:7a:f1:51:37:58:5a:03:e9:1e:bc:9a:37:3c: 94:32:ce:f8:4f:bc:ca:f5:32:ab:4d:54:e0:17:5e: 3d:44:55:54:37:6e:4b:fd:a6:15:1d:3c:77:81:1b: ff:49:9e:85:50:2e:14:ed:59:34:ec:60:26:50:db: 3f:c3:06:e8:74:cb:78:6d:cf:2f:15:fd:a5:40:1f: fa:ff:a5:f6:87:30:41:f6:10:99:7f:c0:f6:63:b0: 44:ee:3e:a5:06:02:e6:e5:c4:2c:4a:8f:a0:05:52: 95:da:dd:8b:31:39:94:9d:91:c8:51:fb:39:32:d7: da:5e:44:06:ae:ae:0d:c2:59:d7:6a:41:1b:b1:39: 71:8b:d9:1c:35:7e:a8:09:1b:2f:17:8f:bb:a2:59: 91:b9:e3:35:bd:26:6a:d0:85:2d:4e:e3:44:fb:e6: 53:44:6c:c2:25:8a:13:37:b6:59:aa:be:67:4d:c8: 15:70:f9:66:ea:d0:fc:c4:a5:8a:d9:8a:50:58:bc: b9:ff:3d:3a:91:1f:4a:14:26:50:c7:52:a1:0f:0c: e3:4b:84:d4:61:9b:df:a2:b0:d9:44:14:f3:0b:b1: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E8:99:BB:80:60:C9:1C:0E:6F:B9:8C:44:A2:D3:8F:7F:1C:50:8D X509v3 Authority Key Identifier: keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ec:be:4a:6d:9f:e6:ac:ad:e5:88:b6:7c:5c:2d:e3:11:60: 1d:af:78:f9:6f:f0:c7:bb:4f:d8:89:63:fe:25:cc:ef:a8:ce: e3:34:18:c4:46:b5:02:79:31:e1:48:f6:52:a4:00:40:04:b1: 93:55:e7:f2:1e:99:70:06:ca:ed:34:7e:a7:25:0b:fe:e8:d2: 18:4d:cd:fd:35:79:5d:25:76:ee:24:0f:60:5a:2f:17:5d:5c: f7:d6:6e:07:46:92:7a:3f:20:e5:8f:5a:92:26:a9:09:f0:0e: 9b:ae:8d:2e:8f:b5:2e:d5:3b:c8:22:37:a1:52:a0:04:bf:3d: ae:70:d8:b8:32:16:40:66:39:b9:0a:67:ae:fd:22:73:f4:6e: 21:6f:16:63:52:c1:1f:72:ea:db:77:17:49:53:c7:fe:d5:9d: 04:5c:3d:4f:d0:42:25:37:24:b9:2a:aa:b3:22:22:d1:da:fc: 77:f3:c9:a4:fc:df:1d:61:b2:c0:de:3e:98:e1:e4:d3:30:d0: 85:72:bf:c7:2b:f5:e8:cf:15:40:af:da:1b:a3:3a:9e:bc:6a: 97:c8:4e:22:73:34:41:77:36:7b:d5:5b:de:1d:76:f6:34:25: 72:0d:c6:66:28:7b:86:66:04:0b:5b:89:de:be:4b:4a:7f:fe: e5:9a:74:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmHssFzqWd4QepD7hDpA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YmI1YmZhNjRiMGQ1ZDE4YTMwNjFhOTg2OWIxY2E1NzE3 MmVhYmEwHhcNMjUxMjI0MjMwMTIzWhcNMjUxMjI1MjMwMTIzWjAzMTEwLwYDVQQD EyhjMmU4OTliYjgwNjBjOTFjMGU2ZmI5OGM0NGEyZDM4ZjdmMWM1MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXyk7kV6lbwIYVtWoV9VUmrBGyaE Kn/txLaIWCpOnnrxUTdYWgPpHryaNzyUMs74T7zK9TKrTVTgF149RFVUN25L/aYV HTx3gRv/SZ6FUC4U7Vk07GAmUNs/wwbodMt4bc8vFf2lQB/6/6X2hzBB9hCZf8D2 Y7BE7j6lBgLm5cQsSo+gBVKV2t2LMTmUnZHIUfs5MtfaXkQGrq4NwlnXakEbsTlx i9kcNX6oCRsvF4+7olmRueM1vSZq0IUtTuNE++ZTRGzCJYoTN7ZZqr5nTcgVcPlm 6tD8xKWK2YpQWLy5/z06kR9KFCZQx1KhDwzjS4TUYZvforDZRBTzC7EE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLombuAYMkcDm+5jESi049/HFCNMB8GA1UdIwQY MBaAFAe7W/pksNXRijBhqYabHKVxcuq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAt ZjkwOGQyMTcxOGY3LzEvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAtZjkwOGQyMTcxOGY3 LzEvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuy+Sm2f 5qyt5Yi2fFwt4xFgHa94+W/wx7tP2Ilj/iXM76jO4zQYxEa1Ankx4Uj2UqQAQASx k1Xn8h6ZcAbK7TR+pyUL/ujSGE3N/TV5XSV27iQPYFovF11c99ZuB0aSej8g5Y9a kiapCfAOm66NLo+1LtU7yCI3oVKgBL89rnDYuDIWQGY5uQpnrv0ic/RuIW8WY1LB H3Lq23cXSVPH/tWdBFw9T9BCJTckuSqqsyIi0dr8d/PJpPzfHWGywN4+mOHk0zDQ hXK/xyv16M8VQK/aG6M6nrxql8hOInM0QXc2e9Vb3h129jQlcg3GZih7hmYEC1uJ 3r5LSn/+5Zp0Bw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:56 2025 by rpki-client