This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json) Hash identifier: LxCwKSzNjI77+y/4ULnOeRuYDTYy51YwFyWQPxunsco= Subject key identifier: 6C:15:FE:C5:B6:5E:6A:BB:00:39:3E:2A:B3:99:85:E6:27:49:FA:4C Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Certificate serial: 019B3A8FB9D4593C4C66D8D951F396C9F1C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:00:56 +0000 Manifest this update: Sat 20 Dec 2025 07:00:56 +0000 Manifest next update: Sun 21 Dec 2025 07:00:56 +0000 Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: XU/IVrsnWDnCaceD/jIm6KUXdpBH2p18xfiuDooRPpY=) 2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:b9:d4:59:3c:4c:66:d8:d9:51:f3:96:c9:f1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac Validity Not Before: Dec 20 07:00:56 2025 GMT Not After : Dec 21 07:00:56 2025 GMT Subject: CN=6c15fec5b65e6abb00393e2ab39985e62749fa4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0e:be:d6:7a:a3:b1:b1:31:a3:5b:0f:86:7f: 84:97:30:03:e3:3c:74:4b:62:bf:72:ae:9a:ad:15: ec:43:96:d6:a9:da:27:ab:71:14:33:50:e5:e5:55: 1d:c4:87:30:51:c2:5f:92:44:2e:a7:79:82:15:95: 69:29:f7:20:aa:0e:89:1f:0f:50:34:cb:f4:ab:45: 6d:6c:1a:d9:24:e5:fe:b1:f0:7b:36:5c:24:05:cf: 96:c3:c6:dd:61:e9:72:3d:a4:8d:57:af:f8:f7:fe: e9:0b:05:07:fd:f5:76:c4:20:63:85:18:46:48:64: c6:66:a3:e7:ef:76:1e:6d:19:9a:2e:39:f4:c4:c5: 94:ad:81:6a:1f:37:3b:03:9c:5f:c8:14:0f:fd:a3: ea:b9:2f:6e:3b:b3:af:c7:57:9c:2f:af:3b:e0:cf: fc:9e:14:1a:f4:e1:db:58:54:3d:b3:b8:e9:1c:4f: 11:db:12:e7:e0:05:a5:11:6e:a8:e4:51:54:6e:34: f1:86:d5:4e:1b:18:2b:c1:82:c6:a8:4b:8b:db:7e: 84:95:7a:7a:1a:1a:e7:c1:f0:a0:d4:2f:e9:e7:4b: 7e:53:4a:ac:45:38:e5:ff:ea:3d:e5:83:0a:00:1f: 8b:76:94:1e:67:86:6d:c3:f7:bf:aa:1e:b5:64:8a: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:15:FE:C5:B6:5E:6A:BB:00:39:3E:2A:B3:99:85:E6:27:49:FA:4C X509v3 Authority Key Identifier: keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:32:a3:40:46:7c:db:cf:03:60:66:d7:8e:83:64:c1:a7:2e: bd:91:c3:0d:4b:03:2c:04:65:bc:15:80:9f:3e:d2:54:c0:48: 2c:a4:7f:1d:64:52:87:12:40:5e:fc:0d:b3:13:67:fd:c3:21: 1e:6b:a5:04:5b:e4:70:f7:d2:ed:9e:dc:e6:5d:b5:ff:7c:ac: f6:3c:c1:9f:db:5f:14:2f:23:84:2a:a3:2a:85:e8:40:f6:5f: d8:28:22:de:58:49:8b:07:4e:4c:be:62:49:9c:fb:f5:25:75: 58:6f:c0:07:f6:3a:6d:01:54:26:03:64:6a:ab:bf:57:f9:d3: 86:eb:3b:e2:a2:e5:71:f3:ff:d6:3c:dc:c2:ac:fd:60:15:c2: c0:29:75:87:86:ef:ca:84:56:46:7c:ec:39:27:fb:fc:9f:0e: d9:ac:7b:80:86:16:f9:5c:10:91:73:ee:69:c2:e8:d5:41:d8: e9:ad:4f:ca:13:35:79:bf:f1:0f:63:3d:fa:19:d7:68:d6:6a: f1:5c:a5:f2:76:16:0a:d7:03:05:6d:70:30:d4:e4:aa:f3:88: 1b:d3:b1:a7:68:8f:86:cb:b9:85:64:f4:ca:ee:ce:52:91:55: 6e:b8:4a:2a:b0:7f:41:1b:fe:ae:65:75:be:ca:a1:e6:da:51: a5:26:7c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7nUWTxMZtjZUfOWyfHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi ZDFiYWMwHhcNMjUxMjIwMDcwMDU2WhcNMjUxMjIxMDcwMDU2WjAzMTEwLwYDVQQD Eyg2YzE1ZmVjNWI2NWU2YWJiMDAzOTNlMmFiMzk5ODVlNjI3NDlmYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w6+1nqjsbExo1sPhn+ElzAD4zx0 S2K/cq6arRXsQ5bWqdonq3EUM1Dl5VUdxIcwUcJfkkQup3mCFZVpKfcgqg6JHw9Q NMv0q0VtbBrZJOX+sfB7NlwkBc+Ww8bdYelyPaSNV6/49/7pCwUH/fV2xCBjhRhG SGTGZqPn73YebRmaLjn0xMWUrYFqHzc7A5xfyBQP/aPquS9uO7Ovx1ecL6874M/8 nhQa9OHbWFQ9s7jpHE8R2xLn4AWlEW6o5FFUbjTxhtVOGxgrwYLGqEuL236ElXp6 GhrnwfCg1C/p50t+U0qsRTjl/+o95YMKAB+LdpQeZ4Ztw/e/qh61ZIo4nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwV/sW2Xmq7ADk+KrOZheYnSfpMMB8GA1UdIwQY MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4 LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzKjQEZ8 288DYGbXjoNkwacuvZHDDUsDLARlvBWAnz7SVMBILKR/HWRShxJAXvwNsxNn/cMh HmulBFvkcPfS7Z7c5l21/3ys9jzBn9tfFC8jhCqjKoXoQPZf2Cgi3lhJiwdOTL5i SZz79SV1WG/AB/Y6bQFUJgNkaqu/V/nThus74qLlcfP/1jzcwqz9YBXCwCl1h4bv yoRWRnzsOSf7/J8O2ax7gIYW+VwQkXPuacLo1UHY6a1PyhM1eb/xD2M9+hnXaNZq 8Vyl8nYWCtcDBW1wMNTkqvOIG9Oxp2iPhsu5hWT0yu7OUpFVbrhKKrB/QRv+rmV1 vsqh5tpRpSZ84g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:42 2025 by rpki-client