This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json) Hash identifier: XmPMeVvwLefTEvujEr0U/06RowAFMiOzxcmkA9jbymI= Subject key identifier: B7:7A:04:55:12:6D:DA:71:23:81:5D:11:A7:5A:5B:89:D5:DC:C6:54 Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719 Certificate serial: 019B3CB4C4E442BDC12EE8531DB777A23F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft Manifest number: 14AB Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: rKJvGfjSJlKfSGHQ3/KG/HOVWb57XKFsMqyH1DdX4c0=) 2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c4:e4:42:bd:c1:2e:e8:53:1d:b7:77:a2:3f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=b77a0455126dda7123815d11a75a5b89d5dcc654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:a4:90:df:74:1b:ae:31:27:57:bf:4f:d1: 07:04:13:3a:4f:88:71:94:5a:06:3d:b8:d7:84:95: 94:0b:fb:4d:0a:94:5a:ca:0f:37:66:15:f2:e4:4f: 0e:0d:77:fb:51:f5:5c:cc:19:d6:17:12:89:f7:bf: 04:0b:98:37:c6:69:67:b4:f8:ed:15:de:9b:05:12: 3b:3c:b3:41:29:26:10:ea:f3:a9:d1:c5:a4:c4:a9: 0a:f2:08:53:0d:f3:d7:17:9d:eb:14:09:89:8a:f5: 4c:1f:2a:e3:f2:9c:82:e3:22:e2:fc:21:50:c7:e3: 0d:9a:23:1e:6d:d1:3a:e9:79:dc:63:c1:da:a5:16: 50:1c:5e:83:29:2a:a6:1c:6b:0e:ff:73:7a:d7:33: a7:08:65:9e:29:23:4a:9f:0e:48:fe:f1:11:a7:e3: db:1f:53:e6:c9:38:3a:b5:23:63:39:39:4f:c2:fe: 78:43:06:22:e4:5f:af:72:f7:38:fb:34:4b:4a:56: c1:9b:5f:d1:8c:87:17:b2:73:af:b8:64:da:4d:0b: 1f:72:68:a3:3e:ff:cc:fa:ea:c8:1e:e1:73:cf:da: 2b:10:a7:cf:27:09:37:c7:be:df:04:a7:ca:47:70: 29:0b:95:26:d0:07:18:e8:f0:2c:8a:40:d8:52:09: 56:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:04:55:12:6D:DA:71:23:81:5D:11:A7:5A:5B:89:D5:DC:C6:54 X509v3 Authority Key Identifier: keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:49:e8:c4:6b:ab:c8:0d:91:47:81:3c:c0:53:82:0d:80:20: de:30:1b:c7:4f:8a:87:ce:13:c3:75:8e:b9:c1:88:4a:a8:8f: c3:79:ea:e3:92:94:10:47:e9:7d:d2:b9:74:a6:d0:0c:a8:0d: 19:ee:4b:f5:1c:ee:91:90:2f:88:f9:6d:1a:0c:28:8b:3e:e1: d0:23:fc:1b:1e:a1:a1:fc:44:38:71:07:6b:36:3e:c1:f9:0c: ea:90:34:8b:21:0f:6c:1a:58:37:63:11:65:ee:0d:fc:11:85: b7:f1:6e:14:56:c8:c3:ac:df:49:38:18:4e:60:ad:7b:fb:a3: 69:da:dd:8f:7c:31:06:87:91:b9:7a:92:98:c0:8d:24:b8:eb: 3e:ad:c3:bb:8a:59:db:34:ab:8a:7d:e5:e4:aa:ed:ca:d0:64: ad:cc:6d:19:1a:4b:83:7d:6c:35:4c:f9:d4:31:aa:6d:b4:ef: e9:28:2a:c7:08:3a:34:9e:8f:07:ab:d9:2f:a2:07:d3:c1:b3: 69:47:f0:05:d8:8c:19:1c:82:ac:57:c6:a5:52:1d:f6:67:92: 58:27:56:e9:56:bf:4a:06:cb:ae:26:e9:94:d2:e1:f4:7b:b3: 04:42:a2:94:6a:f7:dd:30:d9:a9:1f:ca:c3:a3:db:99:4a:4b: 20:fb:29:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMTkQr3BLuhTHbd3oj8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTRiNzAwNzA1ZTBiYWE3MzZhNWRkMDkwYWNkMWNiOTEy YzE3MTkwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD EyhiNzdhMDQ1NTEyNmRkYTcxMjM4MTVkMTFhNzVhNWI4OWQ1ZGNjNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys+kkN90G64xJ1e/T9EHBBM6T4hx lFoGPbjXhJWUC/tNCpRayg83ZhXy5E8ODXf7UfVczBnWFxKJ978EC5g3xmlntPjt Fd6bBRI7PLNBKSYQ6vOp0cWkxKkK8ghTDfPXF53rFAmJivVMHyrj8pyC4yLi/CFQ x+MNmiMebdE66XncY8HapRZQHF6DKSqmHGsO/3N61zOnCGWeKSNKnw5I/vERp+Pb H1PmyTg6tSNjOTlPwv54QwYi5F+vcvc4+zRLSlbBm1/RjIcXsnOvuGTaTQsfcmij Pv/M+urIHuFzz9orEKfPJwk3x77fBKfKR3ApC5Um0AcY6PAsikDYUglWlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd6BFUSbdpxI4FdEadaW4nV3MZUMB8GA1UdIwQY MBaAFAeUtwBwXguqc2pd0JCs0cuRLBcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYt OTRlMDJjOWYxNTBjLzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYtOTRlMDJjOWYxNTBj LzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0noxGur yA2RR4E8wFOCDYAg3jAbx0+Kh84Tw3WOucGISqiPw3nq45KUEEfpfdK5dKbQDKgN Ge5L9RzukZAviPltGgwoiz7h0CP8Gx6hofxEOHEHazY+wfkM6pA0iyEPbBpYN2MR Ze4N/BGFt/FuFFbIw6zfSTgYTmCte/ujadrdj3wxBoeRuXqSmMCNJLjrPq3Du4pZ 2zSrin3l5KrtytBkrcxtGRpLg31sNUz51DGqbbTv6Sgqxwg6NJ6PB6vZL6IH08Gz aUfwBdiMGRyCrFfGpVId9meSWCdW6Va/SgbLribplNLh9HuzBEKilGr33TDZqR/K w6PbmUpLIPspDw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:16 2025 by rpki-client