This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json) Hash identifier: 7Nbn/5evI1yPrUTWMM5GhFEyPNjDW5s1A5OlITUy65I= Subject key identifier: 17:4F:24:1D:1C:AC:C7:18:98:CD:DD:6E:AA:C1:06:31:13:B9:18:93 Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Certificate serial: 019B5C40068067EED28CA23CB3C8D50B5234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft Manifest number: 0B5C Signing time: Fri 26 Dec 2025 20:00:58 +0000 Manifest this update: Fri 26 Dec 2025 20:00:58 +0000 Manifest next update: Sat 27 Dec 2025 20:00:58 +0000 Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: 3ZC71Q1qSrnTBMk459MyfHfNyFvUR8lKPe6x2By39PY=) 2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:06:80:67:ee:d2:8c:a2:3c:b3:c8:d5:0b:52:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Validity Not Before: Dec 26 20:00:58 2025 GMT Not After : Dec 27 20:00:58 2025 GMT Subject: CN=174f241d1cacc71898cddd6eaac1063113b91893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:4e:f0:cf:47:a0:7c:98:a6:96:11:87:0a: 52:24:81:54:ea:51:6f:51:b1:d6:9e:e8:73:99:47: 9d:13:cc:a5:4a:fc:c5:02:1e:cd:79:31:a4:87:88: a8:b3:fd:e2:a3:64:75:69:9a:0d:85:5d:ca:28:36: e0:68:e2:86:24:c5:f3:e8:ce:ed:ee:04:f2:bf:f8: bb:7e:81:71:da:29:6d:ba:c6:f8:fc:16:96:69:21: aa:85:17:8f:36:b6:3a:4f:8c:2b:33:06:cb:ac:1b: 9e:ca:59:47:30:33:a6:44:43:60:34:6b:df:ba:71: 2e:0e:d2:11:6f:61:35:06:21:e2:33:26:8f:11:cd: b6:f8:6b:7b:2e:14:c9:0d:81:89:1c:cd:04:1c:f6: f2:ac:76:f3:6a:46:22:cf:88:60:b5:74:a7:7f:0e: 0c:cb:76:cb:7d:f2:65:c7:8a:09:0e:14:c1:f0:9a: bb:e3:f0:16:16:88:9b:5c:b6:23:f5:16:6e:ef:1c: c3:bb:92:6a:16:3b:e9:e0:8a:04:7e:b7:3d:ed:ce: 01:d1:26:22:c3:e3:09:7e:cc:d0:30:35:6f:3e:0d: 7a:29:ff:1b:6f:f7:3e:cc:4a:ec:2c:2f:4a:80:08: 5d:00:3d:0c:e0:40:5d:e1:01:1f:aa:37:0e:d3:d7: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4F:24:1D:1C:AC:C7:18:98:CD:DD:6E:AA:C1:06:31:13:B9:18:93 X509v3 Authority Key Identifier: keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:18:54:66:9a:f7:f5:72:f5:98:0f:87:f3:69:64:2b:70:6c: 27:6e:b7:3e:f6:d3:7f:0e:68:1a:b7:c7:8a:5c:f4:8c:5d:26: 5a:0b:5f:3f:ac:5c:70:31:52:f1:3e:6a:c7:5c:97:ba:2f:99: 20:7e:43:64:f7:cc:92:7e:0e:37:7c:cf:55:f5:6e:ce:e4:33: d6:bf:05:88:ba:76:3a:f7:10:dc:64:7c:ac:37:a8:73:b3:e6: 75:55:66:0f:5a:0c:2f:d7:06:2d:bc:c2:1e:5a:7b:5e:e6:48: fd:17:c9:9d:5f:08:6d:7e:7e:4b:81:49:30:2f:1f:08:a1:b7: ee:0d:28:e9:33:ac:cc:b9:5f:9c:0e:1f:b4:58:d6:08:bb:e4: a0:62:c6:3f:10:48:12:e7:5a:5f:48:0e:02:6c:8c:7f:d8:73: 66:0d:3a:58:a1:c9:0e:99:83:74:12:43:83:46:d1:94:4b:bd: 5b:80:68:6d:d3:09:ce:b0:df:c0:22:06:55:d1:a9:51:57:a8: 79:0c:e7:85:57:76:76:d3:82:de:88:bb:ec:7c:20:25:92:3c: 74:f4:dc:3c:29:50:1a:78:87:db:6e:eb:4c:ac:71:72:d5:37: c4:2c:a9:f5:20:1a:2f:da:06:2b:14:87:da:7e:d7:a2:bd:02: 13:c5:36:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQAaAZ+7SjKI8s8jVC1I0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4 YzlhMjQwHhcNMjUxMjI2MjAwMDU4WhcNMjUxMjI3MjAwMDU4WjAzMTEwLwYDVQQD EygxNzRmMjQxZDFjYWNjNzE4OThjZGRkNmVhYWMxMDYzMTEzYjkxODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNpO8M9HoHyYppYRhwpSJIFU6lFv UbHWnuhzmUedE8ylSvzFAh7NeTGkh4ios/3io2R1aZoNhV3KKDbgaOKGJMXz6M7t 7gTyv/i7foFx2iltusb4/BaWaSGqhRePNrY6T4wrMwbLrBueyllHMDOmRENgNGvf unEuDtIRb2E1BiHiMyaPEc22+Gt7LhTJDYGJHM0EHPbyrHbzakYiz4hgtXSnfw4M y3bLffJlx4oJDhTB8Jq74/AWFoibXLYj9RZu7xzDu5JqFjvp4IoEfrc97c4B0SYi w+MJfszQMDVvPg16Kf8bb/c+zErsLC9KgAhdAD0M4EBd4QEfqjcO09ffRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdPJB0crMcYmM3dbqrBBjETuRiTMB8GA1UdIwQY MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRhUZpr3 9XL1mA+H82lkK3BsJ263PvbTfw5oGrfHilz0jF0mWgtfP6xccDFS8T5qx1yXui+Z IH5DZPfMkn4ON3zPVfVuzuQz1r8FiLp2OvcQ3GR8rDeoc7PmdVVmD1oML9cGLbzC Hlp7XuZI/RfJnV8IbX5+S4FJMC8fCKG37g0o6TOszLlfnA4ftFjWCLvkoGLGPxBI EudaX0gOAmyMf9hzZg06WKHJDpmDdBJDg0bRlEu9W4BobdMJzrDfwCIGVdGpUVeo eQznhVd2dtOC3oi77HwgJZI8dPTcPClQGniH227rTKxxctU3xCyp9SAaL9oGKxSH 2n7Xor0CE8U2qw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:12:06 2025 by rpki-client