This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json) Hash identifier: J3D2IJurvWjoLgVzpsQiH2ijLwFgaU3wWZNSlTWfHZ8= Subject key identifier: A4:ED:70:85:AD:44:86:C6:9F:78:8B:9F:16:2F:7F:32:17:A2:B9:72 Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Certificate serial: 019B3EDA05AA2C05CA1E9D3D238ED1901A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft Manifest number: 0C68 Signing time: Sun 21 Dec 2025 03:00:34 +0000 Manifest this update: Sun 21 Dec 2025 03:00:34 +0000 Manifest next update: Mon 22 Dec 2025 03:00:34 +0000 Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=) 2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: I6FtmQ48q7Tcubmk8eOHtQZykymeXjI/Fdaj/xP31h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:05:aa:2c:05:ca:1e:9d:3d:23:8e:d1:90:1a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Validity Not Before: Dec 21 03:00:34 2025 GMT Not After : Dec 22 03:00:34 2025 GMT Subject: CN=a4ed7085ad4486c69f788b9f162f7f3217a2b972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6a:75:3f:2c:ca:1f:eb:78:0c:f1:69:84:14: 40:a1:61:42:bc:aa:30:88:2c:9b:56:cd:b9:33:1c: b2:bb:27:08:f2:5f:b4:80:c0:bf:3c:66:27:82:6f: 35:dc:89:74:d9:37:3a:54:3b:24:5a:3c:7f:d9:6c: 9c:3a:1c:95:93:6c:bf:c1:8b:a0:4d:40:d6:ff:1e: 49:95:6d:db:4c:64:61:a7:d7:91:8e:8f:36:e9:bc: e8:7c:04:a3:5b:27:18:0e:22:65:db:b2:e3:49:19: 88:5f:eb:a8:0c:b8:d6:36:18:93:a3:84:58:83:d0: b2:e9:b2:a5:f9:6b:56:aa:c5:f1:d2:8a:d9:8e:ab: f1:c7:36:d5:d9:da:cb:86:19:1a:8e:dc:89:04:42: 34:d3:8a:70:d5:da:62:ec:d6:4d:70:e5:d4:76:76: 20:d8:fe:9f:f0:55:de:c7:ad:62:eb:4d:b0:ce:1c: f3:67:7c:e2:f3:e1:3c:97:1c:cd:75:80:05:4f:46: 38:89:8a:62:53:a4:91:2f:f5:b1:31:39:7a:ab:c9: 2c:c5:5e:93:02:e0:be:7a:5a:86:e4:06:98:c7:77: e5:ad:21:75:35:00:12:1b:ee:38:8e:3b:06:73:45: c2:7a:68:89:2e:f5:88:fb:03:d0:a9:94:95:09:cb: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:70:85:AD:44:86:C6:9F:78:8B:9F:16:2F:7F:32:17:A2:B9:72 X509v3 Authority Key Identifier: keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:81:87:f6:1f:54:f9:1a:89:68:e7:82:69:5e:17:36:0c:1c: f6:77:00:ca:44:7b:d2:a4:a9:8c:22:5c:d4:f4:9b:aa:2c:71: 62:d1:26:f3:0d:a3:ff:20:23:13:5c:0f:12:a5:3b:7a:2b:bf: 02:a5:c0:77:a5:11:af:fe:b7:cb:03:17:56:a9:95:0e:fa:9c: d6:dd:41:c1:53:8e:50:15:47:39:d0:c9:34:55:cb:4a:24:90: 34:6a:92:db:21:92:dc:f2:f2:2a:ac:12:bf:cf:01:93:01:75: 9c:74:4a:7e:72:4e:ec:dd:c1:e8:aa:e2:51:99:b0:95:cb:e7: 4f:49:bb:0b:f4:2e:3f:2b:48:23:81:78:2a:f9:cc:e7:54:0d: bd:f0:5f:c7:98:76:09:f9:5b:a6:c7:1f:a6:14:55:71:6f:a8: 2f:35:f0:44:7f:9c:51:26:19:43:7a:7c:c0:11:97:43:d3:93: 60:67:c2:60:01:dc:7b:52:b7:3a:82:30:d0:bb:3b:b0:41:7b: 00:d7:97:db:2e:08:82:0f:14:d4:fa:97:ec:b5:0e:7e:db:01: e6:52:5a:8b:c8:b3:16:e5:03:56:8f:30:8a:0d:0d:32:a7:ec: 42:0b:73:e0:6a:e3:25:fd:06:7c:13:e2:34:40:00:90:62:40: 70:a3:e9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gWqLAXKHp09I47RkBpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDc3M2YyNDBjZDYyNjljMjUxYjY1MTcwYWE3ZTI5OGFl OGM0MWYwHhcNMjUxMjIxMDMwMDM0WhcNMjUxMjIyMDMwMDM0WjAzMTEwLwYDVQQD EyhhNGVkNzA4NWFkNDQ4NmM2OWY3ODhiOWYxNjJmN2YzMjE3YTJiOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72p1PyzKH+t4DPFphBRAoWFCvKow iCybVs25MxyyuycI8l+0gMC/PGYngm813Il02Tc6VDskWjx/2WycOhyVk2y/wYug TUDW/x5JlW3bTGRhp9eRjo826bzofASjWycYDiJl27LjSRmIX+uoDLjWNhiTo4RY g9Cy6bKl+WtWqsXx0orZjqvxxzbV2drLhhkajtyJBEI004pw1dpi7NZNcOXUdnYg 2P6f8FXex61i602wzhzzZ3zi8+E8lxzNdYAFT0Y4iYpiU6SRL/WxMTl6q8ksxV6T AuC+elqG5AaYx3flrSF1NQASG+44jjsGc0XCemiJLvWI+wPQqZSVCcvnaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTtcIWtRIbGn3iLnxYvfzIXorlyMB8GA1UdIwQY MBaAFG9Hc/JAzWJpwlG2UXCqfimK6MQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMt NzY5Y2Q3ZGNjOTM4LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMtNzY5Y2Q3ZGNjOTM4 LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4GH9h9U +RqJaOeCaV4XNgwc9ncAykR70qSpjCJc1PSbqixxYtEm8w2j/yAjE1wPEqU7eiu/ AqXAd6URr/63ywMXVqmVDvqc1t1BwVOOUBVHOdDJNFXLSiSQNGqS2yGS3PLyKqwS v88BkwF1nHRKfnJO7N3B6KriUZmwlcvnT0m7C/QuPytII4F4KvnM51QNvfBfx5h2 CflbpscfphRVcW+oLzXwRH+cUSYZQ3p8wBGXQ9OTYGfCYAHce1K3OoIw0Ls7sEF7 ANeX2y4Igg8U1PqX7LUOftsB5lJai8izFuUDVo8wig0NMqfsQgtz4GrjJf0GfBPi NEAAkGJAcKPp1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:05 2025 by rpki-client