This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json) Hash identifier: gH0amN8Q7ToRv+ANsdytjNGvvfay4FRg0leStaQgD8c= Subject key identifier: 40:69:34:3D:58:D0:F4:27:CF:98:40:BD:27:8A:92:02:4A:9E:E9:89 Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66 Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66 Certificate serial: 019B405B92CA7D73A8E1264EBF17A2DA8653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft Manifest number: 0E6D Signing time: Sun 21 Dec 2025 10:01:41 +0000 Manifest this update: Sun 21 Dec 2025 10:01:41 +0000 Manifest next update: Mon 22 Dec 2025 10:01:41 +0000 Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: ZF0N2bTYh+yND/66scowoErwIHHO1J80yptwNDsQ52Q=) 2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:92:ca:7d:73:a8:e1:26:4e:bf:17:a2:da:86:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66 Validity Not Before: Dec 21 10:01:41 2025 GMT Not After : Dec 22 10:01:41 2025 GMT Subject: CN=4069343d58d0f427cf9840bd278a92024a9ee989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:d8:53:56:16:80:71:30:c5:e1:85:4a:d4: d9:48:43:77:22:25:a8:a7:57:28:bd:8f:93:a7:1e: 85:b5:a0:ae:29:f9:4d:be:9f:18:e6:50:18:b9:61: ec:82:2f:12:04:75:13:97:58:e3:d9:8c:6a:2a:7a: cd:58:74:b3:d5:7a:2b:f4:a4:87:04:ea:0a:61:66: c4:5b:99:10:8d:f4:6d:2b:1a:2e:45:0b:3d:aa:ee: 55:6d:29:0c:45:82:64:79:2e:31:67:b7:62:5a:0d: 65:8d:eb:0d:4b:fe:38:c0:cb:f9:1c:50:76:c7:e3: 1c:f7:51:f1:2b:75:b4:78:37:5a:c8:b6:43:c7:cb: 7d:7f:87:6b:1c:f8:63:38:01:a8:4b:10:2c:d3:ea: c8:af:e8:01:24:63:a0:7f:78:89:a8:de:99:f5:1a: 63:d7:76:15:e6:ee:49:f9:4d:69:cb:68:a3:64:f2: b1:fa:0c:ed:b1:db:2f:b0:73:8b:ae:eb:5c:55:7c: 52:05:01:73:f7:fb:8a:1e:5d:19:b8:4b:61:12:dd: f7:2f:c0:57:9e:2e:9d:fd:66:5e:4b:fa:b4:d1:81: 27:f3:cb:cb:8f:fa:bc:5a:01:0e:09:84:aa:4f:dd: 73:f3:9f:96:a9:02:07:33:c6:84:da:1c:90:cd:38: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:69:34:3D:58:D0:F4:27:CF:98:40:BD:27:8A:92:02:4A:9E:E9:89 X509v3 Authority Key Identifier: keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:75:c4:35:e3:62:b5:81:6d:08:c9:14:02:b7:0f:78:6b:1e: 03:5e:f9:b9:9c:b5:5c:7d:4c:c2:37:08:d6:bb:2e:9a:07:e5: c9:35:85:5e:f8:cd:7a:c1:76:5d:26:50:17:70:bc:8c:89:6d: ca:1a:df:89:2e:dc:f3:74:37:02:6b:85:55:a4:5a:b7:11:bb: 65:f2:1c:45:68:e8:4d:d9:21:80:a3:4d:b7:22:bf:b5:55:74: ab:db:da:40:fd:f4:58:3c:79:ff:29:e1:e1:57:3b:75:11:95: 03:c0:43:91:83:04:5a:1f:94:49:11:8b:25:97:7e:c1:40:6d: da:e2:07:80:f7:9a:54:ab:d9:93:bd:1a:49:52:40:0a:71:cd: ec:78:7d:ac:e0:03:f6:30:4d:32:2b:13:a3:83:28:29:fa:d4: fc:63:ad:ac:b9:ac:9c:39:7d:d6:6c:cf:32:1b:a5:6d:0e:b1: 1b:1f:5d:4e:61:67:19:55:8c:74:9e:0a:e7:19:28:46:65:4c: 6f:9f:14:10:b4:18:fe:30:40:0f:09:1e:9f:97:34:98:f9:a8: 1c:c1:8f:0d:f9:1c:69:56:a3:ed:b4:e2:9b:b7:6b:4e:7a:96: 13:12:4d:c6:16:77:ee:19:57:af:71:d5:41:37:e9:d2:2b:16: 10:17:29:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW5LKfXOo4SZOvxei2oZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDY0ZGFlZjMzOWU2ZmRhZTY0NGRiMWIyMGJiZjU0ZTY3 ZTVkNjYwHhcNMjUxMjIxMTAwMTQxWhcNMjUxMjIyMTAwMTQxWjAzMTEwLwYDVQQD Eyg0MDY5MzQzZDU4ZDBmNDI3Y2Y5ODQwYmQyNzhhOTIwMjRhOWVlOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJHYU1YWgHEwxeGFStTZSEN3IiWo p1covY+Tpx6FtaCuKflNvp8Y5lAYuWHsgi8SBHUTl1jj2YxqKnrNWHSz1Xor9KSH BOoKYWbEW5kQjfRtKxouRQs9qu5VbSkMRYJkeS4xZ7diWg1ljesNS/44wMv5HFB2 x+Mc91HxK3W0eDdayLZDx8t9f4drHPhjOAGoSxAs0+rIr+gBJGOgf3iJqN6Z9Rpj 13YV5u5J+U1py2ijZPKx+gztsdsvsHOLrutcVXxSBQFz9/uKHl0ZuEthEt33L8BX ni6d/WZeS/q00YEn88vLj/q8WgEOCYSqT91z85+WqQIHM8aE2hyQzTi+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBpND1Y0PQnz5hAvSeKkgJKnumJMB8GA1UdIwQY MBaAFAfWTa7zOeb9rmRNsbILv1Tmfl1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDct ODI3Zjk2NDhjMDIyLzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kN2ZkMmMtOTVhOS00YzA5LTllNDctODI3Zjk2NDhjMDIy LzEvQjlaTnJ2TTU1djJ1WkUyeHNndV9WT1otWFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3XENeNi tYFtCMkUArcPeGseA175uZy1XH1MwjcI1rsumgflyTWFXvjNesF2XSZQF3C8jIlt yhrfiS7c83Q3AmuFVaRatxG7ZfIcRWjoTdkhgKNNtyK/tVV0q9vaQP30WDx5/ynh 4Vc7dRGVA8BDkYMEWh+USRGLJZd+wUBt2uIHgPeaVKvZk70aSVJACnHN7Hh9rOAD 9jBNMisTo4MoKfrU/GOtrLmsnDl91mzPMhulbQ6xGx9dTmFnGVWMdJ4K5xkoRmVM b58UELQY/jBADwken5c0mPmoHMGPDfkcaVaj7bTim7drTnqWExJNxhZ37hlXr3HV QTfp0isWEBcpbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:30 2025 by rpki-client