This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json) Hash identifier: TUKzUbA70T4TQvKW1slE9CeHDhHk/45i4l2LATWBQng= Subject key identifier: 1E:27:4C:0B:CE:49:05:F3:4B:0E:A6:F9:42:5A:F1:68:6B:02:D2:DE Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Certificate serial: 019B3CB561D12768487F1A940D89B229C141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft Manifest number: 1096 Signing time: Sat 20 Dec 2025 17:01:18 +0000 Manifest this update: Sat 20 Dec 2025 17:01:18 +0000 Manifest next update: Sun 21 Dec 2025 17:01:18 +0000 Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=) 2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=) 3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: opDBg9KUVOLvoIVeGT7BPFiiEXXfKmBQKBNzgWnNKpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:61:d1:27:68:48:7f:1a:94:0d:89:b2:29:c1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Validity Not Before: Dec 20 17:01:18 2025 GMT Not After : Dec 21 17:01:18 2025 GMT Subject: CN=1e274c0bce4905f34b0ea6f9425af1686b02d2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:dd:91:32:29:9c:62:6b:e3:05:92:2b:86: 39:47:86:52:33:cb:09:70:b7:f7:1b:95:b3:56:93: cf:bc:90:4f:41:7b:b2:63:9a:64:6e:32:d1:f9:6e: bf:e3:ec:45:1f:54:6a:b4:10:a4:f7:c2:c9:8e:45: 63:28:3d:85:54:72:b9:c2:b1:47:41:e5:b3:15:09: 7b:3b:c6:47:b4:23:9c:1c:2e:5a:7f:7f:8e:ac:b3: df:9b:d2:61:e5:1e:b1:64:8d:d8:fd:57:26:9e:1d: 25:c5:64:4d:91:cb:dd:fc:d1:ed:70:14:a6:59:60: 92:c7:c4:9d:4b:41:06:d4:de:63:22:bc:9d:17:91: ea:6d:05:57:c8:38:b5:19:4b:39:85:7c:92:a7:d3: 2f:3c:5d:f6:7e:7c:97:94:03:45:29:eb:8d:51:d9: eb:fa:53:8b:94:2d:82:7b:dd:44:89:5f:5e:af:a2: 39:30:dc:5b:0d:21:95:48:4c:63:5a:f5:b5:2f:f7: 12:0f:44:a2:cf:d1:24:ab:df:fd:21:45:0a:ff:c5: a3:4c:74:9a:c4:8a:46:5b:f5:e6:cb:bd:81:37:f5: a3:1f:08:80:57:6a:6e:96:16:84:91:70:93:bb:ed: a3:12:1f:d2:97:cb:6b:f6:a7:13:d1:ad:48:e7:a0: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:4C:0B:CE:49:05:F3:4B:0E:A6:F9:42:5A:F1:68:6B:02:D2:DE X509v3 Authority Key Identifier: keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fa:73:0e:cd:33:22:13:76:0d:9f:89:21:c6:e9:d4:7f:b2: d2:c5:0b:a7:78:63:3a:8d:83:37:1a:3a:2c:12:e8:1b:a4:10: 7a:bf:02:83:6d:9b:8b:9c:2f:5c:73:aa:a1:3e:74:a0:54:7e: 42:85:40:cd:29:1b:7e:b0:6b:21:f5:a8:0b:08:4e:1f:74:30: 55:17:0a:88:35:8d:49:86:5f:c7:0a:cf:e8:7e:3d:4f:cc:23: 5d:36:91:3d:b0:20:f4:1a:0b:33:74:7d:89:73:f6:7b:c1:e4: 4c:bd:d7:f6:8f:dc:63:20:f1:7b:4d:b9:c7:fd:69:68:a3:a6: 00:27:c6:e9:66:3d:24:48:10:d0:1a:5f:01:e1:bc:72:5f:66: 92:00:e2:49:a9:23:e5:d4:2a:6d:41:5c:b9:70:1d:cd:16:9c: cd:90:5e:78:c3:de:3c:7d:5c:0c:2b:ba:96:56:d9:86:5a:e2: 9e:de:ef:5a:ae:75:7d:a0:c5:d9:77:72:6f:eb:f4:c8:80:3a: de:eb:aa:4e:c4:29:af:af:d3:52:ba:ae:80:78:74:a3:f5:22: af:39:bc:98:cc:5f:fb:10:3f:28:50:03:84:e6:59:b4:f4:98: d7:04:0f:e7:fd:da:90:4d:03:40:7a:2b:9b:7f:82:24:b7:91: 31:0d:51:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tWHRJ2hIfxqUDYmyKcFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5 ZjdjZTcwHhcNMjUxMjIwMTcwMTE4WhcNMjUxMjIxMTcwMTE4WjAzMTEwLwYDVQQD EygxZTI3NGMwYmNlNDkwNWYzNGIwZWE2Zjk0MjVhZjE2ODZiMDJkMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/dkTIpnGJr4wWSK4Y5R4ZSM8sJ cLf3G5WzVpPPvJBPQXuyY5pkbjLR+W6/4+xFH1RqtBCk98LJjkVjKD2FVHK5wrFH QeWzFQl7O8ZHtCOcHC5af3+OrLPfm9Jh5R6xZI3Y/Vcmnh0lxWRNkcvd/NHtcBSm WWCSx8SdS0EG1N5jIrydF5HqbQVXyDi1GUs5hXySp9MvPF32fnyXlANFKeuNUdnr +lOLlC2Ce91EiV9er6I5MNxbDSGVSExjWvW1L/cSD0Siz9Ekq9/9IUUK/8WjTHSa xIpGW/Xmy72BN/WjHwiAV2pulhaEkXCTu+2jEh/Sl8tr9qcT0a1I56BuFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4nTAvOSQXzSw6m+UJa8WhrAtLeMB8GA1UdIwQY MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfpzDs0z IhN2DZ+JIcbp1H+y0sULp3hjOo2DNxo6LBLoG6QQer8Cg22bi5wvXHOqoT50oFR+ QoVAzSkbfrBrIfWoCwhOH3QwVRcKiDWNSYZfxwrP6H49T8wjXTaRPbAg9BoLM3R9 iXP2e8HkTL3X9o/cYyDxe025x/1paKOmACfG6WY9JEgQ0BpfAeG8cl9mkgDiSakj 5dQqbUFcuXAdzRaczZBeeMPePH1cDCu6llbZhlrint7vWq51faDF2Xdyb+v0yIA6 3uuqTsQpr6/TUrqugHh0o/Uirzm8mMxf+xA/KFADhOZZtPSY1wQP5/3akE0DQHor m3+CJLeRMQ1RDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:36 2025 by rpki-client