This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft File: b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft (raw, json) Hash identifier: 4hHbVqFUKnzGFZt5BUdEE88NIbBfQ55wXA6ZnpbVsE0= Subject key identifier: A3:E8:32:A3:80:5F:15:C1:B9:B4:37:0E:A9:96:ED:29:07:91:4C:79 Authority key identifier: 6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1 Certificate issuer: /CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1 Certificate serial: 019B4324A2EC0995FE19496B78FB09B7EC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft Manifest number: 1183 Signing time: Sun 21 Dec 2025 23:00:32 +0000 Manifest this update: Sun 21 Dec 2025 23:00:32 +0000 Manifest next update: Mon 22 Dec 2025 23:00:32 +0000 Files and hashes: 1: b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl (hash: iGHcEsBlRl5DbLz+dH7XX75jJGmassFqGdnuuEhA6H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:a2:ec:09:95:fe:19:49:6b:78:fb:09:b7:ec:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1 Validity Not Before: Dec 21 23:00:32 2025 GMT Not After : Dec 22 23:00:32 2025 GMT Subject: CN=a3e832a3805f15c1b9b4370ea996ed2907914c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:07:26:d9:23:79:72:e5:49:c1:52:f3:ca: 5b:ce:3b:53:3e:b3:00:41:2a:8c:0a:b4:20:f3:1d: a2:b2:32:d6:89:38:92:1a:cf:e3:61:3e:32:eb:2d: a3:9a:b2:57:14:86:26:63:f8:90:07:2d:4b:ca:c5: 18:77:08:4c:aa:50:a2:a8:9a:25:b3:6e:90:39:cf: 06:32:59:13:b6:c6:18:e4:f5:2c:41:38:55:64:08: cf:a1:46:79:72:41:7d:fd:88:8d:36:3a:05:c2:3d: d8:86:4b:58:68:d7:40:69:29:93:7c:84:43:a9:89: b6:d1:66:d1:c1:f3:2c:de:65:2f:49:19:27:2f:8a: 72:52:da:12:d7:43:4a:eb:1b:9a:bc:63:19:a7:78: 67:c4:5c:54:b4:f3:d7:45:e7:90:da:49:ea:f2:d5: df:23:aa:67:93:00:e0:e9:22:f9:e5:69:eb:17:34: b0:08:25:a7:e2:5a:22:78:a8:f5:92:72:62:4e:31: 5c:07:b4:ab:08:18:56:e9:8d:9f:1e:ab:32:8b:ed: e9:74:ee:bf:03:cf:68:21:a6:32:1f:61:63:ce:ca: 3a:43:c3:2e:93:71:ec:22:da:78:80:30:39:94:35: 90:eb:aa:9a:f8:bf:7b:0c:6b:e9:b9:40:09:ac:a9: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:32:A3:80:5F:15:C1:B9:B4:37:0E:A9:96:ED:29:07:91:4C:79 X509v3 Authority Key Identifier: keyid:6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f1:62:9c:d0:6e:2c:72:80:d9:8f:ff:e5:71:80:7b:66:79: c4:2b:c7:bc:46:e1:6f:b6:38:4e:b8:49:4a:a1:b2:7e:ae:b5: 4a:51:e5:70:e4:85:6c:dc:38:b6:ef:5b:02:c2:12:f7:06:84: c4:08:68:20:97:94:79:cf:89:52:4f:fd:13:b1:46:eb:6c:4e: 44:99:24:4a:47:82:aa:1d:a4:5e:6a:05:e8:68:3d:66:2d:2f: e0:2e:98:a5:34:6d:ba:04:db:34:3f:39:88:3b:90:f0:05:04: 81:94:28:6d:51:61:ef:1c:1a:fa:69:34:80:3f:db:f0:ba:5b: 2f:10:d4:60:04:a8:0e:2e:b0:ae:2f:6a:e1:e9:b8:52:7d:ed: e2:86:f4:a2:77:ac:20:06:5d:4c:fb:07:1e:a1:f5:55:0f:7c: c8:4c:8b:b4:c9:c7:d6:77:df:ab:e9:99:fe:16:d9:76:b2:51: a0:34:44:ca:1f:c9:c9:82:75:5a:1e:5f:98:40:c9:91:a0:f6: be:23:20:46:e3:5a:93:f2:e4:07:c6:9a:fb:ad:f9:5d:b0:ca: 34:ec:28:2c:6b:e2:b3:cf:6b:7d:b5:7b:1e:4e:97:2c:b3:9f: 7c:ef:7f:a6:bd:27:b9:2e:88:e2:db:24:57:6c:68:64:c8:6e: fc:e4:81:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKLsCZX+GUlrePsJt+w3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNjQ4ZTNjYWI2MDliZDE0ODNjYTNlNTE5MTFjZWFhNTNm MGM2YTEwHhcNMjUxMjIxMjMwMDMyWhcNMjUxMjIyMjMwMDMyWjAzMTEwLwYDVQQD EyhhM2U4MzJhMzgwNWYxNWMxYjliNDM3MGVhOTk2ZWQyOTA3OTE0Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4csHJtkjeXLlScFS88pbzjtTPrMA QSqMCrQg8x2isjLWiTiSGs/jYT4y6y2jmrJXFIYmY/iQBy1LysUYdwhMqlCiqJol s26QOc8GMlkTtsYY5PUsQThVZAjPoUZ5ckF9/YiNNjoFwj3YhktYaNdAaSmTfIRD qYm20WbRwfMs3mUvSRknL4pyUtoS10NK6xuavGMZp3hnxFxUtPPXReeQ2knq8tXf I6pnkwDg6SL55WnrFzSwCCWn4loieKj1knJiTjFcB7SrCBhW6Y2fHqsyi+3pdO6/ A89oIaYyH2Fjzso6Q8Muk3HsItp4gDA5lDWQ66qa+L97DGvpuUAJrKlAYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPoMqOAXxXBubQ3DqmW7SkHkUx5MB8GA1UdIwQY MBaAFG9kjjyrYJvRSDyj5RkRzqpT8MahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWEyNDYtMzMwNC00OWViLWFhZGEt YTA2OWFmODU0YjA1LzEvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lYWEyNDYtMzMwNC00OWViLWFhZGEtYTA2OWFmODU0YjA1 LzEvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/FinNBu LHKA2Y//5XGAe2Z5xCvHvEbhb7Y4TrhJSqGyfq61SlHlcOSFbNw4tu9bAsIS9waE xAhoIJeUec+JUk/9E7FG62xORJkkSkeCqh2kXmoF6Gg9Zi0v4C6YpTRtugTbND85 iDuQ8AUEgZQobVFh7xwa+mk0gD/b8LpbLxDUYASoDi6wri9q4em4Un3t4ob0ones IAZdTPsHHqH1VQ98yEyLtMnH1nffq+mZ/hbZdrJRoDREyh/JyYJ1Wh5fmEDJkaD2 viMgRuNak/LkB8aa+635XbDKNOwoLGvis89rfbV7Hk6XLLOffO9/pr0nuS6I4tsk V2xoZMhu/OSBwg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:03 2025 by rpki-client