This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json) Hash identifier: GWVEChojLU0W3DeMMDtAem5Q9l4OcI6AcfJDTnsK6lg= Subject key identifier: 70:B6:96:A7:BC:3F:0A:6B:89:78:73:34:75:5E:1D:89:82:CD:2A:AF Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Certificate serial: 019B62B0080A10AE2789CE1FC4B6959C6B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft Manifest number: 179A Signing time: Sun 28 Dec 2025 02:01:01 +0000 Manifest this update: Sun 28 Dec 2025 02:01:01 +0000 Manifest next update: Mon 29 Dec 2025 02:01:01 +0000 Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=) 2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: +05XMe5mT29BltiFw6J1OREG0JberDLg8m8KV0BHkbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:08:0a:10:ae:27:89:ce:1f:c4:b6:95:9c:6b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Validity Not Before: Dec 28 02:01:01 2025 GMT Not After : Dec 29 02:01:01 2025 GMT Subject: CN=70b696a7bc3f0a6b89787334755e1d8982cd2aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:c6:1f:70:0b:99:f2:92:23:28:9c:b2:e3: 13:0c:a4:9b:9d:cc:21:65:6e:c5:16:50:9f:38:54: 06:81:b9:89:ce:75:d7:d0:0a:91:23:59:65:f4:e8: 88:51:1f:06:32:d5:c9:b4:72:5a:5b:ee:a2:4a:5b: e9:c1:82:c5:0e:f7:03:e6:42:2c:5c:a8:ac:89:8f: 29:25:1c:96:1d:f3:d2:fe:b1:43:b9:89:e7:74:46: 84:21:aa:49:d5:68:67:1d:d4:71:d0:bb:cc:8e:c4: b3:1d:68:81:a6:f3:b2:13:ff:a7:56:32:5e:96:51: e0:7b:59:a9:a3:97:f3:d6:4e:f4:c3:72:17:25:4b: b5:45:81:92:a6:b1:ec:d9:6c:9e:ab:4a:59:5e:16: c3:3d:31:aa:84:7a:de:a8:e3:98:3f:06:ff:9b:31: 3d:a2:a9:29:c2:c7:3b:92:2e:91:b0:3f:e4:1a:6c: e5:1d:98:38:2a:b4:64:f8:b3:ac:18:53:31:83:1c: 2e:90:69:a2:d6:39:9c:18:78:35:a3:3c:ee:06:e3: fe:0b:54:2f:8f:2b:72:af:0c:a9:ff:f2:3a:42:43: 12:87:a4:ac:c3:87:a6:49:99:eb:bc:23:ec:6d:f9: c6:32:9f:0d:60:8a:30:f7:aa:17:ef:87:74:7b:89: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:96:A7:BC:3F:0A:6B:89:78:73:34:75:5E:1D:89:82:CD:2A:AF X509v3 Authority Key Identifier: keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:89:d1:6f:2b:27:ff:46:5f:6a:a2:b1:c9:a0:b3:91:e2: e8:42:ca:88:f4:7b:b2:a0:d5:ac:12:b3:6a:39:cd:ef:d3:5a: 28:50:a9:d9:8c:3d:b0:e8:4f:d3:a2:bb:8d:32:18:0a:7b:73: 27:e6:e9:2c:d6:35:29:b6:a7:95:51:4c:3a:9f:1e:9e:f7:11: 5b:2d:93:0f:14:64:7d:20:e1:f9:b8:ff:56:80:5a:09:11:50: ac:78:1b:db:b2:d8:84:81:69:24:cf:9c:d3:dd:53:6f:80:23: e1:e7:14:06:db:57:a8:1a:45:32:32:9a:33:3b:2e:e1:94:cd: 6e:70:6f:b1:34:fe:a3:e9:a4:9f:0c:61:a2:94:51:23:4a:61: fc:77:b8:c2:4d:7e:d1:74:fb:f8:9c:db:97:d8:00:aa:64:ae: 51:cf:f2:5d:fa:3b:0f:d5:59:15:09:1e:ad:4f:fc:db:58:cf: cb:b2:80:47:76:8f:5d:0f:f4:06:b7:92:d2:ad:30:49:dd:91: 28:b1:43:52:08:fe:fb:57:2e:b1:7e:30:3b:27:87:91:71:80: 83:95:59:fb:12:f6:13:a8:a4:8c:a7:87:b7:ba:87:10:f3:87: 1a:b1:e4:ed:29:33:d7:47:17:3b:59:29:62:48:19:4b:31:f8: e4:78:dd:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisAgKEK4nic4fxLaVnGsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz ZmIyOGIwHhcNMjUxMjI4MDIwMTAxWhcNMjUxMjI5MDIwMTAxWjAzMTEwLwYDVQQD Eyg3MGI2OTZhN2JjM2YwYTZiODk3ODczMzQ3NTVlMWQ4OTgyY2QyYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoTGH3ALmfKSIyicsuMTDKSbncwh ZW7FFlCfOFQGgbmJznXX0AqRI1ll9OiIUR8GMtXJtHJaW+6iSlvpwYLFDvcD5kIs XKisiY8pJRyWHfPS/rFDuYnndEaEIapJ1WhnHdRx0LvMjsSzHWiBpvOyE/+nVjJe llHge1mpo5fz1k70w3IXJUu1RYGSprHs2Wyeq0pZXhbDPTGqhHreqOOYPwb/mzE9 oqkpwsc7ki6RsD/kGmzlHZg4KrRk+LOsGFMxgxwukGmi1jmcGHg1ozzuBuP+C1Qv jytyrwyp//I6QkMSh6Ssw4emSZnrvCPsbfnGMp8NYIow96oX74d0e4kx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC2lqe8PwpriXhzNHVeHYmCzSqvMB8GA1UdIwQY MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt N2Y2NzQ0MmY5ZjMyLzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkiJ0W8r J/9GX2qiscmgs5Hi6ELKiPR7sqDVrBKzajnN79NaKFCp2Yw9sOhP06K7jTIYCntz J+bpLNY1KbanlVFMOp8envcRWy2TDxRkfSDh+bj/VoBaCRFQrHgb27LYhIFpJM+c 091Tb4Aj4ecUBttXqBpFMjKaMzsu4ZTNbnBvsTT+o+mknwxhopRRI0ph/He4wk1+ 0XT7+Jzbl9gAqmSuUc/yXfo7D9VZFQkerU/821jPy7KAR3aPXQ/0BreS0q0wSd2R KLFDUgj++1cusX4wOyeHkXGAg5VZ+xL2E6ikjKeHt7qHEPOHGrHk7Skz10cXO1kp YkgZSzH45Hjdrw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:26 2025 by rpki-client