This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json) Hash identifier: e+4mdqHOS2wPuh097GiSDsFA4+BD4/rnmy77tDeye9g= Subject key identifier: 39:63:00:44:63:16:C7:9E:BF:4F:5D:A4:1E:AC:2E:D4:3E:B8:9A:4F Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b Certificate serial: 019B484B4E08C5C19989FC2729AC256FB1D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 23:00:53 +0000 Manifest this update: Mon 22 Dec 2025 23:00:53 +0000 Manifest next update: Tue 23 Dec 2025 23:00:53 +0000 Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: Y6W1SgH31FU7HxP4cNc3DnjI6pi+GdY3Sh4Hop2XzIs=) 2: S-uH2YCKKsWBJelfJrxohaQfZ4s.roa (hash: 7xEZvOLMz8mmv0R7hpmF8/cEimpEVrW14AuQipAjIzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:4e:08:c5:c1:99:89:fc:27:29:ac:25:6f:b1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b Validity Not Before: Dec 22 23:00:53 2025 GMT Not After : Dec 23 23:00:53 2025 GMT Subject: CN=396300446316c79ebf4f5da41eac2ed43eb89a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:14:a5:3d:7a:9f:e6:d7:b4:ee:44:52:82: f9:12:2a:4b:f1:5f:9a:68:21:27:69:c1:63:77:8e: 4c:56:80:fe:28:e7:25:5b:b1:45:38:51:a5:ab:d2: ce:ed:eb:15:8b:14:71:90:1d:e5:c2:32:13:1d:e5: 9d:c2:61:6c:31:d7:b8:c3:4d:ef:46:50:4f:e4:f4: b2:ef:80:61:86:25:d0:4c:5e:ba:16:04:79:f2:8c: 60:ba:7f:32:17:fc:56:9a:54:e1:31:d2:a7:2d:81: 25:6c:a8:8d:4d:4e:73:76:aa:1f:46:3d:f1:e3:02: 60:5d:be:10:db:17:28:7a:97:7e:26:03:99:45:c2: 31:e6:e8:4e:03:0a:b3:14:5f:8e:32:97:5c:b7:e7: 83:24:98:b9:ab:26:86:90:14:b0:77:a1:71:28:2a: 9a:c9:41:0b:bd:53:29:f0:2c:1c:f2:44:70:b6:0c: 61:45:f6:be:3b:81:f7:e1:8c:b7:85:fd:a1:b2:78: 53:13:36:9c:44:42:02:5f:a2:7c:9b:39:87:76:82: 6e:32:b8:22:9a:1c:c0:d0:4b:3c:a0:74:25:cd:83: de:a1:68:ba:a2:20:a9:7e:e0:b9:d6:10:eb:25:ab: 6f:11:46:11:ee:7e:16:cc:c5:e5:0d:bb:06:06:9c: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:63:00:44:63:16:C7:9E:BF:4F:5D:A4:1E:AC:2E:D4:3E:B8:9A:4F X509v3 Authority Key Identifier: keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:21:ad:6e:66:6a:b0:fe:bc:5e:94:39:2a:09:d8:0f:5b:05: 1d:3b:fa:66:9c:8e:ca:e5:03:5b:91:c5:2b:9e:b6:0e:14:3c: 4a:3c:96:04:24:b7:22:46:3c:e2:d0:6a:2e:e4:24:30:3f:09: 44:95:8d:d8:37:f4:96:8f:db:71:84:ab:fb:df:7b:09:14:8c: 6e:e9:f6:77:bc:fa:bf:43:6d:84:6a:12:20:4e:94:cc:dc:1a: bd:4b:3c:65:89:4a:4c:0f:5a:4d:8a:7a:e1:de:0c:05:36:ef: 60:4f:58:b2:ee:5e:ef:57:a8:06:42:bb:1a:ac:08:d2:39:d2: 1a:d0:05:17:39:b0:fb:83:fd:6e:a0:05:13:e2:8f:d4:12:d7: dd:d3:19:1f:49:cf:26:ad:6f:2f:c6:6a:3f:66:21:73:7a:c3: 75:09:a8:4f:fe:8d:28:8f:8b:ec:eb:10:96:4e:8a:f9:2c:8b: 0c:b3:31:d9:34:b9:db:a3:85:78:a3:2c:fd:4c:0c:07:18:45: 1c:5f:71:5a:8c:f4:b9:d4:eb:88:f6:35:3c:a4:3a:99:1c:f9: 5d:bc:0f:c0:89:d0:cb:d2:20:62:00:d7:94:8b:11:e5:69:dd: 6a:7a:83:62:26:9e:a4:14:27:b5:b9:69:cb:c1:f9:b2:7f:29: 41:aa:2c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS04IxcGZifwnKawlb7HQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEwM2M5YzgyNjg1YWU2ZDZiM2QyMWQ2ODRiYmNmNDY4 YmY3NWIwHhcNMjUxMjIyMjMwMDUzWhcNMjUxMjIzMjMwMDUzWjAzMTEwLwYDVQQD EygzOTYzMDA0NDYzMTZjNzllYmY0ZjVkYTQxZWFjMmVkNDNlYjg5YTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XAUpT16n+bXtO5EUoL5EipL8V+a aCEnacFjd45MVoD+KOclW7FFOFGlq9LO7esVixRxkB3lwjITHeWdwmFsMde4w03v RlBP5PSy74BhhiXQTF66FgR58oxgun8yF/xWmlThMdKnLYElbKiNTU5zdqofRj3x 4wJgXb4Q2xcoepd+JgOZRcIx5uhOAwqzFF+OMpdct+eDJJi5qyaGkBSwd6FxKCqa yUELvVMp8Cwc8kRwtgxhRfa+O4H34Yy3hf2hsnhTEzacREICX6J8mzmHdoJuMrgi mhzA0Es8oHQlzYPeoWi6oiCpfuC51hDrJatvEUYR7n4WzMXlDbsGBpzWzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDljAERjFseev09dpB6sLtQ+uJpPMB8GA1UdIwQY MBaAFAfaA8nIJoWubWs9IdaEu89Gi/dbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2It YWEwMWRjZDNkZmE3LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2ItYWEwMWRjZDNkZmE3 LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyGtbmZq sP68XpQ5KgnYD1sFHTv6ZpyOyuUDW5HFK562DhQ8SjyWBCS3IkY84tBqLuQkMD8J RJWN2Df0lo/bcYSr+997CRSMbun2d7z6v0NthGoSIE6UzNwavUs8ZYlKTA9aTYp6 4d4MBTbvYE9Ysu5e71eoBkK7GqwI0jnSGtAFFzmw+4P9bqAFE+KP1BLX3dMZH0nP Jq1vL8ZqP2Yhc3rDdQmoT/6NKI+L7OsQlk6K+SyLDLMx2TS526OFeKMs/UwMBxhF HF9xWoz0udTriPY1PKQ6mRz5XbwPwInQy9IgYgDXlIsR5WndanqDYiaepBQntblp y8H5sn8pQaosGA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:52 2025 by rpki-client