This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft File: B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json) Hash identifier: b9QA9nIyplliMUUYooTPiD2RNfZgwkE/FsrCWrhym60= Subject key identifier: 97:B6:48:08:21:D9:58:BB:E8:7E:81:D7:2E:DD:CA:B1:4A:E9:75:43 Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f Certificate serial: 019B51BC129CDFC8DE506F6E2BA7CC2B6D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft Manifest number: 09F7 Signing time: Wed 24 Dec 2025 19:00:38 +0000 Manifest this update: Wed 24 Dec 2025 19:00:38 +0000 Manifest next update: Thu 25 Dec 2025 19:00:38 +0000 Files and hashes: 1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: LILzxDu0uKVmmXkmsuOYg8cAgLnuFdEnsvXkx94N2hw=) 2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:12:9c:df:c8:de:50:6f:6e:2b:a7:cc:2b:6d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f Validity Not Before: Dec 24 19:00:38 2025 GMT Not After : Dec 25 19:00:38 2025 GMT Subject: CN=97b6480821d958bbe87e81d72eddcab14ae97543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:01:02:46:57:b0:0b:40:16:ea:88:d5:3a: c1:59:c3:53:f5:8b:6a:16:d6:40:f2:2b:cf:47:8e: 9b:84:12:cd:86:91:35:08:a4:16:e2:fe:2b:ee:64: 06:af:50:e5:35:9c:73:e8:25:94:e7:c2:6f:47:ce: 30:04:04:22:0c:47:5d:b8:dd:c1:b0:b0:ff:0c:48: 94:e8:3d:20:e5:33:9f:15:59:45:40:92:d5:da:19: 44:ca:15:87:f8:93:35:76:11:08:fd:c0:27:e8:1e: c8:ed:d0:04:43:1c:24:1b:26:1d:66:0b:96:ca:10: f2:7d:ac:3c:0d:9c:61:f9:22:33:06:41:a3:16:f4: da:bb:d1:14:9e:e6:a3:fa:d8:f8:6e:6c:d3:b0:44: a8:23:6b:10:1a:9f:67:d0:0a:c2:5a:95:2f:60:68: 04:55:c7:4a:76:58:06:11:15:46:c1:5f:07:b5:00: 5a:6a:7d:5b:d6:3d:d6:2d:27:eb:fa:2f:22:2d:1e: eb:c0:ad:ec:a6:34:f5:96:fe:9e:44:9d:97:92:0a: a9:c8:26:dd:0f:ab:5a:ee:7f:52:b9:20:dd:d1:a5: d2:e2:9e:1a:16:6b:51:0a:89:1a:7a:64:06:12:fb: b1:54:d3:02:05:1d:4c:6b:84:e3:f6:45:0b:e5:4d: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:48:08:21:D9:58:BB:E8:7E:81:D7:2E:DD:CA:B1:4A:E9:75:43 X509v3 Authority Key Identifier: keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e6:b4:b9:9b:e0:03:3e:b2:be:e2:92:07:d0:d8:0f:3f:8a: 37:d7:dc:3c:fc:67:38:f6:f9:d0:ef:65:d4:54:5b:8b:28:6c: 56:3c:ed:f7:bc:5d:e4:1b:b0:99:0e:66:d8:45:f7:4d:ef:85: 3c:53:f5:26:41:e3:46:48:35:a8:0a:45:b5:56:2e:60:b4:49: cf:b3:8a:c1:35:8f:99:cc:b0:4d:f9:c2:ce:a9:f5:c4:f6:e4: 73:bd:8b:2d:02:2c:6c:48:d7:e9:11:33:b4:d1:a4:3b:9d:0b: 00:4e:93:33:a7:22:b2:70:c4:0d:21:7d:e0:b4:65:87:22:34: 8f:8f:c2:a1:98:e4:c7:a9:3d:2d:a6:ac:e1:78:8d:d5:e9:e2: e1:bd:32:5d:28:72:df:89:a0:b8:57:cd:d4:4a:ad:75:7f:3d: e0:af:41:36:15:65:a2:e5:0f:b4:be:94:98:16:13:aa:2e:be: ad:e1:03:ea:27:b4:56:ea:e3:f6:45:9c:23:41:94:1e:20:19: 89:25:01:9b:db:dc:47:c8:57:45:27:19:0f:2e:28:1e:c0:f9: fa:be:2e:d4:e2:ec:78:96:df:a2:2b:ec:93:f3:5d:7b:5c:4e: cf:bd:41:07:4b:5e:82:61:b4:15:4d:c2:9c:c1:00:16:0a:bc: 0d:5e:b5:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvBKc38jeUG9uK6fMK22OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWRjM2YyMjU3MjJiODA5YWJlOTg3NzhjM2JmZDcwMDll MWNmNGYwHhcNMjUxMjI0MTkwMDM4WhcNMjUxMjI1MTkwMDM4WjAzMTEwLwYDVQQD Eyg5N2I2NDgwODIxZDk1OGJiZTg3ZTgxZDcyZWRkY2FiMTRhZTk3NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsBAkZXsAtAFuqI1TrBWcNT9Ytq FtZA8ivPR46bhBLNhpE1CKQW4v4r7mQGr1DlNZxz6CWU58JvR84wBAQiDEdduN3B sLD/DEiU6D0g5TOfFVlFQJLV2hlEyhWH+JM1dhEI/cAn6B7I7dAEQxwkGyYdZguW yhDyfaw8DZxh+SIzBkGjFvTau9EUnuaj+tj4bmzTsESoI2sQGp9n0ArCWpUvYGgE VcdKdlgGERVGwV8HtQBaan1b1j3WLSfr+i8iLR7rwK3spjT1lv6eRJ2XkgqpyCbd D6ta7n9SuSDd0aXS4p4aFmtRCokaemQGEvuxVNMCBR1Ma4Tj9kUL5U2pxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe2SAgh2Vi76H6B1y7dyrFK6XVDMB8GA1UdIwQY MBaAFAddw/IlciuAmr6Yd4w7/XAJ4c9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWIt MjM0ZDA3NTQyMzlkLzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWItMjM0ZDA3NTQyMzlk LzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOa0uZvg Az6yvuKSB9DYDz+KN9fcPPxnOPb50O9l1FRbiyhsVjzt97xd5BuwmQ5m2EX3Te+F PFP1JkHjRkg1qApFtVYuYLRJz7OKwTWPmcywTfnCzqn1xPbkc72LLQIsbEjX6REz tNGkO50LAE6TM6cisnDEDSF94LRlhyI0j4/CoZjkx6k9Laas4XiN1eni4b0yXShy 34mguFfN1EqtdX894K9BNhVlouUPtL6UmBYTqi6+reED6ie0Vurj9kWcI0GUHiAZ iSUBm9vcR8hXRScZDy4oHsD5+r4u1OLseJbfoivsk/Nde1xOz71BB0tegmG0FU3C nMEAFgq8DV61JA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:36:38 2025 by rpki-client