This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json) Hash identifier: ZwM815HO/4Y0K8f4yejkCm0pBrKmqFRab3fFZar5jv4= Subject key identifier: A6:C7:9C:E9:11:8E:8C:35:27:97:E2:8D:84:A9:5E:F7:36:85:A0:D4 Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de Certificate serial: 019B7292191B12C58DA474EAE05E0F5655B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft Manifest number: 0D93 Signing time: Wed 31 Dec 2025 04:02:15 +0000 Manifest this update: Wed 31 Dec 2025 04:02:15 +0000 Manifest next update: Thu 01 Jan 2026 04:02:15 +0000 Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: xDDaq8IyokaLMbt+WrKjK7Nb/r01dDtmsp0H3TNTBxw=) 2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:19:1b:12:c5:8d:a4:74:ea:e0:5e:0f:56:55:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de Validity Not Before: Dec 31 04:02:15 2025 GMT Not After : Jan 1 04:02:15 2026 GMT Subject: CN=a6c79ce9118e8c352797e28d84a95ef73685a0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:87:99:94:42:89:f8:b7:5a:9e:77:b6:6a: 5a:dc:56:f5:90:64:09:d5:78:2a:0b:06:ef:56:e7: 63:02:43:e6:12:72:b9:fc:26:08:d9:71:e6:aa:9d: e3:df:c9:ad:6e:f9:1a:d4:17:96:ba:f7:b2:cd:d3: cf:1c:b7:3d:33:01:68:4f:55:07:d3:5f:c9:48:d6: e7:cf:98:8d:b8:64:66:e9:7e:69:f3:49:46:0f:5e: 01:e2:c0:c7:3b:f3:90:33:01:8d:db:ae:b6:ec:97: e5:2b:1e:12:58:92:da:d1:63:38:d3:c8:8b:6b:24: 81:75:ac:4b:11:5f:6f:61:f2:e0:21:40:96:59:c7: 3b:f5:5c:d0:ce:2f:24:ed:f8:db:54:af:0e:ba:44: a6:99:39:94:5b:bc:98:39:4b:90:6c:d9:4f:47:db: 8d:10:f3:ad:24:b7:fe:91:97:90:26:91:92:7e:9c: a1:7b:a1:56:c0:da:ad:e8:c2:5c:68:25:42:82:66: bf:8c:8d:8b:d0:0d:c3:fe:63:95:09:28:cd:08:0e: 16:d1:b2:48:c1:24:de:be:fd:42:19:77:f6:b3:a2: e2:8d:4c:70:bd:92:ba:1a:ba:8c:66:f9:75:40:1f: 0e:db:83:f9:ce:0f:ad:f8:67:84:54:8e:c6:b4:0e: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:9C:E9:11:8E:8C:35:27:97:E2:8D:84:A9:5E:F7:36:85:A0:D4 X509v3 Authority Key Identifier: keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:0e:2e:aa:63:a3:4f:53:af:4f:b2:be:26:d5:64:e8:12: 00:8b:6c:10:cf:39:39:50:93:59:f9:73:c2:92:e7:c5:8f:02: 07:e4:d6:4f:03:84:ac:48:8f:51:b7:c8:00:eb:09:0c:19:ff: 44:23:92:84:c2:73:dd:3c:fa:ed:51:2f:f7:bf:bf:eb:90:5c: e9:a6:61:62:bd:9b:48:0f:50:cc:f7:0f:f3:f4:e4:25:2b:aa: e3:d9:bf:e1:32:6e:ef:02:dc:91:15:9f:6a:bb:45:8a:e8:39: 02:c5:e4:a6:7c:82:d1:a0:d9:ac:93:64:61:b4:53:43:5c:f4: 26:19:47:7b:a5:35:a8:09:ba:a8:5f:f9:9d:a9:15:fc:3d:4b: 4d:0f:47:26:83:42:82:ff:42:88:88:3e:65:0e:b7:e3:d7:f5: 2a:7e:f4:35:a2:e5:21:0d:40:66:f3:cc:bb:b4:a8:c8:e4:92: d2:e2:b3:41:23:b1:92:3f:55:f6:65:9a:3a:6e:8c:c9:39:0f: 52:e9:3c:a7:b2:37:55:a0:5d:61:39:c1:cd:ee:2b:66:c2:ef: 30:30:fa:5c:aa:21:5f:09:0a:81:fd:9e:5d:37:51:77:d9:0b: 50:74:9d:8d:72:22:ac:f9:29:d8:26:62:80:bf:e0:9e:50:09: 21:d4:98:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykhkbEsWNpHTq4F4PVlW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Yjg4MGM1YTQ1YzNkNDAxYjkyZDViNDI2MDhlODU1NzUx ODU5ZGUwHhcNMjUxMjMxMDQwMjE1WhcNMjYwMTAxMDQwMjE1WjAzMTEwLwYDVQQD EyhhNmM3OWNlOTExOGU4YzM1Mjc5N2UyOGQ4NGE5NWVmNzM2ODVhMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE+HmZRCifi3Wp53tmpa3Fb1kGQJ 1XgqCwbvVudjAkPmEnK5/CYI2XHmqp3j38mtbvka1BeWuveyzdPPHLc9MwFoT1UH 01/JSNbnz5iNuGRm6X5p80lGD14B4sDHO/OQMwGN26627JflKx4SWJLa0WM408iL aySBdaxLEV9vYfLgIUCWWcc79VzQzi8k7fjbVK8OukSmmTmUW7yYOUuQbNlPR9uN EPOtJLf+kZeQJpGSfpyhe6FWwNqt6MJcaCVCgma/jI2L0A3D/mOVCSjNCA4W0bJI wSTevv1CGXf2s6LijUxwvZK6GrqMZvl1QB8O24P5zg+t+GeEVI7GtA6Y2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbHnOkRjow1J5fijYSpXvc2haDUMB8GA1UdIwQY MBaAFAW4gMWkXD1AG5LVtCYI6FV1GFneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUt YzM2NTc5NGNlZmY3LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUtYzM2NTc5NGNlZmY3 LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyAOLqpj o09Tr0+yvibVZOgSAItsEM85OVCTWflzwpLnxY8CB+TWTwOErEiPUbfIAOsJDBn/ RCOShMJz3Tz67VEv97+/65Bc6aZhYr2bSA9QzPcP8/TkJSuq49m/4TJu7wLckRWf artFiug5AsXkpnyC0aDZrJNkYbRTQ1z0JhlHe6U1qAm6qF/5nakV/D1LTQ9HJoNC gv9CiIg+ZQ6349f1Kn70NaLlIQ1AZvPMu7SoyOSS0uKzQSOxkj9V9mWaOm6MyTkP Uuk8p7I3VaBdYTnBze4rZsLvMDD6XKohXwkKgf2eXTdRd9kLUHSdjXIirPkp2CZi gL/gnlAJIdSYqA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:12 2025 by rpki-client