This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json) Hash identifier: 3Ii5jabBxk4mxUTSC8OSGoeKMmNNKBO9TO5S/K2TP1Q= Subject key identifier: F9:17:E9:40:95:AB:5B:99:28:7A:07:E7:D0:48:56:34:87:DF:BB:DB Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de Certificate serial: 019B6CC5C7A811F91349B61AD3E9D4F19ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft Manifest number: 0D90 Signing time: Tue 30 Dec 2025 01:00:59 +0000 Manifest this update: Tue 30 Dec 2025 01:00:59 +0000 Manifest next update: Wed 31 Dec 2025 01:00:59 +0000 Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: 68ZF8YKLDPHXFJ/7mfr61JIPqZyXvdtt5hAdR0c6G4E=) 2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:c7:a8:11:f9:13:49:b6:1a:d3:e9:d4:f1:9a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de Validity Not Before: Dec 30 01:00:59 2025 GMT Not After : Dec 31 01:00:59 2025 GMT Subject: CN=f917e94095ab5b99287a07e7d048563487dfbbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:14:61:1b:04:fc:99:e1:1e:8b:0a:7e:93: 74:e9:20:5e:a8:7f:12:86:40:44:41:3e:c1:3e:2f: 9d:69:0b:f9:7c:bc:8e:f5:e7:e7:eb:4e:ae:5f:c7: ea:32:5c:37:93:1c:a6:c0:14:c1:8a:11:ed:7e:44: d5:28:8a:08:bd:33:6a:3d:59:21:32:b0:3e:82:88: f8:9b:09:c0:55:fb:27:3a:03:2c:ab:f8:ae:20:e1: b0:90:dd:e1:ce:76:f6:da:96:f0:ad:06:e9:ad:3f: af:08:ae:c8:b1:8b:3b:dc:56:e4:73:57:04:e6:e2: 84:90:86:54:ea:25:61:c6:a7:a5:56:cc:44:08:f6: ed:ea:6b:63:b3:8e:c1:f5:ff:81:a9:b4:62:8a:80: 97:24:55:9e:27:14:0c:a7:79:78:8c:97:fa:f6:27: 57:42:d8:bf:c8:06:f2:e6:0e:93:c5:37:f6:0c:c9: d7:65:52:24:96:13:f1:c1:4f:cd:a7:d3:67:3e:72: 6e:3f:0f:c2:4f:7f:3a:c0:a5:5f:c5:2d:c2:48:80: 10:84:56:bc:4a:db:04:38:07:7d:b2:66:d1:d9:bf: bb:69:a7:d2:e4:d5:c5:e4:2d:db:22:63:0a:ef:93: bb:88:ff:84:d0:e4:ec:a8:93:b7:5d:56:06:0e:e0: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:E9:40:95:AB:5B:99:28:7A:07:E7:D0:48:56:34:87:DF:BB:DB X509v3 Authority Key Identifier: keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5f:fe:54:b8:65:fd:77:dd:2a:e8:8a:e1:bd:ca:ad:e3:7f: c7:10:cd:35:fa:0f:9e:5e:e5:2c:62:20:7d:fa:90:96:77:bd: 0d:81:dc:28:34:fa:41:e6:d3:57:c8:6c:bf:6d:f2:8f:49:20: 9e:86:03:e4:76:34:2a:8f:82:21:d6:8a:7a:e3:69:01:7c:49: 50:3d:5e:13:c5:a8:4b:ee:e1:de:7a:74:bf:4a:0b:95:cc:8f: a2:0e:8c:8c:f4:9d:92:c6:1e:81:99:a6:73:51:76:89:55:11: 91:34:27:48:0c:35:1c:79:c6:00:3e:b7:bd:79:75:88:5b:b3: ed:16:e1:0c:76:6a:c5:d5:bf:a9:78:47:37:35:15:16:c7:34: 5d:0e:6b:0f:a5:06:c8:0d:5e:f4:e0:74:79:8a:d3:46:72:b6: b1:96:c8:4d:cf:ca:66:02:22:04:86:8a:e0:20:c3:5b:e8:75: 63:4b:e9:cc:f0:b3:fb:8c:4c:81:a3:d0:dc:49:30:14:30:91: f1:8e:ee:fb:bd:3c:b6:4e:41:40:d7:15:db:61:34:50:ed:a6: 5a:38:d5:c0:93:a6:d1:8b:28:f2:99:51:c9:77:2e:65:1a:63: bf:1c:74:1d:ed:25:8e:82:02:07:f2:b7:1d:f1:62:5e:07:9c: 71:87:61:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxceoEfkTSbYa0+nU8ZrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Yjg4MGM1YTQ1YzNkNDAxYjkyZDViNDI2MDhlODU1NzUx ODU5ZGUwHhcNMjUxMjMwMDEwMDU5WhcNMjUxMjMxMDEwMDU5WjAzMTEwLwYDVQQD EyhmOTE3ZTk0MDk1YWI1Yjk5Mjg3YTA3ZTdkMDQ4NTYzNDg3ZGZiYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW8UYRsE/JnhHosKfpN06SBeqH8S hkBEQT7BPi+daQv5fLyO9efn606uX8fqMlw3kxymwBTBihHtfkTVKIoIvTNqPVkh MrA+goj4mwnAVfsnOgMsq/iuIOGwkN3hznb22pbwrQbprT+vCK7IsYs73Fbkc1cE 5uKEkIZU6iVhxqelVsxECPbt6mtjs47B9f+BqbRiioCXJFWeJxQMp3l4jJf69idX Qti/yAby5g6TxTf2DMnXZVIklhPxwU/Np9NnPnJuPw/CT386wKVfxS3CSIAQhFa8 StsEOAd9smbR2b+7aafS5NXF5C3bImMK75O7iP+E0OTsqJO3XVYGDuBJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkX6UCVq1uZKHoH59BIVjSH37vbMB8GA1UdIwQY MBaAFAW4gMWkXD1AG5LVtCYI6FV1GFneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUt YzM2NTc5NGNlZmY3LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUtYzM2NTc5NGNlZmY3 LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASl/+VLhl /XfdKuiK4b3KreN/xxDNNfoPnl7lLGIgffqQlne9DYHcKDT6QebTV8hsv23yj0kg noYD5HY0Ko+CIdaKeuNpAXxJUD1eE8WoS+7h3np0v0oLlcyPog6MjPSdksYegZmm c1F2iVURkTQnSAw1HHnGAD63vXl1iFuz7RbhDHZqxdW/qXhHNzUVFsc0XQ5rD6UG yA1e9OB0eYrTRnK2sZbITc/KZgIiBIaK4CDDW+h1Y0vpzPCz+4xMgaPQ3EkwFDCR 8Y7u+708tk5BQNcV22E0UO2mWjjVwJOm0Yso8plRyXcuZRpjvxx0He0ljoICB/K3 HfFiXgeccYdhWg== -----END CERTIFICATE-----Generated at Tue Dec 30 02:34:13 2025 by rpki-client