This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json) Hash identifier: LOHUIkA9dwoDcB0OYT5bG9/gKnPoxLNR/1ywy2ElWcI= Subject key identifier: 89:2F:29:3E:E7:08:D5:2F:7C:E9:C1:DF:3F:E9:EE:9D:5B:2F:D6:DE Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e Certificate serial: 019B337AF8C66426AEED411E88F4CD7D246B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft Manifest number: 064A Signing time: Thu 18 Dec 2025 22:00:55 +0000 Manifest this update: Thu 18 Dec 2025 22:00:55 +0000 Manifest next update: Fri 19 Dec 2025 22:00:55 +0000 Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=) 2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: U0HZR50BwdBDM3V+fwNW5E81D9eRNJYYZAbCxTC4j40=) 3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f8:c6:64:26:ae:ed:41:1e:88:f4:cd:7d:24:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e Validity Not Before: Dec 18 22:00:55 2025 GMT Not After : Dec 19 22:00:55 2025 GMT Subject: CN=892f293ee708d52f7ce9c1df3fe9ee9d5b2fd6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:9a:48:06:54:f0:c1:0a:52:a9:bf:84:92: 64:f6:68:87:9e:a0:36:66:05:55:d5:fc:e4:33:02: 85:80:69:20:b9:6c:78:99:b1:8b:dc:52:98:37:29: ae:36:7b:fa:ee:38:81:c2:8d:2e:8d:19:c8:20:3e: 88:88:c2:49:3e:0c:6a:3c:51:bb:ca:d5:a2:72:fe: cd:20:4f:00:f6:8e:ac:a7:6d:48:0e:de:30:26:60: 95:3d:b9:c9:b3:84:c9:ed:d7:59:80:9f:ea:dc:89: 72:a2:aa:09:86:02:21:ef:a2:ec:d4:e1:7d:b3:a3: 76:c2:f4:43:1f:ce:51:9a:c1:52:14:bf:65:8b:4e: bb:47:92:9f:72:96:7b:04:ab:03:aa:93:bd:d0:97: 8f:31:c7:ba:22:24:19:9f:1b:21:ec:a3:9e:17:7d: e0:51:28:dc:69:f1:ed:85:3d:ec:29:83:da:da:d1: 5e:80:fc:64:2d:3f:ca:ae:9b:1f:84:9e:96:08:3b: c7:02:53:48:09:44:f3:f0:79:39:df:a2:c9:e7:82: df:6b:d1:4c:47:28:91:7e:58:1e:03:d6:a5:bd:12: 02:da:33:1e:81:89:eb:e8:59:22:79:f2:ad:aa:06: a5:d8:85:89:e4:76:d0:ca:60:b5:4a:ff:cb:65:82: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:29:3E:E7:08:D5:2F:7C:E9:C1:DF:3F:E9:EE:9D:5B:2F:D6:DE X509v3 Authority Key Identifier: keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:60:71:e3:dd:ee:db:42:6a:78:18:11:4e:2a:cf:cd:3a: f8:b1:66:0c:d5:f4:80:9a:a3:05:06:f2:bf:4d:73:15:21:53: 54:4b:1e:6c:83:7a:24:61:b1:a5:89:23:a8:cc:dc:21:d9:31: cf:5b:68:3b:c7:5c:85:21:37:4a:f1:9d:90:ac:5e:a5:08:74: 5e:25:53:68:40:59:dd:64:ee:dc:ff:1d:4a:40:94:9b:33:56: f5:7f:33:88:42:66:0e:c5:de:77:00:76:4a:55:2a:ce:26:05: 5d:ea:63:c0:fd:49:6a:30:63:ca:80:b7:f0:f9:10:ca:51:47: 1f:89:c0:93:6c:a6:93:4a:cd:ea:8d:8b:12:1a:12:26:71:cc: 6d:e5:f7:8a:5a:d6:f2:ca:b7:36:7e:12:17:71:f7:b6:46:7a: 13:6f:a5:7a:5f:d8:a3:5f:45:df:44:cb:05:fa:3a:4f:65:95: 09:43:5f:85:cc:af:a9:be:a2:ca:f7:9b:96:6d:6d:d7:49:38: e3:06:00:de:6b:2b:e6:30:7c:75:8a:18:de:88:d5:22:02:1d: 11:14:16:e2:2c:10:77:66:a0:2a:77:5f:ed:3e:30:e5:fe:9a: 31:8d:1f:cb:f1:11:d3:b1:28:06:02:43:3e:37:89:36:d0:29: 6a:cd:c7:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevjGZCau7UEeiPTNfSRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Njg1MTEwNGE5MjE4ZWZmMTczZjQzNGY1NWJkZDI0MjBh YWFlMmUwHhcNMjUxMjE4MjIwMDU1WhcNMjUxMjE5MjIwMDU1WjAzMTEwLwYDVQQD Eyg4OTJmMjkzZWU3MDhkNTJmN2NlOWMxZGYzZmU5ZWU5ZDViMmZkNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9eaSAZU8MEKUqm/hJJk9miHnqA2 ZgVV1fzkMwKFgGkguWx4mbGL3FKYNymuNnv67jiBwo0ujRnIID6IiMJJPgxqPFG7 ytWicv7NIE8A9o6sp21IDt4wJmCVPbnJs4TJ7ddZgJ/q3IlyoqoJhgIh76Ls1OF9 s6N2wvRDH85RmsFSFL9li067R5KfcpZ7BKsDqpO90JePMce6IiQZnxsh7KOeF33g USjcafHthT3sKYPa2tFegPxkLT/KrpsfhJ6WCDvHAlNICUTz8Hk536LJ54Lfa9FM RyiRflgeA9alvRIC2jMegYnr6FkiefKtqgal2IWJ5HbQymC1Sv/LZYLE5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkvKT7nCNUvfOnB3z/p7p1bL9beMB8GA1UdIwQY MBaAFAdoURBKkhjv8XP0NPVb3SQgqq4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEt MDkyZTdhMTZiNzRlLzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEtMDkyZTdhMTZiNzRl LzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTlgcePd 7ttCangYEU4qz806+LFmDNX0gJqjBQbyv01zFSFTVEsebIN6JGGxpYkjqMzcIdkx z1toO8dchSE3SvGdkKxepQh0XiVTaEBZ3WTu3P8dSkCUmzNW9X8ziEJmDsXedwB2 SlUqziYFXepjwP1JajBjyoC38PkQylFHH4nAk2ymk0rN6o2LEhoSJnHMbeX3ilrW 8sq3Nn4SF3H3tkZ6E2+lel/Yo19F30TLBfo6T2WVCUNfhcyvqb6iyveblm1t10k4 4wYA3msr5jB8dYoY3ojVIgIdERQW4iwQd2agKndf7T4w5f6aMY0fy/ER07EoBgJD PjeJNtApas3H0A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:25 2025 by rpki-client