This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json) Hash identifier: v5Z7lGNvIkzku9tuRrFF6F/kSC1fcX7l95DYrfaH0kY= Subject key identifier: 80:70:B9:C1:43:3C:6D:48:6E:F1:25:AA:50:5F:15:63:AE:D2:C4:DD Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019AAC4C22288F86171DB0507C2A9ED9ECD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft Manifest number: 0DF8 Signing time: Sat 22 Nov 2025 16:01:01 +0000 Manifest this update: Sat 22 Nov 2025 16:01:01 +0000 Manifest next update: Sun 23 Nov 2025 16:01:01 +0000 Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=) 2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=) 3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: kHtKiQpHZaCa1DEMXeAG2QxWISEVgP8W5o6Qyessnuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4c:22:28:8f:86:17:1d:b0:50:7c:2a:9e:d9:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Nov 22 16:01:01 2025 GMT Not After : Nov 23 16:01:01 2025 GMT Subject: CN=8070b9c1433c6d486ef125aa505f1563aed2c4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:d5:39:93:47:57:da:eb:7f:fa:0e:f6:61: 8f:7e:29:0f:c3:26:fc:a9:7a:e7:ff:52:8e:4a:0a: 92:3f:72:86:92:d5:77:37:35:f3:5f:61:b2:5e:15: b2:20:31:ba:dc:0c:77:b8:89:9f:57:e1:4f:1e:8c: 72:32:c0:77:da:18:a5:32:7a:21:33:05:3e:6c:d2: 2a:84:03:19:64:4c:9c:74:f7:7e:75:32:d2:15:fd: 7b:d6:ed:cf:3b:79:da:34:ea:25:a4:cc:96:87:4f: 08:89:7e:c8:0e:61:dd:17:3d:a6:de:d3:d1:53:26: 83:29:5c:f3:f6:16:11:fd:cb:ef:ba:25:47:32:ad: de:e2:66:e2:79:07:7c:67:66:7e:c2:b5:86:37:84: 77:3d:9f:16:d3:bb:c9:99:21:ea:2b:56:db:83:4a: 52:e1:71:a9:c0:81:3d:20:60:65:c2:5a:d5:10:65: 5b:89:c8:5c:af:60:e4:e4:3e:52:50:c9:0b:b8:fa: 43:88:03:77:a4:1e:5a:de:1a:f1:c5:eb:ab:ae:ce: a4:4e:f1:c1:d0:a8:78:36:4c:8b:53:64:88:28:25: 91:f7:40:31:a2:ff:87:6b:f4:e3:ec:0d:b1:e0:ca: e0:02:4e:a7:fb:92:9c:50:92:f6:72:94:18:0c:f9: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:B9:C1:43:3C:6D:48:6E:F1:25:AA:50:5F:15:63:AE:D2:C4:DD X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d2:44:9e:4d:3d:7e:fb:da:2d:20:13:3c:36:13:c9:35:74: 07:13:b3:27:4a:aa:1a:41:77:2e:2e:3b:3f:fa:2c:fd:6c:91: 7b:99:6e:b3:79:eb:d5:7d:9b:bd:c7:2a:28:78:22:59:4f:6e: 1d:c2:62:36:e1:70:5c:76:c7:0f:a3:ba:e1:dc:ef:bd:8c:41: 2e:d6:ed:40:07:fa:61:92:3c:cd:4b:e3:2b:d8:9b:a9:af:59: 6f:9f:9a:24:ac:fa:98:77:08:53:f1:5a:bd:60:f4:6b:d9:cd: ad:61:6a:60:b0:d9:a7:70:0f:73:68:74:c8:51:e1:19:4f:31: 1f:28:b6:d6:c8:33:8b:7d:90:22:ae:1e:c1:58:60:15:49:73: 84:a7:f4:90:e6:63:9e:9e:13:85:9b:03:c8:88:e1:d6:7a:c6: d3:7d:3c:74:4e:5a:79:92:ee:29:5c:42:69:b8:af:a4:47:3d: e6:71:fc:0e:b4:ca:55:60:af:e4:96:5b:61:08:8c:30:a5:b6: 5b:bf:62:4f:51:55:12:4f:eb:d5:1e:2b:17:0c:72:b5:f5:34: c7:a1:a2:9b:3c:89:a6:dc:d0:97:9b:a9:32:f8:9b:ff:5a:a3: 96:ba:0f:86:dc:88:f7:a8:8c:62:ab:89:71:d2:8d:ea:e8:dc: f3:2a:06:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsTCIoj4YXHbBQfCqe2ezWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjUxMTIyMTYwMTAxWhcNMjUxMTIzMTYwMTAxWjAzMTEwLwYDVQQD Eyg4MDcwYjljMTQzM2M2ZDQ4NmVmMTI1YWE1MDVmMTU2M2FlZDJjNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI/VOZNHV9rrf/oO9mGPfikPwyb8 qXrn/1KOSgqSP3KGktV3NzXzX2GyXhWyIDG63Ax3uImfV+FPHoxyMsB32hilMnoh MwU+bNIqhAMZZEycdPd+dTLSFf171u3PO3naNOolpMyWh08IiX7IDmHdFz2m3tPR UyaDKVzz9hYR/cvvuiVHMq3e4mbieQd8Z2Z+wrWGN4R3PZ8W07vJmSHqK1bbg0pS 4XGpwIE9IGBlwlrVEGVbichcr2Dk5D5SUMkLuPpDiAN3pB5a3hrxxeurrs6kTvHB 0Kh4NkyLU2SIKCWR90Axov+Ha/Tj7A2x4MrgAk6n+5KcUJL2cpQYDPmVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBwucFDPG1IbvElqlBfFWOu0sTdMB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9JEnk09 fvvaLSATPDYTyTV0BxOzJ0qqGkF3Li47P/os/WyRe5lus3nr1X2bvccqKHgiWU9u HcJiNuFwXHbHD6O64dzvvYxBLtbtQAf6YZI8zUvjK9ibqa9Zb5+aJKz6mHcIU/Fa vWD0a9nNrWFqYLDZp3APc2h0yFHhGU8xHyi21sgzi32QIq4ewVhgFUlzhKf0kOZj np4ThZsDyIjh1nrG0308dE5aeZLuKVxCabivpEc95nH8DrTKVWCv5JZbYQiMMKW2 W79iT1FVEk/r1R4rFwxytfU0x6GimzyJptzQl5upMvib/1qjlroPhtyI96iMYquJ cdKN6ujc8yoGPg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:38 2025 by rpki-client