This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft File: b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft (raw, json) Hash identifier: T+cRgPRR4fBBu4iPDdX7wa3E5UOFuEAViIv6ZUbq1vI= Subject key identifier: 24:E7:62:FA:89:BC:EE:9A:A0:81:A4:53:28:17:FB:58:6F:42:C5:E3 Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019B1B05219792B5A4C058B1D1B5B44C49B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft Manifest number: 1145 Signing time: Sun 14 Dec 2025 04:01:19 +0000 Manifest this update: Sun 14 Dec 2025 04:01:19 +0000 Manifest next update: Mon 15 Dec 2025 04:01:19 +0000 Files and hashes: 1: b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl (hash: 7o72gOmFr9U3BUfRsU7wjuBXEtW6sxI40O3fUoJ6+1Q=) 2: exWn383Me8YqefkEkqOEr7GA0lc.roa (hash: 8G5LjurjltQVZ/Cei3JUqckWZBdyjOdLypvjmgHtD9Q=) 3: j8hnOgwPyOJJER9yhbqnSy6j-6E.roa (hash: OSveZybS9oVkY+wpn3hX+0Fo2xDMcVDw4ufaSD54UIM=) 4: phl5ADT4JOxw9LjD_howBB9yfb0.roa (hash: 82y/mhEJRV2o/QC0q9OGEvAp2yixVnuDKDU0FyYM5oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:21:97:92:b5:a4:c0:58:b1:d1:b5:b4:4c:49:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Dec 14 04:01:19 2025 GMT Not After : Dec 15 04:01:19 2025 GMT Subject: CN=24e762fa89bcee9aa081a4532817fb586f42c5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:2b:25:5c:fd:ff:ff:6a:85:a8:aa:c3:83: f0:f3:e3:75:5c:d0:d1:aa:2d:a6:f3:74:4c:9e:b1: 8b:60:f5:ba:15:d6:49:fa:38:f5:90:44:66:a7:68: 91:80:c1:ce:03:f6:a9:4e:2c:60:90:76:08:d6:70: c3:5c:a4:eb:5f:8f:32:67:78:4a:c2:93:a2:1d:70: 38:62:38:85:e2:22:26:fc:52:7d:6b:a8:16:44:97: 42:85:31:5b:21:ca:3e:13:38:45:ac:d3:e5:fe:24: d8:f2:d6:c8:bc:aa:55:8e:df:69:f4:16:83:8c:88: 61:b2:fe:5c:89:5e:6f:6f:b4:81:49:50:52:a8:40: 1e:e4:c2:2a:ec:cb:8d:c9:cf:84:31:cb:b8:3a:bd: 6e:3a:7c:0b:32:a1:e8:d3:0a:f8:67:42:15:26:71: 85:c1:1b:30:85:ea:cf:7d:6b:86:ef:1b:93:30:65: 14:d4:cf:ac:46:38:eb:c0:06:74:e7:11:b7:1a:7e: 2e:41:26:21:ad:94:d9:9b:74:52:17:05:7f:5e:44: a9:a6:fd:80:0b:5a:bb:83:0a:da:db:1a:12:0f:39: d8:aa:a4:ff:35:72:5f:dd:3e:8e:75:ea:6f:5e:54: fb:e7:c0:10:7d:7a:e6:59:65:44:fb:03:6f:39:c0: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:62:FA:89:BC:EE:9A:A0:81:A4:53:28:17:FB:58:6F:42:C5:E3 X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:b9:97:30:aa:22:41:11:e7:81:b5:dd:2f:89:64:5b:30: 96:6d:6c:87:e2:86:0f:d6:11:16:03:75:74:ac:4e:81:68:57: c7:9b:c1:0a:b0:ad:5c:1a:c9:96:d1:a1:aa:4b:12:2e:ad:f7: 08:fe:a5:3c:cd:f2:e1:04:47:dd:81:59:7a:21:ab:fb:b9:7c: 6c:2e:1d:48:5b:1e:67:ac:70:5d:ab:84:5e:fa:df:f6:ae:c0: ca:33:0e:a5:25:e6:12:ba:3c:64:7a:c3:2c:62:86:7c:be:31: 0f:21:af:a6:97:68:7d:99:ec:28:bb:c2:ff:35:1b:60:99:5b: 21:ff:32:2b:db:7b:d7:d4:78:37:6c:a2:9b:81:32:d1:5d:ea: 86:74:21:89:d2:8b:bc:24:97:82:93:af:04:64:de:4e:5a:21: 10:35:8b:58:11:bf:62:60:75:ad:d9:29:fc:6b:21:b3:58:5f: 13:d3:83:9b:b0:93:7f:62:e8:ce:ad:c6:f1:f1:ae:68:0e:ce: d5:64:25:10:68:1a:ca:c1:ae:65:45:fe:d9:e4:25:55:37:b6: 88:14:6e:5f:da:1f:27:48:00:2a:8a:b8:e8:79:43:0b:f3:4b: c3:4c:10:67:fd:1c:7e:29:2e:0c:75:8e:87:b5:59:1e:ed:40: b8:51:ae:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBSGXkrWkwFix0bW0TEmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjUxMjE0MDQwMTE5WhcNMjUxMjE1MDQwMTE5WjAzMTEwLwYDVQQD EygyNGU3NjJmYTg5YmNlZTlhYTA4MWE0NTMyODE3ZmI1ODZmNDJjNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzgrJVz9//9qhaiqw4Pw8+N1XNDR qi2m83RMnrGLYPW6FdZJ+jj1kERmp2iRgMHOA/apTixgkHYI1nDDXKTrX48yZ3hK wpOiHXA4YjiF4iIm/FJ9a6gWRJdChTFbIco+EzhFrNPl/iTY8tbIvKpVjt9p9BaD jIhhsv5ciV5vb7SBSVBSqEAe5MIq7MuNyc+EMcu4Or1uOnwLMqHo0wr4Z0IVJnGF wRswherPfWuG7xuTMGUU1M+sRjjrwAZ05xG3Gn4uQSYhrZTZm3RSFwV/XkSppv2A C1q7gwra2xoSDznYqqT/NXJf3T6OdepvXlT758AQfXrmWWVE+wNvOcAhHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTnYvqJvO6aoIGkUygX+1hvQsXjMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmW5lzCq IkER54G13S+JZFswlm1sh+KGD9YRFgN1dKxOgWhXx5vBCrCtXBrJltGhqksSLq33 CP6lPM3y4QRH3YFZeiGr+7l8bC4dSFseZ6xwXauEXvrf9q7AyjMOpSXmEro8ZHrD LGKGfL4xDyGvppdofZnsKLvC/zUbYJlbIf8yK9t719R4N2yim4Ey0V3qhnQhidKL vCSXgpOvBGTeTlohEDWLWBG/YmB1rdkp/Gshs1hfE9ODm7CTf2Lozq3G8fGuaA7O 1WQlEGgaysGuZUX+2eQlVTe2iBRuX9ofJ0gAKoq46HlDC/NLw0wQZ/0cfikuDHWO h7VZHu1AuFGuiw== -----END CERTIFICATE-----Generated at Sun Dec 14 14:39:47 2025 by rpki-client