This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: h9Df6U5OUKQdXw7x/SIP0M+ASdB+K3N7zigoUowEvKQ= Subject key identifier: 24:FF:78:21:B8:C8:FB:9D:68:E9:0B:70:87:01:D4:49:35:6F:09:E6 Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019B0F37E237C297D73F751771299B62C1ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 08CB Signing time: Thu 11 Dec 2025 21:01:19 +0000 Manifest this update: Thu 11 Dec 2025 21:01:19 +0000 Manifest next update: Fri 12 Dec 2025 21:01:19 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: mk4QjsXjv/umBNKVxUi3IgYNgwnPYov4d3fPvRjnnOg=) 2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:e2:37:c2:97:d7:3f:75:17:71:29:9b:62:c1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Dec 11 21:01:19 2025 GMT Not After : Dec 12 21:01:19 2025 GMT Subject: CN=24ff7821b8c8fb9d68e90b708701d449356f09e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:0c:ac:da:f6:cc:75:fa:00:d5:69:5f:a3: ef:8d:88:8c:a9:a9:f6:62:78:04:94:80:73:f2:a1: e9:7c:7a:e8:bc:06:91:6d:e9:7b:69:3f:fb:99:d6: a0:93:51:fe:0c:6d:67:ab:8b:59:2d:32:d0:5e:54: 98:00:8f:53:db:1a:a9:29:58:79:10:c5:a3:d7:b3: 1e:b6:e6:5c:ab:3c:ea:26:2f:26:b6:f4:d8:62:3c: 2f:cf:52:86:e6:6f:cd:93:b2:1d:86:36:51:e6:03: 56:67:09:1c:ee:fe:6a:0b:97:c7:b9:6b:69:22:81: 52:ff:43:00:15:5c:5d:73:89:7c:94:6e:d5:58:5a: 11:3b:ad:f9:76:5c:74:92:95:b7:47:a3:73:ac:42: 8a:b5:c4:c5:71:2e:51:d3:98:00:3a:db:c5:f3:6e: d4:0f:70:2b:4e:e0:49:9e:7f:32:7c:b7:ec:a7:28: 51:02:25:d5:c4:da:fd:8b:50:01:49:c9:57:db:39: e4:aa:41:9e:1f:1d:7a:59:6f:b2:44:71:d3:e7:04: 48:9c:53:53:99:fe:3a:ce:a2:db:17:7b:ab:0d:66: 0f:28:d3:38:aa:d0:78:9e:51:40:9c:c6:21:2b:7d: 2f:a7:54:34:1c:75:38:aa:d0:17:96:08:15:b6:57: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FF:78:21:B8:C8:FB:9D:68:E9:0B:70:87:01:D4:49:35:6F:09:E6 X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:14:5f:ed:7f:c0:1f:b7:f7:23:ed:3a:85:67:36:06:96:3b: 34:e9:61:05:ea:41:7b:1b:35:26:d0:c9:53:b6:59:8b:7f:f0: ec:4b:c8:bb:32:3b:65:29:fd:8d:2f:6a:75:86:96:57:ce:cf: e3:cc:fe:47:b1:c5:c6:a0:4e:d1:af:e3:23:2f:85:92:c0:42: aa:94:64:92:4c:27:49:a8:1d:de:94:f4:65:71:b4:94:12:17: e4:0b:c3:2d:ef:5d:74:ec:dd:e2:f8:d0:48:a2:e7:fe:f8:4d: 20:e7:87:8f:5d:33:56:c0:19:7b:33:78:92:68:fb:02:9a:e3: 6e:bd:d8:18:81:3c:23:a7:58:14:5b:b6:95:1b:38:1e:bb:77: cf:ba:46:8e:8d:3b:b1:2e:73:f4:65:69:02:bc:a6:b7:e6:ad: e0:ff:61:c9:b8:23:46:2e:31:b4:ff:47:e6:29:38:a2:34:7f: 75:2b:b2:a8:f3:f9:a1:7a:dc:38:86:de:ba:d0:73:47:bd:d7: 7d:c1:f1:0e:94:42:43:df:9a:7a:18:b9:c5:61:8d:50:a3:7c: 45:6f:b0:81:ef:ea:f5:a6:de:7c:0a:36:b2:41:36:bb:4d:1b: f0:8c:1a:f1:59:05:8e:c1:0f:a4:f1:8a:9c:db:bf:9d:88:95: 74:65:8b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN+I3wpfXP3UXcSmbYsHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjUxMjExMjEwMTE5WhcNMjUxMjEyMjEwMTE5WjAzMTEwLwYDVQQD EygyNGZmNzgyMWI4YzhmYjlkNjhlOTBiNzA4NzAxZDQ0OTM1NmYwOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IMrNr2zHX6ANVpX6PvjYiMqan2 YngElIBz8qHpfHrovAaRbel7aT/7mdagk1H+DG1nq4tZLTLQXlSYAI9T2xqpKVh5 EMWj17MetuZcqzzqJi8mtvTYYjwvz1KG5m/Nk7IdhjZR5gNWZwkc7v5qC5fHuWtp IoFS/0MAFVxdc4l8lG7VWFoRO635dlx0kpW3R6NzrEKKtcTFcS5R05gAOtvF827U D3ArTuBJnn8yfLfspyhRAiXVxNr9i1ABSclX2znkqkGeHx16WW+yRHHT5wRInFNT mf46zqLbF3urDWYPKNM4qtB4nlFAnMYhK30vp1Q0HHU4qtAXlggVtldVpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT/eCG4yPudaOkLcIcB1Ek1bwnmMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxRf7X/A H7f3I+06hWc2BpY7NOlhBepBexs1JtDJU7ZZi3/w7EvIuzI7ZSn9jS9qdYaWV87P 48z+R7HFxqBO0a/jIy+FksBCqpRkkkwnSagd3pT0ZXG0lBIX5AvDLe9ddOzd4vjQ SKLn/vhNIOeHj10zVsAZezN4kmj7Aprjbr3YGIE8I6dYFFu2lRs4Hrt3z7pGjo07 sS5z9GVpArymt+at4P9hybgjRi4xtP9H5ik4ojR/dSuyqPP5oXrcOIbeutBzR73X fcHxDpRCQ9+aehi5xWGNUKN8RW+wge/q9abefAo2skE2u00b8Iwa8VkFjsEPpPGK nNu/nYiVdGWLmw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:42 2025 by rpki-client