This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft File: b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json) Hash identifier: zIYKioraeObcUBp3vl6kGEfycwS7NFTm8VZTbW9c3SA= Subject key identifier: 33:E8:F6:D1:B7:99:3C:71:AE:02:8A:B8:00:A6:D1:3A:15:D3:0B:EA Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Certificate serial: 019B2098E9AC67B52C3A7FB7CC71814D9310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft Manifest number: 02C7 Signing time: Mon 15 Dec 2025 06:00:50 +0000 Manifest this update: Mon 15 Dec 2025 06:00:50 +0000 Manifest next update: Tue 16 Dec 2025 06:00:50 +0000 Files and hashes: 1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=) 2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: 53xt6xEYdieQJduTGQymco5QUVwaSqFtTKbiq2doUE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:e9:ac:67:b5:2c:3a:7f:b7:cc:71:81:4d:93:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Validity Not Before: Dec 15 06:00:50 2025 GMT Not After : Dec 16 06:00:50 2025 GMT Subject: CN=33e8f6d1b7993c71ae028ab800a6d13a15d30bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:50:6b:31:0e:63:08:fb:7c:77:c0:dc:a2: ac:20:57:a1:0d:cc:63:14:c9:8e:ae:3d:d6:d7:dc: 89:9f:0e:ad:5a:76:86:9c:7f:47:38:d1:27:c4:67: a0:1f:7d:96:c1:30:d2:e6:ef:3c:8a:12:d2:67:04: f7:6b:26:81:f0:a3:a6:aa:c6:27:74:a1:f4:a1:2f: 60:2c:c8:d9:fa:af:14:af:60:1e:79:e5:5c:74:1b: b4:fa:ff:b0:27:b2:46:12:2d:8f:c6:92:c6:1f:11: d8:5e:48:00:fa:89:3c:20:ae:d7:0c:2e:e9:c3:e3: 53:cc:3f:8f:da:62:de:49:55:97:52:26:2a:cb:d3: 61:9c:40:8d:83:57:ec:0a:f2:47:32:24:6c:c0:a3: 03:2d:a0:fa:51:3d:ba:b7:e2:77:e9:c8:4b:7f:cc: 20:3f:5e:c4:74:43:e0:a5:e3:7c:0f:fc:e6:e9:ff: bc:36:e2:1a:1a:72:20:64:31:b7:f1:1f:b2:4f:76: 79:ba:9d:8e:db:2d:79:de:0b:44:0d:b2:d7:c6:fa: 6c:7f:9f:c2:28:24:3e:04:0f:3f:0e:cc:6d:a5:00: 00:91:87:d4:56:97:cb:b2:30:bf:77:e7:da:33:f7: 57:60:42:5e:16:8d:c7:50:55:84:72:4e:54:75:6c: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:F6:D1:B7:99:3C:71:AE:02:8A:B8:00:A6:D1:3A:15:D3:0B:EA X509v3 Authority Key Identifier: keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8b:13:2f:af:78:a7:36:3e:10:6c:4a:67:f4:2b:c6:18:61: 7f:97:7a:3c:55:2d:04:a5:91:a7:9d:03:98:69:39:3f:66:9a: 02:04:8f:73:6d:e6:fd:4b:51:b8:52:ab:12:82:1c:2d:29:76: c6:f4:4f:99:e7:06:19:8a:c2:c3:bb:e9:54:50:dc:cc:c9:cf: 68:1f:66:30:23:ca:96:d9:a0:55:2d:aa:71:c4:66:8a:b0:b4: 11:a6:e4:e4:8f:1e:c9:e1:9a:34:98:29:09:fb:72:2a:a0:df: c8:32:a2:5d:4e:b0:5c:88:00:85:7a:9f:4d:46:e6:32:d6:97: f7:dc:a2:1a:48:5e:8b:09:e9:ee:0a:ec:96:48:d3:85:9d:e8: 07:b7:73:9a:e0:39:68:db:34:1d:1d:75:ae:a1:8b:41:84:5c: 41:50:e0:8f:4a:08:6b:e2:79:03:40:08:93:26:7a:d1:79:07: cd:38:84:35:5e:0b:17:80:f1:bd:73:e5:df:66:84:28:38:eb: 7a:75:d4:37:a4:52:f4:3f:d7:73:47:10:12:04:df:87:f4:c4: 4a:94:13:a5:3e:64:4b:5d:14:47:ff:eb:97:86:cd:f9:03:37: 64:a6:d0:66:85:b4:3f:d6:f8:87:c9:18:7a:dd:ce:b0:f0:80: 1d:cd:9e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmOmsZ7UsOn+3zHGBTZMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx MDQ4YTUwHhcNMjUxMjE1MDYwMDUwWhcNMjUxMjE2MDYwMDUwWjAzMTEwLwYDVQQD EygzM2U4ZjZkMWI3OTkzYzcxYWUwMjhhYjgwMGE2ZDEzYTE1ZDMwYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquxQazEOYwj7fHfA3KKsIFehDcxj FMmOrj3W19yJnw6tWnaGnH9HONEnxGegH32WwTDS5u88ihLSZwT3ayaB8KOmqsYn dKH0oS9gLMjZ+q8Ur2AeeeVcdBu0+v+wJ7JGEi2PxpLGHxHYXkgA+ok8IK7XDC7p w+NTzD+P2mLeSVWXUiYqy9NhnECNg1fsCvJHMiRswKMDLaD6UT26t+J36chLf8wg P17EdEPgpeN8D/zm6f+8NuIaGnIgZDG38R+yT3Z5up2O2y153gtEDbLXxvpsf5/C KCQ+BA8/DsxtpQAAkYfUVpfLsjC/d+faM/dXYEJeFo3HUFWEck5UdWy1bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPo9tG3mTxxrgKKuACm0ToV0wvqMB8GA1UdIwQY MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4sTL694 pzY+EGxKZ/Qrxhhhf5d6PFUtBKWRp50DmGk5P2aaAgSPc23m/UtRuFKrEoIcLSl2 xvRPmecGGYrCw7vpVFDczMnPaB9mMCPKltmgVS2qccRmirC0Eabk5I8eyeGaNJgp CftyKqDfyDKiXU6wXIgAhXqfTUbmMtaX99yiGkheiwnp7grslkjThZ3oB7dzmuA5 aNs0HR11rqGLQYRcQVDgj0oIa+J5A0AIkyZ60XkHzTiENV4LF4DxvXPl32aEKDjr enXUN6RS9D/Xc0cQEgTfh/TESpQTpT5kS10UR//rl4bN+QM3ZKbQZoW0P9b4h8kY et3OsPCAHc2eBQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:31 2025 by rpki-client