This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json) Hash identifier: ZYHiwbAT7bkdgHIew13c/E1raFuA+G6k4maMirZkUHo= Subject key identifier: 2A:3D:CE:3D:24:80:DF:7F:C9:90:00:EB:F6:34:52:B9:DE:D9:AD:00 Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Certificate serial: 019B5A51790121AF2235FA89D36D1DB38DF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft Manifest number: 0B5B Signing time: Fri 26 Dec 2025 11:00:47 +0000 Manifest this update: Fri 26 Dec 2025 11:00:47 +0000 Manifest next update: Sat 27 Dec 2025 11:00:47 +0000 Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: WyJQcwOgojhmy/17AFAIhhZTnDZRBJi+7kP5VGwI9jI=) 2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:79:01:21:af:22:35:fa:89:d3:6d:1d:b3:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24 Validity Not Before: Dec 26 11:00:47 2025 GMT Not After : Dec 27 11:00:47 2025 GMT Subject: CN=2a3dce3d2480df7fc99000ebf63452b9ded9ad00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:71:f1:af:3a:f7:70:86:26:e3:3c:96:69: a1:09:1b:2f:1a:57:e0:2b:b5:ea:d1:9c:bd:7b:1c: 31:69:48:1b:bd:ac:86:56:00:be:56:9b:96:a1:19: 2f:9f:43:24:b2:51:e8:53:2a:f0:c5:65:ec:ef:65: 66:ad:d5:5b:94:b7:0d:96:ac:06:3d:ea:81:2a:57: 92:40:ec:eb:9c:35:56:32:2c:fc:01:8b:62:36:dd: bd:28:d0:71:df:6e:16:0b:bd:a7:4a:14:52:7f:e1: 1f:54:82:fc:df:4b:70:79:f8:05:d4:a0:35:c0:9d: a3:09:34:df:05:b2:68:3e:2a:13:2b:16:ee:37:eb: 84:17:10:f2:fb:b2:90:07:af:9f:61:c4:32:34:bf: 6f:ef:b7:47:ba:5f:20:97:49:a6:c8:9b:01:1b:dd: ca:c6:a4:e7:f4:bb:6d:11:10:5c:ea:0e:ec:cd:61: 10:cc:f4:88:3e:87:39:3a:2b:05:09:6e:b0:5b:dd: f4:c2:90:aa:ab:d6:1f:39:0b:63:3f:9d:12:a1:03: 91:3b:fd:ea:67:b8:57:be:d8:c5:be:b0:19:87:76: e0:18:e5:7b:32:51:40:1b:2b:2d:86:b8:90:3e:48: 20:85:88:bd:ef:29:2f:02:e6:d4:17:7a:ef:e1:f0: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:CE:3D:24:80:DF:7F:C9:90:00:EB:F6:34:52:B9:DE:D9:AD:00 X509v3 Authority Key Identifier: keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:47:75:de:6e:ca:bd:00:30:e4:ef:ea:d2:fc:68:26:41:af: d5:29:12:51:44:63:71:81:98:99:f2:85:52:16:ad:67:6a:21: c5:13:82:4d:7f:eb:ca:81:a6:3a:a5:74:c0:05:f4:fe:20:ee: c4:61:14:dd:1f:e4:1c:2b:8f:45:18:01:d1:c7:5b:78:98:87: af:d3:d3:e1:71:45:48:57:19:0f:36:d2:61:9b:94:1d:61:c3: db:c0:b0:a3:45:05:21:ad:cd:cd:a9:e7:2e:b6:f9:31:81:c8: 38:16:01:a5:d4:88:01:10:78:a9:64:fc:8d:bd:33:16:84:42: 53:4d:20:50:8d:46:b7:e6:c9:12:de:1e:02:05:a9:bb:84:0d: 97:aa:39:13:9f:df:72:60:e1:50:8b:bb:74:d2:7c:30:9b:7c: 64:c0:5b:c8:ec:02:b0:09:d5:4b:99:d9:0e:a0:eb:5d:2b:e1: 9c:94:24:1a:15:0a:ed:be:95:cb:b2:f2:ec:47:3f:31:66:dd: ca:f6:6d:49:8e:6f:47:b7:54:ce:01:36:a9:19:40:7d:43:61: b7:f2:19:58:2b:84:77:5b:e0:1a:25:00:e9:da:b8:ee:cd:91: 6d:5b:58:35:35:a3:04:15:90:55:a3:3d:6b:77:83:9d:37:fb: 67:3b:88:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXkBIa8iNfqJ020ds432MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2VkY2JkYTAzYzNiMzZjZDdkNzAzN2VhZDMzOWJjYjg4 YzlhMjQwHhcNMjUxMjI2MTEwMDQ3WhcNMjUxMjI3MTEwMDQ3WjAzMTEwLwYDVQQD EygyYTNkY2UzZDI0ODBkZjdmYzk5MDAwZWJmNjM0NTJiOWRlZDlhZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEFx8a8693CGJuM8lmmhCRsvGlfg K7Xq0Zy9exwxaUgbvayGVgC+VpuWoRkvn0MkslHoUyrwxWXs72VmrdVblLcNlqwG PeqBKleSQOzrnDVWMiz8AYtiNt29KNBx324WC72nShRSf+EfVIL830twefgF1KA1 wJ2jCTTfBbJoPioTKxbuN+uEFxDy+7KQB6+fYcQyNL9v77dHul8gl0mmyJsBG93K xqTn9LttERBc6g7szWEQzPSIPoc5OisFCW6wW930wpCqq9YfOQtjP50SoQORO/3q Z7hXvtjFvrAZh3bgGOV7MlFAGysthriQPkgghYi97ykvAubUF3rv4fClqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo9zj0kgN9/yZAA6/Y0Urne2a0AMB8GA1UdIwQY MBaAFG/O3L2gPDs2zX1wN+rTOby4jJokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQt NzQyNGZkZWUyMTBlLzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82YjYzMzUtMDQzOS00N2YyLWFlMzQtNzQyNGZkZWUyMTBl LzEvYjg3Y3ZhQThPemJOZlhBMzZ0TTV2TGlNbWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0d13m7K vQAw5O/q0vxoJkGv1SkSUURjcYGYmfKFUhatZ2ohxROCTX/ryoGmOqV0wAX0/iDu xGEU3R/kHCuPRRgB0cdbeJiHr9PT4XFFSFcZDzbSYZuUHWHD28Cwo0UFIa3Nzann Lrb5MYHIOBYBpdSIARB4qWT8jb0zFoRCU00gUI1Gt+bJEt4eAgWpu4QNl6o5E5/f cmDhUIu7dNJ8MJt8ZMBbyOwCsAnVS5nZDqDrXSvhnJQkGhUK7b6Vy7Ly7Ec/MWbd yvZtSY5vR7dUzgE2qRlAfUNht/IZWCuEd1vgGiUA6dq47s2RbVtYNTWjBBWQVaM9 a3eDnTf7ZzuIHQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:33 2025 by rpki-client