This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json) Hash identifier: 5vGCu3cXPtJpUcyBW9oe1wTnrPh1I3Phwh1nN8POFM4= Subject key identifier: F9:FE:CF:BE:50:48:D6:D1:A4:03:CE:63:92:4C:6C:9B:6F:E4:6A:D0 Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Certificate serial: 019B1C181AF547A07BF12BD2DEEC979E0E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft Manifest number: 0C56 Signing time: Sun 14 Dec 2025 09:01:40 +0000 Manifest this update: Sun 14 Dec 2025 09:01:40 +0000 Manifest next update: Mon 15 Dec 2025 09:01:40 +0000 Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=) 2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: krcvK/YFNocyZWpQSVhYDg7z5vvtGaButD5WDz7HGmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:18:1a:f5:47:a0:7b:f1:2b:d2:de:ec:97:9e:0e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f Validity Not Before: Dec 14 09:01:40 2025 GMT Not After : Dec 15 09:01:40 2025 GMT Subject: CN=f9fecfbe5048d6d1a403ce63924c6c9b6fe46ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:06:48:9a:2e:f2:42:34:3a:af:84:70:2a: 9a:30:7d:9b:3b:97:49:ac:b1:70:df:db:67:33:6e: 11:bb:2a:b2:04:45:cc:ba:29:5c:da:78:76:07:69: 60:5d:62:e1:13:24:a7:c4:b6:09:90:67:ec:c0:56: a3:5e:1d:c0:4f:e8:6a:91:80:41:c9:4d:32:69:b7: e9:ed:a5:45:18:fd:5c:ca:41:07:72:4a:1b:fe:88: 85:74:8a:73:6e:6d:d4:23:9a:d6:f1:f4:5b:50:ce: 1b:a5:f5:16:54:dd:c7:c4:a1:48:d8:44:a1:5f:28: 4f:71:49:00:3f:7c:7b:2f:3e:26:4c:0e:cd:11:ef: 76:f7:5a:f3:c9:05:60:8a:75:76:94:60:c4:b2:bc: 47:78:2a:ec:8f:42:e6:2e:3a:06:af:96:69:38:63: 6f:52:3c:52:03:a1:70:49:3b:4a:07:d5:61:44:92: 02:62:91:4d:12:5d:5a:94:97:7f:61:b8:b9:54:74: 86:21:d2:bd:9e:77:7f:e9:5b:dd:be:88:56:a3:82: 68:e4:26:a9:45:bf:96:f8:26:f9:5f:2a:7a:0f:32: 15:3c:1c:a6:39:b2:9d:69:61:3b:80:d9:31:c9:5f: 28:62:2d:c5:ac:24:0f:36:98:2c:79:62:2b:5c:c1: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:CF:BE:50:48:D6:D1:A4:03:CE:63:92:4C:6C:9B:6F:E4:6A:D0 X509v3 Authority Key Identifier: keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c9:51:bd:c9:80:3e:2a:71:a1:34:fb:b7:29:e6:eb:73:dd: 01:3a:c0:d7:73:38:2d:eb:80:08:d0:21:f3:b0:c7:61:2e:e3: 59:d5:94:4f:f0:48:dc:58:a8:b5:6e:15:35:41:c0:a7:c6:b2: e5:7b:00:a5:ee:fa:2b:7d:50:bb:87:50:32:d2:2d:23:62:d6: d3:73:3e:74:c3:06:10:8b:a6:7b:79:cb:e8:d5:c6:c9:fb:47: 29:11:3e:d3:aa:f8:af:e8:fc:28:5d:c6:95:45:20:25:81:b6: c5:3b:40:2f:04:28:ea:2d:56:14:82:b4:40:35:ed:3a:6c:03: d1:45:e2:d1:83:b6:7c:da:c0:99:3f:cc:ff:46:e5:61:3e:6c: b8:48:49:7f:5c:9b:52:b5:65:d9:8e:0b:2d:41:b3:75:20:e7: fc:b1:40:03:8f:60:c1:5a:64:09:45:c4:ab:c9:8d:3f:0d:6d: 3a:dc:13:49:99:73:22:5c:94:33:6f:a6:83:5b:f9:f7:35:43: e2:8d:49:13:5c:7d:cc:f1:14:fd:7c:d6:d3:ec:98:ed:81:3a: 0a:0e:1a:95:e9:d3:52:fb:4f:2b:39:29:fc:91:a1:97:73:6d: aa:08:d6:5d:5d:c2:1c:36:7e:5e:ad:4b:37:e5:29:b7:3b:16: b9:1d:22:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscGBr1R6B78SvS3uyXng4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDc3M2YyNDBjZDYyNjljMjUxYjY1MTcwYWE3ZTI5OGFl OGM0MWYwHhcNMjUxMjE0MDkwMTQwWhcNMjUxMjE1MDkwMTQwWjAzMTEwLwYDVQQD EyhmOWZlY2ZiZTUwNDhkNmQxYTQwM2NlNjM5MjRjNmM5YjZmZTQ2YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyEGSJou8kI0Oq+EcCqaMH2bO5dJ rLFw39tnM24RuyqyBEXMuilc2nh2B2lgXWLhEySnxLYJkGfswFajXh3AT+hqkYBB yU0yabfp7aVFGP1cykEHckob/oiFdIpzbm3UI5rW8fRbUM4bpfUWVN3HxKFI2ESh XyhPcUkAP3x7Lz4mTA7NEe9291rzyQVginV2lGDEsrxHeCrsj0LmLjoGr5ZpOGNv UjxSA6FwSTtKB9VhRJICYpFNEl1alJd/Ybi5VHSGIdK9nnd/6VvdvohWo4Jo5Cap Rb+W+Cb5Xyp6DzIVPBymObKdaWE7gNkxyV8oYi3FrCQPNpgseWIrXMGMiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn+z75QSNbRpAPOY5JMbJtv5GrQMB8GA1UdIwQY MBaAFG9Hc/JAzWJpwlG2UXCqfimK6MQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMt NzY5Y2Q3ZGNjOTM4LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS85ZWQ0YjItMzJiOS00OThhLWI4ZGMtNzY5Y2Q3ZGNjOTM4 LzEvYjBkejhrRE5ZbW5DVWJaUmNLcC1LWXJveEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8lRvcmA PipxoTT7tynm63PdATrA13M4LeuACNAh87DHYS7jWdWUT/BI3FiotW4VNUHAp8ay 5XsApe76K31Qu4dQMtItI2LW03M+dMMGEIume3nL6NXGyftHKRE+06r4r+j8KF3G lUUgJYG2xTtALwQo6i1WFIK0QDXtOmwD0UXi0YO2fNrAmT/M/0blYT5suEhJf1yb UrVl2Y4LLUGzdSDn/LFAA49gwVpkCUXEq8mNPw1tOtwTSZlzIlyUM2+mg1v59zVD 4o1JE1x9zPEU/XzW0+yY7YE6Cg4alenTUvtPKzkp/JGhl3NtqgjWXV3CHDZ+Xq1L N+UptzsWuR0iuQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:26:55 2025 by rpki-client