This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json) Hash identifier: Y8WsX/1KcSO0tvyAXNyj9TmPw0CqUkTTDWLBzhhK8OM= Subject key identifier: 2B:07:7A:D4:09:DF:35:46:D4:88:30:6C:72:96:F8:7D:38:EB:C4:A1 Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841 Certificate serial: 019B36451E021BD9CEF84B0181990907385A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 11:00:57 +0000 Manifest this update: Fri 19 Dec 2025 11:00:57 +0000 Manifest next update: Sat 20 Dec 2025 11:00:57 +0000 Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: Tcoi2cBZNQPj8q8tctQMyOeZCKnQT82uElrWau0VU+Y=) 2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:1e:02:1b:d9:ce:f8:4b:01:81:99:09:07:38:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841 Validity Not Before: Dec 19 11:00:57 2025 GMT Not After : Dec 20 11:00:57 2025 GMT Subject: CN=2b077ad409df3546d488306c7296f87d38ebc4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:1e:5c:9d:61:c8:b8:8d:e9:0e:86:e8:cd: f8:da:a9:0a:06:76:b8:b7:83:6f:56:85:d7:db:a8: ab:7b:52:ee:d4:0e:d1:12:63:45:4f:94:41:7b:50: 79:68:a5:ec:d4:29:bb:83:cd:a7:c9:e6:d6:12:2a: f8:7e:08:52:db:a4:7c:bf:3e:ad:89:7e:c1:96:4c: 28:57:3a:ca:56:6a:9e:fa:4c:25:83:26:1b:2c:3e: 5d:29:12:e0:66:15:0c:b5:7c:e9:c7:45:2b:66:d7: 22:3b:45:a1:ec:37:c8:b8:d3:11:5d:59:ed:64:ac: 02:04:a7:e3:93:1e:a0:a2:73:b7:c9:6c:ff:c5:bd: 0f:98:74:7d:cb:ba:dc:d8:0a:d1:27:69:1d:61:0a: 69:01:75:b7:9c:f5:4f:0a:b5:10:db:eb:fc:0e:f9: 9c:f9:2f:e3:8f:8b:50:1c:2f:e1:6f:fe:de:38:47: 7a:7f:81:0a:df:67:19:26:04:10:2d:65:82:d4:c1: 00:96:33:48:c7:1b:70:28:d4:95:65:e8:a6:1c:b8: ac:07:96:61:55:24:17:68:29:34:47:9c:7e:cc:e3: 03:72:05:30:50:41:b3:5f:a8:dd:4e:69:09:19:03: a7:ae:16:00:92:a8:8d:74:1b:d7:47:37:f4:04:8e: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:7A:D4:09:DF:35:46:D4:88:30:6C:72:96:F8:7D:38:EB:C4:A1 X509v3 Authority Key Identifier: keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:11:6e:ec:13:e5:b8:c4:c8:45:92:69:e8:65:09:ba:78:f8: 12:04:c4:5d:70:a8:a4:a3:13:8c:4c:48:70:95:80:a1:7e:63: 3e:87:3b:6e:ec:47:25:7c:e1:e6:99:00:9a:d2:e1:87:4f:bb: ad:d9:e9:40:d7:40:64:f3:ea:f1:f2:02:47:e9:ba:01:01:e9: e0:1e:f9:3c:92:3c:34:f1:e9:af:7e:41:30:61:6b:ae:e3:37: b4:ed:e1:53:81:cd:fb:cf:29:30:47:08:6f:79:6c:24:80:83: df:29:cd:2e:ec:59:b4:6b:47:1e:57:d2:5a:e0:75:13:93:4a: a9:92:fa:c5:30:d4:ca:66:5d:80:83:29:13:39:11:35:4e:c9: b3:51:09:dc:69:40:3a:67:dc:e8:04:06:31:4c:3c:a5:13:5e: 1a:49:9a:09:eb:dd:0b:ca:5f:85:81:36:c6:43:cc:0f:22:02: 2d:49:e5:74:f5:01:90:49:7f:fe:f2:b3:d5:bf:3e:50:d1:63: 61:4e:55:3f:42:8d:e9:65:75:f1:ad:58:d1:3f:5a:7c:31:f8: cb:e9:3e:d9:e6:2b:74:c7:42:21:66:f0:b4:ff:33:72:7b:19: 34:21:8f:59:0f:86:36:87:bb:31:78:1a:b2:01:73:e5:46:65: aa:3b:00:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RR4CG9nO+EsBgZkJBzhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw ZTk4NDEwHhcNMjUxMjE5MTEwMDU3WhcNMjUxMjIwMTEwMDU3WjAzMTEwLwYDVQQD EygyYjA3N2FkNDA5ZGYzNTQ2ZDQ4ODMwNmM3Mjk2Zjg3ZDM4ZWJjNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQUeXJ1hyLiN6Q6G6M342qkKBna4 t4NvVoXX26ire1Lu1A7REmNFT5RBe1B5aKXs1Cm7g82nyebWEir4fghS26R8vz6t iX7BlkwoVzrKVmqe+kwlgyYbLD5dKRLgZhUMtXzpx0UrZtciO0Wh7DfIuNMRXVnt ZKwCBKfjkx6gonO3yWz/xb0PmHR9y7rc2ArRJ2kdYQppAXW3nPVPCrUQ2+v8Dvmc +S/jj4tQHC/hb/7eOEd6f4EK32cZJgQQLWWC1MEAljNIxxtwKNSVZeimHLisB5Zh VSQXaCk0R5x+zOMDcgUwUEGzX6jdTmkJGQOnrhYAkqiNdBvXRzf0BI7VcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsHetQJ3zVG1IgwbHKW+H0468ShMB8GA1UdIwQY MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct MTJkMGI2MzJlNWU4LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4 LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBFu7BPl uMTIRZJp6GUJunj4EgTEXXCopKMTjExIcJWAoX5jPoc7buxHJXzh5pkAmtLhh0+7 rdnpQNdAZPPq8fICR+m6AQHp4B75PJI8NPHpr35BMGFrruM3tO3hU4HN+88pMEcI b3lsJICD3ynNLuxZtGtHHlfSWuB1E5NKqZL6xTDUymZdgIMpEzkRNU7Js1EJ3GlA Omfc6AQGMUw8pRNeGkmaCevdC8pfhYE2xkPMDyICLUnldPUBkEl//vKz1b8+UNFj YU5VP0KN6WV18a1Y0T9afDH4y+k+2eYrdMdCIWbwtP8zcnsZNCGPWQ+GNoe7MXga sgFz5UZlqjsAow== -----END CERTIFICATE-----Generated at Fri Dec 19 16:40:08 2025 by rpki-client