This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json) Hash identifier: RA0tmiCofXWGkrj1zDk0MOKcuwWhT6lY5URl82v6d+k= Subject key identifier: 7D:18:7E:A8:FC:90:28:11:D2:CC:C9:DD:42:56:F1:1F:5D:38:23:E0 Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Certificate serial: 019B1C85856E28B14BE351D20609513297F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft Manifest number: 0115 Signing time: Sun 14 Dec 2025 11:01:11 +0000 Manifest this update: Sun 14 Dec 2025 11:01:11 +0000 Manifest next update: Mon 15 Dec 2025 11:01:11 +0000 Files and hashes: 1: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: sYxaY1am58MvDDh1u18C6FpYy3LQeEKzoyU0HxvihFo=) 2: dO5qe6cxV0dMzJ8102AvpINSdMo.roa (hash: C4Rut7Vvkpw4iE7xeScMUUVHRIaOgC0yzl/9M7TJh5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:85:6e:28:b1:4b:e3:51:d2:06:09:51:32:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Validity Not Before: Dec 14 11:01:11 2025 GMT Not After : Dec 15 11:01:11 2025 GMT Subject: CN=7d187ea8fc902811d2ccc9dd4256f11f5d3823e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:83:ca:d6:5b:99:79:bc:14:55:7e:98:22: aa:85:5f:bf:a8:26:d2:60:9d:dc:0f:c3:c3:7f:e9: e4:17:d2:2c:2d:25:5d:01:db:54:34:ff:ee:ca:cd: 91:e2:c0:9f:bf:64:21:c9:17:bb:80:1c:8d:50:7e: 9d:80:77:37:80:6b:70:da:25:45:a6:bd:f9:ec:a3: 0a:01:32:b9:e7:25:3c:1f:80:8d:32:1e:68:08:9a: eb:d6:f2:7f:65:25:d4:b8:72:e0:0c:4f:55:c7:91: cc:de:04:78:e9:15:37:05:53:f0:c5:eb:61:c6:57: e8:e5:44:ce:6c:a2:3e:ba:e6:5e:c7:3d:3a:cb:e9: 44:f3:f9:57:a2:22:a8:80:d4:ac:14:b0:a8:b7:f8: fe:36:43:6f:21:61:43:f9:c3:71:30:d1:da:07:28: 40:a9:d2:41:69:9b:f0:d7:19:09:59:18:f3:6b:4d: 2b:45:d5:7d:6e:58:0f:ba:8e:66:61:69:c6:2a:b9: 57:57:b7:97:0a:43:3c:c6:92:cf:a2:69:e6:0c:34: 66:f7:46:8e:c0:9d:d5:eb:cc:08:12:03:a8:a6:b4: b1:ab:bf:2e:9f:35:10:a1:b3:42:53:86:f7:db:c7: 7f:80:65:0f:35:14:7f:a8:5c:b7:5e:2c:c2:f2:5e: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:18:7E:A8:FC:90:28:11:D2:CC:C9:DD:42:56:F1:1F:5D:38:23:E0 X509v3 Authority Key Identifier: keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ec:7b:0d:d5:b6:e5:87:aa:6b:6f:47:1b:c0:69:86:f8:42: ad:c1:77:3b:37:36:dc:53:10:94:36:f3:95:b6:a9:0c:72:38: 8e:d4:b3:44:7d:0b:7f:29:7d:78:a4:37:48:94:e1:0f:31:e9: b0:0e:1b:4f:91:27:fb:8e:b8:4b:dc:0c:2c:51:f6:bb:a8:e4: f3:08:01:0e:dc:00:f1:6e:0c:ac:5c:22:91:20:ff:66:92:05: db:bd:19:66:43:3a:5b:68:5a:33:d6:70:17:a9:38:7f:bd:08: 40:db:26:8c:db:84:de:04:5b:a3:1c:9d:c1:ed:14:4f:f2:3b: 77:75:3f:fd:1d:63:d4:bc:8f:c8:3c:b4:61:50:6b:e3:b3:a4: d3:8b:47:2f:10:c8:9f:c1:7c:88:d9:7d:32:17:e8:60:2b:bf: d9:97:8c:48:e1:93:56:e3:da:f8:1d:52:91:ce:81:35:67:e3: 48:41:c5:4b:e0:67:22:61:c2:be:df:6d:69:d2:7d:a6:9d:f1: 6f:9f:99:9f:8f:45:4d:f4:40:2a:d3:7b:9c:8c:12:c4:79:c6: 66:50:87:85:51:2c:ee:33:9c:e0:2d:97:8e:ae:45:a9:14:59: bf:0b:b9:31:b2:5b:01:72:ed:66:fb:aa:3c:71:02:4a:73:7a: 72:95:c7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYVuKLFL41HSBglRMpfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMjEzZGI2ZDJiMWU0ZjMwYjYyZWQxMTY3ZTI1MjIzNjI2 MzYwYjkwHhcNMjUxMjE0MTEwMTExWhcNMjUxMjE1MTEwMTExWjAzMTEwLwYDVQQD Eyg3ZDE4N2VhOGZjOTAyODExZDJjY2M5ZGQ0MjU2ZjExZjVkMzgyM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRqDytZbmXm8FFV+mCKqhV+/qCbS YJ3cD8PDf+nkF9IsLSVdAdtUNP/uys2R4sCfv2QhyRe7gByNUH6dgHc3gGtw2iVF pr357KMKATK55yU8H4CNMh5oCJrr1vJ/ZSXUuHLgDE9Vx5HM3gR46RU3BVPwxeth xlfo5UTObKI+uuZexz06y+lE8/lXoiKogNSsFLCot/j+NkNvIWFD+cNxMNHaByhA qdJBaZvw1xkJWRjza00rRdV9blgPuo5mYWnGKrlXV7eXCkM8xpLPomnmDDRm90aO wJ3V68wIEgOoprSxq78unzUQobNCU4b328d/gGUPNRR/qFy3XizC8l5AIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0Yfqj8kCgR0szJ3UJW8R9dOCPgMB8GA1UdIwQY MBaAFG4hPbbSseTzC2LtEWfiUiNiY2C5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYt Y2M0NDc0YzMyMTFhLzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYtY2M0NDc0YzMyMTFh LzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+x7DdW2 5Yeqa29HG8BphvhCrcF3Ozc23FMQlDbzlbapDHI4jtSzRH0Lfyl9eKQ3SJThDzHp sA4bT5En+464S9wMLFH2u6jk8wgBDtwA8W4MrFwikSD/ZpIF270ZZkM6W2haM9Zw F6k4f70IQNsmjNuE3gRboxydwe0UT/I7d3U//R1j1LyPyDy0YVBr47Ok04tHLxDI n8F8iNl9MhfoYCu/2ZeMSOGTVuPa+B1Skc6BNWfjSEHFS+BnImHCvt9tadJ9pp3x b5+Zn49FTfRAKtN7nIwSxHnGZlCHhVEs7jOc4C2Xjq5FqRRZvwu5MbJbAXLtZvuq PHECSnN6cpXHNQ== -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:26 2025 by rpki-client