This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json) Hash identifier: B15ewxb8qcJfWHZ/Y2BHh10YBt+3Dpx0wlQgAwk3RWk= Subject key identifier: BA:54:7C:59:C8:9A:F8:FD:51:06:25:08:CD:39:D5:7A:0B:2E:7B:CE Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0 Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0 Certificate serial: 019B5A51E48A73EC02613ED54F94D81A967A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:14 +0000 Manifest this update: Fri 26 Dec 2025 11:01:14 +0000 Manifest next update: Sat 27 Dec 2025 11:01:14 +0000 Files and hashes: 1: 3vQJX1qiDpD0wMY9PTYA0PPaBPY.roa (hash: 9p9BvXjVY0nIdlxupAXb84lfifwZdaujC3Pou0+e2uY=) 2: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: Zzg5O2ynSt1g0yrBCUKQdcw3nLvENc9agZ9pLpF2MuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e4:8a:73:ec:02:61:3e:d5:4f:94:d8:1a:96:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0 Validity Not Before: Dec 26 11:01:14 2025 GMT Not After : Dec 27 11:01:14 2025 GMT Subject: CN=ba547c59c89af8fd51062508cd39d57a0b2e7bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:83:f8:a1:24:fc:aa:03:1b:2b:c1:59:2b: a2:26:b2:45:99:2b:5e:40:ba:bf:16:13:10:11:75: 54:17:ad:02:b2:3d:a9:b5:5d:5a:c1:8f:e8:88:5e: dd:ec:07:d5:dd:25:74:b8:90:45:49:d2:9d:3a:ee: a3:75:bb:a2:9e:f5:93:37:bb:eb:35:7a:7d:6c:a8: 6c:d2:e8:10:40:a0:0c:55:43:99:15:f6:db:5c:08: 49:cc:a9:65:58:4d:1d:32:ca:dc:3b:76:c1:cd:74: 02:6f:98:8f:81:93:9d:fb:b0:f3:96:5e:91:e2:8d: 84:11:86:97:a3:2f:14:58:b0:7f:29:64:0a:fb:5b: 30:ae:bf:a5:3b:95:c8:aa:56:14:e9:4b:ac:02:f5: 1d:d6:26:ff:8d:30:0b:36:7a:51:58:34:2d:80:3d: 8c:b2:1e:5e:f7:67:0c:08:35:0e:ae:52:cb:91:fa: a6:80:8a:ca:a4:49:ed:ae:e5:e8:4a:9b:47:16:f3: d7:83:2f:d5:05:2b:27:c6:5b:cd:30:5a:48:8e:f1: 00:87:6d:91:44:42:a0:ed:da:b7:9c:25:ee:45:53: aa:19:89:71:00:81:3e:8b:56:ab:f7:f4:f1:44:01: b3:ff:d0:1c:15:a3:db:3c:4b:1f:59:48:ae:b9:15: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:7C:59:C8:9A:F8:FD:51:06:25:08:CD:39:D5:7A:0B:2E:7B:CE X509v3 Authority Key Identifier: keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:29:10:de:67:15:1e:8d:ee:31:fe:e9:63:74:a6:1d:12:17: cb:10:1a:ee:81:ef:a1:a3:a1:cd:a8:c0:0a:83:da:b3:d6:96: a9:79:6c:c8:46:74:d1:53:22:95:53:fb:d1:58:df:b3:30:b6: 78:58:ac:2a:09:96:39:5c:e1:8f:13:ec:b2:db:e2:ac:7f:8c: 87:99:57:9b:03:88:dc:5b:19:3e:b4:7e:1a:52:81:68:62:a1: cf:6b:f4:bc:69:5d:63:e6:cc:4b:af:53:f2:de:61:6d:b3:ce: 74:07:76:36:81:da:76:a4:58:15:6d:3f:7d:83:b2:83:1b:c4: ac:31:7a:8f:21:a5:7f:fb:b1:e1:ba:58:4e:80:dc:a3:ce:7c: 36:b5:ce:9c:49:e1:6a:89:97:7a:28:23:a1:75:57:73:7a:f6: 20:9b:2e:31:0c:c3:48:7f:2d:01:d1:04:6e:36:f0:35:20:1e: 4e:75:ee:3a:96:26:a1:3b:20:24:c2:80:cb:8c:34:3a:36:e8: 56:d1:e1:1c:ed:73:d6:a5:aa:fe:ed:20:b9:52:2f:74:be:ad: 45:87:ed:f0:36:13:1e:34:13:2d:86:f6:83:26:f8:0f:21:c6: 2e:46:6c:46:b7:5b:15:b6:83:32:c9:24:dd:18:01:28:9b:c1: 27:c4:1c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUeSKc+wCYT7VT5TYGpZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmIwZjliZGMzYTJmYWU0N2I0N2U3MDIxODk5M2M5MTlm MTBmYjAwHhcNMjUxMjI2MTEwMTE0WhcNMjUxMjI3MTEwMTE0WjAzMTEwLwYDVQQD EyhiYTU0N2M1OWM4OWFmOGZkNTEwNjI1MDhjZDM5ZDU3YTBiMmU3YmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze+D+KEk/KoDGyvBWSuiJrJFmSte QLq/FhMQEXVUF60Csj2ptV1awY/oiF7d7AfV3SV0uJBFSdKdOu6jdbuinvWTN7vr NXp9bKhs0ugQQKAMVUOZFfbbXAhJzKllWE0dMsrcO3bBzXQCb5iPgZOd+7Dzll6R 4o2EEYaXoy8UWLB/KWQK+1swrr+lO5XIqlYU6UusAvUd1ib/jTALNnpRWDQtgD2M sh5e92cMCDUOrlLLkfqmgIrKpEntruXoSptHFvPXgy/VBSsnxlvNMFpIjvEAh22R REKg7dq3nCXuRVOqGYlxAIE+i1ar9/TxRAGz/9AcFaPbPEsfWUiuuRWLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpUfFnImvj9UQYlCM051XoLLnvOMB8GA1UdIwQY MBaAFG/7D5vcOi+uR7R+cCGJk8kZ8Q+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYt ZjlhYjNiMDUyMzQ5LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYtZjlhYjNiMDUyMzQ5 LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXykQ3mcV Ho3uMf7pY3SmHRIXyxAa7oHvoaOhzajACoPas9aWqXlsyEZ00VMilVP70VjfszC2 eFisKgmWOVzhjxPsstvirH+Mh5lXmwOI3FsZPrR+GlKBaGKhz2v0vGldY+bMS69T 8t5hbbPOdAd2NoHadqRYFW0/fYOygxvErDF6jyGlf/ux4bpYToDco858NrXOnEnh aomXeigjoXVXc3r2IJsuMQzDSH8tAdEEbjbwNSAeTnXuOpYmoTsgJMKAy4w0Ojbo VtHhHO1z1qWq/u0guVIvdL6tRYft8DYTHjQTLYb2gyb4DyHGLkZsRrdbFbaDMskk 3RgBKJvBJ8Qcpw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:59 2025 by rpki-client