This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json) Hash identifier: IC949O2jigK3Ghxazq3kt5y6Uge7+Rl66FGrtnj1zNU= Subject key identifier: 8D:CD:FB:3D:4E:33:0B:5B:93:0D:27:5B:27:41:7C:9D:E7:E7:93:8D Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Certificate serial: 019B0AB67E4EC8DEEAE0A0A8EA02FB338C34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft Manifest number: 0FD6 Signing time: Thu 11 Dec 2025 00:01:30 +0000 Manifest this update: Thu 11 Dec 2025 00:01:30 +0000 Manifest next update: Fri 12 Dec 2025 00:01:30 +0000 Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: 5p2VsxbHvKtYzOMDsXYFdB6QExS2aZRBeCUlXPgE8dk=) 2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b6:7e:4e:c8:de:ea:e0:a0:a8:ea:02:fb:33:8c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Validity Not Before: Dec 11 00:01:30 2025 GMT Not After : Dec 12 00:01:30 2025 GMT Subject: CN=8dcdfb3d4e330b5b930d275b27417c9de7e7938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:80:57:ea:04:8b:50:80:a1:95:46:cd:57: 9f:a7:c2:a8:ad:db:1f:d1:2c:1b:00:70:58:5e:8a: 69:5b:de:57:0d:9e:f8:70:ef:5c:54:e3:e7:93:8c: 11:9f:35:fc:63:fb:a8:52:95:fa:0b:3e:9b:35:bf: ef:72:01:10:8e:4e:92:f8:c4:2e:c7:8b:33:0a:7e: bf:91:af:f3:59:bf:a3:dd:54:dd:53:54:37:b8:7a: 9e:a4:db:9f:3d:e7:c2:25:8a:fe:ca:d8:7c:74:82: b3:05:ee:47:78:f0:fa:b4:db:7b:64:3f:72:3c:3c: 98:ce:b8:54:59:9c:f9:60:bd:5b:98:e1:6a:ab:3b: 1f:d5:78:e7:db:54:66:70:76:75:c5:3f:c8:eb:85: f6:00:3e:66:6d:38:af:43:ba:8d:31:60:ea:76:30: f3:cf:44:fb:45:9d:cd:e9:07:2b:a9:0b:49:cd:d5: 27:2d:81:08:58:7e:98:ab:07:1b:9a:ca:19:08:38: 7c:57:0e:45:5e:fe:05:30:29:62:70:db:eb:16:06: 4d:7a:68:ff:1a:84:92:aa:bc:4f:5c:13:2b:f3:72: e3:67:76:ba:3a:1d:10:62:8d:bf:13:f5:59:e7:5b: 25:e2:c3:81:30:c2:5f:5b:6b:70:9a:fa:ab:50:26: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:FB:3D:4E:33:0B:5B:93:0D:27:5B:27:41:7C:9D:E7:E7:93:8D X509v3 Authority Key Identifier: keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:19:ed:16:6b:ba:be:f9:51:5e:6b:21:98:4d:f8:54:a5:a6: 22:d8:b1:bd:f0:6c:c7:47:fc:af:76:9d:24:ed:b6:95:40:51: 41:aa:41:4b:ab:3b:9c:dd:73:4c:fb:e5:04:7b:58:8a:a1:26: 1d:bf:bf:3c:46:36:83:84:25:4d:9d:34:e4:c4:73:b3:2f:24: e8:3b:b3:a8:bb:b1:3e:0b:15:78:e8:0e:a7:e0:40:bb:95:07: 83:22:9f:3f:23:02:ac:91:1c:ce:1e:e2:d5:ff:98:70:75:b9: bf:f2:49:a9:35:45:d7:dd:bd:c2:dd:83:e1:fd:59:cf:5d:af: 25:9d:01:e0:0a:2f:21:9b:1c:1c:8d:f1:68:eb:04:fc:c5:5c: e6:63:dc:11:e9:d9:37:44:c1:66:81:7b:ba:b1:92:b9:35:64: a0:f3:c4:36:df:a9:25:88:4d:5d:4d:00:ce:3b:af:85:56:fc: 30:78:17:12:8d:7d:46:bb:b7:4e:b9:c6:3e:b3:d1:60:04:a2: 49:c8:47:97:77:45:8f:1d:25:ac:13:04:86:de:8e:34:f6:5c: 5e:66:2a:7d:d0:48:86:56:83:2e:fc:54:55:71:53:3f:3f:ac: c9:1b:b3:3e:19:fe:7b:57:80:de:42:c7:88:a8:24:30:15:0a: 97:7b:8a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtn5OyN7q4KCo6gL7M4w0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw YjU0N2IwHhcNMjUxMjExMDAwMTMwWhcNMjUxMjEyMDAwMTMwWjAzMTEwLwYDVQQD Eyg4ZGNkZmIzZDRlMzMwYjViOTMwZDI3NWIyNzQxN2M5ZGU3ZTc5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MaAV+oEi1CAoZVGzVefp8Kordsf 0SwbAHBYXoppW95XDZ74cO9cVOPnk4wRnzX8Y/uoUpX6Cz6bNb/vcgEQjk6S+MQu x4szCn6/ka/zWb+j3VTdU1Q3uHqepNufPefCJYr+yth8dIKzBe5HePD6tNt7ZD9y PDyYzrhUWZz5YL1bmOFqqzsf1Xjn21RmcHZ1xT/I64X2AD5mbTivQ7qNMWDqdjDz z0T7RZ3N6QcrqQtJzdUnLYEIWH6YqwcbmsoZCDh8Vw5FXv4FMClicNvrFgZNemj/ GoSSqrxPXBMr83LjZ3a6Oh0QYo2/E/VZ51sl4sOBMMJfW2twmvqrUCa/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3N+z1OMwtbkw0nWydBfJ3n55ONMB8GA1UdIwQY MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2 LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRntFmu6 vvlRXmshmE34VKWmItixvfBsx0f8r3adJO22lUBRQapBS6s7nN1zTPvlBHtYiqEm Hb+/PEY2g4QlTZ005MRzsy8k6DuzqLuxPgsVeOgOp+BAu5UHgyKfPyMCrJEczh7i 1f+YcHW5v/JJqTVF1929wt2D4f1Zz12vJZ0B4AovIZscHI3xaOsE/MVc5mPcEenZ N0TBZoF7urGSuTVkoPPENt+pJYhNXU0AzjuvhVb8MHgXEo19Rru3TrnGPrPRYASi SchHl3dFjx0lrBMEht6ONPZcXmYqfdBIhlaDLvxUVXFTPz+syRuzPhn+e1eA3kLH iKgkMBUKl3uKnA== -----END CERTIFICATE-----Generated at Thu Dec 11 05:18:56 2025 by rpki-client