This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json) Hash identifier: vXYm2v7k/rtp17Ng1DZiOsV+ozl1Ef8u214anH9SvEI= Subject key identifier: F4:D9:00:33:1B:B2:22:33:62:D0:51:16:DA:CC:C1:1F:89:17:3E:05 Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Certificate serial: 019B42B7905923766D078EAED759D56ECC67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft Manifest number: 0FF3 Signing time: Sun 21 Dec 2025 21:01:24 +0000 Manifest this update: Sun 21 Dec 2025 21:01:24 +0000 Manifest next update: Mon 22 Dec 2025 21:01:24 +0000 Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: M922u5WpX2ZbzZK38h0yI+eskCaBOETbnrPqi06Kt8c=) 2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:90:59:23:76:6d:07:8e:ae:d7:59:d5:6e:cc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Validity Not Before: Dec 21 21:01:24 2025 GMT Not After : Dec 22 21:01:24 2025 GMT Subject: CN=f4d900331bb2223362d05116daccc11f89173e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:f3:5a:48:2e:2a:d4:06:31:1b:b5:4c:18: 93:72:e2:da:06:66:ff:52:94:39:86:53:ae:05:4f: df:a7:d9:cc:b2:48:e0:e2:44:aa:98:0f:75:50:8a: ef:17:7c:fe:5b:ef:91:9a:c2:95:b6:bb:5f:32:23: f1:8f:4c:4a:29:81:3b:7d:a9:5d:11:7e:e8:6c:a5: 21:e0:24:c7:06:ff:38:24:55:f4:07:ae:15:1c:87: 76:17:71:4f:e8:6e:d5:e9:7c:0b:ad:61:41:f0:f0: 26:24:67:8a:ed:ba:7a:07:f4:cc:9f:d9:02:14:96: 1a:3c:9e:6d:2c:aa:7f:e3:c4:e4:65:6e:ba:d7:65: 9a:a6:72:c2:c6:50:40:be:0d:d1:1d:5a:12:1b:fa: 60:1c:16:75:ca:08:28:50:a0:dc:2a:91:39:7a:9a: bc:25:86:de:fb:2d:5a:5c:d7:f6:f5:e5:85:50:49: 90:7e:5b:1b:13:e2:8e:73:29:8c:99:b9:66:26:b0: 51:79:fa:54:d7:b1:cc:d7:89:ee:a7:35:7d:94:65: 52:f7:6f:22:f9:21:2b:e2:13:f3:2c:4d:a6:f8:e5: 33:a8:26:68:43:a7:4c:6b:b5:d9:c7:f7:1d:f1:11: cf:3d:94:97:5f:99:ca:7f:21:6b:aa:de:d5:11:db: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D9:00:33:1B:B2:22:33:62:D0:51:16:DA:CC:C1:1F:89:17:3E:05 X509v3 Authority Key Identifier: keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e2:a8:37:c2:a0:b8:fe:c6:fc:ac:09:97:06:72:ca:ba:1a: a2:bc:c2:7a:d5:a8:61:3b:fd:8e:f7:44:11:25:e0:66:27:75: fd:88:34:63:df:82:a0:84:ee:91:e8:4f:5c:a6:59:37:22:88: 07:38:56:cb:0f:01:20:58:ad:04:d3:f6:0d:0d:c5:a6:b6:fb: 83:2a:15:d8:05:cc:89:53:2c:e2:8b:41:59:36:a4:7e:2a:92: 18:60:2f:80:7e:44:0c:9a:f7:e2:0b:ef:fa:6f:19:72:f9:ce: 7a:a0:99:f5:0a:f2:92:8b:99:85:4e:cb:f0:f1:e0:99:fb:23: 45:d5:af:da:04:c7:62:8d:10:db:4c:09:b3:6a:1b:91:fc:cc: 00:26:c5:e2:14:f7:81:c7:a1:2b:62:a6:0e:d3:a0:e9:f5:9f: ac:39:05:ff:61:0e:99:89:97:46:27:48:65:be:66:1e:21:b9: e1:b6:1d:c2:b6:ce:43:fe:58:cc:b5:1d:56:d6:2c:4d:e9:64: 0f:9e:8e:fd:96:08:b7:de:4a:84:05:c7:4f:67:2c:04:bd:ee: 45:66:de:12:89:f8:90:dc:64:83:00:1c:48:db:9b:be:fc:00: b2:e6:50:44:91:58:39:77:03:a6:3e:00:43:8c:28:4d:21:62: 70:3c:cb:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5BZI3ZtB46u11nVbsxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw YjU0N2IwHhcNMjUxMjIxMjEwMTI0WhcNMjUxMjIyMjEwMTI0WjAzMTEwLwYDVQQD EyhmNGQ5MDAzMzFiYjIyMjMzNjJkMDUxMTZkYWNjYzExZjg5MTczZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zzzWkguKtQGMRu1TBiTcuLaBmb/ UpQ5hlOuBU/fp9nMskjg4kSqmA91UIrvF3z+W++RmsKVtrtfMiPxj0xKKYE7fald EX7obKUh4CTHBv84JFX0B64VHId2F3FP6G7V6XwLrWFB8PAmJGeK7bp6B/TMn9kC FJYaPJ5tLKp/48TkZW6612WapnLCxlBAvg3RHVoSG/pgHBZ1yggoUKDcKpE5epq8 JYbe+y1aXNf29eWFUEmQflsbE+KOcymMmblmJrBRefpU17HM14nupzV9lGVS928i +SEr4hPzLE2m+OUzqCZoQ6dMa7XZx/cd8RHPPZSXX5nKfyFrqt7VEduwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTZADMbsiIzYtBRFtrMwR+JFz4FMB8GA1UdIwQY MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2 LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+KoN8Kg uP7G/KwJlwZyyroaorzCetWoYTv9jvdEESXgZid1/Yg0Y9+CoITukehPXKZZNyKI BzhWyw8BIFitBNP2DQ3Fprb7gyoV2AXMiVMs4otBWTakfiqSGGAvgH5EDJr34gvv +m8ZcvnOeqCZ9QrykouZhU7L8PHgmfsjRdWv2gTHYo0Q20wJs2obkfzMACbF4hT3 gcehK2KmDtOg6fWfrDkF/2EOmYmXRidIZb5mHiG54bYdwrbOQ/5YzLUdVtYsTelk D56O/ZYIt95KhAXHT2csBL3uRWbeEon4kNxkgwAcSNubvvwAsuZQRJFYOXcDpj4A Q4woTSFicDzLDg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:05 2025 by rpki-client