This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft File: RJ2BK99MX7CO1hINzQYZq_NTBSA.mft (raw, json) Hash identifier: wu8rGuYsEiT67rLbSGVStL+mtl0wvH+mZha+02Li96A= Subject key identifier: 20:5C:B1:D9:C0:8A:11:26:44:10:29:9A:DB:6A:3D:ED:DB:30:45:23 Authority key identifier: 44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20 Certificate issuer: /CN=449d812bdf4c5fb08ed6120dcd0619abf3530520 Certificate serial: 019B2363B3354DE1164A1966B43023F0B653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft Manifest number: 09B9 Signing time: Mon 15 Dec 2025 19:01:34 +0000 Manifest this update: Mon 15 Dec 2025 19:01:34 +0000 Manifest next update: Tue 16 Dec 2025 19:01:34 +0000 Files and hashes: 1: DzVVrFISV3SBn05LsG8ndsYg1aE.roa (hash: hA/w0PY+vo1QpcIrf2hV7eRwasuyeWDku9nC2cWOSxo=) 2: RJ2BK99MX7CO1hINzQYZq_NTBSA.crl (hash: kRhIWfTbyYcUkyC/t/qAAI2HfKqmDPPQA1eDm59vJkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:b3:35:4d:e1:16:4a:19:66:b4:30:23:f0:b6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449d812bdf4c5fb08ed6120dcd0619abf3530520 Validity Not Before: Dec 15 19:01:34 2025 GMT Not After : Dec 16 19:01:34 2025 GMT Subject: CN=205cb1d9c08a11264410299adb6a3deddb304523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:1d:df:34:92:e2:e7:3b:21:3c:b5:d8:9e: f9:6c:52:63:6c:d0:79:47:60:89:a7:fc:d9:50:28: 4e:de:46:b2:a0:f1:fc:d5:f3:64:a7:4d:34:49:62: 30:3c:4c:4a:51:7c:d9:8d:ba:23:07:be:7c:dd:3b: 8e:d4:8e:d4:fa:53:4e:be:ef:3e:95:e5:c6:de:a3: bf:e8:7a:bb:8e:dd:7f:75:09:15:dd:42:44:03:c9: 26:22:35:4d:66:08:eb:5a:24:0c:a0:ee:c3:b1:a3: 71:b8:51:5e:63:23:8f:21:c2:4b:ad:ad:30:01:86: a5:4f:97:34:34:46:4b:2c:ae:74:4b:25:ff:64:59: 48:8c:04:d4:8b:33:90:96:b2:65:2b:2a:8d:5d:83: c5:1d:93:01:5e:1d:91:de:cf:c9:62:ea:fc:7e:e0: a1:1a:65:e7:17:c0:e0:e3:cd:60:7d:34:88:9b:30: 6c:35:f7:49:cd:3c:3e:33:16:f7:7d:9d:7e:8c:3d: 73:4b:39:09:01:ae:e8:7d:89:5c:0a:45:bb:75:85: 4f:03:7e:67:5c:6e:33:3b:c4:e7:b4:65:29:b5:77: 37:e1:82:34:a1:fa:c4:fa:3f:d3:e0:6c:7b:ff:f6: a8:6a:25:60:37:b0:86:4d:bb:45:51:aa:2b:bd:94: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5C:B1:D9:C0:8A:11:26:44:10:29:9A:DB:6A:3D:ED:DB:30:45:23 X509v3 Authority Key Identifier: keyid:44:9D:81:2B:DF:4C:5F:B0:8E:D6:12:0D:CD:06:19:AB:F3:53:05:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ2BK99MX7CO1hINzQYZq_NTBSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f601d3-23d4-4feb-96fa-f1451ba884b8/1/RJ2BK99MX7CO1hINzQYZq_NTBSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:17:f8:7f:82:72:71:88:2e:6f:ca:60:6d:ab:90:64:1b:cd: ee:01:cc:4d:a5:f2:70:4e:4f:88:f7:55:f2:32:2a:1c:ca:7e: 1d:f1:10:20:34:03:71:cb:70:07:78:de:80:15:74:80:29:bc: 4d:fe:b2:f0:22:7d:c2:1d:44:8a:09:3a:fc:24:20:aa:ca:42: bc:c2:34:9b:a2:7b:d2:a7:5a:e2:c3:e6:5e:68:c2:00:3b:1c: 53:a9:ef:a9:81:8b:63:7c:6b:56:51:62:1f:02:27:7c:f4:b5: b9:bd:d7:65:ec:0a:23:97:2f:f9:16:79:65:e6:4b:de:2d:af: 8b:86:b1:f0:be:2d:3e:dd:67:77:6e:cd:1b:fe:71:8a:1e:12: ea:0f:06:22:3c:be:5e:2f:84:30:61:a2:89:03:96:f1:fa:3b: a6:73:a7:8a:eb:b4:e2:c7:a9:2f:ef:78:e9:fe:ed:ba:8d:03: 77:df:b8:77:a2:26:c0:70:35:99:82:f0:1a:14:48:79:b5:83: 46:aa:f4:b4:6c:b7:b5:0f:51:92:ab:14:5c:66:5a:57:89:4f: 4d:04:af:94:48:88:1e:e2:8c:18:27:d3:ec:cb:7e:7c:c3:ef: d5:c8:51:95:35:5f:92:e5:d8:a4:71:a2:7a:88:fd:14:50:1d: 03:9b:ed:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY7M1TeEWShlmtDAj8LZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWQ4MTJiZGY0YzVmYjA4ZWQ2MTIwZGNkMDYxOWFiZjM1 MzA1MjAwHhcNMjUxMjE1MTkwMTM0WhcNMjUxMjE2MTkwMTM0WjAzMTEwLwYDVQQD EygyMDVjYjFkOWMwOGExMTI2NDQxMDI5OWFkYjZhM2RlZGRiMzA0NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk0d3zSS4uc7ITy12J75bFJjbNB5 R2CJp/zZUChO3kayoPH81fNkp000SWIwPExKUXzZjbojB7583TuO1I7U+lNOvu8+ leXG3qO/6Hq7jt1/dQkV3UJEA8kmIjVNZgjrWiQMoO7DsaNxuFFeYyOPIcJLra0w AYalT5c0NEZLLK50SyX/ZFlIjATUizOQlrJlKyqNXYPFHZMBXh2R3s/JYur8fuCh GmXnF8Dg481gfTSImzBsNfdJzTw+Mxb3fZ1+jD1zSzkJAa7ofYlcCkW7dYVPA35n XG4zO8TntGUptXc34YI0ofrE+j/T4Gx7//aoaiVgN7CGTbtFUaorvZS+FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBcsdnAihEmRBApmttqPe3bMEUjMB8GA1UdIwQY MBaAFESdgSvfTF+wjtYSDc0GGavzUwUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEt ZjE0NTFiYTg4NGI4LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNjAxZDMtMjNkNC00ZmViLTk2ZmEtZjE0NTFiYTg4NGI4 LzEvUkoyQks5OU1YN0NPMWhJTnpRWVpxX05UQlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBf4f4Jy cYgub8pgbauQZBvN7gHMTaXycE5PiPdV8jIqHMp+HfEQIDQDcctwB3jegBV0gCm8 Tf6y8CJ9wh1Eigk6/CQgqspCvMI0m6J70qda4sPmXmjCADscU6nvqYGLY3xrVlFi HwInfPS1ub3XZewKI5cv+RZ5ZeZL3i2vi4ax8L4tPt1nd27NG/5xih4S6g8GIjy+ Xi+EMGGiiQOW8fo7pnOniuu04sepL+946f7tuo0Dd9+4d6ImwHA1mYLwGhRIebWD Rqr0tGy3tQ9RkqsUXGZaV4lPTQSvlEiIHuKMGCfT7Mt+fMPv1chRlTVfkuXYpHGi eoj9FFAdA5vtAA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:51:09 2025 by rpki-client