This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json) Hash identifier: rdI4kYiz74/lkGLYNaZ1O82jBakr0f0KUvAl06adqB8= Subject key identifier: B3:38:BD:A1:47:F7:5E:4B:8F:25:B5:2C:5D:7B:A3:43:70:91:DF:EA Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Certificate serial: 019B0E5BEA4122109BFD22C5018A3993522F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft Manifest number: 107E Signing time: Thu 11 Dec 2025 17:01:03 +0000 Manifest this update: Thu 11 Dec 2025 17:01:03 +0000 Manifest next update: Fri 12 Dec 2025 17:01:03 +0000 Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=) 2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=) 3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: A8+hxm05f7kYom9l69SSRupK3M53289yTK7eD1rqUNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:ea:41:22:10:9b:fd:22:c5:01:8a:39:93:52:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Validity Not Before: Dec 11 17:01:03 2025 GMT Not After : Dec 12 17:01:03 2025 GMT Subject: CN=b338bda147f75e4b8f25b52c5d7ba3437091dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:a2:46:04:f7:9a:19:7c:85:a1:ae:e8:9c: d7:d2:9e:2a:1b:a2:44:a8:7d:05:a9:09:2e:6f:ea: 81:3f:3e:cd:ab:c7:94:19:db:95:e3:bb:27:c9:b3: d3:37:dc:0d:c6:e5:d6:1c:1f:7a:38:8f:69:e7:05: 7b:37:72:17:f8:9c:98:be:24:11:75:08:42:41:07: c7:70:c2:8f:75:56:ef:a5:4c:24:18:55:14:07:f1: ba:85:cd:1f:ba:78:c9:15:f0:0f:67:09:01:10:e6: 44:94:83:94:19:1d:1e:ce:b3:a9:b1:bd:1b:64:44: 2c:ce:c4:86:23:c0:36:cf:81:34:60:e7:5c:26:40: 2a:7e:b8:30:53:46:46:0d:4b:31:13:11:76:e8:14: c3:f9:c4:9b:f6:20:37:bf:09:a0:de:08:c0:1f:c0: 93:a4:89:35:7a:11:a9:64:0a:ff:0a:62:3f:18:5c: 85:85:9a:c0:7d:9c:c0:01:b6:cb:1f:29:e7:5f:96: a6:5e:37:23:fd:9a:de:92:c0:69:d3:5f:87:17:73: 42:6f:70:fe:c6:76:2c:e5:a3:9c:ee:71:21:4e:bc: 11:59:d4:26:46:df:7b:77:b5:67:d0:0b:4e:a5:a6: da:75:7b:c1:0a:fb:15:a5:2f:ef:3f:02:ea:a1:f0: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:38:BD:A1:47:F7:5E:4B:8F:25:B5:2C:5D:7B:A3:43:70:91:DF:EA X509v3 Authority Key Identifier: keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:44:3e:10:32:87:a8:fc:c1:9c:5f:73:bf:1e:4a:8a:44:02: 55:ef:ba:de:6b:e2:5e:7a:88:59:bd:93:71:e4:2b:df:cf:74: 6a:ee:86:e8:e7:66:1c:55:f7:36:d3:1d:1a:c5:29:bf:53:a5: 60:d3:a5:10:08:6b:a5:6a:b9:3b:37:5f:ad:f0:ed:c0:08:f4: 50:e8:a2:73:fe:56:91:32:0a:92:00:e2:a2:f1:9c:30:44:db: 44:02:31:12:35:36:53:9a:e0:bd:67:8f:dd:c4:1c:36:77:3e: 81:c0:4f:4e:3b:e2:d9:f1:cd:65:41:a7:08:ce:85:29:66:98: 87:c0:fd:41:4f:40:c0:f9:7d:f7:aa:49:27:7e:e6:e3:6b:6c: 4a:17:43:25:7b:8a:40:b9:6f:2f:3d:f5:74:92:8a:3a:c5:1d: 31:91:a2:4f:92:b2:3b:48:e0:b3:a1:ef:d5:c3:26:fd:ef:1a: e5:1e:fe:f4:bc:ff:cf:d3:8d:a0:90:7b:1c:7b:5a:d2:cd:81: b5:b7:8f:ab:de:70:a2:94:a1:87:40:94:79:cd:13:ea:ab:a6: 71:3c:76:d7:6e:d3:44:a8:6e:9b:d7:eb:f0:ff:d7:62:fe:5f: 71:7f:a5:61:33:8f:2a:a5:27:09:df:ef:8c:0e:de:a3:56:83: d8:dc:f0:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+pBIhCb/SLFAYo5k1IvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5 ZjdjZTcwHhcNMjUxMjExMTcwMTAzWhcNMjUxMjEyMTcwMTAzWjAzMTEwLwYDVQQD EyhiMzM4YmRhMTQ3Zjc1ZTRiOGYyNWI1MmM1ZDdiYTM0MzcwOTFkZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XuiRgT3mhl8haGu6JzX0p4qG6JE qH0FqQkub+qBPz7Nq8eUGduV47snybPTN9wNxuXWHB96OI9p5wV7N3IX+JyYviQR dQhCQQfHcMKPdVbvpUwkGFUUB/G6hc0funjJFfAPZwkBEOZElIOUGR0ezrOpsb0b ZEQszsSGI8A2z4E0YOdcJkAqfrgwU0ZGDUsxExF26BTD+cSb9iA3vwmg3gjAH8CT pIk1ehGpZAr/CmI/GFyFhZrAfZzAAbbLHynnX5amXjcj/ZreksBp01+HF3NCb3D+ xnYs5aOc7nEhTrwRWdQmRt97d7Vn0AtOpabadXvBCvsVpS/vPwLqofBDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM4vaFH915LjyW1LF17o0Nwkd/qMB8GA1UdIwQY MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEQ+EDKH qPzBnF9zvx5KikQCVe+63mviXnqIWb2TceQr3890au6G6OdmHFX3NtMdGsUpv1Ol YNOlEAhrpWq5OzdfrfDtwAj0UOiic/5WkTIKkgDiovGcMETbRAIxEjU2U5rgvWeP 3cQcNnc+gcBPTjvi2fHNZUGnCM6FKWaYh8D9QU9AwPl996pJJ37m42tsShdDJXuK QLlvLz31dJKKOsUdMZGiT5KyO0jgs6Hv1cMm/e8a5R7+9Lz/z9ONoJB7HHta0s2B tbePq95wopShh0CUec0T6qumcTx2127TRKhum9fr8P/XYv5fcX+lYTOPKqUnCd/v jA7eo1aD2NzwRA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:23:46 2025 by rpki-client