This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft File: pB6cBojcQS_Ce8DiQtcDmp34yGg.mft (raw, json) Hash identifier: X0HeT2fUabxplILgDPJEG2j9Mm4K7SAP3v6BUTGmbHU= Subject key identifier: 89:74:32:7B:F0:B7:E9:60:24:6B:B3:9E:6C:6D:FF:DF:3A:EE:57:61 Authority key identifier: A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68 Certificate issuer: /CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868 Certificate serial: 019B597596268586BE75E5BE5BF47C167BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft Manifest number: 0130 Signing time: Fri 26 Dec 2025 07:00:36 +0000 Manifest this update: Fri 26 Dec 2025 07:00:36 +0000 Manifest next update: Sat 27 Dec 2025 07:00:36 +0000 Files and hashes: 1: pB6cBojcQS_Ce8DiQtcDmp34yGg.crl (hash: /thMY1oYpwueqXzHBTekrAQhNwqEIdqIyCsG6QcHMxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:96:26:85:86:be:75:e5:be:5b:f4:7c:16:7b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868 Validity Not Before: Dec 26 07:00:36 2025 GMT Not After : Dec 27 07:00:36 2025 GMT Subject: CN=8974327bf0b7e960246bb39e6c6dffdf3aee5761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:c7:6d:1d:57:ca:c9:dd:c8:53:57:57:03: 07:6b:69:05:8b:ef:ef:3b:ff:cd:19:2f:66:12:91: 29:2b:d4:73:79:f2:01:37:1e:cd:96:7e:77:7b:b0: 33:c4:1b:b5:e5:a8:0b:55:b5:43:72:9b:ae:7e:b9: f0:21:56:62:8a:22:46:b2:99:5b:8b:2a:b8:b2:b5: b2:d7:ca:7d:e0:2a:85:30:b3:d2:99:00:92:c2:7d: e3:f0:3e:b1:71:2d:46:9d:b2:1d:74:72:ab:12:2f: 6a:e9:7f:b4:96:b5:44:e2:69:49:c2:b4:4b:b9:db: 2a:f3:cf:10:10:6b:75:72:ae:6b:2a:ee:43:e6:01: 7d:02:79:ec:fe:59:84:11:eb:76:bb:e1:a8:b0:2d: de:33:37:70:a2:5f:b0:c9:3e:b8:cd:16:8e:7d:55: 3e:74:46:22:ab:d9:36:e7:2e:cf:d1:57:21:9c:65: 7e:a2:92:7a:68:c7:e0:3a:e9:92:35:e9:9d:a8:91: a7:94:9a:eb:6d:fd:48:ab:b6:11:7a:a5:e7:44:44: 68:cf:b3:d9:a1:f2:74:a5:bb:2b:55:74:87:91:f2: 43:df:cc:6c:9b:97:d0:a3:4d:e3:95:06:49:77:f8: d1:27:a3:c6:37:20:48:00:3e:90:e5:49:8d:5d:11: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:32:7B:F0:B7:E9:60:24:6B:B3:9E:6C:6D:FF:DF:3A:EE:57:61 X509v3 Authority Key Identifier: keyid:A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:11:12:b1:fe:d9:c3:6e:bb:21:54:dd:87:b4:a9:6d:c6: b6:2e:1f:2b:e8:a1:55:90:c2:8a:d9:a6:48:83:de:7f:2d:bd: 28:9f:95:00:60:6b:59:59:09:f2:7e:81:6d:fd:71:7e:b9:18: dd:8f:52:13:4c:f4:d6:e0:e1:37:ac:e7:fc:00:ad:d3:d5:05: 89:13:5a:3b:94:98:9c:80:bf:7c:c3:4b:83:67:8c:6c:12:81: 92:8b:91:26:88:76:8b:f9:8c:16:af:53:44:30:5b:33:b9:83: f4:8b:fe:7d:1a:20:1e:f2:a8:ed:ab:8f:d6:b4:e3:e9:61:65: ce:8e:53:b3:36:16:18:12:c0:12:43:2d:6a:3d:6e:2c:8d:97: d0:33:c1:4b:b1:e0:c0:9c:6c:36:0e:f1:d5:80:f5:75:15:33: 58:d7:fe:cc:34:7d:4d:9d:42:2b:ea:cf:15:1c:71:42:15:ae: b6:a7:43:ce:7b:53:53:69:0c:dd:bd:01:f1:18:5a:06:b3:4a: 04:a7:82:a3:d0:3b:0c:38:a5:70:45:79:a4:db:a8:71:b9:eb: 33:60:61:e8:5e:75:81:16:08:fa:32:82:ba:ff:bd:08:57:c3: c7:ff:77:e3:37:57:b4:d9:77:bc:21:42:01:a1:54:23:7b:24: a5:41:16:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZYmhYa+deW+W/R8FnumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWU5YzA2ODhkYzQxMmZjMjdiYzBlMjQyZDcwMzlhOWRm OGM4NjgwHhcNMjUxMjI2MDcwMDM2WhcNMjUxMjI3MDcwMDM2WjAzMTEwLwYDVQQD Eyg4OTc0MzI3YmYwYjdlOTYwMjQ2YmIzOWU2YzZkZmZkZjNhZWU1NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtvHbR1XysndyFNXVwMHa2kFi+/v O//NGS9mEpEpK9RzefIBNx7Nln53e7AzxBu15agLVbVDcpuufrnwIVZiiiJGsplb iyq4srWy18p94CqFMLPSmQCSwn3j8D6xcS1GnbIddHKrEi9q6X+0lrVE4mlJwrRL udsq888QEGt1cq5rKu5D5gF9Anns/lmEEet2u+GosC3eMzdwol+wyT64zRaOfVU+ dEYiq9k25y7P0VchnGV+opJ6aMfgOumSNemdqJGnlJrrbf1Iq7YReqXnRERoz7PZ ofJ0pbsrVXSHkfJD38xsm5fQo03jlQZJd/jRJ6PGNyBIAD6Q5UmNXRGcUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl0Mnvwt+lgJGuznmxt/9867ldhMB8GA1UdIwQY MBaAFKQenAaI3EEvwnvA4kLXA5qd+MhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYmIyZTQtOGM4MC00Yjg5LTgzOGYt M2QxMzZmM2E3OGQ3LzEvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wYmIyZTQtOGM4MC00Yjg5LTgzOGYtM2QxMzZmM2E3OGQ3 LzEvcEI2Y0JvamNRU19DZThEaVF0Y0RtcDM0eUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1sRErH+ 2cNuuyFU3Ye0qW3Gti4fK+ihVZDCitmmSIPefy29KJ+VAGBrWVkJ8n6Bbf1xfrkY 3Y9SE0z01uDhN6zn/ACt09UFiRNaO5SYnIC/fMNLg2eMbBKBkouRJoh2i/mMFq9T RDBbM7mD9Iv+fRogHvKo7auP1rTj6WFlzo5TszYWGBLAEkMtaj1uLI2X0DPBS7Hg wJxsNg7x1YD1dRUzWNf+zDR9TZ1CK+rPFRxxQhWutqdDzntTU2kM3b0B8RhaBrNK BKeCo9A7DDilcEV5pNuocbnrM2Bh6F51gRYI+jKCuv+9CFfDx/934zdXtNl3vCFC AaFUI3skpUEW3w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:36 2025 by rpki-client