This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json) Hash identifier: 5tWR9kkyKbQs5zsvbSNn4teVe6RovKC94Es0VdDwbNA= Subject key identifier: 67:0A:99:FA:8F:15:FE:B8:C8:38:CC:73:D2:94:14:D0:59:2A:53:56 Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Certificate serial: 019B4D7162D1BF49169BC25AF1A5DB598555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 23:00:35 +0000 Manifest this update: Tue 23 Dec 2025 23:00:35 +0000 Manifest next update: Wed 24 Dec 2025 23:00:35 +0000 Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=) 2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: tLFFWfUJevRmHFOJL1E4oJkRHtwCtb8Jwwrog09S92A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:62:d1:bf:49:16:9b:c2:5a:f1:a5:db:59:85:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b Validity Not Before: Dec 23 23:00:35 2025 GMT Not After : Dec 24 23:00:35 2025 GMT Subject: CN=670a99fa8f15feb8c838cc73d29414d0592a5356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:1a:8a:87:0d:01:34:56:78:56:0a:49:02: 2c:bb:b4:47:8e:17:b8:17:c8:b4:a3:c7:62:99:f6: 48:12:4d:17:57:fc:bd:51:97:a1:06:e0:1e:29:98: ee:7c:e4:9a:50:81:96:46:ef:e6:6e:4d:a6:f4:d6: 91:1b:61:d5:1a:bb:b0:b0:a0:be:21:3f:2a:9c:36: 82:be:e8:4f:bf:a8:0f:ea:dd:c3:0c:a1:f3:09:54: c2:32:40:f3:ec:eb:24:b8:7c:5f:09:a6:eb:89:02: 81:73:5e:ef:60:b9:21:a4:6d:e4:14:f0:27:87:83: 30:47:ad:0e:55:65:04:44:c4:15:fb:a7:f3:d6:25: cb:25:d7:90:f2:29:62:2a:bd:d9:a8:03:96:fd:2c: ac:f7:a1:73:52:08:72:d3:ab:c9:85:43:e9:5a:3f: c3:84:83:52:a5:7c:45:9a:b9:2b:4b:86:d1:e6:dc: 58:96:8f:fa:51:44:69:72:2a:44:93:c5:e6:f0:a0: 80:c3:0a:cd:53:01:c1:58:64:4d:89:e5:d0:c6:dc: 75:a6:5d:e3:d6:1d:49:3c:0d:4a:b6:6f:9b:c1:38: 50:86:38:55:03:ef:54:57:a9:db:91:ff:1e:67:21: 2d:22:7d:7d:37:9a:8a:8c:65:00:71:a3:0c:9d:9f: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:99:FA:8F:15:FE:B8:C8:38:CC:73:D2:94:14:D0:59:2A:53:56 X509v3 Authority Key Identifier: keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f7:4d:e0:8d:cd:8f:dd:4a:9b:4e:a3:d0:51:48:54:73:cc: 25:bb:31:0b:bd:58:59:8a:99:a7:70:4a:be:35:62:1d:b6:94: 48:6c:93:b7:48:01:c2:a2:70:1b:9e:aa:c0:4e:aa:75:d8:75: c2:f8:c9:17:4c:f0:14:70:1f:70:9b:3b:44:73:10:f4:42:1c: 2a:ed:9e:9e:7b:78:c9:3c:98:af:f8:c2:ba:36:55:c0:dc:7a: fd:9f:1c:e9:72:be:9f:12:6f:78:e5:64:ae:7f:cc:19:9d:3a: 22:ce:47:e7:4f:59:ea:b0:cd:f4:76:f3:db:2a:40:00:89:2b: c9:52:0f:b5:54:26:24:ad:e6:ed:30:14:7b:4f:f2:83:ae:97: 98:f1:84:b0:b6:c2:ed:1a:8a:2e:6e:74:1f:15:c0:8f:6f:30: a1:a5:aa:79:be:51:01:54:72:63:5d:94:51:48:3a:af:eb:e2: 47:92:f5:43:07:74:47:55:1a:a6:e3:a3:b9:5e:a5:ec:01:6c: cc:88:30:e5:68:eb:4d:f9:50:93:36:16:1c:d4:d5:74:92:39: a8:2b:01:6b:78:65:24:79:4e:7f:90:fe:c3:e9:8e:cb:59:e5: 0b:19:fc:98:f1:50:1b:ad:e2:84:02:b6:e4:cc:7b:83:6e:25: 77:b7:29:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcWLRv0kWm8Ja8aXbWYVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNjViMmZhOGJiYWQ2NTAxYzdkMjFlZjQ3NWRjNDQ1NDEz ZmIyOGIwHhcNMjUxMjIzMjMwMDM1WhcNMjUxMjI0MjMwMDM1WjAzMTEwLwYDVQQD Eyg2NzBhOTlmYThmMTVmZWI4YzgzOGNjNzNkMjk0MTRkMDU5MmE1MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkcaiocNATRWeFYKSQIsu7RHjhe4 F8i0o8dimfZIEk0XV/y9UZehBuAeKZjufOSaUIGWRu/mbk2m9NaRG2HVGruwsKC+ IT8qnDaCvuhPv6gP6t3DDKHzCVTCMkDz7OskuHxfCabriQKBc17vYLkhpG3kFPAn h4MwR60OVWUERMQV+6fz1iXLJdeQ8iliKr3ZqAOW/Sys96FzUghy06vJhUPpWj/D hINSpXxFmrkrS4bR5txYlo/6UURpcipEk8Xm8KCAwwrNUwHBWGRNieXQxtx1pl3j 1h1JPA1Ktm+bwThQhjhVA+9UV6nbkf8eZyEtIn19N5qKjGUAcaMMnZ+75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcKmfqPFf64yDjMc9KUFNBZKlNWMB8GA1UdIwQY MBaAFG9lsvqLutZQHH0h70ddxEVBP7KLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMt N2Y2NzQ0MmY5ZjMyLzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNjgxYmMtZTI3OC00NmM1LWIxZTMtN2Y2NzQ0MmY5ZjMy LzEvYjJXeS1vdTYxbEFjZlNIdlIxM0VSVUVfc29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvdN4I3N j91Km06j0FFIVHPMJbsxC71YWYqZp3BKvjViHbaUSGyTt0gBwqJwG56qwE6qddh1 wvjJF0zwFHAfcJs7RHMQ9EIcKu2ennt4yTyYr/jCujZVwNx6/Z8c6XK+nxJveOVk rn/MGZ06Is5H509Z6rDN9Hbz2ypAAIkryVIPtVQmJK3m7TAUe0/yg66XmPGEsLbC 7RqKLm50HxXAj28woaWqeb5RAVRyY12UUUg6r+viR5L1Qwd0R1UapuOjuV6l7AFs zIgw5WjrTflQkzYWHNTVdJI5qCsBa3hlJHlOf5D+w+mOy1nlCxn8mPFQG63ihAK2 5Mx7g24ld7cpSQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:17:32 2025 by rpki-client