This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json) Hash identifier: BZAb5hiBnUnyq06LcuoSv+bzrLfMpt9+uS87gBQwE3I= Subject key identifier: 02:35:F7:5C:BA:E0:74:43:AF:53:81:17:EC:39:0F:3E:C8:B7:C5:3A Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Certificate serial: 019B2098E5B9757CF3F767471D2DD6E71FE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft Manifest number: 05D0 Signing time: Mon 15 Dec 2025 06:00:49 +0000 Manifest this update: Mon 15 Dec 2025 06:00:49 +0000 Manifest next update: Tue 16 Dec 2025 06:00:49 +0000 Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=) 2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: xG3KkZUJqB71r8bTBMhgheJk1Jm1tSjwXmriOZB4Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:e5:b9:75:7c:f3:f7:67:47:1d:2d:d6:e7:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Validity Not Before: Dec 15 06:00:49 2025 GMT Not After : Dec 16 06:00:49 2025 GMT Subject: CN=0235f75cbae07443af538117ec390f3ec8b7c53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:00:46:f2:e8:b8:de:fd:d3:34:f2:29:8a: ca:11:68:4c:aa:0e:ea:84:b3:c4:7d:9a:27:02:42: 18:bf:02:72:b0:13:06:17:be:d2:f2:c5:86:36:72: 3c:b9:9d:8a:1c:e1:05:cb:dc:5f:9c:aa:53:7d:f4: e8:1a:74:c0:db:86:2b:4f:da:e4:3f:a0:8e:5f:7b: b0:58:04:40:91:3b:12:83:14:de:18:82:72:a3:77: 66:b1:e3:83:05:77:77:26:58:4e:ab:78:f4:80:2f: 9a:c2:46:2d:63:bc:e7:26:c3:3c:3c:54:fb:45:89: 10:7f:97:64:df:0c:69:22:a9:89:6f:37:9d:bf:ce: 94:d1:ea:48:80:43:c5:82:ff:38:2c:ab:62:be:09: 8b:a2:7d:5c:74:63:ed:3a:d8:ce:12:b7:20:56:75: f8:1d:4e:f8:79:7f:72:7d:38:c8:86:aa:aa:9f:32: 95:73:79:96:ad:b9:55:7d:9e:ec:f0:d1:2e:93:45: 64:9f:eb:1f:17:6b:22:13:17:d2:56:df:d6:e8:04: e8:82:fa:05:0f:8f:22:61:85:8d:61:ba:33:ed:17: 72:05:9c:e1:c2:06:ef:ba:e9:14:46:ae:32:f4:66: c4:d1:d1:ee:69:d7:c9:7b:38:66:af:2d:a6:fe:32: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:35:F7:5C:BA:E0:74:43:AF:53:81:17:EC:39:0F:3E:C8:B7:C5:3A X509v3 Authority Key Identifier: keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:be:10:0d:b4:d1:70:a1:85:28:e2:8f:19:ac:31:77:ea:89: 5f:c0:f4:6f:06:2d:b5:ec:0a:b1:e9:04:e9:28:8d:76:0b:6c: 7c:dc:5b:eb:b5:b4:0e:47:1c:16:bc:c2:66:49:9f:55:d7:0a: f8:58:8f:f5:c6:c3:56:aa:dd:f4:8e:e2:e1:e0:71:14:6c:78: 64:5b:3d:b3:78:0b:8f:37:fb:6b:47:3d:94:dc:fd:e8:93:52: 26:09:b0:67:8f:be:70:78:50:56:65:88:bb:05:6e:28:9d:28: 83:86:7c:0a:04:a4:de:d8:84:a9:a2:b5:84:27:44:99:5b:01: cc:1c:01:c7:15:15:c6:4e:15:8a:d9:d1:82:bd:03:69:dd:01: 0c:77:fc:de:f0:b7:42:5f:78:d2:7b:f7:1a:75:62:55:b1:f7: 37:be:2f:23:57:2f:5b:b3:75:f1:e4:68:4d:cb:5b:54:c7:35: d2:d1:a9:e8:54:90:8b:e9:6d:c1:88:05:21:78:d2:cf:6c:8d: 4c:b9:6d:38:bc:7f:1a:49:e5:75:a1:f7:0a:ee:c4:8d:4b:55: 9d:67:b7:c7:2e:43:99:24:f4:fa:8a:85:9c:c0:70:38:c2:b5: 6b:bc:7c:74:af:29:c9:d2:4a:b4:2d:e0:44:66:93:20:ca:3c: 8f:ed:c0:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmOW5dXzz92dHHS3W5x/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2 YzExN2UwHhcNMjUxMjE1MDYwMDQ5WhcNMjUxMjE2MDYwMDQ5WjAzMTEwLwYDVQQD EygwMjM1Zjc1Y2JhZTA3NDQzYWY1MzgxMTdlYzM5MGYzZWM4YjdjNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuocARvLouN790zTyKYrKEWhMqg7q hLPEfZonAkIYvwJysBMGF77S8sWGNnI8uZ2KHOEFy9xfnKpTffToGnTA24YrT9rk P6COX3uwWARAkTsSgxTeGIJyo3dmseODBXd3JlhOq3j0gC+awkYtY7znJsM8PFT7 RYkQf5dk3wxpIqmJbzedv86U0epIgEPFgv84LKtivgmLon1cdGPtOtjOErcgVnX4 HU74eX9yfTjIhqqqnzKVc3mWrblVfZ7s8NEuk0Vkn+sfF2siExfSVt/W6ATogvoF D48iYYWNYboz7RdyBZzhwgbvuukURq4y9GbE0dHuadfJezhmry2m/jIpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI191y64HRDr1OBF+w5Dz7It8U6MB8GA1UdIwQY MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH74QDbTR cKGFKOKPGawxd+qJX8D0bwYttewKsekE6SiNdgtsfNxb67W0DkccFrzCZkmfVdcK +FiP9cbDVqrd9I7i4eBxFGx4ZFs9s3gLjzf7a0c9lNz96JNSJgmwZ4++cHhQVmWI uwVuKJ0og4Z8CgSk3tiEqaK1hCdEmVsBzBwBxxUVxk4VitnRgr0Dad0BDHf83vC3 Ql940nv3GnViVbH3N74vI1cvW7N18eRoTctbVMc10tGp6FSQi+ltwYgFIXjSz2yN TLltOLx/GknldaH3Cu7EjUtVnWe3xy5DmST0+oqFnMBwOMK1a7x8dK8pydJKtC3g RGaTIMo8j+3AMw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:52 2025 by rpki-client