This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json) Hash identifier: xtFZufTbk0Zzjr1omt0fPzbZjQl8bLWeJem1wwdDyiY= Subject key identifier: C3:B9:43:29:59:F7:2B:9D:2B:42:38:82:3E:60:F1:32:DF:88:E7:D3 Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Certificate serial: 019B2BC1B67FA0CD54FAC45AA41562D55062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft Manifest number: 1656 Signing time: Wed 17 Dec 2025 10:01:14 +0000 Manifest this update: Wed 17 Dec 2025 10:01:14 +0000 Manifest next update: Thu 18 Dec 2025 10:01:14 +0000 Files and hashes: 1: 1-uN15WooRn1ILKR5q1XNAneYJkk.roa (hash: ceG95NNBWipckiQC0zFJWFVKiWVKgIWhdLvt9vkMIUA=) 2: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 4GiAek34Sn+ZEweHD1dkLayMtL/Q1nsRM8x0tD03oTg=) 3: rNO8o619Q5SFsmTVHI_QY1wyUDE.roa (hash: Hb7rXVkAK9PEfMPmQwPGTYXFwRIopAaJ4bo+hnJHqKU=) 4: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:b6:7f:a0:cd:54:fa:c4:5a:a4:15:62:d5:50:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Validity Not Before: Dec 17 10:01:14 2025 GMT Not After : Dec 18 10:01:14 2025 GMT Subject: CN=c3b9432959f72b9d2b4238823e60f132df88e7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:f3:9f:1d:60:00:9d:9c:b7:12:8f:09:54: 9b:ea:ab:76:67:80:df:a1:58:47:72:3c:bd:68:55: 0a:b3:a3:a5:1f:98:cb:54:72:0e:0c:33:60:5c:24: 34:9a:96:7c:7f:b9:40:a9:6d:5d:6e:7b:6e:c6:b0: 9a:e2:e3:39:70:81:00:06:98:3b:e9:20:f7:66:a3: d5:38:fd:54:9c:86:50:3f:e9:f9:44:32:f3:b5:98: 16:63:9c:f8:7d:b6:7a:54:bb:07:1b:5b:ad:e3:55: 0a:e4:eb:0a:f2:1e:0e:60:1c:36:bf:3b:81:eb:69: f2:9a:ea:d4:55:ef:a8:9b:1a:08:79:f9:64:7c:7f: 02:c9:2f:42:29:7e:59:c6:f8:cb:47:4c:4c:2d:1d: 4c:00:78:16:4e:5c:f4:03:07:a3:27:64:ca:54:dc: be:0d:dc:88:77:c0:9c:82:c6:1d:04:23:a9:bb:40: 7d:67:fa:be:05:5b:e8:ca:4b:43:bf:de:18:27:5e: ee:ef:f6:2b:68:f3:c4:f0:97:ec:6e:ca:ec:f1:55: 8a:b2:81:9c:cb:c0:80:40:e1:a2:b1:48:9c:e5:8a: 37:cd:f6:bf:de:97:7f:dd:aa:45:b1:23:df:34:80: 72:8d:eb:14:e7:8f:b0:39:59:45:f2:0a:d1:92:e6: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B9:43:29:59:F7:2B:9D:2B:42:38:82:3E:60:F1:32:DF:88:E7:D3 X509v3 Authority Key Identifier: keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:af:82:58:62:fb:05:f8:dc:7a:08:33:2f:f5:ca:fb:aa:06: 37:dc:6b:7a:0e:cf:50:56:66:5b:6b:6e:b3:ef:fa:f4:1a:28: 6d:b2:14:17:92:e3:97:65:0e:65:47:9e:e7:aa:dd:f4:8e:2f: 1e:35:80:0f:a6:93:16:35:f1:e7:ac:c3:e2:ed:ac:6e:ac:e9: f4:3e:cb:88:c1:0d:08:65:d8:76:1b:f9:9d:10:11:e7:27:0d: d3:e0:08:f2:df:1b:42:e7:da:f6:e1:88:c4:ac:ea:40:69:af: f5:c2:73:8c:2b:2d:34:28:d1:4e:15:80:02:36:5f:6e:44:01: 9b:0b:93:69:6d:64:ce:c4:22:9f:e2:b3:72:0b:ee:52:a0:5b: 45:27:66:f7:06:57:17:4f:81:c5:28:9d:37:ef:65:6d:51:e2: e1:70:a2:3f:97:dd:8f:a6:b3:8f:db:47:07:6f:76:f1:27:d4: 36:e5:5f:0d:90:24:4b:9a:33:6f:3d:9c:38:c8:ce:54:ff:87: 8d:4a:d9:04:c6:dc:14:c1:93:8a:01:de:32:b8:65:ae:f9:eb: 4b:0a:f5:22:ff:1d:8a:3e:b9:1d:2e:a6:db:e4:f6:95:ae:8a: 2c:69:41:19:7d:24:1b:92:a1:15:8e:46:21:c8:b2:6d:b5:0f: 9b:ca:cc:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwbZ/oM1U+sRapBVi1VBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk NDIxNWUwHhcNMjUxMjE3MTAwMTE0WhcNMjUxMjE4MTAwMTE0WjAzMTEwLwYDVQQD EyhjM2I5NDMyOTU5ZjcyYjlkMmI0MjM4ODIzZTYwZjEzMmRmODhlN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkTznx1gAJ2ctxKPCVSb6qt2Z4Df oVhHcjy9aFUKs6OlH5jLVHIODDNgXCQ0mpZ8f7lAqW1dbntuxrCa4uM5cIEABpg7 6SD3ZqPVOP1UnIZQP+n5RDLztZgWY5z4fbZ6VLsHG1ut41UK5OsK8h4OYBw2vzuB 62nymurUVe+omxoIeflkfH8CyS9CKX5ZxvjLR0xMLR1MAHgWTlz0AwejJ2TKVNy+ DdyId8CcgsYdBCOpu0B9Z/q+BVvoyktDv94YJ17u7/YraPPE8Jfsbsrs8VWKsoGc y8CAQOGisUic5Yo3zfa/3pd/3apFsSPfNIByjesU54+wOVlF8grRkuZprQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO5QylZ9yudK0I4gj5g8TLfiOfTMB8GA1UdIwQY MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3 LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK+CWGL7 BfjceggzL/XK+6oGN9xreg7PUFZmW2tus+/69BoobbIUF5Ljl2UOZUee56rd9I4v HjWAD6aTFjXx56zD4u2sbqzp9D7LiMENCGXYdhv5nRAR5ycN0+AI8t8bQufa9uGI xKzqQGmv9cJzjCstNCjRThWAAjZfbkQBmwuTaW1kzsQin+KzcgvuUqBbRSdm9wZX F0+BxSidN+9lbVHi4XCiP5fdj6azj9tHB2928SfUNuVfDZAkS5ozbz2cOMjOVP+H jUrZBMbcFMGTigHeMrhlrvnrSwr1Iv8dij65HS6m2+T2la6KLGlBGX0kG5KhFY5G IciybbUPm8rMBA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:51:46 2025 by rpki-client