This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json) Hash identifier: Xccn2KBXb4yplcsgKJzyBPTjUIarXOJJGNYE869gYW0= Subject key identifier: D5:3A:90:8B:12:A0:05:0A:94:77:78:1C:16:A6:3E:F4:D1:A5:28:6D Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61 Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661 Certificate serial: 019B5975C798DE3905A1B7908A1E7A8DD292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft Manifest number: 01B2 Signing time: Fri 26 Dec 2025 07:00:49 +0000 Manifest this update: Fri 26 Dec 2025 07:00:49 +0000 Manifest next update: Sat 27 Dec 2025 07:00:49 +0000 Files and hashes: 1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=) 2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: 03nrqu1Podl8Uo5QofFcgRUwfMt7EzLWRigIl0rfvFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c7:98:de:39:05:a1:b7:90:8a:1e:7a:8d:d2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661 Validity Not Before: Dec 26 07:00:49 2025 GMT Not After : Dec 27 07:00:49 2025 GMT Subject: CN=d53a908b12a0050a9477781c16a63ef4d1a5286d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:a5:4d:15:f0:47:5f:ec:e2:34:9e:95:93: e2:40:46:aa:ce:c9:f1:0f:56:8f:e6:e4:dc:5b:89: 2b:dd:cd:92:b7:fb:89:69:e8:90:cb:29:63:29:02: 57:ff:3f:51:44:1d:37:1f:a8:5b:be:96:58:02:cc: db:00:91:b6:71:a3:2b:9a:5f:6b:6e:e5:63:68:60: 08:b5:8d:f3:e9:67:f5:c5:22:e6:12:59:65:99:dd: 19:2a:c4:d0:80:24:e7:eb:58:c8:93:90:d2:e3:1f: 97:cc:7b:45:4d:05:18:e3:ca:3c:b8:59:d5:d0:10: ed:90:6b:bb:22:dc:e2:89:39:8d:0a:1f:c3:49:81: cc:d9:d1:17:3f:61:de:32:54:a1:96:a2:c9:5b:0c: f7:69:9c:45:0e:2d:fe:b9:7d:45:b1:0e:f6:c5:c5: 10:93:08:0d:4d:b2:72:a2:b3:ad:f3:a0:dc:a6:4b: 05:52:85:59:e8:76:54:57:dc:79:27:f1:fa:fc:75: 46:18:70:85:5b:1f:a6:19:88:77:da:ef:32:07:d3: ea:7b:06:87:77:d9:27:ac:6e:44:8c:5a:28:90:a6: 70:d0:1d:49:ed:ab:11:3f:c7:48:1a:8a:19:55:eb: f8:bd:70:fc:8d:5a:38:91:c3:72:8c:85:a9:4e:aa: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:90:8B:12:A0:05:0A:94:77:78:1C:16:A6:3E:F4:D1:A5:28:6D X509v3 Authority Key Identifier: keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a6:40:3a:85:0c:01:ff:42:f0:ba:2e:28:d0:cc:3a:46:36: bb:dd:89:aa:3d:1b:a7:56:60:b5:e7:a0:67:8e:5d:80:db:c0: b4:db:6e:be:2c:07:a1:e3:c7:31:7e:48:3b:38:7a:f8:82:ed: 1a:49:77:5a:19:88:25:5d:e7:48:e9:73:85:9c:36:7f:8e:5a: f0:98:df:7c:bc:5b:66:71:be:78:9c:0a:ee:81:8e:4c:d7:16: 3a:d0:af:e8:78:09:83:7a:40:31:c7:f3:5c:99:00:83:6d:1a: 2a:82:6c:f4:f0:67:ab:37:c3:44:3c:e4:e6:e2:d4:cc:f3:ec: 27:03:16:d6:47:58:cc:73:db:b3:c2:75:6d:3d:35:f2:11:fa: 3f:5f:6e:5c:63:3d:d2:6c:a3:50:62:b1:97:0f:db:b6:a3:50: ed:b0:9a:2c:6a:e7:53:1b:98:97:30:8b:8e:52:c5:a2:40:7b: 1b:7f:4c:6d:28:84:ab:ca:68:26:9f:c8:e4:d1:0b:b6:ab:f5: 58:68:fd:70:93:9c:85:d5:3b:d3:c6:af:bc:93:d7:90:63:5b: 64:70:0f:46:87:cc:2b:f4:f4:4a:1f:2b:00:1b:b8:64:90:aa: 46:7c:22:94:b5:51:fa:0b:25:46:52:4a:f1:97:70:e7:b5:47: 77:89:7d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdceY3jkFobeQih56jdKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NDdkMDZkMTRiYTRlMjc4MDk3ZjM1YTgwYzcxNTY4NGNh YzI2NjEwHhcNMjUxMjI2MDcwMDQ5WhcNMjUxMjI3MDcwMDQ5WjAzMTEwLwYDVQQD EyhkNTNhOTA4YjEyYTAwNTBhOTQ3Nzc4MWMxNmE2M2VmNGQxYTUyODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNqlTRXwR1/s4jSelZPiQEaqzsnx D1aP5uTcW4kr3c2St/uJaeiQyyljKQJX/z9RRB03H6hbvpZYAszbAJG2caMrml9r buVjaGAItY3z6Wf1xSLmElllmd0ZKsTQgCTn61jIk5DS4x+XzHtFTQUY48o8uFnV 0BDtkGu7ItziiTmNCh/DSYHM2dEXP2HeMlShlqLJWwz3aZxFDi3+uX1FsQ72xcUQ kwgNTbJyorOt86DcpksFUoVZ6HZUV9x5J/H6/HVGGHCFWx+mGYh32u8yB9PqewaH d9knrG5EjFookKZw0B1J7asRP8dIGooZVev4vXD8jVo4kcNyjIWpTqqVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNU6kIsSoAUKlHd4HBamPvTRpShtMB8GA1UdIwQY MBaAFAdH0G0Uuk4ngJfzWoDHFWhMrCZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEt MGQxY2JmY2QzYmMwLzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEtMGQxY2JmY2QzYmMw LzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKZAOoUM Af9C8LouKNDMOkY2u92Jqj0bp1ZgteegZ45dgNvAtNtuviwHoePHMX5IOzh6+ILt Gkl3WhmIJV3nSOlzhZw2f45a8JjffLxbZnG+eJwK7oGOTNcWOtCv6HgJg3pAMcfz XJkAg20aKoJs9PBnqzfDRDzk5uLUzPPsJwMW1kdYzHPbs8J1bT018hH6P19uXGM9 0myjUGKxlw/btqNQ7bCaLGrnUxuYlzCLjlLFokB7G39MbSiEq8poJp/I5NELtqv1 WGj9cJOchdU708avvJPXkGNbZHAPRofMK/T0Sh8rABu4ZJCqRnwilLVR+gslRlJK 8Zdw57VHd4l9nA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:17 2025 by rpki-client