This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json) Hash identifier: N6wjLtzfFhpSvZAxnrLGqW5J7OKpFWK9bfGm5z4KEQA= Subject key identifier: C2:F1:EB:B3:B4:3A:74:DE:32:4F:96:37:DD:ED:B3:19:06:1A:1A:23 Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d Certificate serial: 4459FD0042F43EE1BBF8D4267FA073E5C0B79784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft Manifest number: 0B Signing time: Fri 26 Dec 2025 07:12:56 +0000 Manifest this update: Fri 26 Dec 2025 07:07:56 +0000 Manifest next update: Sat 27 Dec 2025 07:25:56 +0000 Files and hashes: 1: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: wzmES0vtV9cg+CJsyK4YFKmKs/IfSCwq4+vSPGQKWu8=) 2: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:59:fd:00:42:f4:3e:e1:bb:f8:d4:26:7f:a0:73:e5:c0:b7:97:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d Validity Not Before: Dec 26 07:07:56 2025 GMT Not After : Dec 27 07:25:56 2025 GMT Subject: CN=C2F1EBB3B43A74DE324F9637DDEDB319061A1A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:ad:bf:87:4d:d7:15:52:77:77:27:1f:34: b0:d2:c2:6c:dc:53:0c:ab:b2:33:86:91:34:2b:e7: 16:cb:87:e5:fa:fc:6d:af:53:d5:4a:5a:7c:f3:5c: 34:81:b9:cf:4b:d5:62:d4:76:22:50:9d:fa:9a:e4: 25:9a:1a:dc:41:cc:f8:5c:c1:97:74:67:ed:79:36: 40:d0:17:5f:fc:c1:69:cc:7e:8e:b1:c3:09:4c:ea: ac:a5:0b:48:b4:e7:7f:d6:2d:4c:f9:48:34:5f:3d: 71:bf:c2:62:10:43:ee:df:31:78:fa:68:27:1f:d4: 1e:06:e9:93:6c:d6:9c:13:18:1c:19:73:aa:2d:9c: 51:d5:1b:a7:6e:ee:46:04:0b:ea:a0:a8:bd:68:f7: 8a:d8:fe:62:28:8b:11:31:a5:f5:1f:fc:06:81:0f: bd:6f:52:fd:22:42:b4:26:af:d1:fe:3a:88:f9:c8: 37:4f:6b:35:36:31:6c:db:83:bf:59:8c:4c:80:dd: e8:4b:01:33:51:9b:4f:78:54:3e:37:fa:71:e3:1d: 74:b6:6e:c8:c2:b0:2d:e2:cf:5c:78:c3:56:68:c1: aa:07:e6:5c:65:4a:cc:4b:f9:d5:4b:10:50:12:95: d8:46:47:89:c4:6d:a5:b8:16:d3:83:fc:4e:96:4c: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F1:EB:B3:B4:3A:74:DE:32:4F:96:37:DD:ED:B3:19:06:1A:1A:23 X509v3 Authority Key Identifier: keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c0:9c:cf:2e:1b:cb:97:dc:70:0e:da:0d:fa:99:d2:17:0f: 46:03:cf:d6:da:82:24:2d:d3:a9:38:b5:21:0e:83:db:34:4b: 48:69:4a:ff:47:16:14:7e:5c:7d:62:93:f0:93:ea:87:c9:fc: c8:e5:d3:65:46:a0:3f:d3:b5:34:a9:4a:42:a5:cd:f5:db:96: 0a:b2:23:9b:39:56:08:5d:43:a1:8f:89:2e:8c:05:2a:95:59: f1:74:20:90:3b:18:8d:2e:0c:73:44:b8:d8:a4:60:56:ee:7f: 7d:bf:61:65:50:82:6f:a5:51:5d:46:3e:8e:f0:3e:24:20:13: 58:40:b7:76:f4:39:cc:e6:a6:bc:88:07:ea:34:50:d0:74:63: 10:c3:10:d2:5e:1f:88:5a:b6:e5:5e:3c:39:c4:d7:82:61:3e: f7:e2:70:81:cd:39:b7:48:72:aa:1c:52:84:8b:24:bf:4c:2f: 98:f5:1f:c1:f6:28:f5:93:0d:e9:12:33:0e:bd:11:38:68:7e: 94:ea:14:98:f6:cd:70:9a:ad:63:87:48:21:52:ca:dc:8a:bc: f9:73:b2:6f:76:ef:fa:37:cf:91:60:69:4e:32:e3:e9:51:00: c9:1a:67:27:cd:41:f6:d0:93:6f:d3:5c:b5:db:16:95:4d:a3: 93:17:3a:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURFn9AEL0PuG7+NQmf6Bz5cC3l4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3 ZWZhZDY2ZDAeFw0yNTEyMjYwNzA3NTZaFw0yNTEyMjcwNzI1NTZaMDMxMTAvBgNV BAMTKEMyRjFFQkIzQjQzQTc0REUzMjRGOTYzN0RERURCMzE5MDYxQTFBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQK2/h03XFVJ3dycfNLDSwmzc UwyrsjOGkTQr5xbLh+X6/G2vU9VKWnzzXDSBuc9L1WLUdiJQnfqa5CWaGtxBzPhc wZd0Z+15NkDQF1/8wWnMfo6xwwlM6qylC0i053/WLUz5SDRfPXG/wmIQQ+7fMXj6 aCcf1B4G6ZNs1pwTGBwZc6otnFHVG6du7kYEC+qgqL1o94rY/mIoixExpfUf/AaB D71vUv0iQrQmr9H+Ooj5yDdPazU2MWzbg79ZjEyA3ehLATNRm094VD43+nHjHXS2 bsjCsC3iz1x4w1ZowaoH5lxlSsxL+dVLEFASldhGR4nEbaW4FtOD/E6WTM7fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwvHrs7Q6dN4yT5Y33e2zGQYaGiMwHwYDVR0j BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3 NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05 NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcCczy4by5fccA7aDfqZ 0hcPRgPP1tqCJC3TqTi1IQ6D2zRLSGlK/0cWFH5cfWKT8JPqh8n8yOXTZUagP9O1 NKlKQqXN9duWCrIjmzlWCF1DoY+JLowFKpVZ8XQgkDsYjS4Mc0S42KRgVu5/fb9h ZVCCb6VRXUY+jvA+JCATWEC3dvQ5zOamvIgH6jRQ0HRjEMMQ0l4fiFq25V48OcTX gmE+9+Jwgc05t0hyqhxShIskv0wvmPUfwfYo9ZMN6RIzDr0ROGh+lOoUmPbNcJqt Y4dIIVLK3Iq8+XOyb3bv+jfPkWBpTjLj6VEAyRpnJ81B9tCTb9NctdsWlU2jkxc6 PQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client