This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json) Hash identifier: G/VDRgQ3XwAnT4o5ntKZWbn5gDKuuukr66dq+shL6DA= Subject key identifier: 35:AD:3C:92:29:8D:D8:30:BC:1D:E0:AA:F1:F8:FA:A9:DC:BF:76:0C Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b Certificate serial: 019AF50A8044744FFD58A26408B852872306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft Manifest number: 0AA7 Signing time: Sat 06 Dec 2025 19:01:37 +0000 Manifest this update: Sat 06 Dec 2025 19:01:37 +0000 Manifest next update: Sun 07 Dec 2025 19:01:37 +0000 Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: LkM30oM1mcgAA1lQ5ZpZ4tJxypOArrMw2xSDzQzVo50=) 2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=) 3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:80:44:74:4f:fd:58:a2:64:08:b8:52:87:23:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b Validity Not Before: Dec 6 19:01:37 2025 GMT Not After : Dec 7 19:01:37 2025 GMT Subject: CN=35ad3c92298dd830bc1de0aaf1f8faa9dcbf760c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:2f:87:ab:cf:88:7a:d9:84:9a:ed:21:cd: e9:58:fb:eb:84:36:59:fe:70:68:1f:33:f5:1a:29: b4:7f:84:d4:84:43:ab:00:9c:38:48:28:05:e5:53: c5:99:3b:53:00:4e:92:02:2e:f9:ca:cd:14:e3:e8: 1b:ae:63:cf:f4:31:de:8b:d8:60:7e:0f:a8:ae:97: 1d:92:89:18:af:9f:f6:75:b1:ac:e5:af:f0:1a:b8: dd:27:70:ab:03:8a:a0:7d:07:29:e3:85:53:13:c1: b1:16:54:cb:8a:ee:00:d0:82:00:b8:c2:37:97:47: cc:d2:06:33:1e:9a:d7:ad:20:a7:c7:93:5c:bb:69: dc:dd:bf:2d:90:08:fd:8c:08:d3:76:da:c7:61:8f: 0a:12:b8:c7:84:3e:2a:f7:d6:39:b4:c3:ad:5a:34: e3:38:31:6c:2f:9b:a1:69:23:76:bf:ce:1d:dc:fc: 9b:54:b6:06:69:1f:aa:80:cd:9a:fd:4a:2d:71:ad: 1c:0c:01:0d:41:ee:27:ef:00:dc:e6:fc:7e:e0:34: 50:83:e9:12:42:74:23:17:a2:b7:cf:ac:93:84:2a: 56:3d:80:3e:54:12:9a:04:58:64:84:29:45:0c:98: cd:10:b5:cf:04:fe:03:1c:be:05:9c:9d:8e:88:92: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AD:3C:92:29:8D:D8:30:BC:1D:E0:AA:F1:F8:FA:A9:DC:BF:76:0C X509v3 Authority Key Identifier: keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:37:a5:37:27:bb:2d:e6:e3:bb:f3:4f:88:06:20:f6:14:7f: 74:68:e5:04:16:6a:4a:cd:f5:69:6e:64:3b:57:57:d2:a7:0e: 0c:e7:b7:e1:48:c7:18:3c:2e:6a:08:f1:5d:3b:cb:69:1a:54: 06:be:85:d9:ed:ff:39:0c:ba:b7:c4:45:2e:e4:07:9d:d1:4b: 24:27:a2:62:5c:36:18:5c:17:b6:5c:39:88:d6:f6:71:06:b8: e6:c6:57:52:6c:4a:27:18:c5:0c:6f:d3:e1:0d:5d:91:8b:42: d4:53:c6:7f:e4:5a:c0:fd:08:28:48:9a:99:cb:7c:52:03:6e: 49:55:bf:56:34:a9:8b:b0:9b:87:3e:c8:67:15:1c:b6:91:b5: a1:b5:46:7b:4d:e6:dc:39:41:d7:6c:ba:ed:8d:40:a8:52:9f: 92:38:28:b7:92:3f:fc:fb:c2:63:fc:b0:cb:2e:d6:51:ca:d5: 6b:1b:d2:b1:83:18:83:03:dd:0f:e0:aa:c6:07:38:b8:ba:09: 1e:ab:28:5b:c5:ea:55:ff:70:4a:25:b0:12:d4:4c:3e:c6:6e: c5:b5:77:46:6a:5f:49:77:61:8d:e3:ca:e5:13:3e:f0:37:3d: 22:34:40:06:12:e6:cf:6b:a3:cf:6a:74:a6:43:6d:15:23:9b: 97:4d:d9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CoBEdE/9WKJkCLhShyMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj YjRmMmIwHhcNMjUxMjA2MTkwMTM3WhcNMjUxMjA3MTkwMTM3WjAzMTEwLwYDVQQD EygzNWFkM2M5MjI5OGRkODMwYmMxZGUwYWFmMWY4ZmFhOWRjYmY3NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OEvh6vPiHrZhJrtIc3pWPvrhDZZ /nBoHzP1Gim0f4TUhEOrAJw4SCgF5VPFmTtTAE6SAi75ys0U4+gbrmPP9DHei9hg fg+orpcdkokYr5/2dbGs5a/wGrjdJ3CrA4qgfQcp44VTE8GxFlTLiu4A0IIAuMI3 l0fM0gYzHprXrSCnx5Ncu2nc3b8tkAj9jAjTdtrHYY8KErjHhD4q99Y5tMOtWjTj ODFsL5uhaSN2v84d3PybVLYGaR+qgM2a/Uotca0cDAENQe4n7wDc5vx+4DRQg+kS QnQjF6K3z6yThCpWPYA+VBKaBFhkhClFDJjNELXPBP4DHL4FnJ2OiJKeBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWtPJIpjdgwvB3gqvH4+qncv3YMMB8GA1UdIwQY MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3 LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDelNye7 Lebju/NPiAYg9hR/dGjlBBZqSs31aW5kO1dX0qcODOe34UjHGDwuagjxXTvLaRpU Br6F2e3/OQy6t8RFLuQHndFLJCeiYlw2GFwXtlw5iNb2cQa45sZXUmxKJxjFDG/T 4Q1dkYtC1FPGf+RawP0IKEiamct8UgNuSVW/VjSpi7Cbhz7IZxUctpG1obVGe03m 3DlB12y67Y1AqFKfkjgot5I//PvCY/ywyy7WUcrVaxvSsYMYgwPdD+Cqxgc4uLoJ HqsoW8XqVf9wSiWwEtRMPsZuxbV3RmpfSXdhjePK5RM+8Dc9IjRABhLmz2ujz2p0 pkNtFSObl03ZmA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:50 2025 by rpki-client