This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json) Hash identifier: fCYwQcKmX/Kk3gRK6Ba9Ig0j9nUcwECzWLYisV/1i6k= Subject key identifier: 76:0F:DC:7A:6B:6B:06:FA:BA:CF:FC:47:13:9C:4C:36:8C:96:BC:8E Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36 Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36 Certificate serial: 019AF68A405D30261B5567AFB5F3E3FCB752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft Manifest number: 1262 Signing time: Sun 07 Dec 2025 02:00:46 +0000 Manifest this update: Sun 07 Dec 2025 02:00:46 +0000 Manifest next update: Mon 08 Dec 2025 02:00:46 +0000 Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: FPn15Mb0KXquvCZtDlwqjbUANXXkcHLoFqodtxMnW8s=) 2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:40:5d:30:26:1b:55:67:af:b5:f3:e3:fc:b7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36 Validity Not Before: Dec 7 02:00:46 2025 GMT Not After : Dec 8 02:00:46 2025 GMT Subject: CN=760fdc7a6b6b06fabacffc47139c4c368c96bc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:d2:62:76:8a:6a:7a:f2:ba:32:2f:36:b3: 6d:1b:4d:60:c0:6f:47:2b:a0:45:23:4c:f7:39:68: a5:1f:b5:45:e7:f9:bd:12:11:80:04:63:c0:5e:cd: b0:42:ee:38:c4:30:50:44:32:e5:c8:6f:cd:57:86: 55:76:91:32:ca:81:62:d2:b7:0e:20:0a:08:1f:db: e8:6a:5b:95:2f:a0:e7:c2:35:dd:a5:87:e1:8f:b0: 0d:de:57:1f:08:bc:6b:93:54:ce:46:24:00:40:06: d0:6e:7f:35:bc:36:ef:6a:45:6f:b9:f9:f8:b5:a2: fc:37:44:fc:a5:bb:6d:c9:c2:f6:5c:c5:80:29:b6: 28:60:b3:63:46:ca:1a:7a:81:88:72:1f:2a:d9:e6: 9a:fe:48:62:e4:bc:08:9a:6b:5f:b3:c8:7b:a5:da: 9c:79:b8:37:80:ed:a2:6c:f1:93:b6:63:39:7a:e4: 3a:27:bb:e9:a0:5e:f0:55:12:95:26:17:ff:3c:b0: 0c:da:0d:17:b1:ae:ee:4c:40:cc:ac:cd:da:6e:fd: 73:a1:9b:89:6c:5a:1e:d1:13:3e:e5:3a:ef:2a:88: 74:6d:09:8c:88:0d:94:da:44:95:1a:80:cc:9a:65: 59:ff:c8:55:06:d4:33:4a:ca:7e:e5:01:0e:63:86: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:DC:7A:6B:6B:06:FA:BA:CF:FC:47:13:9C:4C:36:8C:96:BC:8E X509v3 Authority Key Identifier: keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:51:22:d2:d2:94:e6:45:b6:4a:aa:01:8e:4e:90:e4:3c:81: 17:3f:b8:98:e5:2b:5e:b9:f2:c5:fd:b8:15:30:aa:05:c9:70: 5e:33:5e:e4:0b:c8:5c:8b:b2:cb:bf:88:b9:75:16:01:0d:80: 19:a5:22:e6:e0:9c:be:7e:c8:8f:a4:0d:14:a9:24:3d:af:a4: 3a:30:42:0e:a5:43:0e:0e:2c:3b:2c:e0:d0:f6:b9:27:1c:16: 38:f9:a9:1b:66:67:d0:1f:68:7e:32:58:23:6a:93:21:e8:74: 2d:67:c9:f7:1c:17:c9:f3:88:bb:68:dd:69:6c:8d:64:92:b2: 3d:8c:7a:7f:ea:87:8b:6a:b5:23:97:ba:ce:c7:d6:8b:07:72: b4:04:dc:6b:c0:25:91:a1:58:5d:11:f2:99:cf:28:8d:ab:c6: 3a:70:eb:4b:99:a9:27:c2:83:bb:63:43:8d:d2:f9:c0:d1:ae: ca:9b:6e:61:87:f6:c0:c3:08:9d:9d:4b:07:1f:76:b6:be:4e: d1:9a:ed:8c:03:a9:e6:cd:85:7e:b6:12:e6:d1:e1:49:33:34: 2a:1a:4e:1d:f7:1c:22:b0:d1:74:9c:5c:bc:b9:1e:50:69:e1: 42:4c:ec:d4:4a:2a:a4:64:5c:63:90:8e:eb:64:f1:3e:08:66: f9:8f:fe:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ikBdMCYbVWevtfPj/LdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ODFlZTg2OWQyZTFjMjAwZmY4YzY5N2UyZDM3ZWFhNDI5 NDBhMzYwHhcNMjUxMjA3MDIwMDQ2WhcNMjUxMjA4MDIwMDQ2WjAzMTEwLwYDVQQD Eyg3NjBmZGM3YTZiNmIwNmZhYmFjZmZjNDcxMzljNGMzNjhjOTZiYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AvSYnaKanryujIvNrNtG01gwG9H K6BFI0z3OWilH7VF5/m9EhGABGPAXs2wQu44xDBQRDLlyG/NV4ZVdpEyyoFi0rcO IAoIH9voaluVL6DnwjXdpYfhj7AN3lcfCLxrk1TORiQAQAbQbn81vDbvakVvufn4 taL8N0T8pbttycL2XMWAKbYoYLNjRsoaeoGIch8q2eaa/khi5LwImmtfs8h7pdqc ebg3gO2ibPGTtmM5euQ6J7vpoF7wVRKVJhf/PLAM2g0Xsa7uTEDMrM3abv1zoZuJ bFoe0RM+5TrvKoh0bQmMiA2U2kSVGoDMmmVZ/8hVBtQzSsp+5QEOY4ZLgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYP3Hprawb6us/8RxOcTDaMlryOMB8GA1UdIwQY MBaAFAeB7oadLhwgD/jGl+LTfqpClAo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYt M2U3NTA1MWI4ZWFjLzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYtM2U3NTA1MWI4ZWFj LzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFEi0tKU 5kW2SqoBjk6Q5DyBFz+4mOUrXrnyxf24FTCqBclwXjNe5AvIXIuyy7+IuXUWAQ2A GaUi5uCcvn7Ij6QNFKkkPa+kOjBCDqVDDg4sOyzg0Pa5JxwWOPmpG2Zn0B9ofjJY I2qTIeh0LWfJ9xwXyfOIu2jdaWyNZJKyPYx6f+qHi2q1I5e6zsfWiwdytATca8Al kaFYXRHymc8ojavGOnDrS5mpJ8KDu2NDjdL5wNGuyptuYYf2wMMInZ1LBx92tr5O 0ZrtjAOp5s2FfrYS5tHhSTM0KhpOHfccIrDRdJxcvLkeUGnhQkzs1EoqpGRcY5CO 62TxPghm+Y/+og== -----END CERTIFICATE-----Generated at Sun Dec 7 06:19:02 2025 by rpki-client