This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json) Hash identifier: i3hpaByVJ0MP7wDUZ5Ij1opbpGQVN0Ibf7s4oUbWDAA= Subject key identifier: 3E:F3:77:99:9B:C7:C1:53:0A:CF:89:83:FA:4C:8C:2D:D6:24:B2:39 Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Certificate serial: 019AF2ADBC37E0E4C843C00B38C41F701284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: 3v4XT_Zkb0JR6zbO2RFLVtIvqcM.roa (hash: aLhicbgV4nIT1UVqMuVw+q4GdC1H71gXhIrWh3frlJs=) 2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: PYp1anPJ97cAHWxWjhZPXtNkGxLrnWmWDBCv7/7YGi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bc:37:e0:e4:c8:43:c0:0b:38:c4:1f:70:12:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=3ef377999bc7c1530acf8983fa4c8c2dd624b239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:e7:56:ee:24:7e:18:53:1d:4a:04:c0:e0: 87:38:ca:f3:28:a4:52:9d:1f:ac:10:1a:43:61:55: 3c:96:02:8e:0c:c6:fe:cc:bf:2a:89:38:6d:81:5d: 16:5e:c6:73:28:87:65:a8:b5:5e:76:a9:e9:ab:49: a7:d4:16:1b:39:7b:c4:3c:3e:4a:52:f5:d3:62:d7: 2d:32:fc:f8:75:e6:1d:9c:b5:9e:fd:6a:32:ac:5b: 4f:ff:03:a6:86:56:37:a2:43:b8:a4:02:1d:49:f5: 22:81:b5:2c:c2:39:22:23:c0:e8:a2:49:1f:9d:69: 25:7c:66:d7:77:08:2e:ea:d5:bc:b7:26:e0:04:14: 9d:fc:fc:78:08:4a:62:4d:cf:60:67:2a:77:91:a5: 3c:98:86:ea:af:b6:27:97:19:2a:ff:e0:cb:a5:8e: da:99:9d:7a:ed:20:a2:8e:1f:28:b9:45:7b:38:b0: 8c:ca:ac:64:ee:a6:e1:2e:ac:5a:60:54:bb:5c:9c: a2:9d:4f:69:57:83:47:f8:64:28:16:ee:94:89:2f: eb:18:72:23:ab:92:f5:f0:d7:12:69:e4:a2:cf:be: 67:10:49:e6:08:8d:16:1b:bd:1f:60:14:82:ed:64: 79:0e:ae:0b:db:92:b6:bb:9d:27:94:4d:be:91:69: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:77:99:9B:C7:C1:53:0A:CF:89:83:FA:4C:8C:2D:D6:24:B2:39 X509v3 Authority Key Identifier: keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fe:ea:e6:fd:4b:be:90:5f:7e:ab:cd:3c:17:3d:6e:5c:65: 94:3d:b5:9d:4c:02:ec:0d:a6:c3:12:b9:cb:5b:9e:f0:aa:06: 86:7e:ca:48:fe:84:0e:09:cc:5d:05:2f:28:a8:14:ae:ff:d3: c8:f0:26:ac:10:87:d8:45:e0:ff:63:08:26:a0:e2:a7:1d:27: 1c:28:41:c2:18:e5:da:d2:0d:55:3d:66:8f:63:82:54:38:c0: f0:af:76:65:2d:5b:72:c7:8d:e9:77:9c:f1:53:cb:f7:e4:fb: af:96:ca:8a:37:e0:46:a7:f3:95:53:31:1e:e8:c2:6d:0e:0b: c0:32:84:69:e6:10:b3:7d:45:9a:eb:d6:6e:91:1e:10:5c:83: 53:3d:95:6d:15:1d:2b:c9:ab:4e:43:d7:aa:85:a6:51:f1:ff: a7:87:36:d6:27:9f:40:ba:cd:a1:57:98:64:a1:50:50:ad:fb: a6:5f:19:19:87:4e:eb:80:40:31:22:30:3e:e6:81:0d:af:b9: cc:6a:43:43:ea:28:bf:a3:e6:a6:8b:00:59:bc:e5:c8:62:18: 8a:b5:70:b8:ab:15:5d:9b:e1:e2:ab:d3:06:5d:a2:41:e6:7b: f8:16:b2:27:34:29:12:44:3c:10:9b:3a:bb:e6:3d:75:5f:2d: f9:f3:e3:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbw34OTIQ8ALOMQfcBKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1 ZDJkOGEwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EygzZWYzNzc5OTliYzdjMTUzMGFjZjg5ODNmYTRjOGMyZGQ2MjRiMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr7nVu4kfhhTHUoEwOCHOMrzKKRS nR+sEBpDYVU8lgKODMb+zL8qiThtgV0WXsZzKIdlqLVedqnpq0mn1BYbOXvEPD5K UvXTYtctMvz4deYdnLWe/WoyrFtP/wOmhlY3okO4pAIdSfUigbUswjkiI8Dookkf nWklfGbXdwgu6tW8tybgBBSd/Px4CEpiTc9gZyp3kaU8mIbqr7Ynlxkq/+DLpY7a mZ167SCijh8ouUV7OLCMyqxk7qbhLqxaYFS7XJyinU9pV4NH+GQoFu6UiS/rGHIj q5L18NcSaeSiz75nEEnmCI0WG70fYBSC7WR5Dq4L25K2u50nlE2+kWmvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7zd5mbx8FTCs+Jg/pMjC3WJLI5MB8GA1UdIwQY MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2 LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf7q5v1L vpBffqvNPBc9blxllD21nUwC7A2mwxK5y1ue8KoGhn7KSP6EDgnMXQUvKKgUrv/T yPAmrBCH2EXg/2MIJqDipx0nHChBwhjl2tINVT1mj2OCVDjA8K92ZS1bcseN6Xec 8VPL9+T7r5bKijfgRqfzlVMxHujCbQ4LwDKEaeYQs31FmuvWbpEeEFyDUz2VbRUd K8mrTkPXqoWmUfH/p4c21iefQLrNoVeYZKFQUK37pl8ZGYdO64BAMSIwPuaBDa+5 zGpDQ+oov6PmposAWbzlyGIYirVwuKsVXZvh4qvTBl2iQeZ7+BayJzQpEkQ8EJs6 u+Y9dV8t+fPjKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:40 2025 by rpki-client