This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json) Hash identifier: EslQPTL5b+vlm341Jnwz7YmA7JYg6WxuPpIYfcS00GQ= Subject key identifier: 1D:89:20:88:6B:CF:AB:8F:32:1A:DB:3D:66:0D:BC:AE:FE:2F:1E:67 Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Certificate serial: 019AF27709CC7DBDD0989B75C426B9A862F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft Manifest number: 1172 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=) 2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: KqmXLda/Uy9zYiKw03K8YZnOix6+EgSvRP9PZUv8vUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:09:cc:7d:bd:d0:98:9b:75:c4:26:b9:a8:62:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=1d8920886bcfab8f321adb3d660dbcaefe2f1e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:97:bf:4c:cb:8a:22:b2:e5:ed:30:08:2b: 6d:30:18:ff:36:eb:cc:bb:d1:ce:c1:df:dd:1d:a2: b1:00:4d:fc:49:57:39:79:30:73:9a:48:6d:f8:a7: 38:94:1c:71:53:2b:69:a8:8e:40:60:4b:e6:76:d4: f4:34:5d:61:34:48:4f:bb:a5:f3:84:71:f5:0f:8e: 44:e7:96:f5:44:89:b7:63:35:c5:4d:96:7e:be:9a: 39:7a:2a:66:7d:47:20:21:00:3e:b9:f8:6a:1a:ed: 65:b2:26:d6:28:cc:ee:e1:23:e3:50:3c:a2:14:8a: ad:1f:2e:ed:aa:1d:4a:a5:35:41:b6:22:64:26:1a: 64:7d:11:33:c1:18:d5:ae:22:f0:10:a0:1b:8e:51: 91:f6:c0:d9:29:af:85:2e:ab:a1:66:f6:75:ef:13: 85:f1:63:b7:3b:8e:b3:3a:3c:80:30:ea:af:3c:2d: 1a:9b:39:a5:3c:ec:60:07:33:87:2b:04:d5:54:dc: 6b:49:c4:8b:9e:f9:52:2f:8d:a1:fd:ee:ed:69:7f: 62:9e:da:54:a4:ab:48:3a:4b:60:a7:ff:8a:6c:9c: 0d:d7:65:57:7f:53:43:ef:a4:09:85:27:a5:13:e4: 30:92:9c:30:7d:65:16:35:34:66:e3:37:ed:fa:1c: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:20:88:6B:CF:AB:8F:32:1A:DB:3D:66:0D:BC:AE:FE:2F:1E:67 X509v3 Authority Key Identifier: keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:7e:f0:57:05:99:bc:73:5b:35:36:30:55:62:0a:36:13: 4c:7a:14:d5:ee:63:dc:53:48:57:65:bb:a1:9b:55:69:71:0a: f6:05:e4:f5:68:ec:73:ba:f4:fd:ad:0a:85:de:35:49:68:db: c2:db:e3:d3:aa:57:3a:f7:be:af:66:b8:bd:d7:7f:8f:4d:d6: 6f:bc:63:a7:03:7a:f4:98:1b:fb:5a:b2:81:ef:f6:fb:16:4c: b6:f1:a1:c7:aa:78:f2:ca:98:b4:c4:d4:dd:6c:af:49:04:10: 32:33:b3:b9:d5:1d:8c:a6:a9:d6:6a:4e:38:d0:6c:37:85:7c: 2a:a5:a1:f2:4c:cf:bb:39:08:3e:3e:11:83:4a:da:b3:bd:9f: 4e:5c:87:bc:83:5d:f4:8c:fa:63:b4:20:33:49:48:8c:b4:3a: a2:c8:4a:9d:67:b2:92:36:1b:25:db:84:01:9d:8f:fb:b5:9c: 71:14:22:a7:19:c7:26:07:51:e5:0f:a5:aa:3b:78:98:e1:0c: 00:eb:55:e7:8d:de:56:57:04:46:10:6c:78:57:7e:c0:c7:22: c3:33:fe:c9:86:3b:9b:f0:21:19:69:db:d1:5e:59:14:d0:5e: 99:67:83:d9:bd:d8:f4:62:51:94:3d:fa:0f:ae:2c:11:84:43: 0c:6a:02:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwnMfb3QmJt1xCa5qGLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODZjOWY3Y2QxNzNiYmNkMWRiNjFlMGYxYjRlYmUwNWMx YjljYTEwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EygxZDg5MjA4ODZiY2ZhYjhmMzIxYWRiM2Q2NjBkYmNhZWZlMmYxZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuXv0zLiiKy5e0wCCttMBj/NuvM u9HOwd/dHaKxAE38SVc5eTBzmkht+Kc4lBxxUytpqI5AYEvmdtT0NF1hNEhPu6Xz hHH1D45E55b1RIm3YzXFTZZ+vpo5eipmfUcgIQA+ufhqGu1lsibWKMzu4SPjUDyi FIqtHy7tqh1KpTVBtiJkJhpkfREzwRjVriLwEKAbjlGR9sDZKa+FLquhZvZ17xOF 8WO3O46zOjyAMOqvPC0amzmlPOxgBzOHKwTVVNxrScSLnvlSL42h/e7taX9intpU pKtIOktgp/+KbJwN12VXf1ND76QJhSelE+QwkpwwfWUWNTRm4zft+hx+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2JIIhrz6uPMhrbPWYNvK7+Lx5nMB8GA1UdIwQY MBaAFG+GyffNFzu80dth4PG06+BcG5yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMt ZGMwZGM1ZDUxNDFmLzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81YjAzNDItNWU1Mi00YzU2LTgxYjMtZGMwZGM1ZDUxNDFm LzEvYjRiSjk4MFhPN3pSMjJIZzhiVHI0RndibktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR91+8FcF mbxzWzU2MFViCjYTTHoU1e5j3FNIV2W7oZtVaXEK9gXk9Wjsc7r0/a0Khd41SWjb wtvj06pXOve+r2a4vdd/j03Wb7xjpwN69Jgb+1qyge/2+xZMtvGhx6p48sqYtMTU 3WyvSQQQMjOzudUdjKap1mpOONBsN4V8KqWh8kzPuzkIPj4Rg0ras72fTlyHvINd 9Iz6Y7QgM0lIjLQ6oshKnWeykjYbJduEAZ2P+7WccRQipxnHJgdR5Q+lqjt4mOEM AOtV543eVlcERhBseFd+wMciwzP+yYY7m/AhGWnb0V5ZFNBemWeD2b3Y9GJRlD36 D64sEYRDDGoCog== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:19 2025 by rpki-client