This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json) Hash identifier: kwDP3tNd6xraZ1uCVS620NmGlz+6GnCbSC/YmtxFg/g= Subject key identifier: 26:14:4B:37:A7:42:66:3D:40:95:D8:E5:B9:02:8C:EB:72:EA:56:62 Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019AF2AD727955068072693B0F1D4ED797F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: +htUVfA/YUjvvu0LHdNfHpbXT9+Lh6susdJITr+/bXU=) 2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:72:79:55:06:80:72:69:3b:0f:1d:4e:d7:97:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=26144b37a742663d4095d8e5b9028ceb72ea5662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:a9:3f:aa:91:88:74:5e:04:7e:52:ea:7b: 4c:d3:5f:20:ee:17:19:94:17:2f:72:81:96:c6:af: cf:f7:4a:9c:71:ce:17:f2:c1:7e:c8:6c:3c:4e:e8: ab:8f:99:b0:8a:2e:d4:95:ed:3e:90:4f:90:47:4a: 7d:3b:04:a7:23:9f:3c:de:1d:99:b1:b2:27:5f:4e: e7:4a:ab:59:96:59:58:77:eb:ec:d7:d1:60:84:fd: 76:bf:ef:d4:59:7b:54:d3:75:a5:4f:48:3e:74:a6: 41:60:fa:40:18:8b:9e:a4:4c:8e:dd:5b:92:4a:0c: 82:a1:9a:f8:50:b4:98:ca:e0:35:ba:25:89:57:5d: 26:4f:36:fe:9a:70:c4:ea:5a:ba:b8:fd:5a:27:35: 9f:bd:d4:cb:dc:df:aa:02:52:35:be:d3:a5:ec:73: 43:6f:33:af:5d:e3:85:54:88:50:cb:cf:e4:45:f3: 70:8c:8e:1a:04:56:d5:fc:3f:4b:c8:6c:8f:e6:8e: e9:d6:94:f6:b1:24:59:5a:36:17:61:91:70:d1:6b: 80:54:13:5b:42:e5:3a:5f:85:0c:e2:86:18:78:38: 0b:f2:66:7c:92:ae:9a:84:fd:2d:9e:51:2e:7f:75: cc:b3:42:1b:ac:6e:6c:b0:90:8b:b2:f8:c5:fe:97: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:4B:37:A7:42:66:3D:40:95:D8:E5:B9:02:8C:EB:72:EA:56:62 X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:25:2d:9c:be:a4:52:55:6e:21:bd:84:e2:c9:6b:8b:49:69: 11:3c:4c:2f:34:5f:df:f4:47:de:a1:ec:4b:ae:46:0d:36:5e: e3:89:f4:c2:e8:92:63:b0:20:a9:be:96:93:d3:8d:51:46:80: 89:c8:75:07:eb:99:e3:ee:4d:11:13:d5:c3:df:47:8e:b3:85: 1d:8d:dc:60:1e:a6:a2:26:36:c4:ed:38:08:53:fe:c0:6d:64: 35:ba:fd:b0:54:1b:cf:2d:d9:3e:9e:fc:74:2c:a0:bc:3d:76: fc:49:f1:70:f6:9c:d9:bb:7d:d6:6c:37:47:d0:1a:d8:33:01: 9b:7b:4b:d1:00:42:20:e2:15:41:80:4f:52:c8:58:e9:75:9f: b2:10:fa:6c:a9:ea:fa:c7:d9:af:2b:7d:89:e0:1a:d1:93:e0: 5c:77:82:a1:9a:75:9e:2d:7b:cc:80:75:73:65:27:72:70:79: fe:c5:d5:a2:4c:94:29:57:8a:16:60:64:f2:d5:a6:6c:bf:5f: 42:d1:4a:f1:62:90:65:00:eb:24:b8:fb:ca:9e:c6:06:0a:a6: 49:75:15:1e:37:6c:9e:9e:1e:4c:8a:c4:18:02:17:b2:43:f0: 53:d4:b6:1c:17:23:d0:d3:ab:fc:d0:a4:fd:9c:52:d3:93:a4: 72:d4:69:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXJ5VQaAcmk7Dx1O15f3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EygyNjE0NGIzN2E3NDI2NjNkNDA5NWQ4ZTViOTAyOGNlYjcyZWE1NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34apP6qRiHReBH5S6ntM018g7hcZ lBcvcoGWxq/P90qccc4X8sF+yGw8Tuirj5mwii7Ule0+kE+QR0p9OwSnI5883h2Z sbInX07nSqtZlllYd+vs19FghP12v+/UWXtU03WlT0g+dKZBYPpAGIuepEyO3VuS SgyCoZr4ULSYyuA1uiWJV10mTzb+mnDE6lq6uP1aJzWfvdTL3N+qAlI1vtOl7HND bzOvXeOFVIhQy8/kRfNwjI4aBFbV/D9LyGyP5o7p1pT2sSRZWjYXYZFw0WuAVBNb QuU6X4UM4oYYeDgL8mZ8kq6ahP0tnlEuf3XMs0IbrG5ssJCLsvjF/pfcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYUSzenQmY9QJXY5bkCjOty6lZiMB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSUtnL6k UlVuIb2E4slri0lpETxMLzRf3/RH3qHsS65GDTZe44n0wuiSY7Agqb6Wk9ONUUaA ich1B+uZ4+5NERPVw99HjrOFHY3cYB6moiY2xO04CFP+wG1kNbr9sFQbzy3ZPp78 dCygvD12/EnxcPac2bt91mw3R9Aa2DMBm3tL0QBCIOIVQYBPUshY6XWfshD6bKnq +sfZryt9ieAa0ZPgXHeCoZp1ni17zIB1c2UncnB5/sXVokyUKVeKFmBk8tWmbL9f QtFK8WKQZQDrJLj7yp7GBgqmSXUVHjdsnp4eTIrEGAIXskPwU9S2HBcj0NOr/NCk /ZxS05OkctRp8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:52 2025 by rpki-client