This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json) Hash identifier: WcUGzq30x2/OFqxVamNkLEfEE/KunqTk/OBOA3csTb0= Subject key identifier: 84:C6:89:C5:0A:29:14:4F:38:A8:41:24:99:DD:B5:57:9A:DD:9B:39 Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019B30798AC9CBCD5C767CE1C4811775F1C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 08:00:30 +0000 Manifest this update: Thu 18 Dec 2025 08:00:30 +0000 Manifest next update: Fri 19 Dec 2025 08:00:30 +0000 Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: ri71Dm3SZxEkCzqe1SfnPdUUS4t9qnRjJTqf/W7/RJo=) 2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:8a:c9:cb:cd:5c:76:7c:e1:c4:81:17:75:f1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Dec 18 08:00:30 2025 GMT Not After : Dec 19 08:00:30 2025 GMT Subject: CN=84c689c50a29144f38a8412499ddb5579add9b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:ef:03:67:05:19:d2:71:de:11:9a:9d:40: f5:21:d5:64:2c:40:e0:31:71:20:98:31:28:22:24: fc:4f:32:33:27:66:9c:ae:ee:b7:dd:30:1e:63:bb: d3:b3:bf:98:91:2c:d0:3f:08:c8:35:6d:7e:d9:1d: 8e:e7:0c:b9:5d:69:4f:7b:72:f6:a4:b8:f5:7d:fb: 92:01:27:1d:5b:e5:e8:94:7d:ac:ba:04:d3:9d:ee: 21:63:f4:30:ca:70:86:01:c9:4a:7b:b7:26:bf:42: c7:93:2a:8d:a5:50:40:64:c7:01:35:88:20:57:f3: 9c:d5:30:e5:c1:14:e7:16:7c:36:79:fb:92:80:f4: 01:63:0a:f9:20:60:6b:f9:22:8a:09:e5:5f:00:e0: 59:e9:7d:cb:af:d0:30:8e:9f:cb:5c:d9:86:c4:04: b3:23:61:31:72:17:01:a0:46:72:72:d6:4b:a4:fc: f5:1b:c5:55:69:a7:04:ed:38:f7:06:38:88:b1:b1: cc:f0:5d:10:ef:cd:d8:de:54:3f:d9:00:2d:c3:c4: fa:7d:0f:10:21:91:d1:13:af:b3:9e:6d:67:6f:3d: f9:6d:d9:6b:7e:8b:98:8a:4e:6e:93:98:f9:cf:d4: d7:b5:0c:d5:f8:f3:6c:c4:b3:1a:a3:34:8d:95:a3: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:89:C5:0A:29:14:4F:38:A8:41:24:99:DD:B5:57:9A:DD:9B:39 X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1d:d8:3b:80:fc:a1:fc:f3:10:62:d4:01:0c:97:48:2a:bd: ce:ce:2b:b5:5d:fe:4c:c5:b5:00:fa:72:41:97:f8:b0:f3:c6: 44:11:2c:68:ae:ab:95:25:1e:55:c8:b8:54:51:f2:c7:91:19: 14:8c:58:a4:a8:72:80:2e:ff:94:ef:7d:63:17:b7:4c:e7:f9: a1:bd:90:7b:d9:9e:4b:65:58:8d:9c:f1:3f:4f:c3:60:fd:b7: 6a:64:b1:a7:48:8e:77:a9:1c:cb:6c:4e:b2:04:00:fa:c4:3a: 31:14:b6:6e:8e:05:57:7b:57:76:f2:d7:5d:78:15:32:69:69: 10:d0:f8:2d:80:d4:86:49:a7:9f:d7:3e:04:b7:3d:2b:95:96: c7:cd:f4:7a:72:63:03:f4:eb:52:0b:c6:49:d1:4c:65:14:d6: 4a:ed:23:91:95:e4:99:9a:d7:07:7c:6b:5b:28:15:d4:c1:df: d8:a6:a0:51:bd:14:17:86:43:a3:dd:0d:56:01:2d:7d:27:84: bd:44:e9:84:77:4a:68:c3:8e:8f:9c:2a:a0:83:6d:c7:ed:e1: d8:2e:39:01:f2:2f:02:0c:fa:68:ed:a8:28:7d:42:fb:b7:ba: 7d:d7:16:5c:65:48:97:5c:b4:e1:35:80:17:f3:a5:cc:08:a8: 96:10:41:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweYrJy81cdnzhxIEXdfHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjUxMjE4MDgwMDMwWhcNMjUxMjE5MDgwMDMwWjAzMTEwLwYDVQQD Eyg4NGM2ODljNTBhMjkxNDRmMzhhODQxMjQ5OWRkYjU1NzlhZGQ5YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2PvA2cFGdJx3hGanUD1IdVkLEDg MXEgmDEoIiT8TzIzJ2acru633TAeY7vTs7+YkSzQPwjINW1+2R2O5wy5XWlPe3L2 pLj1ffuSAScdW+XolH2sugTTne4hY/QwynCGAclKe7cmv0LHkyqNpVBAZMcBNYgg V/Oc1TDlwRTnFnw2efuSgPQBYwr5IGBr+SKKCeVfAOBZ6X3Lr9Awjp/LXNmGxASz I2ExchcBoEZyctZLpPz1G8VVaacE7Tj3BjiIsbHM8F0Q783Y3lQ/2QAtw8T6fQ8Q IZHRE6+znm1nbz35bdlrfouYik5uk5j5z9TXtQzV+PNsxLMaozSNlaMxPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITGicUKKRRPOKhBJJndtVea3Zs5MB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoB3YO4D8 ofzzEGLUAQyXSCq9zs4rtV3+TMW1APpyQZf4sPPGRBEsaK6rlSUeVci4VFHyx5EZ FIxYpKhygC7/lO99Yxe3TOf5ob2Qe9meS2VYjZzxP0/DYP23amSxp0iOd6kcy2xO sgQA+sQ6MRS2bo4FV3tXdvLXXXgVMmlpEND4LYDUhkmnn9c+BLc9K5WWx830enJj A/TrUgvGSdFMZRTWSu0jkZXkmZrXB3xrWygV1MHf2KagUb0UF4ZDo90NVgEtfSeE vUTphHdKaMOOj5wqoINtx+3h2C45AfIvAgz6aO2oKH1C+7e6fdcWXGVIl1y04TWA F/OlzAiolhBBRA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:51:40 2025 by rpki-client