This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json) Hash identifier: VZiMCv6ZPtVkZaSgSWKbbYv5OfGnr2JiNYNEGPBkvDA= Subject key identifier: 0A:B1:84:21:FD:24:13:81:A6:ED:FE:BD:B1:B2:16:81:55:57:14:12 Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Certificate serial: 019AF2767F6E975165982CB2EBD2463CC283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: FsBNz9TUIXayW+H6wmTzoG7qVLB9gyDtCTGW/Cw93QI=) 2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:6e:97:51:65:98:2c:b2:eb:d2:46:3c:c2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=0ab18421fd241381a6edfebdb1b2168155571412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:b8:3c:7f:a2:65:db:d2:0e:98:8b:d4:76: 57:f6:0a:23:13:6b:2d:87:cc:f7:60:6e:82:6c:6c: a7:52:9a:aa:8c:07:cf:c7:4a:31:7f:f0:de:96:e2: a4:85:6f:10:53:7b:02:82:bc:37:73:b7:11:7a:58: c7:f8:01:d0:32:3b:0c:6c:9f:89:3b:89:ff:51:74: 01:10:9f:fb:d2:6f:9f:3d:ee:c1:05:01:ea:e9:75: 27:c5:26:28:ad:db:e0:33:e2:42:2f:02:7d:9f:b1: 32:c5:79:ea:dc:6e:8e:db:26:1b:37:8a:19:cf:b1: 40:dd:3c:65:18:26:c3:22:05:81:50:1c:08:78:99: 36:ae:55:7a:17:0f:f3:41:5f:71:85:7f:92:0d:e9: be:b4:16:48:cc:cb:b7:7b:3d:b3:f0:bf:a5:0c:3d: 2a:74:df:3c:cd:0e:4c:ea:0a:82:2e:32:af:e0:ce: 0b:e1:fb:25:08:b1:2c:f7:9f:51:dd:9f:d0:8e:e6: 04:fc:18:ef:b3:27:51:d3:bd:61:f6:c9:25:61:b6: 64:19:cd:30:85:b4:a6:ea:49:a4:1e:68:4b:ae:52: b2:5a:de:a5:d1:fc:d9:cf:a7:a1:c2:2e:46:d7:d7: 74:7a:bd:46:31:62:71:b9:c1:29:d7:41:c5:98:aa: d5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:84:21:FD:24:13:81:A6:ED:FE:BD:B1:B2:16:81:55:57:14:12 X509v3 Authority Key Identifier: keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2e:dc:a0:60:a5:17:5b:c0:af:b1:ce:02:4a:e4:ab:8d:74: dc:47:ae:37:b7:cf:02:a1:e4:59:1f:c4:14:49:50:ee:da:b0: 6f:ee:7b:7b:4e:a2:2a:0e:30:02:bc:83:eb:ac:8b:1b:cf:16: 94:03:ed:ec:5f:5f:4d:61:fc:8e:c4:87:52:91:b8:c1:55:00: fb:da:ad:09:8a:57:22:87:8d:2b:50:1f:15:84:66:58:36:93: 4d:57:a7:f0:cb:99:b7:9e:93:8d:84:72:c9:b2:02:01:fa:27: 83:5b:55:4b:06:ce:13:59:dd:26:7c:a2:42:e1:81:4e:9f:1f: e5:34:5e:2e:b7:41:0f:57:c7:92:1f:2c:c1:82:fa:ce:a5:54: 9a:0a:c2:00:e8:09:87:dc:cf:c9:75:74:9a:e4:22:e6:47:1f: e7:ce:af:1d:f0:1d:f4:8d:c7:6e:67:e2:e5:6c:b8:cd:49:9f: be:b2:16:6a:0f:9e:5d:53:fa:5a:2e:65:e8:96:f6:df:fe:2c: f8:54:35:c9:58:af:18:4c:5c:d5:10:13:07:61:3e:da:5e:b5: 29:7a:79:65:be:a0:1f:12:c4:e2:a1:93:b1:34:16:c5:cd:1a: ff:9d:52:e1:03:f8:56:23:09:2d:9c:cd:74:c8:b8:73:bb:18: f7:f4:32:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn9ul1FlmCyy69JGPMKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk ODFhYTAwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EygwYWIxODQyMWZkMjQxMzgxYTZlZGZlYmRiMWIyMTY4MTU1NTcxNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qC4PH+iZdvSDpiL1HZX9gojE2st h8z3YG6CbGynUpqqjAfPx0oxf/DeluKkhW8QU3sCgrw3c7cReljH+AHQMjsMbJ+J O4n/UXQBEJ/70m+fPe7BBQHq6XUnxSYordvgM+JCLwJ9n7EyxXnq3G6O2yYbN4oZ z7FA3TxlGCbDIgWBUBwIeJk2rlV6Fw/zQV9xhX+SDem+tBZIzMu3ez2z8L+lDD0q dN88zQ5M6gqCLjKv4M4L4fslCLEs959R3Z/QjuYE/BjvsydR071h9sklYbZkGc0w hbSm6kmkHmhLrlKyWt6l0fzZz6ehwi5G19d0er1GMWJxucEp10HFmKrVMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqxhCH9JBOBpu3+vbGyFoFVVxQSMB8GA1UdIwQY MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS7coGCl F1vAr7HOAkrkq4103EeuN7fPAqHkWR/EFElQ7tqwb+57e06iKg4wAryD66yLG88W lAPt7F9fTWH8jsSHUpG4wVUA+9qtCYpXIoeNK1AfFYRmWDaTTVen8MuZt56TjYRy ybICAfong1tVSwbOE1ndJnyiQuGBTp8f5TReLrdBD1fHkh8swYL6zqVUmgrCAOgJ h9zPyXV0muQi5kcf586vHfAd9I3Hbmfi5Wy4zUmfvrIWag+eXVP6Wi5l6Jb23/4s +FQ1yVivGExc1RATB2E+2l61KXp5Zb6gHxLE4qGTsTQWxc0a/51S4QP4ViMJLZzN dMi4c7sY9/QyUA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:46 2025 by rpki-client