This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json) Hash identifier: p4ZkFNH6ZBmfCfwMnMVKHRfVOoSKQQI6LxAbXcUMx20= Subject key identifier: DC:29:15:AB:76:6C:31:17:F0:BD:B4:D4:EF:4B:7A:5D:6D:DD:E4:89 Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019AF16480801AAD7549FB8D046BE39EF225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: olMsCGe1/KxTT81bGh/knBKHhzo9GZaebu6odq4KS6M=) 2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:80:80:1a:ad:75:49:fb:8d:04:6b:e3:9e:f2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=dc2915ab766c3117f0bdb4d4ef4b7a5d6ddde489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:11:7d:8c:9d:d9:24:23:6a:b1:37:8e:a8: 10:ee:02:35:30:b0:14:0d:50:09:26:71:51:e8:bb: f7:54:23:5b:9b:4e:05:c1:f3:f0:e9:cc:84:67:0b: 86:c5:ca:56:2b:6c:8b:4a:16:8f:0e:c7:13:1e:fe: 99:ce:5f:66:c4:bd:95:d2:64:cb:93:51:3e:c1:35: b6:ba:54:4d:95:34:1a:95:73:ec:35:15:c3:e8:b1: 0a:4d:89:bd:88:aa:61:51:af:8b:51:bb:f0:90:2b: bf:e9:d4:7b:c3:34:87:7e:75:ca:d8:cb:a6:b7:e2: 9b:81:64:89:4e:b1:b9:85:73:20:cd:b0:18:98:19: 26:61:25:61:01:27:28:08:28:3f:4d:b7:df:d1:00: f5:d8:00:06:18:fe:5a:e4:83:df:68:95:40:07:49: 5d:40:06:a5:fe:bc:33:90:97:d7:e9:14:94:62:42: 79:18:99:b4:70:e0:68:2f:81:84:fb:7a:98:3c:00: d1:ec:19:0a:14:85:c1:23:f0:ae:d3:ed:9c:e4:80: 93:05:90:57:df:63:6e:dc:04:be:2a:25:1c:22:74: be:5c:b9:d2:2e:4a:3f:46:e1:e7:6a:ca:9f:ab:a2: 2a:d1:68:24:82:19:50:2e:bc:30:ca:46:31:2c:42: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:29:15:AB:76:6C:31:17:F0:BD:B4:D4:EF:4B:7A:5D:6D:DD:E4:89 X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a9:2e:24:70:ab:cc:d6:03:57:ce:5a:b6:44:0b:6a:37:b4: eb:bd:36:a3:7a:73:d1:54:f6:42:0d:87:48:78:c7:a6:12:fc: 08:0c:4b:2f:f7:3b:4b:e1:2f:2d:4a:78:66:fc:5c:5f:76:2e: d4:8c:30:b2:20:6e:3c:70:42:77:cf:ba:6e:08:ea:88:8e:a7: f3:14:9b:8b:e4:21:d3:fe:08:70:fc:31:b0:05:81:7c:2e:e0: 87:e8:9d:85:4d:a9:5e:aa:8a:0a:65:e0:da:c1:12:b9:7c:de: e1:52:90:f8:02:ba:d7:a1:ae:57:2b:23:0a:43:57:79:a7:e1: 90:1b:3c:cb:ab:5e:ef:36:fb:ee:b9:2b:f5:a3:c8:56:51:28: 5f:a1:21:d9:f0:9d:82:b4:03:fa:03:e1:8c:8e:eb:19:16:a5: 90:07:f2:9e:5f:5f:a3:7b:86:ad:72:eb:c4:59:e6:cf:81:10: c6:6c:b9:dc:ac:b6:04:e3:e3:5d:f3:0c:74:55:5e:b8:4b:d4: a5:f4:8d:28:a3:51:6f:00:3d:e2:a2:08:2e:e9:3a:77:00:13: ac:26:6d:4c:c3:09:cd:bd:dc:5d:36:ce:8e:65:71:d1:7e:6f: 3b:6f:f2:a9:3c:d9:38:e9:de:b1:ec:fc:3a:a5:3f:ff:61:bd: 5f:22:c3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZICAGq11SfuNBGvjnvIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EyhkYzI5MTVhYjc2NmMzMTE3ZjBiZGI0ZDRlZjRiN2E1ZDZkZGRlNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XARfYyd2SQjarE3jqgQ7gI1MLAU DVAJJnFR6Lv3VCNbm04FwfPw6cyEZwuGxcpWK2yLShaPDscTHv6Zzl9mxL2V0mTL k1E+wTW2ulRNlTQalXPsNRXD6LEKTYm9iKphUa+LUbvwkCu/6dR7wzSHfnXK2Mum t+KbgWSJTrG5hXMgzbAYmBkmYSVhAScoCCg/Tbff0QD12AAGGP5a5IPfaJVAB0ld QAal/rwzkJfX6RSUYkJ5GJm0cOBoL4GE+3qYPADR7BkKFIXBI/Cu0+2c5ICTBZBX 32Nu3AS+KiUcInS+XLnSLko/RuHnasqfq6Iq0WgkghlQLrwwykYxLEK+UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwpFat2bDEX8L201O9Lel1t3eSJMB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqkuJHCr zNYDV85atkQLaje06702o3pz0VT2Qg2HSHjHphL8CAxLL/c7S+EvLUp4ZvxcX3Yu 1IwwsiBuPHBCd8+6bgjqiI6n8xSbi+Qh0/4IcPwxsAWBfC7gh+idhU2pXqqKCmXg 2sESuXze4VKQ+AK616GuVysjCkNXeafhkBs8y6te7zb77rkr9aPIVlEoX6Eh2fCd grQD+gPhjI7rGRalkAfynl9fo3uGrXLrxFnmz4EQxmy53Ky2BOPjXfMMdFVeuEvU pfSNKKNRbwA94qIILuk6dwATrCZtTMMJzb3cXTbOjmVx0X5vO2/yqTzZOOnesez8 OqU//2G9XyLDWw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:18 2025 by rpki-client