This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json) Hash identifier: 1+/HsxKm0wVGRyFwUi51oRI3X0lFapez1BlqEh92XUY= Subject key identifier: 84:70:7C:19:0C:33:22:1B:AA:DD:C4:5D:DF:2C:9A:F2:C5:60:1D:43 Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Certificate serial: 019AF5775FBB10C6314443DF007302CB0ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft Manifest number: 083A Signing time: Sat 06 Dec 2025 21:00:32 +0000 Manifest this update: Sat 06 Dec 2025 21:00:32 +0000 Manifest next update: Sun 07 Dec 2025 21:00:32 +0000 Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: KlHXFmVBjf8nP3UEnSdNfVSpCmYOE41vMUqTsG0HsjU=) 2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:5f:bb:10:c6:31:44:43:df:00:73:02:cb:0e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Validity Not Before: Dec 6 21:00:32 2025 GMT Not After : Dec 7 21:00:32 2025 GMT Subject: CN=84707c190c33221baaddc45ddf2c9af2c5601d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:de:88:ec:a5:20:a7:41:84:b0:4e:ba:3f: f0:92:5c:e7:91:61:d1:cc:a9:1a:54:e9:3e:0d:72: 07:68:fe:3d:c6:97:a5:bf:97:19:f3:ff:da:6b:36: 07:b6:2d:9f:3b:4a:64:bb:29:17:46:b2:d2:83:41: 22:af:77:1d:fd:69:be:1d:89:60:8d:d9:58:77:0c: cd:e3:66:f0:00:16:64:cb:9d:ac:c7:81:3d:77:46: b1:d1:28:f0:af:82:41:60:03:2f:50:f7:1f:38:3c: 8d:3f:6d:e1:73:d1:21:57:16:87:07:86:74:60:da: e5:6f:2e:c8:bf:6d:b6:aa:ee:97:78:de:3f:aa:d1: 0b:79:e5:17:dd:4a:a8:08:54:83:72:d0:89:8c:a3: 7f:8d:a4:7c:8a:dd:09:cd:38:90:dd:56:39:53:77: 5a:77:94:dc:f8:35:43:18:97:d0:d4:dc:f4:67:2c: a0:f4:89:c2:f6:07:88:4e:f4:bc:3e:8a:12:07:3b: 26:b7:b5:f6:29:c7:04:40:28:f7:6f:39:20:9c:a9: c0:1e:1b:1a:fe:bd:80:e8:cd:98:cd:59:ee:59:ce: f2:8f:1e:c2:cd:af:c1:65:af:22:79:ef:2e:a0:af: 95:00:aa:e9:c7:87:f3:f2:a5:d7:68:d9:d6:e3:92: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:70:7C:19:0C:33:22:1B:AA:DD:C4:5D:DF:2C:9A:F2:C5:60:1D:43 X509v3 Authority Key Identifier: keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2f:ee:d4:f7:23:9b:17:8d:db:1b:26:ba:45:c7:f1:5e:dc: 5f:c4:7e:0d:6c:ec:e3:06:6a:39:ce:3f:f4:af:8f:1c:c4:26: 9b:49:ee:3f:45:3f:37:c1:7f:d0:18:66:b6:59:94:9f:96:84: d0:c5:6a:7a:84:7c:0f:49:f0:dd:a8:d8:38:ed:81:f4:af:d9: d7:e3:e9:ac:b2:2c:99:fe:72:b4:b0:29:ad:2b:86:16:00:34: ec:87:6b:63:cf:82:4e:ea:b3:6b:18:3d:06:fb:7d:d4:22:27: f7:a8:67:60:8f:44:7b:4a:91:15:5a:ab:17:88:6f:f1:d5:4f: 30:b0:d0:6b:5d:38:f2:17:3f:7b:67:2e:8d:04:8f:05:61:1c: 2b:51:10:de:ad:de:63:1b:4d:60:c0:4d:0e:0e:a0:6f:0f:e7: 71:63:e3:88:17:85:93:ab:68:cf:1e:73:e0:1c:c9:69:9b:7d: 8d:e5:61:9e:6e:3b:13:e7:b7:b4:34:57:c5:f9:ae:3a:d3:4f: 7f:b0:07:ec:83:fb:3b:83:df:b7:6b:79:04:fb:ba:41:9a:49: 9c:fe:08:39:0c:b3:da:c5:ee:0d:1b:15:88:45:ef:d9:65:49: 5b:3f:4e:77:2b:78:d3:dc:8f:9a:cd:02:5f:0c:82:01:47:ad: 2c:7c:3f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1+7EMYxREPfAHMCyw7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl ZmE1MGYwHhcNMjUxMjA2MjEwMDMyWhcNMjUxMjA3MjEwMDMyWjAzMTEwLwYDVQQD Eyg4NDcwN2MxOTBjMzMyMjFiYWFkZGM0NWRkZjJjOWFmMmM1NjAxZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU3eiOylIKdBhLBOuj/wklznkWHR zKkaVOk+DXIHaP49xpelv5cZ8//aazYHti2fO0pkuykXRrLSg0Eir3cd/Wm+HYlg jdlYdwzN42bwABZky52sx4E9d0ax0Sjwr4JBYAMvUPcfODyNP23hc9EhVxaHB4Z0 YNrlby7Iv222qu6XeN4/qtELeeUX3UqoCFSDctCJjKN/jaR8it0JzTiQ3VY5U3da d5Tc+DVDGJfQ1Nz0Zyyg9InC9geITvS8PooSBzsmt7X2KccEQCj3bzkgnKnAHhsa /r2A6M2YzVnuWc7yjx7Cza/BZa8iee8uoK+VAKrpx4fz8qXXaNnW45IYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRwfBkMMyIbqt3EXd8smvLFYB1DMB8GA1UdIwQY MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS/u1Pcj mxeN2xsmukXH8V7cX8R+DWzs4wZqOc4/9K+PHMQmm0nuP0U/N8F/0BhmtlmUn5aE 0MVqeoR8D0nw3ajYOO2B9K/Z1+PprLIsmf5ytLAprSuGFgA07IdrY8+CTuqzaxg9 Bvt91CIn96hnYI9Ee0qRFVqrF4hv8dVPMLDQa1048hc/e2cujQSPBWEcK1EQ3q3e YxtNYMBNDg6gbw/ncWPjiBeFk6tozx5z4BzJaZt9jeVhnm47E+e3tDRXxfmuOtNP f7AH7IP7O4Pft2t5BPu6QZpJnP4IOQyz2sXuDRsViEXv2WVJWz9Odyt409yPms0C XwyCAUetLHw/vw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:01 2025 by rpki-client