This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json) Hash identifier: Q9GvxdJeeA9crJZMmKElhG4vHVDNXN98UVqqNZgDdxU= Subject key identifier: 91:FC:BB:7D:85:DE:FE:F3:DA:D6:2E:7C:E8:1D:95:01:2C:DE:39:FE Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7 Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7 Certificate serial: 019B3DFE3D4118E609030DCDF3A720AFF61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 23:00:30 +0000 Manifest this update: Sat 20 Dec 2025 23:00:30 +0000 Manifest next update: Sun 21 Dec 2025 23:00:30 +0000 Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: ru9oIK69+w0gQ2FdH5MBJFU/zLAe3bbn/NzHQl/JSm0=) 2: zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa (hash: 5MM1ssf5XEcNEojmTdbrlA8dg78ZH7/NCDsRblaf7f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3d:41:18:e6:09:03:0d:cd:f3:a7:20:af:f6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7 Validity Not Before: Dec 20 23:00:30 2025 GMT Not After : Dec 21 23:00:30 2025 GMT Subject: CN=91fcbb7d85defef3dad62e7ce81d95012cde39fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:43:70:0d:8c:ee:05:60:bf:c6:76:b0:0e: 21:01:6d:96:54:c8:b2:9a:4d:0d:1e:bb:ff:cd:b4: 3f:a0:2f:b2:89:ad:e5:00:48:49:70:80:be:67:08: 3f:0b:78:af:e1:33:29:84:ea:4a:3e:b7:2d:65:42: 48:21:17:81:ed:b9:4b:af:b8:eb:b9:b4:c0:11:4b: a0:15:8a:3a:e2:ef:1d:4f:5a:0b:c4:73:66:ea:9b: b2:e6:3c:37:e5:32:f8:c9:b0:a4:bc:9a:2c:fe:5a: 5d:62:0b:b7:71:d0:3a:3b:ba:be:3e:16:3f:82:ec: 45:4a:9e:e6:20:7c:f6:2a:dd:5a:8c:8a:ad:eb:85: 6d:5e:45:55:3f:d2:bf:f5:f0:5a:31:c2:c8:1d:31: 09:ea:8d:67:1f:09:26:70:3e:2f:11:11:1e:8e:6e: 0c:b1:ac:b1:cb:16:38:1b:4e:c6:8d:10:fa:5f:47: c2:01:8a:e5:13:24:b4:9d:17:98:7d:a9:02:01:6e: 97:6e:72:4a:04:84:b4:38:c1:b9:5b:12:14:77:11: 64:e6:62:8d:03:4d:51:de:8b:ed:07:58:70:86:06: ad:b0:4c:57:89:a0:70:74:d6:1a:2b:05:f8:1a:71: 53:14:79:88:5b:88:c6:9b:86:2c:a0:ce:3b:d4:f3: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FC:BB:7D:85:DE:FE:F3:DA:D6:2E:7C:E8:1D:95:01:2C:DE:39:FE X509v3 Authority Key Identifier: keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:17:88:64:b5:17:a9:db:58:a5:db:45:6c:a3:57:51:9d:ca: 55:7d:d5:62:bd:67:7d:3f:9e:30:77:2b:72:f3:fd:9d:50:96: 07:1a:8d:9c:a0:42:21:ed:ea:66:8c:30:0d:b1:db:71:c1:23: 13:f4:2b:67:36:81:ab:d2:6a:6c:d7:a1:26:e9:7f:08:22:9e: 05:8c:f5:be:69:90:06:2e:92:d2:47:79:c7:cb:d7:fe:94:20: 84:97:fd:02:3a:ea:19:a3:96:29:3b:fc:59:6c:bc:c8:9b:2e: fb:ed:82:54:a3:cf:e1:38:08:4e:34:d2:a0:1c:59:d6:d6:aa: 21:62:9a:af:79:c7:24:79:e9:62:7a:27:bc:af:77:65:6c:c0: 5e:c5:32:f7:e7:74:be:84:61:dd:45:59:7c:86:eb:82:bd:a5: b2:c2:9a:12:1e:d4:ac:f0:7d:08:8e:23:1f:24:79:2a:7a:b9: ad:45:14:e6:3f:38:eb:74:b7:42:5b:a4:1e:ac:04:dc:5a:9b: 66:e1:ff:55:9d:b7:be:de:db:0a:b4:f5:30:b0:2f:d2:cc:32: 57:c6:b7:65:5e:5a:19:d7:24:84:3e:99:03:00:42:bb:44:50: 7c:8f:52:4e:46:8b:04:4b:fc:11:8a:b5:4c:d9:e2:c5:4f:3f: 86:34:53:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/j1BGOYJAw3N86cgr/YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZWVlM2YwOWFiZWI2YTQzNGU5OTA1Y2JjMGIwMDAwNDRl NzlkZTcwHhcNMjUxMjIwMjMwMDMwWhcNMjUxMjIxMjMwMDMwWjAzMTEwLwYDVQQD Eyg5MWZjYmI3ZDg1ZGVmZWYzZGFkNjJlN2NlODFkOTUwMTJjZGUzOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyRDcA2M7gVgv8Z2sA4hAW2WVMiy mk0NHrv/zbQ/oC+yia3lAEhJcIC+Zwg/C3iv4TMphOpKPrctZUJIIReB7blLr7jr ubTAEUugFYo64u8dT1oLxHNm6puy5jw35TL4ybCkvJos/lpdYgu3cdA6O7q+PhY/ guxFSp7mIHz2Kt1ajIqt64VtXkVVP9K/9fBaMcLIHTEJ6o1nHwkmcD4vEREejm4M sayxyxY4G07GjRD6X0fCAYrlEyS0nReYfakCAW6XbnJKBIS0OMG5WxIUdxFk5mKN A01R3ovtB1hwhgatsExXiaBwdNYaKwX4GnFTFHmIW4jGm4YsoM471PMhzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH8u32F3v7z2tYufOgdlQEs3jn+MB8GA1UdIwQY MBaAFATu4/CavrakNOmQXLwLAABE553nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUt NDgxM2Q4NTUwMmQ3LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80YzI4MzUtYmE3Mi00MWVhLWJiZDUtNDgxM2Q4NTUwMmQ3 LzEvQk83ajhKcS10cVEwNlpCY3ZBc0FBRVRubmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExeIZLUX qdtYpdtFbKNXUZ3KVX3VYr1nfT+eMHcrcvP9nVCWBxqNnKBCIe3qZowwDbHbccEj E/QrZzaBq9JqbNehJul/CCKeBYz1vmmQBi6S0kd5x8vX/pQghJf9AjrqGaOWKTv8 WWy8yJsu++2CVKPP4TgITjTSoBxZ1taqIWKar3nHJHnpYnonvK93ZWzAXsUy9+d0 voRh3UVZfIbrgr2lssKaEh7UrPB9CI4jHyR5Knq5rUUU5j8463S3QlukHqwE3Fqb ZuH/VZ23vt7bCrT1MLAv0swyV8a3ZV5aGdckhD6ZAwBCu0RQfI9STkaLBEv8EYq1 TNnixU8/hjRT3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:26:33 2025 by rpki-client