This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json) Hash identifier: 3/PCdOySvNzM7esE2LlvrkbsOvtj15L5r9/7n1/+SRM= Subject key identifier: 9F:34:A6:7E:61:07:DD:E8:9A:0B:A7:0B:CA:05:3F:FC:21:20:76:41 Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Certificate serial: 019B0A47D039B221B14A81C9022FFDB1C0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 22:00:36 +0000 Manifest this update: Wed 10 Dec 2025 22:00:36 +0000 Manifest next update: Thu 11 Dec 2025 22:00:36 +0000 Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: HkZKFbOiZ4ZhwgZM/VxhYvcWMD9t4//cNz0VUwomS0c=) 2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:47:d0:39:b2:21:b1:4a:81:c9:02:2f:fd:b1:c0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643 Validity Not Before: Dec 10 22:00:36 2025 GMT Not After : Dec 11 22:00:36 2025 GMT Subject: CN=9f34a67e6107dde89a0ba70bca053ffc21207641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:24:e0:d7:67:b0:28:e8:90:a8:ce:3f:53:51: 6e:39:a6:b3:29:ee:da:73:10:ba:da:e4:62:f4:61: 58:c5:eb:4c:56:4a:78:89:84:1a:df:41:b4:a4:b8: 2b:dc:11:7c:c0:03:44:83:c4:ea:cf:c0:4c:25:56: 47:2d:a2:85:ff:e0:bc:47:c8:0f:e5:4c:39:72:90: 15:6f:aa:37:2e:75:90:7d:29:60:f1:be:81:cc:eb: 04:05:e6:54:05:52:40:49:7b:ee:a5:39:c8:bb:19: fb:38:8a:fb:1d:a8:50:74:20:03:fa:7d:f1:d9:21: d8:98:f4:4b:1a:7a:74:df:ad:e0:b1:9e:94:a3:c5: 0d:29:b5:0f:3d:27:a4:5c:95:eb:cd:36:e0:6c:28: 75:66:df:83:84:dd:ef:7a:d8:65:58:78:a4:eb:3e: 24:58:e6:f6:d8:53:fe:a7:1a:5b:48:7b:18:9d:5b: 6c:cf:c4:14:06:6d:1c:30:6b:90:c2:72:4d:ea:ce: 89:d2:d5:37:70:8b:4e:f3:01:4d:d5:ec:85:0d:33: 51:b6:23:09:48:29:43:50:7c:fd:3c:39:c6:23:7e: e9:dd:db:4f:77:47:66:bd:95:bc:22:a3:f9:7f:df: 4d:08:8b:9e:cc:4c:04:cf:bd:f7:7b:66:83:15:cc: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:A6:7E:61:07:DD:E8:9A:0B:A7:0B:CA:05:3F:FC:21:20:76:41 X509v3 Authority Key Identifier: keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b7:f4:35:3e:10:70:00:a8:80:1e:9b:4d:7e:af:d6:9b:d4: 47:e1:51:8d:0a:2a:21:39:0e:3f:2f:5a:30:f2:4b:08:f3:e0: 47:b7:34:ab:a6:18:1f:2b:41:16:a1:95:f9:2e:fd:45:a7:5a: 26:df:d3:b1:8d:bb:5b:72:38:5c:51:0a:b0:c4:b1:fc:aa:c1: c0:fa:29:bf:f3:54:0f:08:bd:98:33:cc:eb:4a:bb:84:a2:10: 68:54:90:45:6d:ac:a9:c9:29:a9:06:aa:78:a0:19:f4:48:6a: e3:f4:76:be:5d:bc:2a:04:73:ab:d4:79:7f:31:27:42:70:94: c3:e5:9b:37:12:a5:96:be:82:fe:a5:48:3d:d2:cf:dc:38:10: d0:45:63:a7:c3:23:3f:31:76:c8:12:97:38:89:47:d1:ea:de: 1d:a5:b2:10:29:8c:35:ad:19:2a:06:e7:b4:18:eb:65:7f:40: 3b:f0:b1:ad:c8:88:b3:be:45:56:65:7e:6e:ea:91:62:46:3c: ca:d7:91:f1:9a:7e:1c:3c:58:df:51:db:c3:f7:22:68:86:e0: a5:e9:80:7b:77:54:e6:24:23:5f:4f:9e:a8:10:ca:3c:48:81: 96:ba:49:31:fe:f9:25:fe:40:52:9f:9d:20:11:b4:d0:6f:59: e6:4e:a6:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKR9A5siGxSoHJAi/9scCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3 M2I2NDMwHhcNMjUxMjEwMjIwMDM2WhcNMjUxMjExMjIwMDM2WjAzMTEwLwYDVQQD Eyg5ZjM0YTY3ZTYxMDdkZGU4OWEwYmE3MGJjYTA1M2ZmYzIxMjA3NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CTg12ewKOiQqM4/U1FuOaazKe7a cxC62uRi9GFYxetMVkp4iYQa30G0pLgr3BF8wANEg8Tqz8BMJVZHLaKF/+C8R8gP 5Uw5cpAVb6o3LnWQfSlg8b6BzOsEBeZUBVJASXvupTnIuxn7OIr7HahQdCAD+n3x 2SHYmPRLGnp0363gsZ6Uo8UNKbUPPSekXJXrzTbgbCh1Zt+DhN3vethlWHik6z4k WOb22FP+pxpbSHsYnVtsz8QUBm0cMGuQwnJN6s6J0tU3cItO8wFN1eyFDTNRtiMJ SClDUHz9PDnGI37p3dtPd0dmvZW8IqP5f99NCIuezEwEz733e2aDFcyQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ80pn5hB93omgunC8oFP/whIHZBMB8GA1UdIwQY MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt MzRmN2Q1MTMxMzY3LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3 LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrf0NT4Q cACogB6bTX6v1pvUR+FRjQoqITkOPy9aMPJLCPPgR7c0q6YYHytBFqGV+S79Rada Jt/TsY27W3I4XFEKsMSx/KrBwPopv/NUDwi9mDPM60q7hKIQaFSQRW2sqckpqQaq eKAZ9Ehq4/R2vl28KgRzq9R5fzEnQnCUw+WbNxKllr6C/qVIPdLP3DgQ0EVjp8Mj PzF2yBKXOIlH0ereHaWyECmMNa0ZKgbntBjrZX9AO/CxrciIs75FVmV+buqRYkY8 yteR8Zp+HDxY31Hbw/ciaIbgpemAe3dU5iQjX0+eqBDKPEiBlrpJMf75Jf5AUp+d IBG00G9Z5k6mLg== -----END CERTIFICATE-----Generated at Thu Dec 11 00:04:07 2025 by rpki-client