This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json) Hash identifier: kVNrcUw13cJJ0S8aIBGP+cTuNigaz6xHqxrrL/C9QLA= Subject key identifier: 79:73:7F:21:A3:D3:40:BB:E7:7A:0D:AF:0E:24:49:3E:89:E1:A1:A5 Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Certificate serial: 019AF12EC943115D80C2CA5DC5C2CBE7A3F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: gN5brkPjc7CcAMz7NsREX3NHIJwIF2PBHomQ33anqg4=) 2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c9:43:11:5d:80:c2:ca:5d:c5:c2:cb:e7:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522 Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=79737f21a3d340bbe77a0daf0e24493e89e1a1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:08:2a:7b:50:17:b6:67:b1:d2:d9:6a:33: 7d:3e:3e:29:a0:d7:5f:a5:16:d0:7c:b4:22:f4:49: a0:a5:c4:38:39:46:5f:55:e3:d2:06:93:85:ab:7d: 51:25:37:dd:c6:18:e9:a8:3b:76:f8:88:8d:f3:be: cc:fa:c1:32:8e:4f:cc:a3:37:14:84:7a:46:ad:09: ee:10:36:78:df:bc:ea:ba:d0:fe:a3:02:6a:f3:78: 6e:64:be:a4:63:ab:d6:0e:77:38:58:dd:7a:48:73: 7b:bd:50:21:e5:29:fd:23:94:0e:55:57:37:f6:82: fc:15:14:75:ab:90:45:a5:fa:ef:a2:c6:3b:85:25: ff:ec:76:2a:43:71:a5:81:e3:ff:ac:25:bd:da:79: ae:d3:00:21:a0:1e:68:07:39:c2:d7:a2:77:a2:06: 5f:a5:0b:d7:4c:5f:dd:a6:a6:8c:99:30:e5:54:1f: ed:4b:91:89:e4:82:08:89:cf:a0:10:17:e9:f8:7c: 12:29:d1:ff:b2:ea:4d:79:a9:f5:27:73:23:f0:65: c5:1b:b9:4d:df:9a:e3:c1:b7:2e:ef:12:66:c7:b3: ce:bd:78:25:1b:87:ee:54:75:d1:39:f4:3b:8b:fb: b8:7f:15:c7:d8:a2:c8:77:ef:28:15:10:23:83:c5: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:7F:21:A3:D3:40:BB:E7:7A:0D:AF:0E:24:49:3E:89:E1:A1:A5 X509v3 Authority Key Identifier: keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7c:46:e4:8f:f4:30:4d:7e:a7:7d:cb:92:62:eb:d9:7a:bd: 5b:19:76:35:47:26:03:74:29:57:d1:7b:7a:0c:9e:41:f6:fe: 52:3f:ff:42:cf:8d:c0:61:ff:aa:a5:e7:35:50:c5:42:d4:2d: ad:78:dd:43:5b:24:64:22:aa:2f:f9:fd:c2:6e:6c:d2:46:fe: a1:9b:9b:ed:c6:3d:1e:79:48:46:66:46:ec:39:86:30:c4:11: 07:f8:48:3a:97:d9:27:6f:b9:23:31:d5:88:f4:08:98:cb:6e: 4d:f1:05:23:2e:e4:26:26:c0:c1:30:03:95:5b:2e:80:b3:b3: 7e:f2:71:ca:ea:4d:b9:b2:ef:9b:46:47:b5:ef:eb:41:0a:91: e4:48:70:07:8a:98:ce:90:50:65:b1:7e:4e:a9:1b:3f:6a:98: fa:15:55:0a:c7:d7:bc:2e:d9:1c:84:b6:1a:f8:36:6c:33:78: e5:14:e0:65:30:0e:6c:2a:a1:37:b6:6c:99:a6:fb:01:7f:aa: d0:65:4f:cd:40:0e:16:27:f1:02:cd:a7:e2:17:22:61:09:4a: f1:bd:48:87:82:15:cc:8e:1c:24:59:91:a9:0f:f7:e9:67:47: c6:07:8a:42:83:fa:60:59:45:62:c9:d8:7c:d1:32:4f:81:e6: 35:a7:a8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLslDEV2AwspdxcLL56PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3 OWE1MjIwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD Eyg3OTczN2YyMWEzZDM0MGJiZTc3YTBkYWYwZTI0NDkzZTg5ZTFhMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlosIKntQF7ZnsdLZajN9Pj4poNdf pRbQfLQi9EmgpcQ4OUZfVePSBpOFq31RJTfdxhjpqDt2+IiN877M+sEyjk/MozcU hHpGrQnuEDZ437zqutD+owJq83huZL6kY6vWDnc4WN16SHN7vVAh5Sn9I5QOVVc3 9oL8FRR1q5BFpfrvosY7hSX/7HYqQ3GlgeP/rCW92nmu0wAhoB5oBznC16J3ogZf pQvXTF/dpqaMmTDlVB/tS5GJ5IIIic+gEBfp+HwSKdH/supNean1J3Mj8GXFG7lN 35rjwbcu7xJmx7POvXglG4fuVHXROfQ7i/u4fxXH2KLId+8oFRAjg8UbUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlzfyGj00C753oNrw4kST6J4aGlMB8GA1UdIwQY MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2 LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnxG5I/0 ME1+p33LkmLr2Xq9Wxl2NUcmA3QpV9F7egyeQfb+Uj//Qs+NwGH/qqXnNVDFQtQt rXjdQ1skZCKqL/n9wm5s0kb+oZub7cY9HnlIRmZG7DmGMMQRB/hIOpfZJ2+5IzHV iPQImMtuTfEFIy7kJibAwTADlVsugLOzfvJxyupNubLvm0ZHte/rQQqR5EhwB4qY zpBQZbF+TqkbP2qY+hVVCsfXvC7ZHIS2Gvg2bDN45RTgZTAObCqhN7Zsmab7AX+q 0GVPzUAOFifxAs2n4hciYQlK8b1Ih4IVzI4cJFmRqQ/36WdHxgeKQoP6YFlFYsnY fNEyT4HmNaeomQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:14 2025 by rpki-client