This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json) Hash identifier: PGoo64LCVyuzKzT9o45TejBk74szRscqoVAlMfK4gXY= Subject key identifier: 85:0F:EB:F7:B2:49:E5:B0:60:A8:78:96:76:0B:D5:10:E7:A9:80:A9 Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa Certificate serial: 019AF4653E0C6F3C7646220424AD0695063A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:01:06 +0000 Manifest this update: Sat 06 Dec 2025 16:01:06 +0000 Manifest next update: Sun 07 Dec 2025 16:01:06 +0000 Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: LA/xZsG2XXz3VX5nhFROSH6YxyRGlpdt/vMVmBqYMmU=) 2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3e:0c:6f:3c:76:46:22:04:24:ad:06:95:06:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa Validity Not Before: Dec 6 16:01:06 2025 GMT Not After : Dec 7 16:01:06 2025 GMT Subject: CN=850febf7b249e5b060a87896760bd510e7a980a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:74:ba:22:1c:76:91:e0:ea:75:35:66:2f: fa:25:67:0f:71:6c:71:df:3a:d8:a5:d6:62:12:b7: 88:11:bb:d6:33:20:05:89:de:5f:4d:3e:68:80:3b: c3:d7:5d:c7:a0:96:c2:6a:2d:c8:fa:e7:7c:40:de: e1:1c:dc:29:6d:c4:39:15:9b:28:04:83:65:eb:bd: 32:0a:f3:2c:ef:32:ca:be:0e:97:e2:a2:c9:05:ee: f1:c6:54:7c:22:56:4e:d4:dc:5d:e8:f6:42:78:64: 9f:2a:30:19:b4:b1:8e:e2:77:6b:f5:d0:aa:8f:9b: 60:80:f3:a9:91:60:e2:c2:7b:f2:6f:b2:54:6f:c1: aa:d7:a1:d8:10:c3:03:9e:b8:4a:38:64:40:64:75: d1:b2:5f:c1:e7:20:b1:fc:dd:e5:e2:e0:39:aa:3f: a2:eb:79:55:b6:2f:13:d0:c9:2f:0b:5b:77:a8:3f: cf:97:8a:ea:3e:cf:92:45:eb:65:9e:82:23:43:97: 8a:c0:6d:3d:6c:c6:79:42:06:b3:f9:d5:45:85:00: 40:07:52:a0:c6:88:2c:ba:10:ac:33:22:eb:2d:23: a9:62:df:37:2b:b5:a9:6f:e0:b1:6b:5c:8a:44:6e: 17:30:03:15:bc:d1:6f:d0:49:6a:db:9f:fa:8c:eb: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:EB:F7:B2:49:E5:B0:60:A8:78:96:76:0B:D5:10:E7:A9:80:A9 X509v3 Authority Key Identifier: keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:49:e1:08:27:04:37:0b:a0:a1:45:f3:ed:f1:ab:c7:cd: ae:1d:99:4e:79:fa:cf:86:86:c3:ca:25:8c:39:96:32:4c:af: 6a:aa:7d:70:80:c7:1b:86:62:0a:67:c0:54:45:be:c5:cf:a0: 0b:b3:e0:d4:87:ff:ec:ba:86:58:c2:70:ac:d7:9f:a3:f2:03: f7:11:55:a0:a2:a4:ee:0f:34:11:eb:28:de:b4:ff:50:29:8f: 0a:61:cd:d4:7e:4d:2f:91:45:8f:e8:fe:7d:15:ed:7b:de:62: 27:0c:ee:7e:a7:59:8e:d3:36:b0:49:03:c4:f0:8e:0e:83:7e: 21:9f:e8:62:7e:db:43:ec:27:30:a0:23:3f:4a:22:75:db:5a: df:49:f4:c8:e4:bc:5c:ff:31:d2:d9:91:bf:1c:b9:70:4e:11: 8c:2d:68:3d:d5:c1:c5:60:3d:7e:b4:d2:ba:7c:cc:e1:e7:16: 4a:8f:0c:ae:67:ef:13:8a:a5:ed:32:9c:bb:ac:7d:c7:89:d0: c0:ad:b7:dd:d8:ca:11:0c:ea:95:be:fb:9e:6e:74:6a:b6:d2: 37:c0:23:1f:95:80:55:57:87:09:dd:9e:55:00:50:05:6f:dd: 62:eb:88:0f:91:ea:b4:c3:cd:21:d5:30:55:7a:91:6c:81:94: 21:88:59:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZT4Mbzx2RiIEJK0GlQY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGRjM2I5MjNjNzczOGY5YTU4ZWU4MGI0OWJjZDBjNWU3 ZGNmZmEwHhcNMjUxMjA2MTYwMTA2WhcNMjUxMjA3MTYwMTA2WjAzMTEwLwYDVQQD Eyg4NTBmZWJmN2IyNDllNWIwNjBhODc4OTY3NjBiZDUxMGU3YTk4MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6t0uiIcdpHg6nU1Zi/6JWcPcWxx 3zrYpdZiEreIEbvWMyAFid5fTT5ogDvD113HoJbCai3I+ud8QN7hHNwpbcQ5FZso BINl670yCvMs7zLKvg6X4qLJBe7xxlR8IlZO1Nxd6PZCeGSfKjAZtLGO4ndr9dCq j5tggPOpkWDiwnvyb7JUb8Gq16HYEMMDnrhKOGRAZHXRsl/B5yCx/N3l4uA5qj+i 63lVti8T0MkvC1t3qD/Pl4rqPs+SRetlnoIjQ5eKwG09bMZ5Qgaz+dVFhQBAB1Kg xogsuhCsMyLrLSOpYt83K7Wpb+Cxa1yKRG4XMAMVvNFv0Elq25/6jOtr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUP6/eySeWwYKh4lnYL1RDnqYCpMB8GA1UdIwQY MBaAFASNw7kjx3OPmljugLSbzQxefc/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQt MmVjODcxNDY1NTk5LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQtMmVjODcxNDY1NTk5 LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnblJ4Qgn BDcLoKFF8+3xq8fNrh2ZTnn6z4aGw8oljDmWMkyvaqp9cIDHG4ZiCmfAVEW+xc+g C7Pg1If/7LqGWMJwrNefo/ID9xFVoKKk7g80Eeso3rT/UCmPCmHN1H5NL5FFj+j+ fRXte95iJwzufqdZjtM2sEkDxPCODoN+IZ/oYn7bQ+wnMKAjP0oiddta30n0yOS8 XP8x0tmRvxy5cE4RjC1oPdXBxWA9frTSunzM4ecWSo8MrmfvE4ql7TKcu6x9x4nQ wK233djKEQzqlb77nm50arbSN8AjH5WAVVeHCd2eVQBQBW/dYuuID5HqtMPNIdUw VXqRbIGUIYhZ4A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:01 2025 by rpki-client