This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json) Hash identifier: /dWAJO9I/9uqK5erskalNIZG3ULHX/ELa7T87IroA64= Subject key identifier: 95:0A:A2:C0:3D:52:05:59:7B:4F:33:46:71:24:F8:39:8F:59:6D:76 Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Certificate serial: 019AF31B807C3D67B828E4DC11545AD0417E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:56 +0000 Manifest this update: Sat 06 Dec 2025 10:00:56 +0000 Manifest next update: Sun 07 Dec 2025 10:00:56 +0000 Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: 7LYqrz1NtKftXXz+4N13vTulstrblghn/cvzX3ASLwI=) 2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:7c:3d:67:b8:28:e4:dc:11:54:5a:d0:41:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22 Validity Not Before: Dec 6 10:00:56 2025 GMT Not After : Dec 7 10:00:56 2025 GMT Subject: CN=950aa2c03d5205597b4f33467124f8398f596d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:7d:b4:97:fe:d8:01:70:09:d0:03:25:d7: de:e1:b8:d2:62:34:81:9e:21:35:01:88:15:84:7d: 1d:43:1c:49:f6:6b:db:68:0d:48:57:fa:04:5c:71: b5:b7:68:05:15:aa:c0:65:fe:c1:be:d0:10:fe:0c: be:28:bd:64:9a:e6:ae:97:fa:8d:23:6a:19:fb:a8: 9a:21:1f:9e:6b:11:43:43:c6:f9:3d:8e:63:be:6c: fd:1f:d3:85:62:52:22:4a:73:94:ee:0e:b1:4b:00: 12:a0:6a:07:6d:96:04:9f:cb:06:82:62:79:b4:d3: f1:28:66:40:7d:8a:f3:f0:78:4e:95:20:bd:71:2a: 65:4f:21:10:0e:ea:56:86:45:5f:55:2c:e7:17:de: ac:2f:65:18:bd:5a:27:82:02:ae:95:20:37:50:47: af:ad:f1:86:01:fe:86:f7:e9:df:28:4b:fd:e5:12: fb:b4:b4:23:01:dd:47:87:37:47:31:f1:72:2c:08: 7e:35:c0:37:84:1c:c3:ac:89:51:20:f2:ad:8e:09: a2:d5:9a:93:0e:84:4d:d0:9d:23:30:89:0c:26:94: 08:40:fd:ea:e8:e5:56:82:d2:19:dc:f1:54:62:f7: 4c:1f:fa:c2:04:ad:6a:7f:97:c8:f3:33:b2:b1:fa: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0A:A2:C0:3D:52:05:59:7B:4F:33:46:71:24:F8:39:8F:59:6D:76 X509v3 Authority Key Identifier: keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:47:4f:a0:92:20:de:62:f7:3f:e9:06:40:5c:1a:71:5c:b6: d3:9c:8f:60:25:0b:ab:95:75:05:ed:fa:7a:e9:61:1b:71:ec: 8d:0d:0f:af:29:c0:35:2d:ca:91:f5:91:7f:3a:a8:68:ab:b6: c8:82:33:ab:dc:35:ae:69:ea:69:d7:6f:60:9c:cf:6f:77:8e: a3:d2:11:50:89:4a:0a:d3:a6:b8:a4:79:a1:a7:3a:78:e6:85: 10:12:7a:a5:c9:1c:50:ae:bd:46:02:82:03:e4:ab:94:19:15: 26:79:1d:d3:79:a2:e8:29:45:e1:be:c1:44:cc:cb:d5:c0:eb: 6d:98:14:09:4b:0c:42:0e:1a:d9:6f:e8:e3:b9:9c:c7:4a:5e: 38:f6:95:d4:16:6d:2c:97:e9:5c:c2:c0:ee:40:e8:87:ec:f2: a5:b1:ff:19:ae:6f:b1:17:44:2d:bd:81:78:4b:a8:eb:da:02: a8:5e:38:a5:00:d5:54:8a:9f:28:95:40:fb:99:53:8b:0d:e4: 5f:70:60:e1:c2:11:0c:f2:35:c5:18:b1:f9:cb:a0:cc:15:26: 9b:9c:ae:e7:78:fc:5d:ba:7a:09:2a:b8:e3:70:e9:0e:b6:00: 2a:81:de:00:b0:97:e6:96:06:69:28:d4:ca:ca:cc:33:d8:fc: 5d:7b:12:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4B8PWe4KOTcEVRa0EF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh MzRjMjIwHhcNMjUxMjA2MTAwMDU2WhcNMjUxMjA3MTAwMDU2WjAzMTEwLwYDVQQD Eyg5NTBhYTJjMDNkNTIwNTU5N2I0ZjMzNDY3MTI0ZjgzOThmNTk2ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB59tJf+2AFwCdADJdfe4bjSYjSB niE1AYgVhH0dQxxJ9mvbaA1IV/oEXHG1t2gFFarAZf7BvtAQ/gy+KL1kmuaul/qN I2oZ+6iaIR+eaxFDQ8b5PY5jvmz9H9OFYlIiSnOU7g6xSwASoGoHbZYEn8sGgmJ5 tNPxKGZAfYrz8HhOlSC9cSplTyEQDupWhkVfVSznF96sL2UYvVonggKulSA3UEev rfGGAf6G9+nfKEv95RL7tLQjAd1HhzdHMfFyLAh+NcA3hBzDrIlRIPKtjgmi1ZqT DoRN0J0jMIkMJpQIQP3q6OVWgtIZ3PFUYvdMH/rCBK1qf5fI8zOysfpE1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUKosA9UgVZe08zRnEk+DmPWW12MB8GA1UdIwQY MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUdPoJIg 3mL3P+kGQFwacVy205yPYCULq5V1Be36eulhG3HsjQ0PrynANS3KkfWRfzqoaKu2 yIIzq9w1rmnqaddvYJzPb3eOo9IRUIlKCtOmuKR5oac6eOaFEBJ6pckcUK69RgKC A+SrlBkVJnkd03mi6ClF4b7BRMzL1cDrbZgUCUsMQg4a2W/o47mcx0peOPaV1BZt LJfpXMLA7kDoh+zypbH/Ga5vsRdELb2BeEuo69oCqF44pQDVVIqfKJVA+5lTiw3k X3Bg4cIRDPI1xRix+cugzBUmm5yu53j8Xbp6CSq443DpDrYAKoHeALCX5pYGaSjU ysrMM9j8XXsS2g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:38 2025 by rpki-client