This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json) Hash identifier: l1OU7cREG4fv9dxNxVKlnPQcapvrIhTPII2HHQqivac= Subject key identifier: B0:CA:DD:A2:11:9A:61:B1:FE:03:D0:ED:45:F2:02:2E:16:EC:DC:68 Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb Certificate serial: 019B21E268B9F14467342D2A01A41D5F222E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 12:00:44 +0000 Manifest this update: Mon 15 Dec 2025 12:00:44 +0000 Manifest next update: Tue 16 Dec 2025 12:00:44 +0000 Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: G/Z3r/qbh0kOIaIdPzf276FM9N3edF/WHsYzqAeQ8RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:68:b9:f1:44:67:34:2d:2a:01:a4:1d:5f:22:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb Validity Not Before: Dec 15 12:00:44 2025 GMT Not After : Dec 16 12:00:44 2025 GMT Subject: CN=b0cadda2119a61b1fe03d0ed45f2022e16ecdc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:f7:96:a6:16:92:57:7f:f1:d4:c7:5f:8f: 20:7e:1a:33:79:f5:83:88:1b:bb:26:e1:d5:34:b3: 25:34:72:8b:c6:68:fd:57:d3:9c:8f:03:45:49:e2: 5f:c3:54:c9:73:c1:32:d1:c0:3d:f2:56:36:ec:ab: 2d:fb:d5:73:75:66:e7:5f:ec:b4:e1:d1:dc:35:d5: ca:1b:3f:c7:7e:e6:bd:6b:04:ef:f6:39:b9:38:68: b3:3d:22:dc:d6:8b:bc:f2:c3:5d:96:3e:a6:4d:7f: 20:30:19:68:03:d1:52:cf:d2:ad:b5:7e:68:ce:13: b0:e5:41:87:a2:49:30:88:cf:d8:dc:56:d3:b1:b5: e7:80:2c:53:62:7e:4b:a7:92:bd:11:12:31:ea:a0: 00:40:fb:b1:bf:d4:de:98:55:ab:87:5b:e6:8b:56: 65:74:49:e0:e0:44:a9:b1:e0:57:92:7a:e1:4c:08: f5:7a:43:e4:83:78:58:6f:9a:6b:97:b9:72:2a:32: 09:3f:dc:7a:6c:ab:31:54:23:8e:56:80:15:d2:4e: 38:f0:3e:a1:1b:d8:80:de:e3:20:62:84:6f:55:5b: 4d:3b:9a:3d:89:0c:8d:cf:94:6c:05:f2:74:a1:cb: 62:ab:e9:89:e1:a0:2d:65:49:ef:e9:96:ea:e3:ce: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:DD:A2:11:9A:61:B1:FE:03:D0:ED:45:F2:02:2E:16:EC:DC:68 X509v3 Authority Key Identifier: keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4d:ad:c1:5c:ff:67:5a:2f:cf:f2:9e:12:2f:2a:4f:67:fd: 98:43:ca:fe:45:4a:b5:51:48:65:94:9f:77:a2:09:89:3c:d4: bf:1e:85:0c:cb:58:40:4f:7f:06:34:b3:70:aa:c7:00:2c:4d: 18:aa:f3:3a:55:a7:25:1f:19:09:57:3f:f9:66:a4:d8:db:7f: dd:8e:24:6d:44:7e:bc:1a:fb:71:f2:b9:7b:0f:ef:27:54:05: f5:07:22:09:d2:ac:c9:b0:87:bf:52:7e:e9:02:a3:70:e1:c3: 1a:dd:b3:47:fa:c5:dc:d5:2c:4b:2c:5b:c2:6c:b1:6f:e7:af: 80:ce:8a:58:3e:55:9f:56:90:8f:e9:50:55:58:0e:70:63:b6: 76:e1:69:43:dc:43:4f:38:3b:48:d6:32:eb:a1:23:0f:1e:d5: fe:28:9e:01:eb:bb:c4:2e:d5:a9:a1:95:a3:e1:8f:16:bf:44: 83:1b:89:c7:17:e5:b4:ca:7e:ac:2c:2a:85:fe:ca:4f:d1:51: e5:09:d7:1d:4e:5e:5a:e6:ad:d9:90:3b:74:fb:c5:f4:e2:6f: 2b:83:d9:61:13:38:2e:fd:0b:e8:c4:5d:75:3f:b1:c3:2d:69: e8:5d:8b:65:d1:98:ca:91:a6:b2:30:59:be:5a:a3:dc:b4:ca: 5f:c1:1c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4mi58URnNC0qAaQdXyIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5 NzJiZWIwHhcNMjUxMjE1MTIwMDQ0WhcNMjUxMjE2MTIwMDQ0WjAzMTEwLwYDVQQD EyhiMGNhZGRhMjExOWE2MWIxZmUwM2QwZWQ0NWYyMDIyZTE2ZWNkYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgv3lqYWkld/8dTHX48gfhozefWD iBu7JuHVNLMlNHKLxmj9V9OcjwNFSeJfw1TJc8Ey0cA98lY27Kst+9VzdWbnX+y0 4dHcNdXKGz/Hfua9awTv9jm5OGizPSLc1ou88sNdlj6mTX8gMBloA9FSz9KttX5o zhOw5UGHokkwiM/Y3FbTsbXngCxTYn5Lp5K9ERIx6qAAQPuxv9TemFWrh1vmi1Zl dEng4ESpseBXknrhTAj1ekPkg3hYb5prl7lyKjIJP9x6bKsxVCOOVoAV0k448D6h G9iA3uMgYoRvVVtNO5o9iQyNz5RsBfJ0octiq+mJ4aAtZUnv6Zbq4852TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDK3aIRmmGx/gPQ7UXyAi4W7NxoMB8GA1UdIwQY MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk2twVz/ Z1ovz/KeEi8qT2f9mEPK/kVKtVFIZZSfd6IJiTzUvx6FDMtYQE9/BjSzcKrHACxN GKrzOlWnJR8ZCVc/+Wak2Nt/3Y4kbUR+vBr7cfK5ew/vJ1QF9QciCdKsybCHv1J+ 6QKjcOHDGt2zR/rF3NUsSyxbwmyxb+evgM6KWD5Vn1aQj+lQVVgOcGO2duFpQ9xD Tzg7SNYy66EjDx7V/iieAeu7xC7VqaGVo+GPFr9EgxuJxxfltMp+rCwqhf7KT9FR 5QnXHU5eWuat2ZA7dPvF9OJvK4PZYRM4Lv0L6MRddT+xwy1p6F2LZdGYypGmsjBZ vlqj3LTKX8Ec8Q== -----END CERTIFICATE-----Generated at Mon Dec 15 20:11:57 2025 by rpki-client