This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json) Hash identifier: pfeqoJi64oifiuCrNCkqa0f8FUUZymGcIaxpXLfvLXA= Subject key identifier: DA:2A:7A:63:67:28:A7:38:74:9E:F1:88:71:FA:D9:34:A8:A2:AC:18 Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642 Certificate serial: 019AF12E701DE0789A36B07FC02892C8D8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft Manifest number: 61 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: 48ON5+/E07hEHuY7cshovToN6f5HqmP+0DTP4olDe/A=) 2: X8Nnra_HltNRWULUv0jOvOL0YgA.roa (hash: VancjWcYbkfiXC8CFP9Ka11PiwvtrDF34c2Qr/v152E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:70:1d:e0:78:9a:36:b0:7f:c0:28:92:c8:d8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=da2a7a636728a738749ef18871fad934a8a2ac18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:8e:f6:3a:f2:69:34:61:fe:cd:fd:05:d3: 18:ac:ed:26:7a:01:8d:6a:e8:90:15:4b:5c:96:c5: 27:1b:97:7b:49:d4:5b:91:fd:ec:c9:2e:d9:6c:d8: ec:04:b0:18:94:90:4c:0a:e5:73:b0:1a:39:95:4e: ba:2b:a5:42:d2:bd:00:f3:bc:2c:aa:82:01:4e:97: 0f:c5:ed:99:86:70:5d:83:6f:21:19:f0:a9:73:86: 4b:29:79:31:49:20:5f:20:15:13:75:0a:b6:2b:73: 2d:73:2c:fc:25:0f:1c:b4:55:7c:39:a4:ff:af:96: eb:32:69:28:e0:15:04:05:af:b3:90:00:9d:9c:de: 64:ce:f2:88:ed:7a:10:96:c8:9d:99:4b:88:5a:4f: dd:3d:7f:36:5d:f6:aa:85:bd:37:f0:81:2a:d4:98: d2:92:84:e3:0b:93:35:1d:59:28:be:e8:f9:a7:12: 15:f7:9b:a6:26:dd:0b:83:50:76:64:b2:c4:3e:57: 30:d5:77:f8:c4:01:b3:ab:16:86:92:6d:58:02:76: 33:50:a6:d5:b6:20:59:9d:a8:8d:62:65:bb:e6:90: e3:dc:73:a0:14:75:3b:0b:e4:07:75:99:63:36:c8: 59:29:41:b3:f5:8c:72:96:26:b4:d3:1d:28:70:17: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:7A:63:67:28:A7:38:74:9E:F1:88:71:FA:D9:34:A8:A2:AC:18 X509v3 Authority Key Identifier: keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:6e:05:21:f0:db:fd:b1:28:29:2a:f4:f5:7a:76:9a:73: 14:f1:6d:70:72:7e:88:21:b5:af:a9:a6:a7:32:bf:3a:d9:8f: 9f:6f:7a:02:8c:45:47:9a:16:da:8b:b9:67:dd:f1:b4:58:d5: 2b:db:e4:54:7f:f6:30:06:67:70:79:c4:44:73:c1:9f:80:6a: b7:08:1a:13:65:cd:a9:80:2e:33:84:33:d0:41:82:d8:26:f5: 65:4f:6b:66:43:42:21:ea:3b:84:c1:5d:e7:91:6c:ba:c1:f0: 03:95:be:a1:8b:8e:a9:f4:55:06:c9:4f:a5:30:a9:7d:fe:79: 38:0b:b9:19:b1:e0:56:5a:c7:e4:5c:f6:65:0b:38:f4:4c:00: e8:31:62:94:d6:b5:13:de:51:5c:1c:88:99:f6:d3:a2:77:26: 85:fa:9d:be:58:54:25:5a:e3:fb:d8:75:1b:90:cc:32:c3:a2: 4e:12:5f:38:70:a7:23:87:cf:48:85:7b:c9:1d:b6:cd:56:13: 2d:45:51:e4:ab:8d:6a:38:58:94:06:a8:6c:6d:17:34:70:62: 2e:46:2a:08:95:63:68:12:2f:a6:d6:f1:20:97:22:79:ab:53: 25:9c:a1:c0:46:d7:c3:f4:da:d5:49:ad:f8:49:50:89:26:c8: 03:af:9f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnAd4HiaNrB/wCiSyNipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGU0NjNmMzZjNDdmNzZhYjdjMTk2YTdmNWVkZDRmMWJl ZGE2NDIwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EyhkYTJhN2E2MzY3MjhhNzM4NzQ5ZWYxODg3MWZhZDkzNGE4YTJhYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFmO9jryaTRh/s39BdMYrO0megGN auiQFUtclsUnG5d7SdRbkf3syS7ZbNjsBLAYlJBMCuVzsBo5lU66K6VC0r0A87ws qoIBTpcPxe2ZhnBdg28hGfCpc4ZLKXkxSSBfIBUTdQq2K3Mtcyz8JQ8ctFV8OaT/ r5brMmko4BUEBa+zkACdnN5kzvKI7XoQlsidmUuIWk/dPX82Xfaqhb038IEq1JjS koTjC5M1HVkovuj5pxIV95umJt0Lg1B2ZLLEPlcw1Xf4xAGzqxaGkm1YAnYzUKbV tiBZnaiNYmW75pDj3HOgFHU7C+QHdZljNshZKUGz9Yxylia00x0ocBeywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoqemNnKKc4dJ7xiHH62TSooqwYMB8GA1UdIwQY MBaAFAeORj82xH92q3wZan9e3U8b7aZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTRiNTYtMmYwYy00OTA4LWJlNDct ODFmN2Y3YjkzMzAwLzEvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTRiNTYtMmYwYy00OTA4LWJlNDctODFmN2Y3YjkzMzAw LzEvQjQ1R1B6YkVmM2FyZkJscWYxN2RUeHZ0cGtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzBuBSHw 2/2xKCkq9PV6dppzFPFtcHJ+iCG1r6mmpzK/OtmPn296AoxFR5oW2ou5Z93xtFjV K9vkVH/2MAZncHnERHPBn4BqtwgaE2XNqYAuM4Qz0EGC2Cb1ZU9rZkNCIeo7hMFd 55FsusHwA5W+oYuOqfRVBslPpTCpff55OAu5GbHgVlrH5Fz2ZQs49EwA6DFilNa1 E95RXByImfbToncmhfqdvlhUJVrj+9h1G5DMMsOiThJfOHCnI4fPSIV7yR22zVYT LUVR5KuNajhYlAaobG0XNHBiLkYqCJVjaBIvptbxIJcieatTJZyhwEbXw/Ta1Umt +ElQiSbIA6+fyg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:52 2025 by rpki-client