This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json) Hash identifier: sB9dAm3wDlces6edbybFu1zxjxmfF2HVpPJWaEyh+qA= Subject key identifier: 61:67:50:2D:55:F3:BD:06:85:B3:95:21:B1:C4:0C:8C:A3:04:E9:0A Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8 Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8 Certificate serial: 019AF208D08D128B28E254900BF14414A1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: VLvgHMlVLkjEqdJlYNVOYl9m4XQGwTBCEjoLxLGLdNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d0:8d:12:8b:28:e2:54:90:0b:f1:44:14:a1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=6167502d55f3bd0685b39521b1c40c8ca304e90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1d:ab:f7:4a:8c:3d:b5:36:ab:de:d5:5f:62: b2:24:f3:8e:a3:81:5c:0f:46:e5:35:90:5d:3d:98: 5f:8a:f4:01:2c:d0:36:6f:4a:49:e4:e0:03:39:6f: a8:59:7e:74:04:4b:33:d2:0c:a6:82:24:ba:05:ec: c2:b0:3b:85:a6:01:51:03:33:22:79:2d:35:ac:22: cb:ec:8a:5d:72:e0:84:c7:06:0d:b4:1f:d9:bf:00: cb:68:cf:91:80:80:a5:27:20:7f:4d:03:e4:79:5a: 37:e5:42:de:0b:13:62:7a:6a:f6:c9:c7:b6:d3:69: 61:b5:98:2b:6d:06:99:c8:c5:ba:59:b5:f2:8e:37: 94:d4:e8:2a:d6:93:ef:bb:58:28:76:e1:6a:e4:fe: 44:f2:b0:a7:68:3f:06:eb:ef:6f:e6:98:41:74:33: cc:4f:65:94:aa:93:18:e5:a4:51:6f:38:9f:a1:f0: a6:3d:8c:88:2d:99:c3:ef:1e:24:d8:c1:0b:86:04: 87:a5:9c:e8:db:48:ce:3c:91:72:b9:c9:5e:00:b3: 41:31:cf:e6:84:11:51:b5:c1:a2:cc:72:d1:c8:9e: 89:84:65:e1:59:6d:60:b4:ee:e1:d7:20:2d:b2:d0: e5:2f:40:0e:69:af:0b:fc:9d:84:9d:a5:9d:ea:0e: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:50:2D:55:F3:BD:06:85:B3:95:21:B1:C4:0C:8C:A3:04:E9:0A X509v3 Authority Key Identifier: keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:12:56:40:10:93:76:43:c5:88:34:c1:cf:e4:e7:61:b9:03: d0:2e:38:3e:06:36:e9:c2:47:6c:73:4e:ed:a8:45:5d:ae:3a: ac:b5:e4:20:33:15:f3:44:a7:52:dd:69:ac:a8:92:de:42:a9: 93:7c:e3:c3:32:a3:a2:27:9e:30:7e:83:40:50:e4:a9:88:dd: 2a:e7:0a:49:0f:5f:68:ae:25:46:76:55:38:d3:1f:9c:3e:74: 48:b5:e4:7e:3d:07:59:a5:d3:e2:e9:1c:38:30:d5:f0:5c:d9: c9:70:91:aa:72:c6:5b:cb:b9:07:97:4d:32:02:e6:78:44:54: 0a:7e:37:ce:43:76:68:79:c3:e9:89:2a:d2:4a:05:db:ce:50: 83:0f:83:a6:2f:e7:61:fd:0d:11:b3:ac:d2:8e:1f:c4:e4:e5: 2a:f7:d1:15:4c:d6:a8:ad:12:63:c1:9d:f5:88:87:df:f4:f7: 08:c8:3d:90:12:4d:a3:1c:54:d7:d2:12:7b:14:a0:f8:78:1c: 84:b7:df:fa:18:7f:77:2f:f6:73:58:2f:4e:f8:e1:04:25:83: ec:fa:16:60:bf:86:36:81:9f:91:f4:93:9f:aa:0e:f1:df:e4: 5f:2d:58:2d:19:a4:08:30:55:78:5f:54:88:f0:b2:94:6c:94: 4c:a1:99:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNCNEoso4lSQC/FEFKHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1 ZTYxYTgwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg2MTY3NTAyZDU1ZjNiZDA2ODViMzk1MjFiMWM0MGM4Y2EzMDRlOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h2r90qMPbU2q97VX2KyJPOOo4Fc D0blNZBdPZhfivQBLNA2b0pJ5OADOW+oWX50BEsz0gymgiS6BezCsDuFpgFRAzMi eS01rCLL7IpdcuCExwYNtB/ZvwDLaM+RgIClJyB/TQPkeVo35ULeCxNiemr2yce2 02lhtZgrbQaZyMW6WbXyjjeU1Ogq1pPvu1goduFq5P5E8rCnaD8G6+9v5phBdDPM T2WUqpMY5aRRbzifofCmPYyILZnD7x4k2MELhgSHpZzo20jOPJFyucleALNBMc/m hBFRtcGizHLRyJ6JhGXhWW1gtO7h1yAtstDlL0AOaa8L/J2EnaWd6g41VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFnUC1V870GhbOVIbHEDIyjBOkKMB8GA1UdIwQY MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRJWQBCT dkPFiDTBz+TnYbkD0C44PgY26cJHbHNO7ahFXa46rLXkIDMV80SnUt1prKiS3kKp k3zjwzKjoieeMH6DQFDkqYjdKucKSQ9faK4lRnZVONMfnD50SLXkfj0HWaXT4ukc ODDV8FzZyXCRqnLGW8u5B5dNMgLmeERUCn43zkN2aHnD6Ykq0koF285Qgw+Dpi/n Yf0NEbOs0o4fxOTlKvfRFUzWqK0SY8Gd9YiH3/T3CMg9kBJNoxxU19ISexSg+Hgc hLff+hh/dy/2c1gvTvjhBCWD7PoWYL+GNoGfkfSTn6oO8d/kXy1YLRmkCDBVeF9U iPCylGyUTKGZNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:51 2025 by rpki-client